433 files changed, 17227 insertions, 10057 deletions

diff --git a/drivers/infiniband/hw/nes/nes_nic.c b/drivers/infiniband/hw/nes/nes_nic.c
index 91fdde382e82..ce9ef6bc865c 100644
--- a/drivers/infiniband/hw/nes/nes_nic.c
+++ b/drivers/infiniband/hw/nes/nes_nic.c
@@ -876,7 +876,7 @@ static void nes_netdev_set_multicast_list(struct net_device *netdev)
         if (!mc_all_on) {
                 char *addrs;
                 int i;
-                struct dev_mc_list *mcaddr;
+                struct netdev_hw_addr *ha;
 
                 addrs = kmalloc(ETH_ALEN * mc_count, GFP_ATOMIC);
                 if (!addrs) {
@@ -884,9 +884,8 @@ static void nes_netdev_set_multicast_list(struct net_device *netdev)
                         goto unlock;
                 }
                 i = 0;
-                netdev_for_each_mc_addr(mcaddr, netdev)
-                        memcpy(get_addr(addrs, i++),
-                               mcaddr->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, netdev)
+                        memcpy(get_addr(addrs, i++), ha->addr, ETH_ALEN);
 
                 perfect_filter_register_address = NES_IDX_PERFECT_FILTER_LOW +
                                                 pft_entries_preallocated * 0x8;
diff --git a/drivers/infiniband/ulp/ipoib/ipoib_multicast.c b/drivers/infiniband/ulp/ipoib/ipoib_multicast.c
index d41ea27be5e1..c8a0f7dab5b0 100644
--- a/drivers/infiniband/ulp/ipoib/ipoib_multicast.c
+++ b/drivers/infiniband/ulp/ipoib/ipoib_multicast.c
@@ -767,11 +767,8 @@ void ipoib_mcast_dev_flush(struct net_device *dev)
         }
 }
 
-static int ipoib_mcast_addr_is_valid(const u8 *addr, unsigned int addrlen,
-                                     const u8 *broadcast)
+static int ipoib_mcast_addr_is_valid(const u8 *addr, const u8 *broadcast)
 {
-        if (addrlen != INFINIBAND_ALEN)
-                return 0;
         /* reserved QPN, prefix, scope */
         if (memcmp(addr, broadcast, 6))
                 return 0;
@@ -786,7 +783,7 @@ void ipoib_mcast_restart_task(struct work_struct *work)
         struct ipoib_dev_priv *priv =
                 container_of(work, struct ipoib_dev_priv, restart_task);
         struct net_device *dev = priv->dev;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         struct ipoib_mcast *mcast, *tmcast;
         LIST_HEAD(remove_list);
         unsigned long flags;
@@ -811,15 +808,13 @@ void ipoib_mcast_restart_task(struct work_struct *work)
                 clear_bit(IPOIB_MCAST_FLAG_FOUND, &mcast->flags);
 
         /* Mark all of the entries that are found or don't exist */
-        netdev_for_each_mc_addr(mclist, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 union ib_gid mgid;
 
-                if (!ipoib_mcast_addr_is_valid(mclist->dmi_addr,
-                                               mclist->dmi_addrlen,
-                                               dev->broadcast))
+                if (!ipoib_mcast_addr_is_valid(ha->addr, dev->broadcast))
                         continue;
 
-                memcpy(mgid.raw, mclist->dmi_addr + 4, sizeof mgid);
+                memcpy(mgid.raw, ha->addr + 4, sizeof mgid);
 
                 mcast = __ipoib_mcast_find(dev, &mgid);
                 if (!mcast || test_bit(IPOIB_MCAST_FLAG_SENDONLY, &mcast->flags)) {
diff --git a/drivers/media/dvb/dvb-core/dvb_net.c b/drivers/media/dvb/dvb-core/dvb_net.c
index 441c0642b30a..cccea412088b 100644
--- a/drivers/media/dvb/dvb-core/dvb_net.c
+++ b/drivers/media/dvb/dvb-core/dvb_net.c
@@ -1109,14 +1109,14 @@ static int dvb_net_feed_stop(struct net_device *dev)
 }
 
 
-static int dvb_set_mc_filter (struct net_device *dev, struct dev_mc_list *mc)
+static int dvb_set_mc_filter(struct net_device *dev, unsigned char *addr)
 {
         struct dvb_net_priv *priv = netdev_priv(dev);
 
         if (priv->multi_num == DVB_NET_MULTICAST_MAX)
                 return -ENOMEM;
 
-        memcpy(priv->multi_macs[priv->multi_num], mc->dmi_addr, 6);
+        memcpy(priv->multi_macs[priv->multi_num], addr, ETH_ALEN);
 
         priv->multi_num++;
         return 0;
@@ -1140,8 +1140,7 @@ static void wq_set_multicast_list (struct work_struct *work)
                 dprintk("%s: allmulti mode\n", dev->name);
                 priv->rx_mode = RX_MODE_ALL_MULTI;
         } else if (!netdev_mc_empty(dev)) {
-                int mci;
-                struct dev_mc_list *mc;
+                struct netdev_hw_addr *ha;
 
                 dprintk("%s: set_mc_list, %d entries\n",
                         dev->name, netdev_mc_count(dev));
@@ -1149,11 +1148,8 @@ static void wq_set_multicast_list (struct work_struct *work)
                 priv->rx_mode = RX_MODE_MULTI;
                 priv->multi_num = 0;
 
-                for (mci = 0, mc=dev->mc_list;
-                     mci < netdev_mc_count(dev);
-                     mc = mc->next, mci++) {
-                        dvb_set_mc_filter(dev, mc);
-                }
+                netdev_for_each_mc_addr(ha, dev)
+                        dvb_set_mc_filter(dev, ha->addr);
         }
 
         netif_addr_unlock_bh(dev);
diff --git a/drivers/net/3c505.c b/drivers/net/3c505.c
index 04b5bba19021..81c8b31e629f 100644
--- a/drivers/net/3c505.c
+++ b/drivers/net/3c505.c
@@ -1216,7 +1216,7 @@ static int elp_close(struct net_device *dev)
 static void elp_set_mc_list(struct net_device *dev)
 {
         elp_device *adapter = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int i;
         unsigned long flags;
 
@@ -1231,8 +1231,9 @@ static void elp_set_mc_list(struct net_device *dev)
                 adapter->tx_pcb.command = CMD_LOAD_MULTICAST_LIST;
                 adapter->tx_pcb.length = 6 * netdev_mc_count(dev);
                 i = 0;
-                netdev_for_each_mc_addr(dmi, dev)
-                        memcpy(adapter->tx_pcb.data.multicast[i++], dmi->dmi_addr, 6);
+                netdev_for_each_mc_addr(ha, dev)
+                        memcpy(adapter->tx_pcb.data.multicast[i++],
+                               ha->addr, 6);
                 adapter->got[CMD_LOAD_MULTICAST_LIST] = 0;
                 if (!send_pcb(dev, &adapter->tx_pcb))
                         pr_err("%s: couldn't send set_multicast command\n", dev->name);
diff --git a/drivers/net/3c523.c b/drivers/net/3c523.c
index beed4fa10c6e..966cb12e1e0a 100644
--- a/drivers/net/3c523.c
+++ b/drivers/net/3c523.c
@@ -625,7 +625,7 @@ static int init586(struct net_device *dev)
         volatile struct iasetup_cmd_struct *ias_cmd;
         volatile struct tdr_cmd_struct *tdr_cmd;
         volatile struct mcsetup_cmd_struct *mc_cmd;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int num_addrs = netdev_mc_count(dev);
 
         ptr = (void *) ((char *) p->scb + sizeof(struct scb_struct));
@@ -788,8 +788,9 @@ static int init586(struct net_device *dev)
                         mc_cmd->cmd_link = 0xffff;
                         mc_cmd->mc_cnt = num_addrs * 6;
                         i = 0;
-                        netdev_for_each_mc_addr(dmi, dev)
-                                memcpy((char *) mc_cmd->mc_list[i++], dmi->dmi_addr, 6);
+                        netdev_for_each_mc_addr(ha, dev)
+                                memcpy((char *) mc_cmd->mc_list[i++],
+                                       ha->addr, 6);
                         p->scb->cbl_offset = make16(mc_cmd);
                         p->scb->cmd = CUC_START;
                         elmc_id_attn586();
diff --git a/drivers/net/3c527.c b/drivers/net/3c527.c
index 5c07b147ec99..38395dfa4963 100644
--- a/drivers/net/3c527.c
+++ b/drivers/net/3c527.c
@@ -1533,7 +1533,7 @@ static void do_mc32_set_multicast_list(struct net_device *dev, int retry)
         {
                 unsigned char block[62];
                 unsigned char *bp;
-                struct dev_mc_list *dmc;
+                struct netdev_hw_addr *ha;
 
                 if(retry==0)
                         lp->mc_list_valid = 0;
@@ -1543,8 +1543,8 @@ static void do_mc32_set_multicast_list(struct net_device *dev, int retry)
                         block[0]=netdev_mc_count(dev);
                         bp=block+2;
 
-                        netdev_for_each_mc_addr(dmc, dev) {
-                                memcpy(bp, dmc->dmi_addr, 6);
+                        netdev_for_each_mc_addr(ha, dev) {
+                                memcpy(bp, ha->addr, 6);
                                 bp+=6;
                         }
                         if(mc32_command_nowait(dev, 2, block,
diff --git a/drivers/net/7990.c b/drivers/net/7990.c
index 4e9a5a20b6a6..818837d8ffe7 100644
--- a/drivers/net/7990.c
+++ b/drivers/net/7990.c
@@ -595,7 +595,7 @@ static void lance_load_multicast (struct net_device *dev)
         struct lance_private *lp = netdev_priv(dev);
         volatile struct lance_init_block *ib = lp->init_block;
         volatile u16 *mcast_table = (u16 *)&ib->filter;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
 
@@ -610,8 +610,8 @@ static void lance_load_multicast (struct net_device *dev)
         ib->filter [1] = 0;
 
         /* Add addresses */
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* multicast address? */
                 if (!(*addrs & 1))
diff --git a/drivers/net/8139cp.c b/drivers/net/8139cp.c
index 3d4406b16658..e4e2aef11017 100644
--- a/drivers/net/8139cp.c
+++ b/drivers/net/8139cp.c
@@ -909,11 +909,11 @@ static void __cp_set_rx_mode (struct net_device *dev)
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0xffffffff;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 rx_mode = AcceptBroadcast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
 
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                         rx_mode |= AcceptMulticast;
diff --git a/drivers/net/8139too.c b/drivers/net/8139too.c
index b4efc913978b..f61784c3c4a2 100644
--- a/drivers/net/8139too.c
+++ b/drivers/net/8139too.c
@@ -2502,11 +2502,11 @@ static void __set_rx_mode (struct net_device *dev)
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0xffffffff;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 rx_mode = AcceptBroadcast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
 
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                         rx_mode |= AcceptMulticast;
diff --git a/drivers/net/82596.c b/drivers/net/82596.c
index f94d17d78bb0..3a28b1f451d9 100644
--- a/drivers/net/82596.c
+++ b/drivers/net/82596.c
@@ -1542,7 +1542,7 @@ static void set_multicast_list(struct net_device *dev)
         }
 
         if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 unsigned char *cp;
                 struct mc_cmd *cmd;
 
@@ -1552,10 +1552,10 @@ static void set_multicast_list(struct net_device *dev)
                 cmd->cmd.command = CmdMulticastList;
                 cmd->mc_cnt = cnt * ETH_ALEN;
                 cp = cmd->mc_addrs;
-                netdev_for_each_mc_addr(dmi, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         if (!cnt--)
                                 break;
-                        memcpy(cp, dmi->dmi_addr, ETH_ALEN);
+                        memcpy(cp, ha->addr, ETH_ALEN);
                         if (i596_debug > 1)
                                 DEB(DEB_MULTI,printk(KERN_INFO "%s: Adding address %pM\n",
                                                 dev->name, cp));
diff --git a/drivers/net/Kconfig b/drivers/net/Kconfig
index 7b832c727f87..65db201fd77e 100644
--- a/drivers/net/Kconfig
+++ b/drivers/net/Kconfig
@@ -1916,6 +1916,7 @@ config FEC
         bool "FEC ethernet controller (of ColdFire and some i.MX CPUs)"
         depends on M523x || M527x || M5272 || M528x || M520x || M532x || \
                 MACH_MX27 || ARCH_MX35 || ARCH_MX25 || ARCH_MX5
+        select PHYLIB
         help
           Say Y here if you want to use the built-in 10/100 Fast ethernet
           controller on some Motorola ColdFire and Freescale i.MX processors.
@@ -2434,8 +2435,8 @@ config MV643XX_ETH
 
 config XILINX_LL_TEMAC
         tristate "Xilinx LL TEMAC (LocalLink Tri-mode Ethernet MAC) driver"
+        depends on PPC || MICROBLAZE
         select PHYLIB
-        depends on PPC_DCR_NATIVE
         help
           This driver supports the Xilinx 10/100/1000 LocalLink TEMAC
           core used in Xilinx Spartan and Virtex FPGAs
@@ -2618,11 +2619,11 @@ config EHEA
           will be called ehea.
 
 config ENIC
-        tristate "Cisco 10G Ethernet NIC support"
+        tristate "Cisco VIC Ethernet NIC Support"
         depends on PCI && INET
         select INET_LRO
         help
-          This enables the support for the Cisco 10G Ethernet card.
+          This enables the support for the Cisco VIC Ethernet card.
 
 config IXGBE
         tristate "Intel(R) 10GbE PCI Express adapters support"
@@ -2862,6 +2863,8 @@ source "drivers/ieee802154/Kconfig"
 
 source "drivers/s390/net/Kconfig"
 
+source "drivers/net/caif/Kconfig"
+
 config XEN_NETDEV_FRONTEND
         tristate "Xen network device frontend driver"
         depends on XEN
@@ -3180,17 +3183,12 @@ config PPPOATM
 
 config PPPOL2TP
         tristate "PPP over L2TP (EXPERIMENTAL)"
-        depends on EXPERIMENTAL && PPP && INET
+        depends on EXPERIMENTAL && L2TP && PPP
         help
           Support for PPP-over-L2TP socket family. L2TP is a protocol
           used by ISPs and enterprises to tunnel PPP traffic over UDP
           tunnels. L2TP is replacing PPTP for VPN uses.
 
-          This kernel component handles only L2TP data packets: a
-          userland daemon handles L2TP the control protocol (tunnel
-          and session setup). One such daemon is OpenL2TP
-          (http://openl2tp.sourceforge.net/).
-
 config SLIP
         tristate "SLIP (serial line) support"
         ---help---
@@ -3277,15 +3275,14 @@ config NET_FC
           "SCSI generic support".
 
 config NETCONSOLE
-        tristate "Network console logging support (EXPERIMENTAL)"
-        depends on EXPERIMENTAL
+        tristate "Network console logging support"
         ---help---
         If you want to log kernel messages over the network, enable this.
         See <file:Documentation/networking/netconsole.txt> for details.
 
 config NETCONSOLE_DYNAMIC
-        bool "Dynamic reconfiguration of logging targets (EXPERIMENTAL)"
-        depends on NETCONSOLE && SYSFS && EXPERIMENTAL
+        bool "Dynamic reconfiguration of logging targets"
+        depends on NETCONSOLE && SYSFS
         select CONFIGFS_FS
         help
           This option enables the ability to dynamically reconfigure target
diff --git a/drivers/net/Makefile b/drivers/net/Makefile
index a583b50d9de8..ebf80b983063 100644
--- a/drivers/net/Makefile
+++ b/drivers/net/Makefile
@@ -161,7 +161,7 @@ obj-$(CONFIG_PPP_DEFLATE) += ppp_deflate.o
 obj-$(CONFIG_PPP_BSDCOMP) += bsd_comp.o
 obj-$(CONFIG_PPP_MPPE) += ppp_mppe.o
 obj-$(CONFIG_PPPOE) += pppox.o pppoe.o
-obj-$(CONFIG_PPPOL2TP) += pppox.o pppol2tp.o
+obj-$(CONFIG_PPPOL2TP) += pppox.o
 
 obj-$(CONFIG_SLIP) += slip.o
 obj-$(CONFIG_SLHC) += slhc.o
@@ -291,5 +291,6 @@ obj-$(CONFIG_VIRTIO_NET) += virtio_net.o
 obj-$(CONFIG_SFC) += sfc/
 
 obj-$(CONFIG_WIMAX) += wimax/
+obj-$(CONFIG_CAIF) += caif/
 
 obj-$(CONFIG_OCTEON_MGMT_ETHERNET) += octeon/
diff --git a/drivers/net/a2065.c b/drivers/net/a2065.c
index bd4d829eca12..7cce643793c3 100644
--- a/drivers/net/a2065.c
+++ b/drivers/net/a2065.c
@@ -603,7 +603,7 @@ static void lance_load_multicast (struct net_device *dev)
         struct lance_private *lp = netdev_priv(dev);
         volatile struct lance_init_block *ib = lp->init_block;
         volatile u16 *mcast_table = (u16 *)&ib->filter;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
 
@@ -618,8 +618,8 @@ static void lance_load_multicast (struct net_device *dev)
         ib->filter [1] = 0;
 
         /* Add addresses */
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* multicast address? */
                 if (!(*addrs & 1))
diff --git a/drivers/net/acenic.c b/drivers/net/acenic.c
index 4ae750ef1e10..2dc5f9544c77 100644
--- a/drivers/net/acenic.c
+++ b/drivers/net/acenic.c
@@ -660,7 +660,7 @@ static void __devexit acenic_remove_one(struct pci_dev *pdev)
                         dma_addr_t mapping;
 
                         ringp = &ap->skb->rx_std_skbuff[i];
-                        mapping = pci_unmap_addr(ringp, mapping);
+                        mapping = dma_unmap_addr(ringp, mapping);
                         pci_unmap_page(ap->pdev, mapping,
                                        ACE_STD_BUFSIZE,
                                        PCI_DMA_FROMDEVICE);
@@ -680,7 +680,7 @@ static void __devexit acenic_remove_one(struct pci_dev *pdev)
                                 dma_addr_t mapping;
 
                                 ringp = &ap->skb->rx_mini_skbuff[i];
-                                mapping = pci_unmap_addr(ringp,mapping);
+                                mapping = dma_unmap_addr(ringp,mapping);
                                 pci_unmap_page(ap->pdev, mapping,
                                                ACE_MINI_BUFSIZE,
                                                PCI_DMA_FROMDEVICE);
@@ -699,7 +699,7 @@ static void __devexit acenic_remove_one(struct pci_dev *pdev)
                         dma_addr_t mapping;
 
                         ringp = &ap->skb->rx_jumbo_skbuff[i];
-                        mapping = pci_unmap_addr(ringp, mapping);
+                        mapping = dma_unmap_addr(ringp, mapping);
                         pci_unmap_page(ap->pdev, mapping,
                                        ACE_JUMBO_BUFSIZE,
                                        PCI_DMA_FROMDEVICE);
@@ -1682,7 +1682,7 @@ static void ace_load_std_rx_ring(struct ace_private *ap, int nr_bufs)
                                        ACE_STD_BUFSIZE,
                                        PCI_DMA_FROMDEVICE);
                 ap->skb->rx_std_skbuff[idx].skb = skb;
-                pci_unmap_addr_set(&ap->skb->rx_std_skbuff[idx],
+                dma_unmap_addr_set(&ap->skb->rx_std_skbuff[idx],
                                    mapping, mapping);
 
                 rd = &ap->rx_std_ring[idx];
@@ -1743,7 +1743,7 @@ static void ace_load_mini_rx_ring(struct ace_private *ap, int nr_bufs)
                                        ACE_MINI_BUFSIZE,
                                        PCI_DMA_FROMDEVICE);
                 ap->skb->rx_mini_skbuff[idx].skb = skb;
-                pci_unmap_addr_set(&ap->skb->rx_mini_skbuff[idx],
+                dma_unmap_addr_set(&ap->skb->rx_mini_skbuff[idx],
                                    mapping, mapping);
 
                 rd = &ap->rx_mini_ring[idx];
@@ -1799,7 +1799,7 @@ static void ace_load_jumbo_rx_ring(struct ace_private *ap, int nr_bufs)
                                        ACE_JUMBO_BUFSIZE,
                                        PCI_DMA_FROMDEVICE);
                 ap->skb->rx_jumbo_skbuff[idx].skb = skb;
-                pci_unmap_addr_set(&ap->skb->rx_jumbo_skbuff[idx],
+                dma_unmap_addr_set(&ap->skb->rx_jumbo_skbuff[idx],
                                    mapping, mapping);
 
                 rd = &ap->rx_jumbo_ring[idx];
@@ -2012,7 +2012,7 @@ static void ace_rx_int(struct net_device *dev, u32 rxretprd, u32 rxretcsm)
                 skb = rip->skb;
                 rip->skb = NULL;
                 pci_unmap_page(ap->pdev,
-                               pci_unmap_addr(rip, mapping),
+                               dma_unmap_addr(rip, mapping),
                                mapsize,
                                PCI_DMA_FROMDEVICE);
                 skb_put(skb, retdesc->size);
@@ -2077,18 +2077,16 @@ static inline void ace_tx_int(struct net_device *dev,
 
         do {
                 struct sk_buff *skb;
-                dma_addr_t mapping;
                 struct tx_ring_info *info;
 
                 info = ap->skb->tx_skbuff + idx;
                 skb = info->skb;
-                mapping = pci_unmap_addr(info, mapping);
 
-                if (mapping) {
-                        pci_unmap_page(ap->pdev, mapping,
-                                       pci_unmap_len(info, maplen),
+                if (dma_unmap_len(info, maplen)) {
+                        pci_unmap_page(ap->pdev, dma_unmap_addr(info, mapping),
+                                       dma_unmap_len(info, maplen),
                                        PCI_DMA_TODEVICE);
-                        pci_unmap_addr_set(info, mapping, 0);
+                        dma_unmap_len_set(info, maplen, 0);
                 }
 
                 if (skb) {
@@ -2376,14 +2374,12 @@ static int ace_close(struct net_device *dev)
 
         for (i = 0; i < ACE_TX_RING_ENTRIES(ap); i++) {
                 struct sk_buff *skb;
-                dma_addr_t mapping;
                 struct tx_ring_info *info;
 
                 info = ap->skb->tx_skbuff + i;
                 skb = info->skb;
-                mapping = pci_unmap_addr(info, mapping);
 
-                if (mapping) {
+                if (dma_unmap_len(info, maplen)) {
                         if (ACE_IS_TIGON_I(ap)) {
                                 /* NB: TIGON_1 is special, tx_ring is in io space */
                                 struct tx_desc __iomem *tx;
@@ -2394,10 +2390,10 @@ static int ace_close(struct net_device *dev)
                         } else
                                 memset(ap->tx_ring + i, 0,
                                        sizeof(struct tx_desc));
-                        pci_unmap_page(ap->pdev, mapping,
-                                       pci_unmap_len(info, maplen),
+                        pci_unmap_page(ap->pdev, dma_unmap_addr(info, mapping),
+                                       dma_unmap_len(info, maplen),
                                        PCI_DMA_TODEVICE);
-                        pci_unmap_addr_set(info, mapping, 0);
+                        dma_unmap_len_set(info, maplen, 0);
                 }
                 if (skb) {
                         dev_kfree_skb(skb);
@@ -2432,8 +2428,8 @@ ace_map_tx_skb(struct ace_private *ap, struct sk_buff *skb,
 
         info = ap->skb->tx_skbuff + idx;
         info->skb = tail;
-        pci_unmap_addr_set(info, mapping, mapping);
-        pci_unmap_len_set(info, maplen, skb->len);
+        dma_unmap_addr_set(info, mapping, mapping);
+        dma_unmap_len_set(info, maplen, skb->len);
         return mapping;
 }
 
@@ -2552,8 +2548,8 @@ restart:
                         } else {
                                 info->skb = NULL;
                         }
-                        pci_unmap_addr_set(info, mapping, mapping);
-                        pci_unmap_len_set(info, maplen, frag->size);
+                        dma_unmap_addr_set(info, mapping, mapping);
+                        dma_unmap_len_set(info, maplen, frag->size);
                         ace_load_tx_bd(ap, desc, mapping, flagsize, vlan_tag);
                 }
         }
diff --git a/drivers/net/acenic.h b/drivers/net/acenic.h
index 17079b927ffa..0681da7e8753 100644
--- a/drivers/net/acenic.h
+++ b/drivers/net/acenic.h
@@ -589,7 +589,7 @@ struct ace_info {
 
 struct ring_info {
         struct sk_buff          *skb;
-        DECLARE_PCI_UNMAP_ADDR(mapping)
+        DEFINE_DMA_UNMAP_ADDR(mapping);
 };
 
 
@@ -600,8 +600,8 @@ struct ring_info {
  */
 struct tx_ring_info {
         struct sk_buff          *skb;
-        DECLARE_PCI_UNMAP_ADDR(mapping)
-        DECLARE_PCI_UNMAP_LEN(maplen)
+        DEFINE_DMA_UNMAP_ADDR(mapping);
+        DEFINE_DMA_UNMAP_LEN(maplen);
 };
 
 
diff --git a/drivers/net/amd8111e.c b/drivers/net/amd8111e.c
index b8a59d255b49..d002c764a26c 100644
--- a/drivers/net/amd8111e.c
+++ b/drivers/net/amd8111e.c
@@ -1377,7 +1377,7 @@ list to the device.
 */
 static void amd8111e_set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         struct amd8111e_priv *lp = netdev_priv(dev);
         u32 mc_filter[2] ;
         int bit_num;
@@ -1408,8 +1408,8 @@ static void amd8111e_set_multicast_list(struct net_device *dev)
         /* load all the multicast addresses in the logic filter */
         lp->options |= OPTION_MULTICAST_ENABLE;
         mc_filter[1] = mc_filter[0] = 0;
-        netdev_for_each_mc_addr(mc_ptr, dev) {
-                bit_num = (ether_crc_le(ETH_ALEN, mc_ptr->dmi_addr) >> 26) & 0x3f;
+        netdev_for_each_mc_addr(ha, dev) {
+                bit_num = (ether_crc_le(ETH_ALEN, ha->addr) >> 26) & 0x3f;
                 mc_filter[bit_num >> 5] |= 1 << (bit_num & 31);
         }
         amd8111e_writeq(*(u64*)mc_filter,lp->mmio+ LADRF);
diff --git a/drivers/net/arm/am79c961a.c b/drivers/net/arm/am79c961a.c
index f1f58c5e27bf..a4b5b08276f8 100644
--- a/drivers/net/arm/am79c961a.c
+++ b/drivers/net/arm/am79c961a.c
@@ -383,12 +383,12 @@ static void am79c961_setmulticastlist (struct net_device *dev)
         } else if (dev->flags & IFF_ALLMULTI) {
                 memset(multi_hash, 0xff, sizeof(multi_hash));
         } else {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
 
                 memset(multi_hash, 0x00, sizeof(multi_hash));
 
-                netdev_for_each_mc_addr(dmi, dev)
-                        am79c961_mc_hash(dmi->dmi_addr, multi_hash);
+                netdev_for_each_mc_addr(ha, dev)
+                        am79c961_mc_hash(ha->addr, multi_hash);
         }
 
         spin_lock_irqsave(&priv->chip_lock, flags);
diff --git a/drivers/net/arm/at91_ether.c b/drivers/net/arm/at91_ether.c
index 8b23d5a175bf..f31e8b6cbf73 100644
--- a/drivers/net/arm/at91_ether.c
+++ b/drivers/net/arm/at91_ether.c
@@ -556,14 +556,14 @@ static int hash_get_index(__u8 *addr)
  */
 static void at91ether_sethashtable(struct net_device *dev)
 {
-        struct dev_mc_list *curr;
+        struct netdev_hw_addr *ha;
         unsigned long mc_filter[2];
         unsigned int bitnr;
 
         mc_filter[0] = mc_filter[1] = 0;
 
-        netdev_for_each_mc_addr(curr, dev) {
-                bitnr = hash_get_index(curr->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                bitnr = hash_get_index(ha->addr);
                 mc_filter[bitnr >> 5] |= 1 << (bitnr & 31);
         }
 
diff --git a/drivers/net/arm/ixp4xx_eth.c b/drivers/net/arm/ixp4xx_eth.c
index 6e2ae1d06df1..f9d168775d06 100644
--- a/drivers/net/arm/ixp4xx_eth.c
+++ b/drivers/net/arm/ixp4xx_eth.c
@@ -735,7 +735,7 @@ static int eth_xmit(struct sk_buff *skb, struct net_device *dev)
 static void eth_set_mcast_list(struct net_device *dev)
 {
         struct port *port = netdev_priv(dev);
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         u8 diffs[ETH_ALEN], *addr;
         int i;
 
@@ -748,11 +748,11 @@ static void eth_set_mcast_list(struct net_device *dev)
         memset(diffs, 0, ETH_ALEN);
 
         addr = NULL;
-        netdev_for_each_mc_addr(mclist, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 if (!addr)
-                        addr = mclist->dmi_addr; /* first MAC address */
+                        addr = ha->addr; /* first MAC address */
                 for (i = 0; i < ETH_ALEN; i++)
-                        diffs[i] |= addr[i] ^ mclist->dmi_addr[i];
+                        diffs[i] |= addr[i] ^ ha->addr[i];
         }
 
         for (i = 0; i < ETH_ALEN; i++) {
diff --git a/drivers/net/arm/ks8695net.c b/drivers/net/arm/ks8695net.c
index e7810b74f396..6ec245c6394b 100644
--- a/drivers/net/arm/ks8695net.c
+++ b/drivers/net/arm/ks8695net.c
@@ -331,16 +331,16 @@ ks8695_init_partial_multicast(struct ks8695_priv *ksp,
 {
         u32 low, high;
         int i;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
         i = 0;
-        netdev_for_each_mc_addr(dmi, ndev) {
+        netdev_for_each_mc_addr(ha, ndev) {
                 /* Ran out of space in chip? */
                 BUG_ON(i == KS8695_NR_ADDRESSES);
 
-                low = (dmi->dmi_addr[2] << 24) | (dmi->dmi_addr[3] << 16) |
-                      (dmi->dmi_addr[4] << 8) | (dmi->dmi_addr[5]);
-                high = (dmi->dmi_addr[0] << 8) | (dmi->dmi_addr[1]);
+                low = (ha->addr[2] << 24) | (ha->addr[3] << 16) |
+                      (ha->addr[4] << 8) | (ha->addr[5]);
+                high = (ha->addr[0] << 8) | (ha->addr[1]);
 
                 ks8695_writereg(ksp, KS8695_AAL_(i), low);
                 ks8695_writereg(ksp, KS8695_AAH_(i), AAH_E | high);
diff --git a/drivers/net/arm/w90p910_ether.c b/drivers/net/arm/w90p910_ether.c
index febd813c916d..3302df21d591 100644
--- a/drivers/net/arm/w90p910_ether.c
+++ b/drivers/net/arm/w90p910_ether.c
@@ -743,7 +743,6 @@ static void netdev_rx(struct net_device *dev)
                                 return;
                         }
 
-                        skb->dev = dev;
                         skb_reserve(skb, 2);
                         skb_put(skb, length);
                         skb_copy_to_linear_data(skb, data, length);
diff --git a/drivers/net/at1700.c b/drivers/net/at1700.c
index 309843ab8869..e2a549a60e25 100644
--- a/drivers/net/at1700.c
+++ b/drivers/net/at1700.c
@@ -848,12 +848,12 @@ set_rx_mode(struct net_device *dev)
                 memset(mc_filter, 0x00, sizeof(mc_filter));
                 outb(1, ioaddr + RX_MODE);      /* Ignore almost all multicasts. */
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         unsigned int bit =
-                                ether_crc_le(ETH_ALEN, mclist->dmi_addr) >> 26;
+                                ether_crc_le(ETH_ALEN, ha->addr) >> 26;
                         mc_filter[bit >> 3] |= (1 << bit);
                 }
                 outb(0x02, ioaddr + RX_MODE);   /* Use normal mode. */
diff --git a/drivers/net/atl1c/atl1c_main.c b/drivers/net/atl1c/atl1c_main.c
index 50dc531a02d8..3d7051135c3a 100644
--- a/drivers/net/atl1c/atl1c_main.c
+++ b/drivers/net/atl1c/atl1c_main.c
@@ -354,7 +354,7 @@ static void atl1c_set_multi(struct net_device *netdev)
 {
         struct atl1c_adapter *adapter = netdev_priv(netdev);
         struct atl1c_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u32 mac_ctrl_data;
         u32 hash_value;
 
@@ -377,8 +377,8 @@ static void atl1c_set_multi(struct net_device *netdev)
         AT_WRITE_REG_ARRAY(hw, REG_RX_HASH_TABLE, 1, 0);
 
         /* comoute mc addresses' hash value ,and put it into hash table */
-        netdev_for_each_mc_addr(mc_ptr, netdev) {
-                hash_value = atl1c_hash_mc_addr(hw, mc_ptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev) {
+                hash_value = atl1c_hash_mc_addr(hw, ha->addr);
                 atl1c_hash_set(hw, hash_value);
         }
 }
@@ -1817,7 +1817,6 @@ rrs_checked:
                 atl1c_clean_rfd(rfd_ring, rrs, rfd_num);
                 skb_put(skb, length - ETH_FCS_LEN);
                 skb->protocol = eth_type_trans(skb, netdev);
-                skb->dev = netdev;
                 atl1c_rx_checksum(adapter, skb, rrs);
                 if (unlikely(adapter->vlgrp) && rrs->word3 & RRS_VLAN_INS) {
                         u16 vlan;
diff --git a/drivers/net/atl1e/atl1e_main.c b/drivers/net/atl1e/atl1e_main.c
index 73302ae468aa..b6605d433e91 100644
--- a/drivers/net/atl1e/atl1e_main.c
+++ b/drivers/net/atl1e/atl1e_main.c
@@ -284,7 +284,7 @@ static void atl1e_set_multi(struct net_device *netdev)
 {
         struct atl1e_adapter *adapter = netdev_priv(netdev);
         struct atl1e_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u32 mac_ctrl_data = 0;
         u32 hash_value;
 
@@ -307,8 +307,8 @@ static void atl1e_set_multi(struct net_device *netdev)
         AT_WRITE_REG_ARRAY(hw, REG_RX_HASH_TABLE, 1, 0);
 
         /* comoute mc addresses' hash value ,and put it into hash table */
-        netdev_for_each_mc_addr(mc_ptr, netdev) {
-                hash_value = atl1e_hash_mc_addr(hw, mc_ptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev) {
+                hash_value = atl1e_hash_mc_addr(hw, ha->addr);
                 atl1e_hash_set(hw, hash_value);
         }
 }
@@ -1428,7 +1428,6 @@ static void atl1e_clean_rx_irq(struct atl1e_adapter *adapter, u8 que,
                                             "Memory squeeze, deferring packet\n");
                                 goto skip_pkt;
                         }
-                        skb->dev = netdev;
                         memcpy(skb->data, (u8 *)(prrs + 1), packet_size);
                         skb_put(skb, packet_size);
                         skb->protocol = eth_type_trans(skb, netdev);
diff --git a/drivers/net/atlx/atl2.c b/drivers/net/atlx/atl2.c
index 7061d7108f08..078d9d1b427c 100644
--- a/drivers/net/atlx/atl2.c
+++ b/drivers/net/atlx/atl2.c
@@ -135,7 +135,7 @@ static void atl2_set_multi(struct net_device *netdev)
 {
         struct atl2_adapter *adapter = netdev_priv(netdev);
         struct atl2_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u32 rctl;
         u32 hash_value;
 
@@ -157,8 +157,8 @@ static void atl2_set_multi(struct net_device *netdev)
         ATL2_WRITE_REG_ARRAY(hw, REG_RX_HASH_TABLE, 1, 0);
 
         /* comoute mc addresses' hash value ,and put it into hash table */
-        netdev_for_each_mc_addr(mc_ptr, netdev) {
-                hash_value = atl2_hash_mc_addr(hw, mc_ptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev) {
+                hash_value = atl2_hash_mc_addr(hw, ha->addr);
                 atl2_hash_set(hw, hash_value);
         }
 }
@@ -421,7 +421,6 @@ static void atl2_intr_rx(struct atl2_adapter *adapter)
                                 netdev->stats.rx_dropped++;
                                 break;
                         }
-                        skb->dev = netdev;
                         memcpy(skb->data, rxd->packet, rx_size);
                         skb_put(skb, rx_size);
                         skb->protocol = eth_type_trans(skb, netdev);
diff --git a/drivers/net/atlx/atlx.c b/drivers/net/atlx/atlx.c
index 72f3306352e2..f979ea2d6d3c 100644
--- a/drivers/net/atlx/atlx.c
+++ b/drivers/net/atlx/atlx.c
@@ -123,7 +123,7 @@ static void atlx_set_multi(struct net_device *netdev)
 {
         struct atlx_adapter *adapter = netdev_priv(netdev);
         struct atlx_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u32 rctl;
         u32 hash_value;
 
@@ -144,8 +144,8 @@ static void atlx_set_multi(struct net_device *netdev)
         iowrite32(0, (hw->hw_addr + REG_RX_HASH_TABLE) + (1 << 2));
 
         /* compute mc addresses' hash value ,and put it into hash table */
-        netdev_for_each_mc_addr(mc_ptr, netdev) {
-                hash_value = atlx_hash_mc_addr(hw, mc_ptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev) {
+                hash_value = atlx_hash_mc_addr(hw, ha->addr);
                 atlx_hash_set(hw, hash_value);
         }
 }
diff --git a/drivers/net/atp.c b/drivers/net/atp.c
index 6ad16205dc17..0d730c8329d4 100644
--- a/drivers/net/atp.c
+++ b/drivers/net/atp.c
@@ -883,11 +883,11 @@ static void set_rx_mode_8012(struct net_device *dev)
                 memset(mc_filter, 0xff, sizeof(mc_filter));
                 new_mode = CMR2h_Normal;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int filterbit = ether_crc_le(ETH_ALEN, mclist->dmi_addr) & 0x3f;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int filterbit = ether_crc_le(ETH_ALEN, ha->addr) & 0x3f;
                         mc_filter[filterbit >> 5] |= 1 << (filterbit & 31);
                 }
                 new_mode = CMR2h_Normal;
diff --git a/drivers/net/au1000_eth.c b/drivers/net/au1000_eth.c
index 4da191b87b0d..29631593cc23 100644
--- a/drivers/net/au1000_eth.c
+++ b/drivers/net/au1000_eth.c
@@ -957,12 +957,12 @@ static void au1000_multicast_list(struct net_device *dev)
                 aup->mac->control &= ~MAC_PROMISCUOUS;
                 printk(KERN_INFO "%s: Pass all multicast\n", dev->name);
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 u32 mc_filter[2];       /* Multicast hash filter */
 
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev)
-                        set_bit(ether_crc(ETH_ALEN, mclist->dmi_addr)>>26,
+                netdev_for_each_mc_addr(ha, dev)
+                        set_bit(ether_crc(ETH_ALEN, ha->addr)>>26,
                                         (long *)mc_filter);
                 aup->mac->multi_hash_high = mc_filter[1];
                 aup->mac->multi_hash_low = mc_filter[0];
diff --git a/drivers/net/b44.c b/drivers/net/b44.c
index 332c60356285..b2c5fd7b63af 100644
--- a/drivers/net/b44.c
+++ b/drivers/net/b44.c
@@ -1680,15 +1680,15 @@ static struct net_device_stats *b44_get_stats(struct net_device *dev)
 
 static int __b44_load_mcast(struct b44 *bp, struct net_device *dev)
 {
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         int i, num_ents;
 
         num_ents = min_t(int, netdev_mc_count(dev), B44_MCAST_TABLE_SIZE);
         i = 0;
-        netdev_for_each_mc_addr(mclist, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 if (i == num_ents)
                         break;
-                __b44_cam_write(bp, mclist->dmi_addr, i++ + 1);
+                __b44_cam_write(bp, ha->addr, i++ + 1);
         }
         return i+1;
 }
diff --git a/drivers/net/bcm63xx_enet.c b/drivers/net/bcm63xx_enet.c
index 8cdcab7655c0..51733404478e 100644
--- a/drivers/net/bcm63xx_enet.c
+++ b/drivers/net/bcm63xx_enet.c
@@ -340,7 +340,6 @@ static int bcm_enet_receive_queue(struct net_device *dev, int budget)
                 }
 
                 skb_put(skb, len);
-                skb->dev = dev;
                 skb->protocol = eth_type_trans(skb, dev);
                 priv->stats.rx_packets++;
                 priv->stats.rx_bytes += len;
@@ -604,7 +603,7 @@ static int bcm_enet_set_mac_address(struct net_device *dev, void *p)
 static void bcm_enet_set_multicast_list(struct net_device *dev)
 {
         struct bcm_enet_priv *priv;
-        struct dev_mc_list *mc_list;
+        struct netdev_hw_addr *ha;
         u32 val;
         int i;
 
@@ -632,14 +631,14 @@ static void bcm_enet_set_multicast_list(struct net_device *dev)
         }
 
         i = 0;
-        netdev_for_each_mc_addr(mc_list, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 u8 *dmi_addr;
                 u32 tmp;
 
                 if (i == 3)
                         break;
                 /* update perfect match registers */
-                dmi_addr = mc_list->dmi_addr;
+                dmi_addr = ha->addr;
                 tmp = (dmi_addr[2] << 24) | (dmi_addr[3] << 16) |
                         (dmi_addr[4] << 8) | dmi_addr[5];
                 enet_writel(priv, tmp, ENET_PML_REG(i + 1));
diff --git a/drivers/net/benet/be.h b/drivers/net/benet/be.h
index 8f0752553681..20842c5fd8fb 100644
--- a/drivers/net/benet/be.h
+++ b/drivers/net/benet/be.h
@@ -83,6 +83,8 @@ static inline char *nic_name(struct pci_dev *pdev)
 
 #define FW_VER_LEN              32
 
+#define BE_MAX_VF               32
+
 struct be_dma_mem {
         void *va;
         dma_addr_t dma;
@@ -280,8 +282,15 @@ struct be_adapter {
         u8 port_type;
         u8 transceiver;
         u8 generation;          /* BladeEngine ASIC generation */
+
+        bool sriov_enabled;
+        u32 vf_if_handle[BE_MAX_VF];
+        u32 vf_pmac_id[BE_MAX_VF];
+        u8 base_eq_id;
 };
 
+#define be_physfn(adapter) (!adapter->pdev->is_virtfn)
+
 /* BladeEngine Generation numbers */
 #define BE_GEN2 2
 #define BE_GEN3 3
diff --git a/drivers/net/benet/be_cmds.c b/drivers/net/benet/be_cmds.c
index d0ef4ac987cd..da8793026bb1 100644
--- a/drivers/net/benet/be_cmds.c
+++ b/drivers/net/benet/be_cmds.c
@@ -843,7 +843,8 @@ int be_cmd_q_destroy(struct be_adapter *adapter, struct be_queue_info *q,
  * Uses mbox
  */
 int be_cmd_if_create(struct be_adapter *adapter, u32 cap_flags, u32 en_flags,
-                u8 *mac, bool pmac_invalid, u32 *if_handle, u32 *pmac_id)
+                u8 *mac, bool pmac_invalid, u32 *if_handle, u32 *pmac_id,
+                u32 domain)
 {
         struct be_mcc_wrb *wrb;
         struct be_cmd_req_if_create *req;
@@ -860,6 +861,7 @@ int be_cmd_if_create(struct be_adapter *adapter, u32 cap_flags, u32 en_flags,
         be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_COMMON,
                 OPCODE_COMMON_NTWK_INTERFACE_CREATE, sizeof(*req));
 
+        req->hdr.domain = domain;
         req->capability_flags = cpu_to_le32(cap_flags);
         req->enable_flags = cpu_to_le32(en_flags);
         req->pmac_invalid = pmac_invalid;
@@ -1157,13 +1159,13 @@ int be_cmd_multicast_set(struct be_adapter *adapter, u32 if_id,
         req->interface_id = if_id;
         if (netdev) {
                 int i;
-                struct dev_mc_list *mc;
+                struct netdev_hw_addr *ha;
 
                 req->num_mac = cpu_to_le16(netdev_mc_count(netdev));
 
                 i = 0;
-                netdev_for_each_mc_addr(mc, netdev)
-                        memcpy(req->mac[i].byte, mc->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, netdev)
+                        memcpy(req->mac[i].byte, ha->addr, ETH_ALEN);
         } else {
                 req->promiscuous = 1;
         }
diff --git a/drivers/net/benet/be_cmds.h b/drivers/net/benet/be_cmds.h
index cce61f9a3714..763dc199e337 100644
--- a/drivers/net/benet/be_cmds.h
+++ b/drivers/net/benet/be_cmds.h
@@ -878,7 +878,7 @@ extern int be_cmd_pmac_add(struct be_adapter *adapter, u8 *mac_addr,
 extern int be_cmd_pmac_del(struct be_adapter *adapter, u32 if_id, u32 pmac_id);
 extern int be_cmd_if_create(struct be_adapter *adapter, u32 cap_flags,
                         u32 en_flags, u8 *mac, bool pmac_invalid,
-                        u32 *if_handle, u32 *pmac_id);
+                        u32 *if_handle, u32 *pmac_id, u32 domain);
 extern int be_cmd_if_destroy(struct be_adapter *adapter, u32 if_handle);
 extern int be_cmd_eq_create(struct be_adapter *adapter,
                         struct be_queue_info *eq, int eq_delay);
diff --git a/drivers/net/benet/be_ethtool.c b/drivers/net/benet/be_ethtool.c
index 51e1065e7897..d488d52d710a 100644
--- a/drivers/net/benet/be_ethtool.c
+++ b/drivers/net/benet/be_ethtool.c
@@ -496,7 +496,7 @@ be_test_ddr_dma(struct be_adapter *adapter)
         ddrdma_cmd.va = pci_alloc_consistent(adapter->pdev, ddrdma_cmd.size,
                                         &ddrdma_cmd.dma);
         if (!ddrdma_cmd.va) {
-                dev_err(&adapter->pdev->dev, "Memory allocation failure \n");
+                dev_err(&adapter->pdev->dev, "Memory allocation failure\n");
                 return -ENOMEM;
         }
 
diff --git a/drivers/net/benet/be_hw.h b/drivers/net/benet/be_hw.h
index 2d4a4b827637..063026de4957 100644
--- a/drivers/net/benet/be_hw.h
+++ b/drivers/net/benet/be_hw.h
@@ -99,6 +99,9 @@
 /* Number of entries posted */
 #define DB_MCCQ_NUM_POSTED_SHIFT        (16)    /* bits 16 - 29 */
 
+/********** SRIOV VF PCICFG OFFSET ********/
+#define SRIOV_VF_PCICFG_OFFSET          (4096)
+
 /* Flashrom related descriptors */
 #define IMAGE_TYPE_FIRMWARE             160
 #define IMAGE_TYPE_BOOTCODE             224
diff --git a/drivers/net/benet/be_main.c b/drivers/net/benet/be_main.c
index ec6ace802256..49d51965312e 100644
--- a/drivers/net/benet/be_main.c
+++ b/drivers/net/benet/be_main.c
@@ -26,8 +26,11 @@ MODULE_AUTHOR("ServerEngines Corporation");
 MODULE_LICENSE("GPL");
 
 static unsigned int rx_frag_size = 2048;
+static unsigned int num_vfs;
 module_param(rx_frag_size, uint, S_IRUGO);
+module_param(num_vfs, uint, S_IRUGO);
 MODULE_PARM_DESC(rx_frag_size, "Size of a fragment that holds rcvd data.");
+MODULE_PARM_DESC(num_vfs, "Number of PCI VFs to initialize");
 
 static DEFINE_PCI_DEVICE_TABLE(be_dev_ids) = {
         { PCI_DEVICE(BE_VENDOR_ID, BE_DEVICE_ID1) },
@@ -138,12 +141,19 @@ static int be_mac_addr_set(struct net_device *netdev, void *p)
         if (!is_valid_ether_addr(addr->sa_data))
                 return -EADDRNOTAVAIL;
 
+        /* MAC addr configuration will be done in hardware for VFs
+         * by their corresponding PFs. Just copy to netdev addr here
+         */
+        if (!be_physfn(adapter))
+                goto netdev_addr;
+
         status = be_cmd_pmac_del(adapter, adapter->if_handle, adapter->pmac_id);
         if (status)
                 return status;
 
         status = be_cmd_pmac_add(adapter, (u8 *)addr->sa_data,
                         adapter->if_handle, &adapter->pmac_id);
+netdev_addr:
         if (!status)
                 memcpy(netdev->dev_addr, addr->sa_data, netdev->addr_len);
 
@@ -386,26 +396,48 @@ static void wrb_fill_hdr(struct be_eth_hdr_wrb *hdr, struct sk_buff *skb,
         AMAP_SET_BITS(struct amap_eth_hdr_wrb, len, hdr, len);
 }
 
+static void unmap_tx_frag(struct pci_dev *pdev, struct be_eth_wrb *wrb,
+                bool unmap_single)
+{
+        dma_addr_t dma;
+
+        be_dws_le_to_cpu(wrb, sizeof(*wrb));
+
+        dma = (u64)wrb->frag_pa_hi << 32 | (u64)wrb->frag_pa_lo;
+        if (dma != 0) {
+                if (unmap_single)
+                        pci_unmap_single(pdev, dma, wrb->frag_len,
+                                PCI_DMA_TODEVICE);
+                else
+                        pci_unmap_page(pdev, dma, wrb->frag_len,
+                                PCI_DMA_TODEVICE);
+        }
+}
 
 static int make_tx_wrbs(struct be_adapter *adapter,
                 struct sk_buff *skb, u32 wrb_cnt, bool dummy_wrb)
 {
-        u64 busaddr;
-        u32 i, copied = 0;
+        dma_addr_t busaddr;
+        int i, copied = 0;
         struct pci_dev *pdev = adapter->pdev;
         struct sk_buff *first_skb = skb;
         struct be_queue_info *txq = &adapter->tx_obj.q;
         struct be_eth_wrb *wrb;
         struct be_eth_hdr_wrb *hdr;
+        bool map_single = false;
+        u16 map_head;
 
         hdr = queue_head_node(txq);
-        atomic_add(wrb_cnt, &txq->used);
         queue_head_inc(txq);
+        map_head = txq->head;
 
         if (skb->len > skb->data_len) {
                 int len = skb->len - skb->data_len;
                 busaddr = pci_map_single(pdev, skb->data, len,
                                          PCI_DMA_TODEVICE);
+                if (pci_dma_mapping_error(pdev, busaddr))
+                        goto dma_err;
+                map_single = true;
                 wrb = queue_head_node(txq);
                 wrb_fill(wrb, busaddr, len);
                 be_dws_cpu_to_le(wrb, sizeof(*wrb));
@@ -419,6 +451,8 @@ static int make_tx_wrbs(struct be_adapter *adapter,
                 busaddr = pci_map_page(pdev, frag->page,
                                        frag->page_offset,
                                        frag->size, PCI_DMA_TODEVICE);
+                if (pci_dma_mapping_error(pdev, busaddr))
+                        goto dma_err;
                 wrb = queue_head_node(txq);
                 wrb_fill(wrb, busaddr, frag->size);
                 be_dws_cpu_to_le(wrb, sizeof(*wrb));
@@ -438,6 +472,16 @@ static int make_tx_wrbs(struct be_adapter *adapter,
         be_dws_cpu_to_le(hdr, sizeof(*hdr));
 
         return copied;
+dma_err:
+        txq->head = map_head;
+        while (copied) {
+                wrb = queue_head_node(txq);
+                unmap_tx_frag(pdev, wrb, map_single);
+                map_single = false;
+                copied -= wrb->frag_len;
+                queue_head_inc(txq);
+        }
+        return 0;
 }
 
 static netdev_tx_t be_xmit(struct sk_buff *skb,
@@ -462,6 +506,7 @@ static netdev_tx_t be_xmit(struct sk_buff *skb,
                  * *BEFORE* ringing the tx doorbell, so that we serialze the
                  * tx compls of the current transmit which'll wake up the queue
                  */
+                atomic_add(wrb_cnt, &txq->used);
                 if ((BE_MAX_TX_FRAG_COUNT + atomic_read(&txq->used)) >=
                                                                 txq->len) {
                         netif_stop_queue(netdev);
@@ -541,6 +586,9 @@ static void be_vlan_add_vid(struct net_device *netdev, u16 vid)
 {
         struct be_adapter *adapter = netdev_priv(netdev);
 
+        if (!be_physfn(adapter))
+                return;
+
         adapter->vlan_tag[vid] = 1;
         adapter->vlans_added++;
         if (adapter->vlans_added <= (adapter->max_vlans + 1))
@@ -551,6 +599,9 @@ static void be_vlan_rem_vid(struct net_device *netdev, u16 vid)
 {
         struct be_adapter *adapter = netdev_priv(netdev);
 
+        if (!be_physfn(adapter))
+                return;
+
         adapter->vlan_tag[vid] = 0;
         vlan_group_set_device(adapter->vlan_grp, vid, NULL);
         adapter->vlans_added--;
@@ -588,6 +639,28 @@ done:
         return;
 }
 
+static int be_set_vf_mac(struct net_device *netdev, int vf, u8 *mac)
+{
+        struct be_adapter *adapter = netdev_priv(netdev);
+        int status;
+
+        if (!adapter->sriov_enabled)
+                return -EPERM;
+
+        if (!is_valid_ether_addr(mac) || (vf >= num_vfs))
+                return -EINVAL;
+
+        status = be_cmd_pmac_del(adapter, adapter->vf_if_handle[vf],
+                                adapter->vf_pmac_id[vf]);
+
+        status = be_cmd_pmac_add(adapter, mac, adapter->vf_if_handle[vf],
+                                &adapter->vf_pmac_id[vf]);
+        if (!status)
+                dev_err(&adapter->pdev->dev, "MAC %pM set on VF %d Failed\n",
+                                mac, vf);
+        return status;
+}
+
 static void be_rx_rate_update(struct be_adapter *adapter)
 {
         struct be_drvr_stats *stats = drvr_stats(adapter);
@@ -791,7 +864,6 @@ static void be_rx_compl_process(struct be_adapter *adapter,
 
         skb->truesize = skb->len + sizeof(struct sk_buff);
         skb->protocol = eth_type_trans(skb, adapter->netdev);
-        skb->dev = adapter->netdev;
 
         vlanf = AMAP_GET_BITS(struct amap_eth_rx_compl, vtp, rxcp);
         vtm = AMAP_GET_BITS(struct amap_eth_rx_compl, vtm, rxcp);
@@ -1012,35 +1084,26 @@ static void be_tx_compl_process(struct be_adapter *adapter, u16 last_index)
         struct be_eth_wrb *wrb;
         struct sk_buff **sent_skbs = adapter->tx_obj.sent_skb_list;
         struct sk_buff *sent_skb;
-        u64 busaddr;
-        u16 cur_index, num_wrbs = 0;
+        u16 cur_index, num_wrbs = 1; /* account for hdr wrb */
+        bool unmap_skb_hdr = true;
 
-        cur_index = txq->tail;
-        sent_skb = sent_skbs[cur_index];
+        sent_skb = sent_skbs[txq->tail];
         BUG_ON(!sent_skb);
-        sent_skbs[cur_index] = NULL;
-        wrb = queue_tail_node(txq);
-        be_dws_le_to_cpu(wrb, sizeof(*wrb));
-        busaddr = ((u64)wrb->frag_pa_hi << 32) | (u64)wrb->frag_pa_lo;
-        if (busaddr != 0) {
-                pci_unmap_single(adapter->pdev, busaddr,
-                                 wrb->frag_len, PCI_DMA_TODEVICE);
-        }
-        num_wrbs++;
+        sent_skbs[txq->tail] = NULL;
+
+        /* skip header wrb */
         queue_tail_inc(txq);
 
-        while (cur_index != last_index) {
+        do {
                 cur_index = txq->tail;
                 wrb = queue_tail_node(txq);
-                be_dws_le_to_cpu(wrb, sizeof(*wrb));
-                busaddr = ((u64)wrb->frag_pa_hi << 32) | (u64)wrb->frag_pa_lo;
-                if (busaddr != 0) {
-                        pci_unmap_page(adapter->pdev, busaddr,
-                                       wrb->frag_len, PCI_DMA_TODEVICE);
-                }
+                unmap_tx_frag(adapter->pdev, wrb, (unmap_skb_hdr &&
+                                        sent_skb->len > sent_skb->data_len));
+                unmap_skb_hdr = false;
+
                 num_wrbs++;
                 queue_tail_inc(txq);
-        }
+        } while (cur_index != last_index);
 
         atomic_sub(num_wrbs, &txq->used);
 
@@ -1255,6 +1318,8 @@ static int be_tx_queues_create(struct be_adapter *adapter)
         /* Ask BE to create Tx Event queue */
         if (be_cmd_eq_create(adapter, eq, adapter->tx_eq.cur_eqd))
                 goto tx_eq_free;
+        adapter->base_eq_id = adapter->tx_eq.q.id;
+
         /* Alloc TX eth compl queue */
         cq = &adapter->tx_obj.cq;
         if (be_queue_alloc(adapter, cq, TX_CQ_LEN,
@@ -1382,7 +1447,7 @@ rx_eq_free:
 /* There are 8 evt ids per func. Retruns the evt id's bit number */
 static inline int be_evt_bit_get(struct be_adapter *adapter, u32 eq_id)
 {
-        return eq_id % 8;
+        return eq_id - adapter->base_eq_id;
 }
 
 static irqreturn_t be_intx(int irq, void *dev)
@@ -1560,6 +1625,28 @@ static void be_msix_enable(struct be_adapter *adapter)
         return;
 }
 
+static void be_sriov_enable(struct be_adapter *adapter)
+{
+#ifdef CONFIG_PCI_IOV
+        int status;
+        if (be_physfn(adapter) && num_vfs) {
+                status = pci_enable_sriov(adapter->pdev, num_vfs);
+                adapter->sriov_enabled = status ? false : true;
+        }
+#endif
+        return;
+}
+
+static void be_sriov_disable(struct be_adapter *adapter)
+{
+#ifdef CONFIG_PCI_IOV
+        if (adapter->sriov_enabled) {
+                pci_disable_sriov(adapter->pdev);
+                adapter->sriov_enabled = false;
+        }
+#endif
+}
+
 static inline int be_msix_vec_get(struct be_adapter *adapter, u32 eq_id)
 {
         return adapter->msix_entries[
@@ -1617,6 +1704,9 @@ static int be_irq_register(struct be_adapter *adapter)
                 status = be_msix_register(adapter);
                 if (status == 0)
                         goto done;
+                /* INTx is not supported for VF */
+                if (!be_physfn(adapter))
+                        return status;
         }
 
         /* INTx */
@@ -1690,14 +1780,17 @@ static int be_open(struct net_device *netdev)
                 goto ret_sts;
         be_link_status_update(adapter, link_up);
 
-        status = be_vid_config(adapter);
+        if (be_physfn(adapter))
+                status = be_vid_config(adapter);
         if (status)
                 goto ret_sts;
 
-        status = be_cmd_set_flow_control(adapter,
-                                        adapter->tx_fc, adapter->rx_fc);
-        if (status)
-                goto ret_sts;
+        if (be_physfn(adapter)) {
+                status = be_cmd_set_flow_control(adapter,
+                                adapter->tx_fc, adapter->rx_fc);
+                if (status)
+                        goto ret_sts;
+        }
 
         schedule_delayed_work(&adapter->work, msecs_to_jiffies(100));
 ret_sts:
@@ -1723,7 +1816,7 @@ static int be_setup_wol(struct be_adapter *adapter, bool enable)
                         PCICFG_PM_CONTROL_OFFSET, PCICFG_PM_CONTROL_MASK);
                 if (status) {
                         dev_err(&adapter->pdev->dev,
-                                "Could not enable Wake-on-lan \n");
+                                "Could not enable Wake-on-lan\n");
                         pci_free_consistent(adapter->pdev, cmd.size, cmd.va,
                                         cmd.dma);
                         return status;
@@ -1745,22 +1838,48 @@ static int be_setup_wol(struct be_adapter *adapter, bool enable)
 static int be_setup(struct be_adapter *adapter)
 {
         struct net_device *netdev = adapter->netdev;
-        u32 cap_flags, en_flags;
+        u32 cap_flags, en_flags, vf = 0;
         int status;
+        u8 mac[ETH_ALEN];
 
-        cap_flags = BE_IF_FLAGS_UNTAGGED | BE_IF_FLAGS_BROADCAST |
-                        BE_IF_FLAGS_MCAST_PROMISCUOUS |
-                        BE_IF_FLAGS_PROMISCUOUS |
-                        BE_IF_FLAGS_PASS_L3L4_ERRORS;
-        en_flags = BE_IF_FLAGS_UNTAGGED | BE_IF_FLAGS_BROADCAST |
-                        BE_IF_FLAGS_PASS_L3L4_ERRORS;
+        cap_flags = en_flags = BE_IF_FLAGS_UNTAGGED | BE_IF_FLAGS_BROADCAST;
+
+        if (be_physfn(adapter)) {
+                cap_flags |= BE_IF_FLAGS_MCAST_PROMISCUOUS |
+                                BE_IF_FLAGS_PROMISCUOUS |
+                                BE_IF_FLAGS_PASS_L3L4_ERRORS;
+                en_flags |= BE_IF_FLAGS_PASS_L3L4_ERRORS;
+        }
 
         status = be_cmd_if_create(adapter, cap_flags, en_flags,
                         netdev->dev_addr, false/* pmac_invalid */,
-                        &adapter->if_handle, &adapter->pmac_id);
+                        &adapter->if_handle, &adapter->pmac_id, 0);
         if (status != 0)
                 goto do_none;
 
+        if (be_physfn(adapter)) {
+                while (vf < num_vfs) {
+                        cap_flags = en_flags = BE_IF_FLAGS_UNTAGGED
+                                        | BE_IF_FLAGS_BROADCAST;
+                        status = be_cmd_if_create(adapter, cap_flags, en_flags,
+                                        mac, true, &adapter->vf_if_handle[vf],
+                                        NULL, vf+1);
+                        if (status) {
+                                dev_err(&adapter->pdev->dev,
+                                "Interface Create failed for VF %d\n", vf);
+                                goto if_destroy;
+                        }
+                        vf++;
+                } while (vf < num_vfs);
+        } else if (!be_physfn(adapter)) {
+                status = be_cmd_mac_addr_query(adapter, mac,
+                        MAC_ADDRESS_TYPE_NETWORK, false, adapter->if_handle);
+                if (!status) {
+                        memcpy(adapter->netdev->dev_addr, mac, ETH_ALEN);
+                        memcpy(adapter->netdev->perm_addr, mac, ETH_ALEN);
+                }
+        }
+
         status = be_tx_queues_create(adapter);
         if (status != 0)
                 goto if_destroy;
@@ -1782,6 +1901,9 @@ rx_qs_destroy:
 tx_qs_destroy:
         be_tx_queues_destroy(adapter);
 if_destroy:
+        for (vf = 0; vf < num_vfs; vf++)
+                if (adapter->vf_if_handle[vf])
+                        be_cmd_if_destroy(adapter, adapter->vf_if_handle[vf]);
         be_cmd_if_destroy(adapter, adapter->if_handle);
 do_none:
         return status;
@@ -2061,6 +2183,7 @@ static struct net_device_ops be_netdev_ops = {
         .ndo_vlan_rx_register   = be_vlan_register,
         .ndo_vlan_rx_add_vid    = be_vlan_add_vid,
         .ndo_vlan_rx_kill_vid   = be_vlan_rem_vid,
+        .ndo_set_vf_mac         = be_set_vf_mac
 };
 
 static void be_netdev_init(struct net_device *netdev)
@@ -2102,37 +2225,48 @@ static void be_unmap_pci_bars(struct be_adapter *adapter)
                 iounmap(adapter->csr);
         if (adapter->db)
                 iounmap(adapter->db);
-        if (adapter->pcicfg)
+        if (adapter->pcicfg && be_physfn(adapter))
                 iounmap(adapter->pcicfg);
 }
 
 static int be_map_pci_bars(struct be_adapter *adapter)
 {
         u8 __iomem *addr;
-        int pcicfg_reg;
-
-        addr = ioremap_nocache(pci_resource_start(adapter->pdev, 2),
-                        pci_resource_len(adapter->pdev, 2));
-        if (addr == NULL)
-                return -ENOMEM;
-        adapter->csr = addr;
+        int pcicfg_reg, db_reg;
 
-        addr = ioremap_nocache(pci_resource_start(adapter->pdev, 4),
-                        128 * 1024);
-        if (addr == NULL)
-                goto pci_map_err;
-        adapter->db = addr;
+        if (be_physfn(adapter)) {
+                addr = ioremap_nocache(pci_resource_start(adapter->pdev, 2),
+                                pci_resource_len(adapter->pdev, 2));
+                if (addr == NULL)
+                        return -ENOMEM;
+                adapter->csr = addr;
+        }
 
-        if (adapter->generation == BE_GEN2)
+        if (adapter->generation == BE_GEN2) {
                 pcicfg_reg = 1;
-        else
+                db_reg = 4;
+        } else {
                 pcicfg_reg = 0;
-
-        addr = ioremap_nocache(pci_resource_start(adapter->pdev, pcicfg_reg),
-                        pci_resource_len(adapter->pdev, pcicfg_reg));
+                if (be_physfn(adapter))
+                        db_reg = 4;
+                else
+                        db_reg = 0;
+        }
+        addr = ioremap_nocache(pci_resource_start(adapter->pdev, db_reg),
+                                pci_resource_len(adapter->pdev, db_reg));
         if (addr == NULL)
                 goto pci_map_err;
-        adapter->pcicfg = addr;
+        adapter->db = addr;
+
+        if (be_physfn(adapter)) {
+                addr = ioremap_nocache(
+                                pci_resource_start(adapter->pdev, pcicfg_reg),
+                                pci_resource_len(adapter->pdev, pcicfg_reg));
+                if (addr == NULL)
+                        goto pci_map_err;
+                adapter->pcicfg = addr;
+        } else
+                adapter->pcicfg = adapter->db + SRIOV_VF_PCICFG_OFFSET;
 
         return 0;
 pci_map_err:
@@ -2246,6 +2380,8 @@ static void __devexit be_remove(struct pci_dev *pdev)
 
         be_ctrl_cleanup(adapter);
 
+        be_sriov_disable(adapter);
+
         be_msix_disable(adapter);
 
         pci_set_drvdata(pdev, NULL);
@@ -2270,16 +2406,20 @@ static int be_get_config(struct be_adapter *adapter)
                 return status;
 
         memset(mac, 0, ETH_ALEN);
-        status = be_cmd_mac_addr_query(adapter, mac,
+
+        if (be_physfn(adapter)) {
+                status = be_cmd_mac_addr_query(adapter, mac,
                         MAC_ADDRESS_TYPE_NETWORK, true /*permanent */, 0);
-        if (status)
-                return status;
 
-        if (!is_valid_ether_addr(mac))
-                return -EADDRNOTAVAIL;
+                if (status)
+                        return status;
+
+                if (!is_valid_ether_addr(mac))
+                        return -EADDRNOTAVAIL;
 
-        memcpy(adapter->netdev->dev_addr, mac, ETH_ALEN);
-        memcpy(adapter->netdev->perm_addr, mac, ETH_ALEN);
+                memcpy(adapter->netdev->dev_addr, mac, ETH_ALEN);
+                memcpy(adapter->netdev->perm_addr, mac, ETH_ALEN);
+        }
 
         if (adapter->cap & 0x400)
                 adapter->max_vlans = BE_NUM_VLANS_SUPPORTED/4;
@@ -2296,6 +2436,7 @@ static int __devinit be_probe(struct pci_dev *pdev,
         struct be_adapter *adapter;
         struct net_device *netdev;
 
+
         status = pci_enable_device(pdev);
         if (status)
                 goto do_none;
@@ -2344,24 +2485,28 @@ static int __devinit be_probe(struct pci_dev *pdev,
                 }
         }
 
+        be_sriov_enable(adapter);
+
         status = be_ctrl_init(adapter);
         if (status)
                 goto free_netdev;
 
         /* sync up with fw's ready state */
-        status = be_cmd_POST(adapter);
-        if (status)
-                goto ctrl_clean;
+        if (be_physfn(adapter)) {
+                status = be_cmd_POST(adapter);
+                if (status)
+                        goto ctrl_clean;
+
+                status = be_cmd_reset_function(adapter);
+                if (status)
+                        goto ctrl_clean;
+        }
 
         /* tell fw we're ready to fire cmds */
         status = be_cmd_fw_init(adapter);
         if (status)
                 goto ctrl_clean;
 
-        status = be_cmd_reset_function(adapter);
-        if (status)
-                goto ctrl_clean;
-
         status = be_stats_init(adapter);
         if (status)
                 goto ctrl_clean;
@@ -2391,6 +2536,7 @@ ctrl_clean:
         be_ctrl_cleanup(adapter);
 free_netdev:
         be_msix_disable(adapter);
+        be_sriov_disable(adapter);
         free_netdev(adapter->netdev);
         pci_set_drvdata(pdev, NULL);
 rel_reg:
@@ -2587,6 +2733,13 @@ static int __init be_init_module(void)
                 rx_frag_size = 2048;
         }
 
+        if (num_vfs > 32) {
+                printk(KERN_WARNING DRV_NAME
+                        " : Module param num_vfs must not be greater than 32."
+                        "Using 32\n");
+                num_vfs = 32;
+        }
+
         return pci_register_driver(&be_driver);
 }
 module_init(be_init_module);
diff --git a/drivers/net/bfin_mac.c b/drivers/net/bfin_mac.c
index 587f93cf03f6..c488cea8f455 100644
--- a/drivers/net/bfin_mac.c
+++ b/drivers/net/bfin_mac.c
@@ -812,14 +812,14 @@ static void bfin_mac_timeout(struct net_device *dev)
 static void bfin_mac_multicast_hash(struct net_device *dev)
 {
         u32 emac_hashhi, emac_hashlo;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
 
         emac_hashhi = emac_hashlo = 0;
 
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* skip non-multicast addresses */
                 if (!(*addrs & 1))
diff --git a/drivers/net/bmac.c b/drivers/net/bmac.c
index 119468e76323..1245e9835765 100644
--- a/drivers/net/bmac.c
+++ b/drivers/net/bmac.c
@@ -971,7 +971,7 @@ bmac_remove_multi(struct net_device *dev,
  */
 static void bmac_set_multicast(struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         struct bmac_data *bp = netdev_priv(dev);
         int num_addrs = netdev_mc_count(dev);
         unsigned short rx_cfg;
@@ -1000,8 +1000,8 @@ static void bmac_set_multicast(struct net_device *dev)
                         rx_cfg = bmac_rx_on(dev, 0, 0);
                         XXDEBUG(("bmac: multi disabled, rx_cfg=%#08x\n", rx_cfg));
                 } else {
-                        netdev_for_each_mc_addr(dmi, dev)
-                                bmac_addhash(bp, dmi->dmi_addr);
+                        netdev_for_each_mc_addr(ha, dev)
+                                bmac_addhash(bp, ha->addr);
                         bmac_update_hash_table_mask(dev, bp);
                         rx_cfg = bmac_rx_on(dev, 1, 0);
                         XXDEBUG(("bmac: multi enabled, rx_cfg=%#08x\n", rx_cfg));
@@ -1015,7 +1015,7 @@ static void bmac_set_multicast(struct net_device *dev)
 
 static void bmac_set_multicast(struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         int i;
         unsigned short rx_cfg;
@@ -1039,8 +1039,8 @@ static void bmac_set_multicast(struct net_device *dev)
 
                 for(i = 0; i < 4; i++) hash_table[i] = 0;
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
 
                         if(!(*addrs & 1))
                                 continue;
diff --git a/drivers/net/bnx2.c b/drivers/net/bnx2.c
index a257babd1bb4..802b538502eb 100644
--- a/drivers/net/bnx2.c
+++ b/drivers/net/bnx2.c
@@ -3546,7 +3546,6 @@ bnx2_set_rx_mode(struct net_device *dev)
         }
         else {
                 /* Accept one or more multicast(s). */
-                struct dev_mc_list *mclist;
                 u32 mc_filter[NUM_MC_HASH_REGISTERS];
                 u32 regidx;
                 u32 bit;
@@ -3554,8 +3553,8 @@ bnx2_set_rx_mode(struct net_device *dev)
 
                 memset(mc_filter, 0, 4 * NUM_MC_HASH_REGISTERS);
 
-                netdev_for_each_mc_addr(mclist, dev) {
-                        crc = ether_crc_le(ETH_ALEN, mclist->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        crc = ether_crc_le(ETH_ALEN, ha->addr);
                         bit = crc & 0xff;
                         regidx = (bit & 0xe0) >> 5;
                         bit &= 0x1f;
diff --git a/drivers/net/bnx2x_link.c b/drivers/net/bnx2x_link.c
index 32e79c359e89..ff70be898765 100644
--- a/drivers/net/bnx2x_link.c
+++ b/drivers/net/bnx2x_link.c
@@ -1594,7 +1594,7 @@ static u8 bnx2x_ext_phy_resolve_fc(struct link_params *params,
                                 MDIO_AN_REG_ADV_PAUSE_MASK) >> 8;
                 pause_result |= (lp_pause &
                                  MDIO_AN_REG_ADV_PAUSE_MASK) >> 10;
-                DP(NETIF_MSG_LINK, "Ext PHY pause result 0x%x \n",
+                DP(NETIF_MSG_LINK, "Ext PHY pause result 0x%x\n",
                    pause_result);
                 bnx2x_pause_resolve(vars, pause_result);
                 if (vars->flow_ctrl == BNX2X_FLOW_CTRL_NONE &&
@@ -1616,7 +1616,7 @@ static u8 bnx2x_ext_phy_resolve_fc(struct link_params *params,
                                 MDIO_COMBO_IEEE0_AUTO_NEG_ADV_PAUSE_BOTH) >> 7;
 
                         bnx2x_pause_resolve(vars, pause_result);
-                        DP(NETIF_MSG_LINK, "Ext PHY CL37 pause result 0x%x \n",
+                        DP(NETIF_MSG_LINK, "Ext PHY CL37 pause result 0x%x\n",
                                  pause_result);
                 }
         }
@@ -1974,7 +1974,7 @@ static u8 bnx2x_link_settings_status(struct link_params *params,
                 }
         }
 
-        DP(NETIF_MSG_LINK, "gp_status 0x%x  phy_link_up %x line_speed %x \n",
+        DP(NETIF_MSG_LINK, "gp_status 0x%x  phy_link_up %x line_speed %x\n",
                  gp_status, vars->phy_link_up, vars->line_speed);
         DP(NETIF_MSG_LINK, "duplex %x  flow_ctrl 0x%x"
                  " autoneg 0x%x\n",
@@ -3852,7 +3852,7 @@ static u8 bnx2x_ext_phy_init(struct link_params *params, struct link_vars *vars)
                                     SPEED_AUTO_NEG) &&
                                    ((params->speed_cap_mask &
                                      PORT_HW_CFG_SPEED_CAPABILITY_D0_1G))) {
-                                DP(NETIF_MSG_LINK, "Setting 1G clause37 \n");
+                                DP(NETIF_MSG_LINK, "Setting 1G clause37\n");
                                 bnx2x_cl45_write(bp, params->port, ext_phy_type,
                                                ext_phy_addr, MDIO_AN_DEVAD,
                                                MDIO_AN_REG_ADV, 0x20);
@@ -4234,14 +4234,14 @@ static u8 bnx2x_ext_phy_init(struct link_params *params, struct link_vars *vars)
                                       ext_phy_addr,
                                       MDIO_PMA_DEVAD,
                                       MDIO_PMA_REG_10G_CTRL2, &tmp1);
-                                DP(NETIF_MSG_LINK, "1.7 = 0x%x \n", tmp1);
+                                DP(NETIF_MSG_LINK, "1.7 = 0x%x\n", tmp1);
 
                         } else if ((params->req_line_speed ==
                                     SPEED_AUTO_NEG) &&
                                    ((params->speed_cap_mask &
                                      PORT_HW_CFG_SPEED_CAPABILITY_D0_1G))) {
 
-                                DP(NETIF_MSG_LINK, "Setting 1G clause37 \n");
+                                DP(NETIF_MSG_LINK, "Setting 1G clause37\n");
                                 bnx2x_cl45_write(bp, params->port, ext_phy_type,
                                                ext_phy_addr, MDIO_AN_DEVAD,
                                                MDIO_PMA_REG_8727_MISC_CTRL, 0);
diff --git a/drivers/net/bnx2x_main.c b/drivers/net/bnx2x_main.c
index 6c042a72d6cc..fa9275c2ef5c 100644
--- a/drivers/net/bnx2x_main.c
+++ b/drivers/net/bnx2x_main.c
@@ -57,8 +57,8 @@
 #include "bnx2x_init_ops.h"
 #include "bnx2x_dump.h"
 
-#define DRV_MODULE_VERSION      "1.52.1-7"
-#define DRV_MODULE_RELDATE      "2010/02/28"
+#define DRV_MODULE_VERSION      "1.52.1-8"
+#define DRV_MODULE_RELDATE      "2010/04/01"
 #define BNX2X_BC_VER            0x040200
 
 #include <linux/firmware.h>
@@ -1441,12 +1441,12 @@ static void bnx2x_tpa_stop(struct bnx2x *bp, struct bnx2x_fastpath *fp,
 #ifdef BCM_VLAN
                         if ((bp->vlgrp != NULL) && is_vlan_cqe &&
                             (!is_not_hwaccel_vlan_cqe))
-                                vlan_hwaccel_receive_skb(skb, bp->vlgrp,
-                                                le16_to_cpu(cqe->fast_path_cqe.
-                                                            vlan_tag));
+                                vlan_gro_receive(&fp->napi, bp->vlgrp,
+                                                 le16_to_cpu(cqe->fast_path_cqe.
+                                                             vlan_tag), skb);
                         else
 #endif
-                                netif_receive_skb(skb);
+                                napi_gro_receive(&fp->napi, skb);
                 } else {
                         DP(NETIF_MSG_RX_STATUS, "Failed to allocate new pages"
                            " - dropping packet!\n");
@@ -1699,11 +1699,11 @@ reuse_rx:
                 if ((bp->vlgrp != NULL) && (bp->flags & HW_VLAN_RX_FLAG) &&
                     (le16_to_cpu(cqe->fast_path_cqe.pars_flags.flags) &
                      PARSING_FLAGS_VLAN))
-                        vlan_hwaccel_receive_skb(skb, bp->vlgrp,
-                                le16_to_cpu(cqe->fast_path_cqe.vlan_tag));
+                        vlan_gro_receive(&fp->napi, bp->vlgrp,
+                                le16_to_cpu(cqe->fast_path_cqe.vlan_tag), skb);
                 else
 #endif
-                        netif_receive_skb(skb);
+                        napi_gro_receive(&fp->napi, skb);
 
 
 next_rx:
@@ -8935,6 +8935,8 @@ static int __devinit bnx2x_init_bp(struct bnx2x *bp)
         bp->multi_mode = multi_mode;
 
 
+        bp->dev->features |= NETIF_F_GRO;
+
         /* Set TPA flags */
         if (disable_tpa) {
                 bp->flags &= ~TPA_ENABLE_FLAG;
@@ -11494,21 +11496,21 @@ static void bnx2x_set_rx_mode(struct net_device *dev)
         else { /* some multicasts */
                 if (CHIP_IS_E1(bp)) {
                         int i, old, offset;
-                        struct dev_mc_list *mclist;
+                        struct netdev_hw_addr *ha;
                         struct mac_configuration_cmd *config =
                                                 bnx2x_sp(bp, mcast_config);
 
                         i = 0;
-                        netdev_for_each_mc_addr(mclist, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 config->config_table[i].
                                         cam_entry.msb_mac_addr =
-                                        swab16(*(u16 *)&mclist->dmi_addr[0]);
+                                        swab16(*(u16 *)&ha->addr[0]);
                                 config->config_table[i].
                                         cam_entry.middle_mac_addr =
-                                        swab16(*(u16 *)&mclist->dmi_addr[2]);
+                                        swab16(*(u16 *)&ha->addr[2]);
                                 config->config_table[i].
                                         cam_entry.lsb_mac_addr =
-                                        swab16(*(u16 *)&mclist->dmi_addr[4]);
+                                        swab16(*(u16 *)&ha->addr[4]);
                                 config->config_table[i].cam_entry.flags =
                                                         cpu_to_le16(port);
                                 config->config_table[i].
@@ -11562,18 +11564,18 @@ static void bnx2x_set_rx_mode(struct net_device *dev)
                                       0);
                 } else { /* E1H */
                         /* Accept one or more multicasts */
-                        struct dev_mc_list *mclist;
+                        struct netdev_hw_addr *ha;
                         u32 mc_filter[MC_HASH_SIZE];
                         u32 crc, bit, regidx;
                         int i;
 
                         memset(mc_filter, 0, 4 * MC_HASH_SIZE);
 
-                        netdev_for_each_mc_addr(mclist, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 DP(NETIF_MSG_IFUP, "Adding mcast MAC: %pM\n",
-                                   mclist->dmi_addr);
+                                   ha->addr);
 
-                                crc = crc32c_le(0, mclist->dmi_addr, ETH_ALEN);
+                                crc = crc32c_le(0, ha->addr, ETH_ALEN);
                                 bit = (crc >> 24) & 0xff;
                                 regidx = bit >> 5;
                                 bit &= 0x1f;
diff --git a/drivers/net/bonding/bond_ipv6.c b/drivers/net/bonding/bond_ipv6.c
index 6dd64cf3cb76..969ffed86b9f 100644
--- a/drivers/net/bonding/bond_ipv6.c
+++ b/drivers/net/bonding/bond_ipv6.c
@@ -37,7 +37,6 @@
 static void bond_glean_dev_ipv6(struct net_device *dev, struct in6_addr *addr)
 {
         struct inet6_dev *idev;
-        struct inet6_ifaddr *ifa;
 
         if (!dev)
                 return;
@@ -47,10 +46,12 @@ static void bond_glean_dev_ipv6(struct net_device *dev, struct in6_addr *addr)
                 return;
 
         read_lock_bh(&idev->lock);
-        ifa = idev->addr_list;
-        if (ifa)
+        if (!list_empty(&idev->addr_list)) {
+                struct inet6_ifaddr *ifa
+                        = list_first_entry(&idev->addr_list,
+                                           struct inet6_ifaddr, if_list);
                 ipv6_addr_copy(addr, &ifa->addr);
-        else
+        } else
                 ipv6_addr_set(addr, 0, 0, 0, 0);
 
         read_unlock_bh(&idev->lock);
diff --git a/drivers/net/bonding/bond_main.c b/drivers/net/bonding/bond_main.c
index 0075514bf32f..85e813c7762b 100644
--- a/drivers/net/bonding/bond_main.c
+++ b/drivers/net/bonding/bond_main.c
@@ -762,32 +762,6 @@ static int bond_check_dev_link(struct bonding *bond,
 /*----------------------------- Multicast list ------------------------------*/
 
 /*
- * Returns 0 if dmi1 and dmi2 are the same, non-0 otherwise
- */
-static inline int bond_is_dmi_same(const struct dev_mc_list *dmi1,
-                                   const struct dev_mc_list *dmi2)
-{
-        return memcmp(dmi1->dmi_addr, dmi2->dmi_addr, dmi1->dmi_addrlen) == 0 &&
-                        dmi1->dmi_addrlen == dmi2->dmi_addrlen;
-}
-
-/*
- * returns dmi entry if found, NULL otherwise
- */
-static struct dev_mc_list *bond_mc_list_find_dmi(struct dev_mc_list *dmi,
-                                                 struct dev_mc_list *mc_list)
-{
-        struct dev_mc_list *idmi;
-
-        for (idmi = mc_list; idmi; idmi = idmi->next) {
-                if (bond_is_dmi_same(dmi, idmi))
-                        return idmi;
-        }
-
-        return NULL;
-}
-
-/*
  * Push the promiscuity flag down to appropriate slaves
  */
 static int bond_set_promiscuity(struct bonding *bond, int inc)
@@ -839,18 +813,18 @@ static int bond_set_allmulti(struct bonding *bond, int inc)
  * Add a Multicast address to slaves
  * according to mode
  */
-static void bond_mc_add(struct bonding *bond, void *addr, int alen)
+static void bond_mc_add(struct bonding *bond, void *addr)
 {
         if (USES_PRIMARY(bond->params.mode)) {
                 /* write lock already acquired */
                 if (bond->curr_active_slave)
-                        dev_mc_add(bond->curr_active_slave->dev, addr, alen, 0);
+                        dev_mc_add(bond->curr_active_slave->dev, addr);
         } else {
                 struct slave *slave;
                 int i;
 
                 bond_for_each_slave(bond, slave, i)
-                        dev_mc_add(slave->dev, addr, alen, 0);
+                        dev_mc_add(slave->dev, addr);
         }
 }
 
@@ -858,18 +832,17 @@ static void bond_mc_add(struct bonding *bond, void *addr, int alen)
  * Remove a multicast address from slave
  * according to mode
  */
-static void bond_mc_delete(struct bonding *bond, void *addr, int alen)
+static void bond_mc_del(struct bonding *bond, void *addr)
 {
         if (USES_PRIMARY(bond->params.mode)) {
                 /* write lock already acquired */
                 if (bond->curr_active_slave)
-                        dev_mc_delete(bond->curr_active_slave->dev, addr,
-                                      alen, 0);
+                        dev_mc_del(bond->curr_active_slave->dev, addr);
         } else {
                 struct slave *slave;
                 int i;
                 bond_for_each_slave(bond, slave, i) {
-                        dev_mc_delete(slave->dev, addr, alen, 0);
+                        dev_mc_del(slave->dev, addr);
                 }
         }
 }
@@ -896,66 +869,22 @@ static void bond_resend_igmp_join_requests(struct bonding *bond)
 }
 
 /*
- * Totally destroys the mc_list in bond
- */
-static void bond_mc_list_destroy(struct bonding *bond)
-{
-        struct dev_mc_list *dmi;
-
-        dmi = bond->mc_list;
-        while (dmi) {
-                bond->mc_list = dmi->next;
-                kfree(dmi);
-                dmi = bond->mc_list;
-        }
-
-        bond->mc_list = NULL;
-}
-
-/*
- * Copy all the Multicast addresses from src to the bonding device dst
- */
-static int bond_mc_list_copy(struct dev_mc_list *mc_list, struct bonding *bond,
-                             gfp_t gfp_flag)
-{
-        struct dev_mc_list *dmi, *new_dmi;
-
-        for (dmi = mc_list; dmi; dmi = dmi->next) {
-                new_dmi = kmalloc(sizeof(struct dev_mc_list), gfp_flag);
-
-                if (!new_dmi) {
-                        /* FIXME: Potential memory leak !!! */
-                        return -ENOMEM;
-                }
-
-                new_dmi->next = bond->mc_list;
-                bond->mc_list = new_dmi;
-                new_dmi->dmi_addrlen = dmi->dmi_addrlen;
-                memcpy(new_dmi->dmi_addr, dmi->dmi_addr, dmi->dmi_addrlen);
-                new_dmi->dmi_users = dmi->dmi_users;
-                new_dmi->dmi_gusers = dmi->dmi_gusers;
-        }
-
-        return 0;
-}
-
-/*
  * flush all members of flush->mc_list from device dev->mc_list
  */
 static void bond_mc_list_flush(struct net_device *bond_dev,
                                struct net_device *slave_dev)
 {
         struct bonding *bond = netdev_priv(bond_dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
-        for (dmi = bond_dev->mc_list; dmi; dmi = dmi->next)
-                dev_mc_delete(slave_dev, dmi->dmi_addr, dmi->dmi_addrlen, 0);
+        netdev_for_each_mc_addr(ha, bond_dev)
+                dev_mc_del(slave_dev, ha->addr);
 
         if (bond->params.mode == BOND_MODE_8023AD) {
                 /* del lacpdu mc addr from mc list */
                 u8 lacpdu_multicast[ETH_ALEN] = MULTICAST_LACPDU_ADDR;
 
-                dev_mc_delete(slave_dev, lacpdu_multicast, ETH_ALEN, 0);
+                dev_mc_del(slave_dev, lacpdu_multicast);
         }
 }
 
@@ -969,7 +898,7 @@ static void bond_mc_list_flush(struct net_device *bond_dev,
 static void bond_mc_swap(struct bonding *bond, struct slave *new_active,
                          struct slave *old_active)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
         if (!USES_PRIMARY(bond->params.mode))
                 /* nothing to do -  mc list is already up-to-date on
@@ -984,9 +913,8 @@ static void bond_mc_swap(struct bonding *bond, struct slave *new_active,
                 if (bond->dev->flags & IFF_ALLMULTI)
                         dev_set_allmulti(old_active->dev, -1);
 
-                for (dmi = bond->dev->mc_list; dmi; dmi = dmi->next)
-                        dev_mc_delete(old_active->dev, dmi->dmi_addr,
-                                      dmi->dmi_addrlen, 0);
+                netdev_for_each_mc_addr(ha, bond->dev)
+                        dev_mc_del(old_active->dev, ha->addr);
         }
 
         if (new_active) {
@@ -997,9 +925,8 @@ static void bond_mc_swap(struct bonding *bond, struct slave *new_active,
                 if (bond->dev->flags & IFF_ALLMULTI)
                         dev_set_allmulti(new_active->dev, 1);
 
-                for (dmi = bond->dev->mc_list; dmi; dmi = dmi->next)
-                        dev_mc_add(new_active->dev, dmi->dmi_addr,
-                                   dmi->dmi_addrlen, 0);
+                netdev_for_each_mc_addr(ha, bond->dev)
+                        dev_mc_add(new_active->dev, ha->addr);
                 bond_resend_igmp_join_requests(bond);
         }
 }
@@ -1411,7 +1338,7 @@ int bond_enslave(struct net_device *bond_dev, struct net_device *slave_dev)
         struct bonding *bond = netdev_priv(bond_dev);
         const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
         struct slave *new_slave = NULL;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         struct sockaddr addr;
         int link_reporting;
         int old_features = bond_dev->features;
@@ -1485,14 +1412,27 @@ int bond_enslave(struct net_device *bond_dev, struct net_device *slave_dev)
                                  bond_dev->name,
                                  bond_dev->type, slave_dev->type);
 
-                        netdev_bonding_change(bond_dev, NETDEV_BONDING_OLDTYPE);
+                        res = netdev_bonding_change(bond_dev,
+                                                    NETDEV_PRE_TYPE_CHANGE);
+                        res = notifier_to_errno(res);
+                        if (res) {
+                                pr_err("%s: refused to change device type\n",
+                                       bond_dev->name);
+                                res = -EBUSY;
+                                goto err_undo_flags;
+                        }
+
+                        /* Flush unicast and multicast addresses */
+                        dev_uc_flush(bond_dev);
+                        dev_mc_flush(bond_dev);
 
                         if (slave_dev->type != ARPHRD_ETHER)
                                 bond_setup_by_slave(bond_dev, slave_dev);
                         else
                                 ether_setup(bond_dev);
 
-                        netdev_bonding_change(bond_dev, NETDEV_BONDING_NEWTYPE);
+                        netdev_bonding_change(bond_dev,
+                                              NETDEV_POST_TYPE_CHANGE);
                 }
         } else if (bond_dev->type != slave_dev->type) {
                 pr_err("%s ether type (%d) is different from other slaves (%d), can not enslave it.\n",
@@ -1593,9 +1533,8 @@ int bond_enslave(struct net_device *bond_dev, struct net_device *slave_dev)
 
                 netif_addr_lock_bh(bond_dev);
                 /* upload master's mc_list to new slave */
-                for (dmi = bond_dev->mc_list; dmi; dmi = dmi->next)
-                        dev_mc_add(slave_dev, dmi->dmi_addr,
-                                   dmi->dmi_addrlen, 0);
+                netdev_for_each_mc_addr(ha, bond_dev)
+                        dev_mc_add(slave_dev, ha->addr);
                 netif_addr_unlock_bh(bond_dev);
         }
 
@@ -1603,7 +1542,7 @@ int bond_enslave(struct net_device *bond_dev, struct net_device *slave_dev)
                 /* add lacpdu mc addr to mc list */
                 u8 lacpdu_multicast[ETH_ALEN] = MULTICAST_LACPDU_ADDR;
 
-                dev_mc_add(slave_dev, lacpdu_multicast, ETH_ALEN, 0);
+                dev_mc_add(slave_dev, lacpdu_multicast);
         }
 
         bond_add_vlans_on_slave(bond, slave_dev);
@@ -3905,10 +3844,24 @@ static int bond_do_ioctl(struct net_device *bond_dev, struct ifreq *ifr, int cmd
         return res;
 }
 
+static bool bond_addr_in_mc_list(unsigned char *addr,
+                                 struct netdev_hw_addr_list *list,
+                                 int addrlen)
+{
+        struct netdev_hw_addr *ha;
+
+        netdev_hw_addr_list_for_each(ha, list)
+                if (!memcmp(ha->addr, addr, addrlen))
+                        return true;
+
+        return false;
+}
+
 static void bond_set_multicast_list(struct net_device *bond_dev)
 {
         struct bonding *bond = netdev_priv(bond_dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
+        bool found;
 
         /*
          * Do promisc before checking multicast_mode
@@ -3943,20 +3896,25 @@ static void bond_set_multicast_list(struct net_device *bond_dev)
         bond->flags = bond_dev->flags;
 
         /* looking for addresses to add to slaves' mc list */
-        for (dmi = bond_dev->mc_list; dmi; dmi = dmi->next) {
-                if (!bond_mc_list_find_dmi(dmi, bond->mc_list))
-                        bond_mc_add(bond, dmi->dmi_addr, dmi->dmi_addrlen);
+        netdev_for_each_mc_addr(ha, bond_dev) {
+                found = bond_addr_in_mc_list(ha->addr, &bond->mc_list,
+                                             bond_dev->addr_len);
+                if (!found)
+                        bond_mc_add(bond, ha->addr);
         }
 
         /* looking for addresses to delete from slaves' list */
-        for (dmi = bond->mc_list; dmi; dmi = dmi->next) {
-                if (!bond_mc_list_find_dmi(dmi, bond_dev->mc_list))
-                        bond_mc_delete(bond, dmi->dmi_addr, dmi->dmi_addrlen);
+        netdev_hw_addr_list_for_each(ha, &bond->mc_list) {
+                found = bond_addr_in_mc_list(ha->addr, &bond_dev->mc,
+                                             bond_dev->addr_len);
+                if (!found)
+                        bond_mc_del(bond, ha->addr);
         }
 
         /* save master's multicast list */
-        bond_mc_list_destroy(bond);
-        bond_mc_list_copy(bond_dev->mc_list, bond, GFP_ATOMIC);
+        __hw_addr_flush(&bond->mc_list);
+        __hw_addr_add_multiple(&bond->mc_list, &bond_dev->mc,
+                               bond_dev->addr_len, NETDEV_HW_ADDR_T_MULTICAST);
 
         read_unlock(&bond->lock);
 }
@@ -4550,9 +4508,7 @@ static void bond_uninit(struct net_device *bond_dev)
 
         bond_remove_proc_entry(bond);
 
-        netif_addr_lock_bh(bond_dev);
-        bond_mc_list_destroy(bond);
-        netif_addr_unlock_bh(bond_dev);
+        __hw_addr_flush(&bond->mc_list);
 }
 
 /*------------------------- Module initialization ---------------------------*/
@@ -4683,13 +4639,13 @@ static int bond_check_params(struct bond_params *params)
         }
 
         if (num_grat_arp < 0 || num_grat_arp > 255) {
-                pr_warning("Warning: num_grat_arp (%d) not in range 0-255 so it was reset to 1 \n",
+                pr_warning("Warning: num_grat_arp (%d) not in range 0-255 so it was reset to 1\n",
                            num_grat_arp);
                 num_grat_arp = 1;
         }
 
         if (num_unsol_na < 0 || num_unsol_na > 255) {
-                pr_warning("Warning: num_unsol_na (%d) not in range 0-255 so it was reset to 1 \n",
+                pr_warning("Warning: num_unsol_na (%d) not in range 0-255 so it was reset to 1\n",
                            num_unsol_na);
                 num_unsol_na = 1;
         }
@@ -4924,6 +4880,8 @@ static int bond_init(struct net_device *bond_dev)
         list_add_tail(&bond->bond_list, &bn->dev_list);
 
         bond_prepare_sysfs_group(bond);
+
+        __hw_addr_init(&bond->mc_list);
         return 0;
 }
 
diff --git a/drivers/net/bonding/bonding.h b/drivers/net/bonding/bonding.h
index 257a7a4dfce9..2aa336720591 100644
--- a/drivers/net/bonding/bonding.h
+++ b/drivers/net/bonding/bonding.h
@@ -202,7 +202,7 @@ struct bonding {
         char     proc_file_name[IFNAMSIZ];
 #endif /* CONFIG_PROC_FS */
         struct   list_head bond_list;
-        struct   dev_mc_list *mc_list;
+        struct   netdev_hw_addr_list mc_list;
         int      (*xmit_hash_policy)(struct sk_buff *, int);
         __be32   master_ip;
         u16      flags;
diff --git a/drivers/net/caif/Kconfig b/drivers/net/caif/Kconfig
new file mode 100644
index 000000000000..0b28e0107697
--- /dev/null
+++ b/drivers/net/caif/Kconfig
@@ -0,0 +1,17 @@
+#
+# CAIF physical drivers
+#
+
+if CAIF
+
+comment "CAIF transport drivers"
+
+config CAIF_TTY
+        tristate "CAIF TTY transport driver"
+        default n
+        ---help---
+        The CAIF TTY transport driver is a Line Discipline (ldisc)
+        identified as N_CAIF. When this ldisc is opened from user space
+        it will redirect the TTY's traffic into the CAIF stack.
+
+endif # CAIF
diff --git a/drivers/net/caif/Makefile b/drivers/net/caif/Makefile
new file mode 100644
index 000000000000..52b6d1f826f8
--- /dev/null
+++ b/drivers/net/caif/Makefile
@@ -0,0 +1,12 @@
+ifeq ($(CONFIG_CAIF_DEBUG),1)
+CAIF_DBG_FLAGS := -DDEBUG
+endif
+
+KBUILD_EXTRA_SYMBOLS=net/caif/Module.symvers
+
+ccflags-y := $(CAIF_FLAGS) $(CAIF_DBG_FLAGS)
+clean-dirs:= .tmp_versions
+clean-files:= Module.symvers modules.order *.cmd *~ \
+
+# Serial interface
+obj-$(CONFIG_CAIF_TTY) += caif_serial.o
diff --git a/drivers/net/caif/caif_serial.c b/drivers/net/caif/caif_serial.c
new file mode 100644
index 000000000000..3502f607117f
--- /dev/null
+++ b/drivers/net/caif/caif_serial.c
@@ -0,0 +1,441 @@
+/*
+ * Copyright (C) ST-Ericsson AB 2010
+ * Author:      Sjur Brendeland / sjur.brandeland@stericsson.com
+ * License terms: GNU General Public License (GPL) version 2
+ */
+
+#include <linux/init.h>
+#include <linux/version.h>
+#include <linux/module.h>
+#include <linux/device.h>
+#include <linux/types.h>
+#include <linux/skbuff.h>
+#include <linux/netdevice.h>
+#include <linux/rtnetlink.h>
+#include <linux/tty.h>
+#include <linux/file.h>
+#include <linux/if_arp.h>
+#include <net/caif/caif_device.h>
+#include <net/caif/cfcnfg.h>
+#include <linux/err.h>
+#include <linux/debugfs.h>
+
+MODULE_LICENSE("GPL");
+MODULE_AUTHOR("Sjur Brendeland<sjur.brandeland@stericsson.com>");
+MODULE_DESCRIPTION("CAIF serial device TTY line discipline");
+MODULE_LICENSE("GPL");
+MODULE_ALIAS_LDISC(N_CAIF);
+
+#define SEND_QUEUE_LOW 10
+#define SEND_QUEUE_HIGH 100
+#define CAIF_SENDING            1 /* Bit 1 = 0x02*/
+#define CAIF_FLOW_OFF_SENT      4 /* Bit 4 = 0x10 */
+#define MAX_WRITE_CHUNK      4096
+#define ON 1
+#define OFF 0
+#define CAIF_MAX_MTU 4096
+
+/*This list is protected by the rtnl lock. */
+static LIST_HEAD(ser_list);
+
+static int ser_loop;
+module_param(ser_loop, bool, S_IRUGO);
+MODULE_PARM_DESC(ser_loop, "Run in simulated loopback mode.");
+
+static int ser_use_stx = 1;
+module_param(ser_use_stx, bool, S_IRUGO);
+MODULE_PARM_DESC(ser_use_stx, "STX enabled or not.");
+
+static int ser_use_fcs = 1;
+
+module_param(ser_use_fcs, bool, S_IRUGO);
+MODULE_PARM_DESC(ser_use_fcs, "FCS enabled or not.");
+
+static int ser_write_chunk = MAX_WRITE_CHUNK;
+module_param(ser_write_chunk, int, S_IRUGO);
+
+MODULE_PARM_DESC(ser_write_chunk, "Maximum size of data written to UART.");
+
+static struct dentry *debugfsdir;
+
+static int caif_net_open(struct net_device *dev);
+static int caif_net_close(struct net_device *dev);
+
+struct ser_device {
+        struct caif_dev_common common;
+        struct list_head node;
+        struct net_device *dev;
+        struct sk_buff_head head;
+        struct tty_struct *tty;
+        bool tx_started;
+        unsigned long state;
+        char *tty_name;
+#ifdef CONFIG_DEBUG_FS
+        struct dentry *debugfs_tty_dir;
+        struct debugfs_blob_wrapper tx_blob;
+        struct debugfs_blob_wrapper rx_blob;
+        u8 rx_data[128];
+        u8 tx_data[128];
+        u8 tty_status;
+
+#endif
+};
+
+static void caifdev_setup(struct net_device *dev);
+static void ldisc_tx_wakeup(struct tty_struct *tty);
+#ifdef CONFIG_DEBUG_FS
+static inline void update_tty_status(struct ser_device *ser)
+{
+        ser->tty_status =
+                ser->tty->stopped << 5 |
+                ser->tty->hw_stopped << 4 |
+                ser->tty->flow_stopped << 3 |
+                ser->tty->packet << 2 |
+                ser->tty->low_latency << 1 |
+                ser->tty->warned;
+}
+static inline void debugfs_init(struct ser_device *ser, struct tty_struct *tty)
+{
+        ser->debugfs_tty_dir =
+                        debugfs_create_dir(tty->name, debugfsdir);
+        if (!IS_ERR(ser->debugfs_tty_dir)) {
+                debugfs_create_blob("last_tx_msg", S_IRUSR,
+                                ser->debugfs_tty_dir,
+                                &ser->tx_blob);
+
+                debugfs_create_blob("last_rx_msg", S_IRUSR,
+                                ser->debugfs_tty_dir,
+                                &ser->rx_blob);
+
+                debugfs_create_x32("ser_state", S_IRUSR,
+                                ser->debugfs_tty_dir,
+                                (u32 *)&ser->state);
+
+                debugfs_create_x8("tty_status", S_IRUSR,
+                                ser->debugfs_tty_dir,
+                                &ser->tty_status);
+
+        }
+        ser->tx_blob.data = ser->tx_data;
+        ser->tx_blob.size = 0;
+        ser->rx_blob.data = ser->rx_data;
+        ser->rx_blob.size = 0;
+}
+
+static inline void debugfs_deinit(struct ser_device *ser)
+{
+        debugfs_remove_recursive(ser->debugfs_tty_dir);
+}
+
+static inline void debugfs_rx(struct ser_device *ser, const u8 *data, int size)
+{
+        if (size > sizeof(ser->rx_data))
+                size = sizeof(ser->rx_data);
+        memcpy(ser->rx_data, data, size);
+        ser->rx_blob.data = ser->rx_data;
+        ser->rx_blob.size = size;
+}
+
+static inline void debugfs_tx(struct ser_device *ser, const u8 *data, int size)
+{
+        if (size > sizeof(ser->tx_data))
+                size = sizeof(ser->tx_data);
+        memcpy(ser->tx_data, data, size);
+        ser->tx_blob.data = ser->tx_data;
+        ser->tx_blob.size = size;
+}
+#else
+static inline void debugfs_init(struct ser_device *ser, struct tty_struct *tty)
+{
+}
+
+static inline void debugfs_deinit(struct ser_device *ser)
+{
+}
+
+static inline void update_tty_status(struct ser_device *ser)
+{
+}
+
+static inline void debugfs_rx(struct ser_device *ser, const u8 *data, int size)
+{
+}
+
+static inline void debugfs_tx(struct ser_device *ser, const u8 *data, int size)
+{
+}
+
+#endif
+
+static void ldisc_receive(struct tty_struct *tty, const u8 *data,
+                        char *flags, int count)
+{
+        struct sk_buff *skb = NULL;
+        struct ser_device *ser;
+        int ret;
+        u8 *p;
+        ser = tty->disc_data;
+
+        /*
+         * NOTE: flags may contain information about break or overrun.
+         * This is not yet handled.
+         */
+
+
+        /*
+         * Workaround for garbage at start of transmission,
+         * only enable if STX handling is not enabled.
+         */
+        if (!ser->common.use_stx && !ser->tx_started) {
+                dev_info(&ser->dev->dev,
+                        "Bytes received before initial transmission -"
+                        "bytes discarded.\n");
+                return;
+        }
+
+        BUG_ON(ser->dev == NULL);
+
+        /* Get a suitable caif packet and copy in data. */
+        skb = netdev_alloc_skb(ser->dev, count+1);
+        BUG_ON(skb == NULL);
+        p = skb_put(skb, count);
+        memcpy(p, data, count);
+
+        skb->protocol = htons(ETH_P_CAIF);
+        skb_reset_mac_header(skb);
+        skb->dev = ser->dev;
+        debugfs_rx(ser, data, count);
+        /* Push received packet up the stack. */
+        ret = netif_rx_ni(skb);
+        if (!ret) {
+                ser->dev->stats.rx_packets++;
+                ser->dev->stats.rx_bytes += count;
+        } else
+                ++ser->dev->stats.rx_dropped;
+        update_tty_status(ser);
+}
+
+static int handle_tx(struct ser_device *ser)
+{
+        struct tty_struct *tty;
+        struct sk_buff *skb;
+        int tty_wr, len, room;
+        tty = ser->tty;
+        ser->tx_started = true;
+
+        /* Enter critical section */
+        if (test_and_set_bit(CAIF_SENDING, &ser->state))
+                return 0;
+
+        /* skb_peek is safe because handle_tx is called after skb_queue_tail */
+        while ((skb = skb_peek(&ser->head)) != NULL) {
+
+                /* Make sure you don't write too much */
+                len = skb->len;
+                room = tty_write_room(tty);
+                if (!room)
+                        break;
+                if (room > ser_write_chunk)
+                        room = ser_write_chunk;
+                if (len > room)
+                        len = room;
+
+                /* Write to tty or loopback */
+                if (!ser_loop) {
+                        tty_wr = tty->ops->write(tty, skb->data, len);
+                        update_tty_status(ser);
+                } else {
+                        tty_wr = len;
+                        ldisc_receive(tty, skb->data, NULL, len);
+                }
+                ser->dev->stats.tx_packets++;
+                ser->dev->stats.tx_bytes += tty_wr;
+
+                /* Error on TTY ?! */
+                if (tty_wr < 0)
+                        goto error;
+                /* Reduce buffer written, and discard if empty */
+                skb_pull(skb, tty_wr);
+                if (skb->len == 0) {
+                        struct sk_buff *tmp = skb_dequeue(&ser->head);
+                        BUG_ON(tmp != skb);
+                        if (in_interrupt())
+                                dev_kfree_skb_irq(skb);
+                        else
+                                kfree_skb(skb);
+                }
+        }
+        /* Send flow off if queue is empty */
+        if (ser->head.qlen <= SEND_QUEUE_LOW &&
+                test_and_clear_bit(CAIF_FLOW_OFF_SENT, &ser->state) &&
+                ser->common.flowctrl != NULL)
+                                ser->common.flowctrl(ser->dev, ON);
+        clear_bit(CAIF_SENDING, &ser->state);
+        return 0;
+error:
+        clear_bit(CAIF_SENDING, &ser->state);
+        return tty_wr;
+}
+
+static int caif_xmit(struct sk_buff *skb, struct net_device *dev)
+{
+        struct ser_device *ser;
+        BUG_ON(dev == NULL);
+        ser = netdev_priv(dev);
+
+        /* Send flow off once, on high water mark */
+        if (ser->head.qlen > SEND_QUEUE_HIGH &&
+                !test_and_set_bit(CAIF_FLOW_OFF_SENT, &ser->state) &&
+                ser->common.flowctrl != NULL)
+
+                ser->common.flowctrl(ser->dev, OFF);
+
+        skb_queue_tail(&ser->head, skb);
+        return handle_tx(ser);
+}
+
+
+static void ldisc_tx_wakeup(struct tty_struct *tty)
+{
+        struct ser_device *ser;
+        ser = tty->disc_data;
+        BUG_ON(ser == NULL);
+        BUG_ON(ser->tty != tty);
+        handle_tx(ser);
+}
+
+
+static int ldisc_open(struct tty_struct *tty)
+{
+        struct ser_device *ser;
+        struct net_device *dev;
+        char name[64];
+        int result;
+
+        sprintf(name, "cf%s", tty->name);
+        dev = alloc_netdev(sizeof(*ser), name, caifdev_setup);
+        ser = netdev_priv(dev);
+        ser->tty = tty;
+        ser->dev = dev;
+        debugfs_init(ser, tty);
+        tty->receive_room = N_TTY_BUF_SIZE;
+        tty->disc_data = ser;
+        set_bit(TTY_DO_WRITE_WAKEUP, &tty->flags);
+        rtnl_lock();
+        result = register_netdevice(dev);
+        if (result) {
+                rtnl_unlock();
+                free_netdev(dev);
+                return -ENODEV;
+        }
+
+        list_add(&ser->node, &ser_list);
+        rtnl_unlock();
+        netif_stop_queue(dev);
+        update_tty_status(ser);
+        return 0;
+}
+
+static void ldisc_close(struct tty_struct *tty)
+{
+        struct ser_device *ser = tty->disc_data;
+        /* Remove may be called inside or outside of rtnl_lock */
+        int islocked = rtnl_is_locked();
+        if (!islocked)
+                rtnl_lock();
+        /* device is freed automagically by net-sysfs */
+        dev_close(ser->dev);
+        unregister_netdevice(ser->dev);
+        list_del(&ser->node);
+        debugfs_deinit(ser);
+        if (!islocked)
+                rtnl_unlock();
+}
+
+/* The line discipline structure. */
+static struct tty_ldisc_ops caif_ldisc = {
+        .owner =        THIS_MODULE,
+        .magic =        TTY_LDISC_MAGIC,
+        .name =         "n_caif",
+        .open =         ldisc_open,
+        .close =        ldisc_close,
+        .receive_buf =  ldisc_receive,
+        .write_wakeup = ldisc_tx_wakeup
+};
+
+static int register_ldisc(void)
+{
+        int result;
+        result = tty_register_ldisc(N_CAIF, &caif_ldisc);
+        if (result < 0) {
+                pr_err("cannot register CAIF ldisc=%d err=%d\n", N_CAIF,
+                        result);
+                return result;
+        }
+        return result;
+}
+static const struct net_device_ops netdev_ops = {
+        .ndo_open = caif_net_open,
+        .ndo_stop = caif_net_close,
+        .ndo_start_xmit = caif_xmit
+};
+
+static void caifdev_setup(struct net_device *dev)
+{
+        struct ser_device *serdev = netdev_priv(dev);
+        dev->features = 0;
+        dev->netdev_ops = &netdev_ops;
+        dev->type = ARPHRD_CAIF;
+        dev->flags = IFF_POINTOPOINT | IFF_NOARP;
+        dev->mtu = CAIF_MAX_MTU;
+        dev->hard_header_len = CAIF_NEEDED_HEADROOM;
+        dev->tx_queue_len = 0;
+        dev->destructor = free_netdev;
+        skb_queue_head_init(&serdev->head);
+        serdev->common.link_select = CAIF_LINK_LOW_LATENCY;
+        serdev->common.use_frag = true;
+        serdev->common.use_stx = ser_use_stx;
+        serdev->common.use_fcs = ser_use_fcs;
+        serdev->dev = dev;
+}
+
+
+static int caif_net_open(struct net_device *dev)
+{
+        struct ser_device *ser;
+        ser = netdev_priv(dev);
+        netif_wake_queue(dev);
+        return 0;
+}
+
+static int caif_net_close(struct net_device *dev)
+{
+        netif_stop_queue(dev);
+        return 0;
+}
+
+static int __init caif_ser_init(void)
+{
+        int ret;
+        ret = register_ldisc();
+        debugfsdir = debugfs_create_dir("caif_serial", NULL);
+        return ret;
+}
+
+static void __exit caif_ser_exit(void)
+{
+        struct ser_device *ser = NULL;
+        struct list_head *node;
+        struct list_head *_tmp;
+        list_for_each_safe(node, _tmp, &ser_list) {
+                ser = list_entry(node, struct ser_device, node);
+                dev_close(ser->dev);
+                unregister_netdevice(ser->dev);
+                list_del(node);
+        }
+        tty_unregister_ldisc(N_CAIF);
+        debugfs_remove_recursive(debugfsdir);
+}
+
+module_init(caif_ser_init);
+module_exit(caif_ser_exit);
diff --git a/drivers/net/can/mcp251x.c b/drivers/net/can/mcp251x.c
index f8cc168ec76c..f521579f5adb 100644
--- a/drivers/net/can/mcp251x.c
+++ b/drivers/net/can/mcp251x.c
@@ -922,12 +922,16 @@ static int __devinit mcp251x_can_probe(struct spi_device *spi)
         struct net_device *net;
         struct mcp251x_priv *priv;
         struct mcp251x_platform_data *pdata = spi->dev.platform_data;
+        int model = spi_get_device_id(spi)->driver_data;
         int ret = -ENODEV;
 
         if (!pdata)
                 /* Platform data is required for osc freq */
                 goto error_out;
 
+        if (model)
+                pdata->model = model;
+
         /* Allocate can/net device */
         net = alloc_candev(sizeof(struct mcp251x_priv), TX_ECHO_SKB_MAX);
         if (!net) {
@@ -1117,6 +1121,15 @@ static int mcp251x_can_resume(struct spi_device *spi)
 #define mcp251x_can_resume NULL
 #endif
 
+static struct spi_device_id mcp251x_id_table[] = {
+        { "mcp251x",    0 /* Use pdata.model */ },
+        { "mcp2510",    CAN_MCP251X_MCP2510 },
+        { "mcp2515",    CAN_MCP251X_MCP2515 },
+        { },
+};
+
+MODULE_DEVICE_TABLE(spi, mcp251x_id_table);
+
 static struct spi_driver mcp251x_can_driver = {
         .driver = {
                 .name = DEVICE_NAME,
@@ -1124,6 +1137,7 @@ static struct spi_driver mcp251x_can_driver = {
                 .owner = THIS_MODULE,
         },
 
+        .id_table = mcp251x_id_table,
         .probe = mcp251x_can_probe,
         .remove = __devexit_p(mcp251x_can_remove),
         .suspend = mcp251x_can_suspend,
diff --git a/drivers/net/can/sja1000/sja1000_platform.c b/drivers/net/can/sja1000/sja1000_platform.c
index 628374c2a05f..1083b42ab6cb 100644
--- a/drivers/net/can/sja1000/sja1000_platform.c
+++ b/drivers/net/can/sja1000/sja1000_platform.c
@@ -37,16 +37,36 @@ MODULE_AUTHOR("Sascha Hauer <s.hauer@pengutronix.de>");
 MODULE_DESCRIPTION("Socket-CAN driver for SJA1000 on the platform bus");
 MODULE_LICENSE("GPL v2");
 
-static u8 sp_read_reg(const struct sja1000_priv *priv, int reg)
+static u8 sp_read_reg8(const struct sja1000_priv *priv, int reg)
 {
         return ioread8(priv->reg_base + reg);
 }
 
-static void sp_write_reg(const struct sja1000_priv *priv, int reg, u8 val)
+static void sp_write_reg8(const struct sja1000_priv *priv, int reg, u8 val)
 {
         iowrite8(val, priv->reg_base + reg);
 }
 
+static u8 sp_read_reg16(const struct sja1000_priv *priv, int reg)
+{
+        return ioread8(priv->reg_base + reg * 2);
+}
+
+static void sp_write_reg16(const struct sja1000_priv *priv, int reg, u8 val)
+{
+        iowrite8(val, priv->reg_base + reg * 2);
+}
+
+static u8 sp_read_reg32(const struct sja1000_priv *priv, int reg)
+{
+        return ioread8(priv->reg_base + reg * 4);
+}
+
+static void sp_write_reg32(const struct sja1000_priv *priv, int reg, u8 val)
+{
+        iowrite8(val, priv->reg_base + reg * 4);
+}
+
 static int sp_probe(struct platform_device *pdev)
 {
         int err;
@@ -90,14 +110,28 @@ static int sp_probe(struct platform_device *pdev)
         priv = netdev_priv(dev);
 
         dev->irq = res_irq->start;
-        priv->irq_flags = res_irq->flags & IRQF_TRIGGER_MASK;
+        priv->irq_flags = res_irq->flags & (IRQF_TRIGGER_MASK | IRQF_SHARED);
         priv->reg_base = addr;
-        priv->read_reg = sp_read_reg;
-        priv->write_reg = sp_write_reg;
         priv->can.clock.freq = pdata->clock;
         priv->ocr = pdata->ocr;
         priv->cdr = pdata->cdr;
 
+        switch (res_mem->flags & IORESOURCE_MEM_TYPE_MASK) {
+        case IORESOURCE_MEM_32BIT:
+                priv->read_reg = sp_read_reg32;
+                priv->write_reg = sp_write_reg32;
+                break;
+        case IORESOURCE_MEM_16BIT:
+                priv->read_reg = sp_read_reg16;
+                priv->write_reg = sp_write_reg16;
+                break;
+        case IORESOURCE_MEM_8BIT:
+        default:
+                priv->read_reg = sp_read_reg8;
+                priv->write_reg = sp_write_reg8;
+                break;
+        }
+
         dev_set_drvdata(&pdev->dev, dev);
         SET_NETDEV_DEV(dev, &pdev->dev);
 
diff --git a/drivers/net/cassini.c b/drivers/net/cassini.c
index 9bd155e4111c..bd857a20a755 100644
--- a/drivers/net/cassini.c
+++ b/drivers/net/cassini.c
@@ -2957,20 +2957,20 @@ static void cas_process_mc_list(struct cas *cp)
 {
         u16 hash_table[16];
         u32 crc;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int i = 1;
 
         memset(hash_table, 0, sizeof(hash_table));
-        netdev_for_each_mc_addr(dmi, cp->dev) {
+        netdev_for_each_mc_addr(ha, cp->dev) {
                 if (i <= CAS_MC_EXACT_MATCH_SIZE) {
                         /* use the alternate mac address registers for the
                          * first 15 multicast addresses
                          */
-                        writel((dmi->dmi_addr[4] << 8) | dmi->dmi_addr[5],
+                        writel((ha->addr[4] << 8) | ha->addr[5],
                                cp->regs + REG_MAC_ADDRN(i*3 + 0));
-                        writel((dmi->dmi_addr[2] << 8) | dmi->dmi_addr[3],
+                        writel((ha->addr[2] << 8) | ha->addr[3],
                                cp->regs + REG_MAC_ADDRN(i*3 + 1));
-                        writel((dmi->dmi_addr[0] << 8) | dmi->dmi_addr[1],
+                        writel((ha->addr[0] << 8) | ha->addr[1],
                                cp->regs + REG_MAC_ADDRN(i*3 + 2));
                         i++;
                 }
@@ -2978,7 +2978,7 @@ static void cas_process_mc_list(struct cas *cp)
                         /* use hw hash table for the next series of
                          * multicast addresses
                          */
-                        crc = ether_crc_le(ETH_ALEN, dmi->dmi_addr);
+                        crc = ether_crc_le(ETH_ALEN, ha->addr);
                         crc >>= 24;
                         hash_table[crc >> 4] |= 1 << (15 - (crc & 0xf));
                 }
diff --git a/drivers/net/chelsio/pm3393.c b/drivers/net/chelsio/pm3393.c
index a6eb30a6e2b9..13fd9628db1d 100644
--- a/drivers/net/chelsio/pm3393.c
+++ b/drivers/net/chelsio/pm3393.c
@@ -376,12 +376,13 @@ static int pm3393_set_rx_mode(struct cmac *cmac, struct t1_rx_mode *rm)
                 rx_mode |= SUNI1x10GEXP_BITMSK_RXXG_MHASH_EN;
         } else if (t1_rx_mode_mc_cnt(rm)) {
                 /* Accept one or more multicast(s). */
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 int bit;
                 u16 mc_filter[4] = { 0, };
 
-                netdev_for_each_mc_addr(dmi, t1_get_netdev(rm)) {
-                        bit = (ether_crc(ETH_ALEN, dmi->dmi_addr) >> 23) & 0x3f; /* bit[23:28] */
+                netdev_for_each_mc_addr(ha, t1_get_netdev(rm)) {
+                        /* bit[23:28] */
+                        bit = (ether_crc(ETH_ALEN, ha->addr) >> 23) & 0x3f;
                         mc_filter[bit >> 4] |= 1 << (bit & 0xf);
                 }
                 pmwrite(cmac, SUNI1x10GEXP_REG_RXXG_MULTICAST_HASH_LOW, mc_filter[0]);
diff --git a/drivers/net/cpmac.c b/drivers/net/cpmac.c
index 60777fd90b33..bdfff784645c 100644
--- a/drivers/net/cpmac.c
+++ b/drivers/net/cpmac.c
@@ -328,7 +328,7 @@ static int cpmac_config(struct net_device *dev, struct ifmap *map)
 
 static void cpmac_set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *iter;
+        struct netdev_hw_addr *ha;
         u8 tmp;
         u32 mbp, bit, hash[2] = { 0, };
         struct cpmac_priv *priv = netdev_priv(dev);
@@ -348,19 +348,19 @@ static void cpmac_set_multicast_list(struct net_device *dev)
                          * cpmac uses some strange mac address hashing
                          * (not crc32)
                          */
-                        netdev_for_each_mc_addr(iter, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 bit = 0;
-                                tmp = iter->dmi_addr[0];
+                                tmp = ha->addr[0];
                                 bit  ^= (tmp >> 2) ^ (tmp << 4);
-                                tmp = iter->dmi_addr[1];
+                                tmp = ha->addr[1];
                                 bit  ^= (tmp >> 4) ^ (tmp << 2);
-                                tmp = iter->dmi_addr[2];
+                                tmp = ha->addr[2];
                                 bit  ^= (tmp >> 6) ^ tmp;
-                                tmp = iter->dmi_addr[3];
+                                tmp = ha->addr[3];
                                 bit  ^= (tmp >> 2) ^ (tmp << 4);
-                                tmp = iter->dmi_addr[4];
+                                tmp = ha->addr[4];
                                 bit  ^= (tmp >> 4) ^ (tmp << 2);
-                                tmp = iter->dmi_addr[5];
+                                tmp = ha->addr[5];
                                 bit  ^= (tmp >> 6) ^ tmp;
                                 bit &= 0x3f;
                                 hash[bit / 32] |= 1 << (bit % 32);
diff --git a/drivers/net/cris/eth_v10.c b/drivers/net/cris/eth_v10.c
index dd24aadb778c..59110bc119a8 100644
--- a/drivers/net/cris/eth_v10.c
+++ b/drivers/net/cris/eth_v10.c
@@ -1596,16 +1596,16 @@ set_multicast_list(struct net_device *dev)
         } else {
                 /* MC mode, receive normal and MC packets */
                 char hash_ix;
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 char *baddr;
 
                 lo_bits = 0x00000000ul;
                 hi_bits = 0x00000000ul;
-                netdev_for_each_mc_addr(dmi, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         /* Calculate the hash index for the GA registers */
 
                         hash_ix = 0;
-                        baddr = dmi->dmi_addr;
+                        baddr = ha->addr;
                         hash_ix ^= (*baddr) & 0x3f;
                         hash_ix ^= ((*baddr) >> 6) & 0x03;
                         ++baddr;
diff --git a/drivers/net/cxgb3/xgmac.c b/drivers/net/cxgb3/xgmac.c
index c142a2132e9f..3af19a550372 100644
--- a/drivers/net/cxgb3/xgmac.c
+++ b/drivers/net/cxgb3/xgmac.c
@@ -311,16 +311,16 @@ int t3_mac_set_rx_mode(struct cmac *mac, struct net_device *dev)
         if (dev->flags & IFF_ALLMULTI)
                 hash_lo = hash_hi = 0xffffffff;
         else {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 int exact_addr_idx = mac->nucast;
 
                 hash_lo = hash_hi = 0;
-                netdev_for_each_mc_addr(dmi, dev)
+                netdev_for_each_mc_addr(ha, dev)
                         if (exact_addr_idx < EXACT_ADDR_FILTERS)
                                 set_addr_filter(mac, exact_addr_idx++,
-                                                dmi->dmi_addr);
+                                                ha->addr);
                         else {
-                                int hash = hash_hw_addr(dmi->dmi_addr);
+                                int hash = hash_hw_addr(ha->addr);
 
                                 if (hash < 32)
                                         hash_lo |= (1 << hash);
diff --git a/drivers/net/cxgb4/cxgb4_main.c b/drivers/net/cxgb4/cxgb4_main.c
index a7e30a23d322..5f582dba928f 100644
--- a/drivers/net/cxgb4/cxgb4_main.c
+++ b/drivers/net/cxgb4/cxgb4_main.c
@@ -240,9 +240,9 @@ static int set_addr_filters(const struct net_device *dev, bool sleep)
         u16 filt_idx[7];
         const u8 *addr[7];
         int ret, naddr = 0;
-        const struct dev_addr_list *d;
         const struct netdev_hw_addr *ha;
         int uc_cnt = netdev_uc_count(dev);
+        int mc_cnt = netdev_mc_count(dev);
         const struct port_info *pi = netdev_priv(dev);
 
         /* first do the secondary unicast addresses */
@@ -260,9 +260,9 @@ static int set_addr_filters(const struct net_device *dev, bool sleep)
         }
 
         /* next set up the multicast addresses */
-        netdev_for_each_mc_addr(d, dev) {
-                addr[naddr++] = d->dmi_addr;
-                if (naddr >= ARRAY_SIZE(addr) || d->next == NULL) {
+        netdev_for_each_mc_addr(ha, dev) {
+                addr[naddr++] = ha->addr;
+                if (--mc_cnt == 0 || naddr >= ARRAY_SIZE(addr)) {
                         ret = t4_alloc_mac_filt(pi->adapter, 0, pi->viid, free,
                                         naddr, addr, filt_idx, &mhash, sleep);
                         if (ret < 0)
diff --git a/drivers/net/davinci_emac.c b/drivers/net/davinci_emac.c
index 2b8edd2efbf6..1f9df5c6a75a 100644
--- a/drivers/net/davinci_emac.c
+++ b/drivers/net/davinci_emac.c
@@ -952,13 +952,14 @@ static void emac_dev_mcast_set(struct net_device *ndev)
                         emac_add_mcast(priv, EMAC_ALL_MULTI_SET, NULL);
                 }
                 if (!netdev_mc_empty(ndev)) {
-                        struct dev_mc_list *mc_ptr;
+                        struct netdev_hw_addr *ha;
+
                         mbp_enable = (mbp_enable | EMAC_MBP_RXMCAST);
                         emac_add_mcast(priv, EMAC_ALL_MULTI_CLR, NULL);
                         /* program multicast address list into EMAC hardware */
-                        netdev_for_each_mc_addr(mc_ptr, ndev) {
+                        netdev_for_each_mc_addr(ha, ndev) {
                                 emac_add_mcast(priv, EMAC_MULTICAST_ADD,
-                                               (u8 *) mc_ptr->dmi_addr);
+                                               (u8 *) ha->addr);
                         }
                 } else {
                         mbp_enable = (mbp_enable & ~EMAC_MBP_RXMCAST);
diff --git a/drivers/net/declance.c b/drivers/net/declance.c
index 8cf3cc6f20e2..fb3f0984c289 100644
--- a/drivers/net/declance.c
+++ b/drivers/net/declance.c
@@ -940,7 +940,7 @@ static void lance_load_multicast(struct net_device *dev)
 {
         struct lance_private *lp = netdev_priv(dev);
         volatile u16 *ib = (volatile u16 *)dev->mem_start;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
 
@@ -959,8 +959,8 @@ static void lance_load_multicast(struct net_device *dev)
         *lib_ptr(ib, filter[3], lp->type) = 0;
 
         /* Add addresses */
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* multicast address? */
                 if (!(*addrs & 1))
diff --git a/drivers/net/defxx.c b/drivers/net/defxx.c
index ed53a8d45f4e..e5667c55844e 100644
--- a/drivers/net/defxx.c
+++ b/drivers/net/defxx.c
@@ -2195,7 +2195,7 @@ static void dfx_ctl_set_multicast_list(struct net_device *dev)
 {
         DFX_board_t *bp = netdev_priv(dev);
         int                                     i;                      /* used as index in for loop */
-        struct dev_mc_list      *dmi;           /* ptr to multicast addr entry */
+        struct netdev_hw_addr *ha;
 
         /* Enable LLC frame promiscuous mode, if necessary */
 
@@ -2241,9 +2241,9 @@ static void dfx_ctl_set_multicast_list(struct net_device *dev)
                 /* Copy addresses to multicast address table, then update adapter CAM */
 
                 i = 0;
-                netdev_for_each_mc_addr(dmi, dev)
+                netdev_for_each_mc_addr(ha, dev)
                         memcpy(&bp->mc_table[i++ * FDDI_K_ALEN],
-                               dmi->dmi_addr, FDDI_K_ALEN);
+                               ha->addr, FDDI_K_ALEN);
 
                 if (dfx_ctl_update_cam(bp) != DFX_K_SUCCESS)
                         {
diff --git a/drivers/net/depca.c b/drivers/net/depca.c
index 744c1928dfca..a88300a0d1e8 100644
--- a/drivers/net/depca.c
+++ b/drivers/net/depca.c
@@ -1272,7 +1272,7 @@ static void set_multicast_list(struct net_device *dev)
 static void SetMulticastFilter(struct net_device *dev)
 {
         struct depca_private *lp = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         int i, j, bit, byte;
         u16 hashcode;
@@ -1287,8 +1287,8 @@ static void SetMulticastFilter(struct net_device *dev)
                         lp->init_block.mcast_table[i] = 0;
                 }
                 /* Add multicast addresses */
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
                         if ((*addrs & 0x01) == 1) {     /* multicast address? */
                                 crc = ether_crc(ETH_ALEN, addrs);
                                 hashcode = (crc & 1);   /* hashcode is 6 LSb of CRC ... */
diff --git a/drivers/net/dl2k.c b/drivers/net/dl2k.c
index b05bad829827..6579225dbd91 100644
--- a/drivers/net/dl2k.c
+++ b/drivers/net/dl2k.c
@@ -1132,14 +1132,14 @@ set_multicast (struct net_device *dev)
                 /* Receive broadcast and multicast frames */
                 rx_mode = ReceiveBroadcast | ReceiveMulticast | ReceiveUnicast;
         } else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 /* Receive broadcast frames and multicast frames filtering
                    by Hashtable */
                 rx_mode =
                     ReceiveBroadcast | ReceiveMulticastHash | ReceiveUnicast;
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         int bit, index = 0;
-                        int crc = ether_crc_le (ETH_ALEN, mclist->dmi_addr);
+                        int crc = ether_crc_le(ETH_ALEN, ha->addr);
                         /* The inverted high significant 6 bits of CRC are
                            used as an index to hashtable */
                         for (bit = 0; bit < 6; bit++)
diff --git a/drivers/net/dm9000.c b/drivers/net/dm9000.c
index 1c67f1138ca7..989f2beb123b 100644
--- a/drivers/net/dm9000.c
+++ b/drivers/net/dm9000.c
@@ -724,7 +724,7 @@ static void
 dm9000_hash_table(struct net_device *dev)
 {
         board_info_t *db = netdev_priv(dev);
-        struct dev_mc_list *mcptr;
+        struct netdev_hw_addr *ha;
         int i, oft;
         u32 hash_val;
         u16 hash_table[4];
@@ -752,8 +752,8 @@ dm9000_hash_table(struct net_device *dev)
                 rcr |= RCR_ALL;
 
         /* the multicast address in Hash Table : 64 bits */
-        netdev_for_each_mc_addr(mcptr, dev) {
-                hash_val = ether_crc_le(6, mcptr->dmi_addr) & 0x3f;
+        netdev_for_each_mc_addr(ha, dev) {
+                hash_val = ether_crc_le(6, ha->addr) & 0x3f;
                 hash_table[hash_val / 16] |= (u16) 1 << (hash_val % 16);
         }
 
diff --git a/drivers/net/dnet.c b/drivers/net/dnet.c
index 234685213f1a..d51a83e69585 100644
--- a/drivers/net/dnet.c
+++ b/drivers/net/dnet.c
@@ -918,7 +918,7 @@ static int __devinit dnet_probe(struct platform_device *pdev)
 
         dev_info(&pdev->dev, "Dave DNET at 0x%p (0x%08x) irq %d %pM\n",
                bp->regs, mem_base, dev->irq, dev->dev_addr);
-        dev_info(&pdev->dev, "has %smdio, %sirq, %sgigabit, %sdma \n",
+        dev_info(&pdev->dev, "has %smdio, %sirq, %sgigabit, %sdma\n",
                (bp->capabilities & DNET_HAS_MDIO) ? "" : "no ",
                (bp->capabilities & DNET_HAS_IRQ) ? "" : "no ",
                (bp->capabilities & DNET_HAS_GIGABIT) ? "" : "no ",
diff --git a/drivers/net/e100.c b/drivers/net/e100.c
index b997e578e58f..3e8d0005540f 100644
--- a/drivers/net/e100.c
+++ b/drivers/net/e100.c
@@ -147,6 +147,8 @@
  *      - add clean lowlevel I/O emulation for cards with MII-lacking PHYs
  */
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #include <linux/module.h>
 #include <linux/moduleparam.h>
 #include <linux/kernel.h>
@@ -174,7 +176,6 @@
 #define DRV_VERSION             "3.5.24-k2"DRV_EXT
 #define DRV_DESCRIPTION         "Intel(R) PRO/100 Network Driver"
 #define DRV_COPYRIGHT           "Copyright(c) 1999-2006 Intel Corporation"
-#define PFX                     DRV_NAME ": "
 
 #define E100_WATCHDOG_PERIOD    (2 * HZ)
 #define E100_NAPI_WEIGHT        16
@@ -200,10 +201,6 @@ module_param(use_io, int, 0);
 MODULE_PARM_DESC(debug, "Debug level (0=none,...,16=all)");
 MODULE_PARM_DESC(eeprom_bad_csum_allow, "Allow bad eeprom checksums");
 MODULE_PARM_DESC(use_io, "Force use of i/o access mode");
-#define DPRINTK(nlevel, klevel, fmt, args...) \
-        (void)((NETIF_MSG_##nlevel & nic->msg_enable) && \
-        printk(KERN_##klevel PFX "%s: %s: " fmt, nic->netdev->name, \
-                __func__ , ## args))
 
 #define INTEL_8255X_ETHERNET_DEVICE(device_id, ich) {\
         PCI_VENDOR_ID_INTEL, device_id, PCI_ANY_ID, PCI_ANY_ID, \
@@ -689,12 +686,13 @@ static int e100_self_test(struct nic *nic)
 
         /* Check results of self-test */
         if (nic->mem->selftest.result != 0) {
-                DPRINTK(HW, ERR, "Self-test failed: result=0x%08X\n",
-                        nic->mem->selftest.result);
+                netif_err(nic, hw, nic->netdev,
+                          "Self-test failed: result=0x%08X\n",
+                          nic->mem->selftest.result);
                 return -ETIMEDOUT;
         }
         if (nic->mem->selftest.signature == 0) {
-                DPRINTK(HW, ERR, "Self-test failed: timed out\n");
+                netif_err(nic, hw, nic->netdev, "Self-test failed: timed out\n");
                 return -ETIMEDOUT;
         }
 
@@ -797,7 +795,7 @@ static int e100_eeprom_load(struct nic *nic)
         /* The checksum, stored in the last word, is calculated such that
          * the sum of words should be 0xBABA */
         if (cpu_to_le16(0xBABA - checksum) != nic->eeprom[nic->eeprom_wc - 1]) {
-                DPRINTK(PROBE, ERR, "EEPROM corrupted\n");
+                netif_err(nic, probe, nic->netdev, "EEPROM corrupted\n");
                 if (!eeprom_bad_csum_allow)
                         return -EAGAIN;
         }
@@ -953,8 +951,7 @@ static u16 mdio_ctrl_hw(struct nic *nic, u32 addr, u32 dir, u32 reg, u16 data)
                 udelay(20);
         }
         if (unlikely(!i)) {
-                printk("e100.mdio_ctrl(%s) won't go Ready\n",
-                        nic->netdev->name );
+                netdev_err(nic->netdev, "e100.mdio_ctrl won't go Ready\n");
                 spin_unlock_irqrestore(&nic->mdio_lock, flags);
                 return 0;               /* No way to indicate timeout error */
         }
@@ -966,9 +963,10 @@ static u16 mdio_ctrl_hw(struct nic *nic, u32 addr, u32 dir, u32 reg, u16 data)
                         break;
         }
         spin_unlock_irqrestore(&nic->mdio_lock, flags);
-        DPRINTK(HW, DEBUG,
-                "%s:addr=%d, reg=%d, data_in=0x%04X, data_out=0x%04X\n",
-                dir == mdi_read ? "READ" : "WRITE", addr, reg, data, data_out);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "%s:addr=%d, reg=%d, data_in=0x%04X, data_out=0x%04X\n",
+                     dir == mdi_read ? "READ" : "WRITE",
+                     addr, reg, data, data_out);
         return (u16)data_out;
 }
 
@@ -1028,17 +1026,19 @@ static u16 mdio_ctrl_phy_mii_emulated(struct nic *nic,
                         return  ADVERTISE_10HALF |
                                 ADVERTISE_10FULL;
                 default:
-                        DPRINTK(HW, DEBUG,
-                "%s:addr=%d, reg=%d, data=0x%04X: unimplemented emulation!\n",
-                dir == mdi_read ? "READ" : "WRITE", addr, reg, data);
+                        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                                     "%s:addr=%d, reg=%d, data=0x%04X: unimplemented emulation!\n",
+                                     dir == mdi_read ? "READ" : "WRITE",
+                                     addr, reg, data);
                         return 0xFFFF;
                 }
         } else {
                 switch (reg) {
                 default:
-                        DPRINTK(HW, DEBUG,
-                "%s:addr=%d, reg=%d, data=0x%04X: unimplemented emulation!\n",
-                dir == mdi_read ? "READ" : "WRITE", addr, reg, data);
+                        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                                     "%s:addr=%d, reg=%d, data=0x%04X: unimplemented emulation!\n",
+                                     dir == mdi_read ? "READ" : "WRITE",
+                                     addr, reg, data);
                         return 0xFFFF;
                 }
         }
@@ -1155,12 +1155,15 @@ static void e100_configure(struct nic *nic, struct cb *cb, struct sk_buff *skb)
                 }
         }
 
-        DPRINTK(HW, DEBUG, "[00-07]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
-                c[0], c[1], c[2], c[3], c[4], c[5], c[6], c[7]);
-        DPRINTK(HW, DEBUG, "[08-15]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
-                c[8], c[9], c[10], c[11], c[12], c[13], c[14], c[15]);
-        DPRINTK(HW, DEBUG, "[16-23]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
-                c[16], c[17], c[18], c[19], c[20], c[21], c[22], c[23]);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "[00-07]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
+                     c[0], c[1], c[2], c[3], c[4], c[5], c[6], c[7]);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "[08-15]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
+                     c[8], c[9], c[10], c[11], c[12], c[13], c[14], c[15]);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "[16-23]=%02X:%02X:%02X:%02X:%02X:%02X:%02X:%02X\n",
+                     c[16], c[17], c[18], c[19], c[20], c[21], c[22], c[23]);
 }
 
 /*************************************************************************
@@ -1253,16 +1256,18 @@ static const struct firmware *e100_request_firmware(struct nic *nic)
                 err = request_firmware(&fw, fw_name, &nic->pdev->dev);
 
         if (err) {
-                DPRINTK(PROBE, ERR, "Failed to load firmware \"%s\": %d\n",
-                        fw_name, err);
+                netif_err(nic, probe, nic->netdev,
+                          "Failed to load firmware \"%s\": %d\n",
+                          fw_name, err);
                 return ERR_PTR(err);
         }
 
         /* Firmware should be precisely UCODE_SIZE (words) plus three bytes
            indicating the offsets for BUNDLESMALL, BUNDLEMAX, INTDELAY */
         if (fw->size != UCODE_SIZE * 4 + 3) {
-                DPRINTK(PROBE, ERR, "Firmware \"%s\" has wrong size %zu\n",
-                        fw_name, fw->size);
+                netif_err(nic, probe, nic->netdev,
+                          "Firmware \"%s\" has wrong size %zu\n",
+                          fw_name, fw->size);
                 release_firmware(fw);
                 return ERR_PTR(-EINVAL);
         }
@@ -1274,9 +1279,9 @@ static const struct firmware *e100_request_firmware(struct nic *nic)
 
         if (timer >= UCODE_SIZE || bundle >= UCODE_SIZE ||
             min_size >= UCODE_SIZE) {
-                DPRINTK(PROBE, ERR,
-                        "\"%s\" has bogus offset values (0x%x,0x%x,0x%x)\n",
-                        fw_name, timer, bundle, min_size);
+                netif_err(nic, probe, nic->netdev,
+                          "\"%s\" has bogus offset values (0x%x,0x%x,0x%x)\n",
+                          fw_name, timer, bundle, min_size);
                 release_firmware(fw);
                 return ERR_PTR(-EINVAL);
         }
@@ -1328,7 +1333,8 @@ static inline int e100_load_ucode_wait(struct nic *nic)
                 return PTR_ERR(fw);
 
         if ((err = e100_exec_cb(nic, (void *)fw, e100_setup_ucode)))
-                DPRINTK(PROBE,ERR, "ucode cmd failed with error %d\n", err);
+                netif_err(nic, probe, nic->netdev,
+                          "ucode cmd failed with error %d\n", err);
 
         /* must restart cuc */
         nic->cuc_cmd = cuc_start;
@@ -1348,7 +1354,7 @@ static inline int e100_load_ucode_wait(struct nic *nic)
 
         /* if the command failed, or is not OK, notify and return */
         if (!counter || !(cb->status & cpu_to_le16(cb_ok))) {
-                DPRINTK(PROBE,ERR, "ucode load failed\n");
+                netif_err(nic, probe, nic->netdev, "ucode load failed\n");
                 err = -EPERM;
         }
 
@@ -1386,8 +1392,8 @@ static int e100_phy_check_without_mii(struct nic *nic)
                  * media is sensed automatically based on how the link partner
                  * is configured.  This is, in essence, manual configuration.
                  */
-                DPRINTK(PROBE, INFO,
-                         "found MII-less i82503 or 80c24 or other PHY\n");
+                netif_info(nic, probe, nic->netdev,
+                           "found MII-less i82503 or 80c24 or other PHY\n");
 
                 nic->mdio_ctrl = mdio_ctrl_phy_mii_emulated;
                 nic->mii.phy_id = 0; /* is this ok for an MII-less PHY? */
@@ -1434,18 +1440,20 @@ static int e100_phy_init(struct nic *nic)
                         return 0; /* simply return and hope for the best */
                 else {
                         /* for unknown cases log a fatal error */
-                        DPRINTK(HW, ERR,
-                                "Failed to locate any known PHY, aborting.\n");
+                        netif_err(nic, hw, nic->netdev,
+                                  "Failed to locate any known PHY, aborting\n");
                         return -EAGAIN;
                 }
         } else
-                DPRINTK(HW, DEBUG, "phy_addr = %d\n", nic->mii.phy_id);
+                netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                             "phy_addr = %d\n", nic->mii.phy_id);
 
         /* Get phy ID */
         id_lo = mdio_read(netdev, nic->mii.phy_id, MII_PHYSID1);
         id_hi = mdio_read(netdev, nic->mii.phy_id, MII_PHYSID2);
         nic->phy = (u32)id_hi << 16 | (u32)id_lo;
-        DPRINTK(HW, DEBUG, "phy ID = 0x%08X\n", nic->phy);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "phy ID = 0x%08X\n", nic->phy);
 
         /* Select the phy and isolate the rest */
         for (addr = 0; addr < 32; addr++) {
@@ -1507,7 +1515,7 @@ static int e100_hw_init(struct nic *nic)
 
         e100_hw_reset(nic);
 
-        DPRINTK(HW, ERR, "e100_hw_init\n");
+        netif_err(nic, hw, nic->netdev, "e100_hw_init\n");
         if (!in_interrupt() && (err = e100_self_test(nic)))
                 return err;
 
@@ -1537,16 +1545,16 @@ static int e100_hw_init(struct nic *nic)
 static void e100_multi(struct nic *nic, struct cb *cb, struct sk_buff *skb)
 {
         struct net_device *netdev = nic->netdev;
-        struct dev_mc_list *list;
+        struct netdev_hw_addr *ha;
         u16 i, count = min(netdev_mc_count(netdev), E100_MAX_MULTICAST_ADDRS);
 
         cb->command = cpu_to_le16(cb_multi);
         cb->u.multi.count = cpu_to_le16(count * ETH_ALEN);
         i = 0;
-        netdev_for_each_mc_addr(list, netdev) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 if (i == count)
                         break;
-                memcpy(&cb->u.multi.addr[i++ * ETH_ALEN], &list->dmi_addr,
+                memcpy(&cb->u.multi.addr[i++ * ETH_ALEN], &ha->addr,
                         ETH_ALEN);
         }
 }
@@ -1555,8 +1563,9 @@ static void e100_set_multicast_list(struct net_device *netdev)
 {
         struct nic *nic = netdev_priv(netdev);
 
-        DPRINTK(HW, DEBUG, "mc_count=%d, flags=0x%04X\n",
-                netdev_mc_count(netdev), netdev->flags);
+        netif_printk(nic, hw, KERN_DEBUG, nic->netdev,
+                     "mc_count=%d, flags=0x%04X\n",
+                     netdev_mc_count(netdev), netdev->flags);
 
         if (netdev->flags & IFF_PROMISC)
                 nic->flags |= promiscuous;
@@ -1629,7 +1638,8 @@ static void e100_update_stats(struct nic *nic)
 
 
         if (e100_exec_cmd(nic, cuc_dump_reset, 0))
-                DPRINTK(TX_ERR, DEBUG, "exec cuc_dump_reset failed\n");
+                netif_printk(nic, tx_err, KERN_DEBUG, nic->netdev,
+                             "exec cuc_dump_reset failed\n");
 }
 
 static void e100_adjust_adaptive_ifs(struct nic *nic, int speed, int duplex)
@@ -1659,20 +1669,19 @@ static void e100_watchdog(unsigned long data)
         struct nic *nic = (struct nic *)data;
         struct ethtool_cmd cmd;
 
-        DPRINTK(TIMER, DEBUG, "right now = %ld\n", jiffies);
+        netif_printk(nic, timer, KERN_DEBUG, nic->netdev,
+                     "right now = %ld\n", jiffies);
 
         /* mii library handles link maintenance tasks */
 
         mii_ethtool_gset(&nic->mii, &cmd);
 
         if (mii_link_ok(&nic->mii) && !netif_carrier_ok(nic->netdev)) {
-                printk(KERN_INFO "e100: %s NIC Link is Up %s Mbps %s Duplex\n",
-                       nic->netdev->name,
-                       cmd.speed == SPEED_100 ? "100" : "10",
-                       cmd.duplex == DUPLEX_FULL ? "Full" : "Half");
+                netdev_info(nic->netdev, "NIC Link is Up %u Mbps %s Duplex\n",
+                            cmd.speed == SPEED_100 ? 100 : 10,
+                            cmd.duplex == DUPLEX_FULL ? "Full" : "Half");
         } else if (!mii_link_ok(&nic->mii) && netif_carrier_ok(nic->netdev)) {
-                printk(KERN_INFO "e100: %s NIC Link is Down\n",
-                       nic->netdev->name);
+                netdev_info(nic->netdev, "NIC Link is Down\n");
         }
 
         mii_check_link(&nic->mii);
@@ -1732,7 +1741,8 @@ static netdev_tx_t e100_xmit_frame(struct sk_buff *skb,
                    Issue a NOP command followed by a 1us delay before
                    issuing the Tx command. */
                 if (e100_exec_cmd(nic, cuc_nop, 0))
-                        DPRINTK(TX_ERR, DEBUG, "exec cuc_nop failed\n");
+                        netif_printk(nic, tx_err, KERN_DEBUG, nic->netdev,
+                                     "exec cuc_nop failed\n");
                 udelay(1);
         }
 
@@ -1741,12 +1751,14 @@ static netdev_tx_t e100_xmit_frame(struct sk_buff *skb,
         switch (err) {
         case -ENOSPC:
                 /* We queued the skb, but now we're out of space. */
-                DPRINTK(TX_ERR, DEBUG, "No space for CB\n");
+                netif_printk(nic, tx_err, KERN_DEBUG, nic->netdev,
+                             "No space for CB\n");
                 netif_stop_queue(netdev);
                 break;
         case -ENOMEM:
                 /* This is a hard error - log it. */
-                DPRINTK(TX_ERR, DEBUG, "Out of Tx resources, returning skb\n");
+                netif_printk(nic, tx_err, KERN_DEBUG, nic->netdev,
+                             "Out of Tx resources, returning skb\n");
                 netif_stop_queue(netdev);
                 return NETDEV_TX_BUSY;
         }
@@ -1767,9 +1779,10 @@ static int e100_tx_clean(struct nic *nic)
         for (cb = nic->cb_to_clean;
             cb->status & cpu_to_le16(cb_complete);
             cb = nic->cb_to_clean = cb->next) {
-                DPRINTK(TX_DONE, DEBUG, "cb[%d]->status = 0x%04X\n",
-                        (int)(((void*)cb - (void*)nic->cbs)/sizeof(struct cb)),
-                        cb->status);
+                netif_printk(nic, tx_done, KERN_DEBUG, nic->netdev,
+                             "cb[%d]->status = 0x%04X\n",
+                             (int)(((void*)cb - (void*)nic->cbs)/sizeof(struct cb)),
+                             cb->status);
 
                 if (likely(cb->skb != NULL)) {
                         dev->stats.tx_packets++;
@@ -1912,7 +1925,8 @@ static int e100_rx_indicate(struct nic *nic, struct rx *rx,
                 sizeof(struct rfd), PCI_DMA_BIDIRECTIONAL);
         rfd_status = le16_to_cpu(rfd->status);
 
-        DPRINTK(RX_STATUS, DEBUG, "status=0x%04X\n", rfd_status);
+        netif_printk(nic, rx_status, KERN_DEBUG, nic->netdev,
+                     "status=0x%04X\n", rfd_status);
 
         /* If data isn't ready, nothing to indicate */
         if (unlikely(!(rfd_status & cb_complete))) {
@@ -2123,7 +2137,8 @@ static irqreturn_t e100_intr(int irq, void *dev_id)
         struct nic *nic = netdev_priv(netdev);
         u8 stat_ack = ioread8(&nic->csr->scb.stat_ack);
 
-        DPRINTK(INTR, DEBUG, "stat_ack = 0x%02X\n", stat_ack);
+        netif_printk(nic, intr, KERN_DEBUG, nic->netdev,
+                     "stat_ack = 0x%02X\n", stat_ack);
 
         if (stat_ack == stat_ack_not_ours ||    /* Not our interrupt */
            stat_ack == stat_ack_not_present)    /* Hardware is ejected */
@@ -2263,8 +2278,8 @@ static void e100_tx_timeout_task(struct work_struct *work)
         struct nic *nic = container_of(work, struct nic, tx_timeout_task);
         struct net_device *netdev = nic->netdev;
 
-        DPRINTK(TX_ERR, DEBUG, "scb.status=0x%02X\n",
-                ioread8(&nic->csr->scb.status));
+        netif_printk(nic, tx_err, KERN_DEBUG, nic->netdev,
+                     "scb.status=0x%02X\n", ioread8(&nic->csr->scb.status));
         e100_down(netdev_priv(netdev));
         e100_up(netdev_priv(netdev));
 }
@@ -2526,8 +2541,8 @@ static int e100_set_ringparam(struct net_device *netdev,
         rfds->count = min(rfds->count, rfds->max);
         cbs->count = max(ring->tx_pending, cbs->min);
         cbs->count = min(cbs->count, cbs->max);
-        DPRINTK(DRV, INFO, "Ring Param settings: rx: %d, tx %d\n",
-                rfds->count, cbs->count);
+        netif_info(nic, drv, nic->netdev, "Ring Param settings: rx: %d, tx %d\n",
+                   rfds->count, cbs->count);
         if (netif_running(netdev))
                 e100_up(nic);
 
@@ -2704,7 +2719,7 @@ static int e100_open(struct net_device *netdev)
 
         netif_carrier_off(netdev);
         if ((err = e100_up(nic)))
-                DPRINTK(IFUP, ERR, "Cannot open interface, aborting.\n");
+                netif_err(nic, ifup, nic->netdev, "Cannot open interface, aborting\n");
         return err;
 }
 
@@ -2738,7 +2753,7 @@ static int __devinit e100_probe(struct pci_dev *pdev,
 
         if (!(netdev = alloc_etherdev(sizeof(struct nic)))) {
                 if (((1 << debug) - 1) & NETIF_MSG_PROBE)
-                        printk(KERN_ERR PFX "Etherdev alloc failed, abort.\n");
+                        pr_err("Etherdev alloc failed, aborting\n");
                 return -ENOMEM;
         }
 
@@ -2756,35 +2771,34 @@ static int __devinit e100_probe(struct pci_dev *pdev,
         pci_set_drvdata(pdev, netdev);
 
         if ((err = pci_enable_device(pdev))) {
-                DPRINTK(PROBE, ERR, "Cannot enable PCI device, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot enable PCI device, aborting\n");
                 goto err_out_free_dev;
         }
 
         if (!(pci_resource_flags(pdev, 0) & IORESOURCE_MEM)) {
-                DPRINTK(PROBE, ERR, "Cannot find proper PCI device "
-                        "base address, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot find proper PCI device base address, aborting\n");
                 err = -ENODEV;
                 goto err_out_disable_pdev;
         }
 
         if ((err = pci_request_regions(pdev, DRV_NAME))) {
-                DPRINTK(PROBE, ERR, "Cannot obtain PCI resources, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot obtain PCI resources, aborting\n");
                 goto err_out_disable_pdev;
         }
 
         if ((err = pci_set_dma_mask(pdev, DMA_BIT_MASK(32)))) {
-                DPRINTK(PROBE, ERR, "No usable DMA configuration, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "No usable DMA configuration, aborting\n");
                 goto err_out_free_res;
         }
 
         SET_NETDEV_DEV(netdev, &pdev->dev);
 
         if (use_io)
-                DPRINTK(PROBE, INFO, "using i/o access mode\n");
+                netif_info(nic, probe, nic->netdev, "using i/o access mode\n");
 
         nic->csr = pci_iomap(pdev, (use_io ? 1 : 0), sizeof(struct csr));
         if (!nic->csr) {
-                DPRINTK(PROBE, ERR, "Cannot map device registers, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot map device registers, aborting\n");
                 err = -ENOMEM;
                 goto err_out_free_res;
         }
@@ -2818,7 +2832,7 @@ static int __devinit e100_probe(struct pci_dev *pdev,
         INIT_WORK(&nic->tx_timeout_task, e100_tx_timeout_task);
 
         if ((err = e100_alloc(nic))) {
-                DPRINTK(PROBE, ERR, "Cannot alloc driver memory, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot alloc driver memory, aborting\n");
                 goto err_out_iounmap;
         }
 
@@ -2831,13 +2845,11 @@ static int __devinit e100_probe(struct pci_dev *pdev,
         memcpy(netdev->perm_addr, nic->eeprom, ETH_ALEN);
         if (!is_valid_ether_addr(netdev->perm_addr)) {
                 if (!eeprom_bad_csum_allow) {
-                        DPRINTK(PROBE, ERR, "Invalid MAC address from "
-                                "EEPROM, aborting.\n");
+                        netif_err(nic, probe, nic->netdev, "Invalid MAC address from EEPROM, aborting\n");
                         err = -EAGAIN;
                         goto err_out_free;
                 } else {
-                        DPRINTK(PROBE, ERR, "Invalid MAC address from EEPROM, "
-                                "you MUST configure one.\n");
+                        netif_err(nic, probe, nic->netdev, "Invalid MAC address from EEPROM, you MUST configure one.\n");
                 }
         }
 
@@ -2853,7 +2865,7 @@ static int __devinit e100_probe(struct pci_dev *pdev,
 
         strcpy(netdev->name, "eth%d");
         if ((err = register_netdev(netdev))) {
-                DPRINTK(PROBE, ERR, "Cannot register net device, aborting.\n");
+                netif_err(nic, probe, nic->netdev, "Cannot register net device, aborting\n");
                 goto err_out_free;
         }
         nic->cbs_pool = pci_pool_create(netdev->name,
@@ -2861,9 +2873,10 @@ static int __devinit e100_probe(struct pci_dev *pdev,
                            nic->params.cbs.max * sizeof(struct cb),
                            sizeof(u32),
                            0);
-        DPRINTK(PROBE, INFO, "addr 0x%llx, irq %d, MAC addr %pM\n",
-                (unsigned long long)pci_resource_start(pdev, use_io ? 1 : 0),
-                pdev->irq, netdev->dev_addr);
+        netif_info(nic, probe, nic->netdev,
+                   "addr 0x%llx, irq %d, MAC addr %pM\n",
+                   (unsigned long long)pci_resource_start(pdev, use_io ? 1 : 0),
+                   pdev->irq, netdev->dev_addr);
 
         return 0;
 
@@ -3021,7 +3034,7 @@ static pci_ers_result_t e100_io_slot_reset(struct pci_dev *pdev)
         struct nic *nic = netdev_priv(netdev);
 
         if (pci_enable_device(pdev)) {
-                printk(KERN_ERR "e100: Cannot re-enable PCI device after reset.\n");
+                pr_err("Cannot re-enable PCI device after reset\n");
                 return PCI_ERS_RESULT_DISCONNECT;
         }
         pci_set_master(pdev);
@@ -3080,8 +3093,8 @@ static struct pci_driver e100_driver = {
 static int __init e100_init_module(void)
 {
         if (((1 << debug) - 1) & NETIF_MSG_DRV) {
-                printk(KERN_INFO PFX "%s, %s\n", DRV_DESCRIPTION, DRV_VERSION);
-                printk(KERN_INFO PFX "%s\n", DRV_COPYRIGHT);
+                pr_info("%s, %s\n", DRV_DESCRIPTION, DRV_VERSION);
+                pr_info("%s\n", DRV_COPYRIGHT);
         }
         return pci_register_driver(&e100_driver);
 }
diff --git a/drivers/net/e1000/e1000_hw.c b/drivers/net/e1000/e1000_hw.c
index 8d7d87f12827..e2b6e6e7ba6a 100644
--- a/drivers/net/e1000/e1000_hw.c
+++ b/drivers/net/e1000/e1000_hw.c
@@ -990,7 +990,7 @@ static s32 e1000_copper_link_preconfig(struct e1000_hw *hw)
                 DEBUGOUT("Error, did not detect valid phy.\n");
                 return ret_val;
         }
-        DEBUGOUT1("Phy ID = %x \n", hw->phy_id);
+        DEBUGOUT1("Phy ID = %x\n", hw->phy_id);
 
         /* Set PHY to class A mode (if necessary) */
         ret_val = e1000_set_phy_mode(hw);
@@ -1680,7 +1680,7 @@ static s32 e1000_phy_force_speed_duplex(struct e1000_hw *hw)
                 if (ret_val)
                         return ret_val;
 
-                DEBUGOUT1("M88E1000 PSCR: %x \n", phy_data);
+                DEBUGOUT1("M88E1000 PSCR: %x\n", phy_data);
 
                 /* Need to reset the PHY or these changes will be ignored */
                 mii_ctrl_reg |= MII_CR_RESET;
diff --git a/drivers/net/e1000/e1000_main.c b/drivers/net/e1000/e1000_main.c
index b15ece26ed84..47da5fc1e9f4 100644
--- a/drivers/net/e1000/e1000_main.c
+++ b/drivers/net/e1000/e1000_main.c
@@ -2098,7 +2098,6 @@ static void e1000_set_rx_mode(struct net_device *netdev)
         struct e1000_hw *hw = &adapter->hw;
         struct netdev_hw_addr *ha;
         bool use_uc = false;
-        struct dev_addr_list *mc_ptr;
         u32 rctl;
         u32 hash_value;
         int i, rar_entries = E1000_RAR_ENTRIES;
@@ -2158,17 +2157,17 @@ static void e1000_set_rx_mode(struct net_device *netdev)
 
         WARN_ON(i == rar_entries);
 
-        netdev_for_each_mc_addr(mc_ptr, netdev) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 if (i == rar_entries) {
                         /* load any remaining addresses into the hash table */
                         u32 hash_reg, hash_bit, mta;
-                        hash_value = e1000_hash_mc_addr(hw, mc_ptr->da_addr);
+                        hash_value = e1000_hash_mc_addr(hw, ha->addr);
                         hash_reg = (hash_value >> 5) & 0x7F;
                         hash_bit = hash_value & 0x1F;
                         mta = (1 << hash_bit);
                         mcarray[hash_reg] |= mta;
                 } else {
-                        e1000_rar_set(hw, mc_ptr->da_addr, i++);
+                        e1000_rar_set(hw, ha->addr, i++);
                 }
         }
 
diff --git a/drivers/net/e1000e/82571.c b/drivers/net/e1000e/82571.c
index 712ccc66ba25..4b0016d69530 100644
--- a/drivers/net/e1000e/82571.c
+++ b/drivers/net/e1000e/82571.c
@@ -323,7 +323,7 @@ static s32 e1000_init_mac_params_82571(struct e1000_adapter *adapter)
         }
 
         /*
-         * Initialze device specific counter of SMBI acquisition
+         * Initialize device specific counter of SMBI acquisition
          * timeouts.
          */
          hw->dev_spec.e82571.smb_counter = 0;
diff --git a/drivers/net/e1000e/e1000.h b/drivers/net/e1000e/e1000.h
index 118bdf483593..12648a1cdb78 100644
--- a/drivers/net/e1000e/e1000.h
+++ b/drivers/net/e1000e/e1000.h
@@ -42,25 +42,16 @@
 
 struct e1000_info;
 
-#define e_printk(level, adapter, format, arg...) \
-        printk(level "%s: %s: " format, pci_name(adapter->pdev), \
-               adapter->netdev->name, ## arg)
-
-#ifdef DEBUG
 #define e_dbg(format, arg...) \
-        e_printk(KERN_DEBUG , hw->adapter, format, ## arg)
-#else
-#define e_dbg(format, arg...) do { (void)(hw); } while (0)
-#endif
-
+        netdev_dbg(hw->adapter->netdev, format, ## arg)
 #define e_err(format, arg...) \
-        e_printk(KERN_ERR, adapter, format, ## arg)
+        netdev_err(adapter->netdev, format, ## arg)
 #define e_info(format, arg...) \
-        e_printk(KERN_INFO, adapter, format, ## arg)
+        netdev_info(adapter->netdev, format, ## arg)
 #define e_warn(format, arg...) \
-        e_printk(KERN_WARNING, adapter, format, ## arg)
+        netdev_warn(adapter->netdev, format, ## arg)
 #define e_notice(format, arg...) \
-        e_printk(KERN_NOTICE, adapter, format, ## arg)
+        netdev_notice(adapter->netdev, format, ## arg)
 
 
 /* Interrupt modes, as used by the IntMode parameter */
@@ -158,6 +149,9 @@ struct e1000_info;
 #define HV_M_STATUS_SPEED_1000            0x0200
 #define HV_M_STATUS_LINK_UP               0x0040
 
+/* Time to wait before putting the device into D3 if there's no link (in ms). */
+#define LINK_TIMEOUT            100
+
 enum e1000_boards {
         board_82571,
         board_82572,
@@ -369,6 +363,8 @@ struct e1000_adapter {
         struct work_struct update_phy_task;
         struct work_struct led_blink_task;
         struct work_struct print_hang_task;
+
+        bool idle_check;
 };
 
 struct e1000_info {
diff --git a/drivers/net/e1000e/ich8lan.c b/drivers/net/e1000e/ich8lan.c
index 8b5e157e9c87..5059c22155d9 100644
--- a/drivers/net/e1000e/ich8lan.c
+++ b/drivers/net/e1000e/ich8lan.c
@@ -1622,7 +1622,7 @@ static s32 e1000_flash_cycle_init_ich8lan(struct e1000_hw *hw)
         /* Check if the flash descriptor is valid */
         if (hsfsts.hsf_status.fldesvalid == 0) {
                 e_dbg("Flash descriptor invalid.  "
-                         "SW Sequencing must be used.");
+                         "SW Sequencing must be used.\n");
                 return -E1000_ERR_NVM;
         }
 
@@ -1671,7 +1671,7 @@ static s32 e1000_flash_cycle_init_ich8lan(struct e1000_hw *hw)
                         hsfsts.hsf_status.flcdone = 1;
                         ew16flash(ICH_FLASH_HSFSTS, hsfsts.regval);
                 } else {
-                        e_dbg("Flash controller busy, cannot get access");
+                        e_dbg("Flash controller busy, cannot get access\n");
                 }
         }
 
@@ -1822,7 +1822,7 @@ static s32 e1000_read_flash_data_ich8lan(struct e1000_hw *hw, u32 offset,
                                 continue;
                         } else if (hsfsts.hsf_status.flcdone == 0) {
                                 e_dbg("Timeout error - flash cycle "
-                                         "did not complete.");
+                                         "did not complete.\n");
                                 break;
                         }
                 }
diff --git a/drivers/net/e1000e/lib.c b/drivers/net/e1000e/lib.c
index a8b2c0de27c4..b0d2a60aa490 100644
--- a/drivers/net/e1000e/lib.c
+++ b/drivers/net/e1000e/lib.c
@@ -1262,24 +1262,21 @@ s32 e1000e_get_speed_and_duplex_copper(struct e1000_hw *hw, u16 *speed, u16 *dup
         u32 status;
 
         status = er32(STATUS);
-        if (status & E1000_STATUS_SPEED_1000) {
+        if (status & E1000_STATUS_SPEED_1000)
                 *speed = SPEED_1000;
-                e_dbg("1000 Mbs, ");
-        } else if (status & E1000_STATUS_SPEED_100) {
+        else if (status & E1000_STATUS_SPEED_100)
                 *speed = SPEED_100;
-                e_dbg("100 Mbs, ");
-        } else {
+        else
                 *speed = SPEED_10;
-                e_dbg("10 Mbs, ");
-        }
 
-        if (status & E1000_STATUS_FD) {
+        if (status & E1000_STATUS_FD)
                 *duplex = FULL_DUPLEX;
-                e_dbg("Full Duplex\n");
-        } else {
+        else
                 *duplex = HALF_DUPLEX;
-                e_dbg("Half Duplex\n");
-        }
+
+        e_dbg("%u Mbps, %s Duplex\n",
+              *speed == SPEED_1000 ? 1000 : *speed == SPEED_100 ? 100 : 10,
+              *duplex == FULL_DUPLEX ? "Full" : "Half");
 
         return 0;
 }
diff --git a/drivers/net/e1000e/netdev.c b/drivers/net/e1000e/netdev.c
index e1cceb606576..167b1aedfb42 100644
--- a/drivers/net/e1000e/netdev.c
+++ b/drivers/net/e1000e/netdev.c
@@ -26,6 +26,8 @@
 
 *******************************************************************************/
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #include <linux/module.h>
 #include <linux/types.h>
 #include <linux/init.h>
@@ -44,6 +46,7 @@
 #include <linux/cpu.h>
 #include <linux/smp.h>
 #include <linux/pm_qos_params.h>
+#include <linux/pm_runtime.h>
 #include <linux/aer.h>
 
 #include "e1000.h"
@@ -2562,7 +2565,7 @@ static void e1000_set_multi(struct net_device *netdev)
 {
         struct e1000_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8  *mta_list;
         u32 rctl;
         int i;
@@ -2594,9 +2597,8 @@ static void e1000_set_multi(struct net_device *netdev)
 
                 /* prepare a packed array of only addresses. */
                 i = 0;
-                netdev_for_each_mc_addr(mc_ptr, netdev)
-                        memcpy(mta_list + (i++ * ETH_ALEN),
-                               mc_ptr->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, netdev)
+                        memcpy(mta_list + (i++ * ETH_ALEN), ha->addr, ETH_ALEN);
 
                 e1000_update_mc_addr_list(hw, mta_list, i);
                 kfree(mta_list);
@@ -3080,12 +3082,15 @@ static int e1000_open(struct net_device *netdev)
 {
         struct e1000_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
+        struct pci_dev *pdev = adapter->pdev;
         int err;
 
         /* disallow open during test */
         if (test_bit(__E1000_TESTING, &adapter->state))
                 return -EBUSY;
 
+        pm_runtime_get_sync(&pdev->dev);
+
         netif_carrier_off(netdev);
 
         /* allocate transmit descriptors */
@@ -3146,6 +3151,9 @@ static int e1000_open(struct net_device *netdev)
 
         netif_start_queue(netdev);
 
+        adapter->idle_check = true;
+        pm_runtime_put(&pdev->dev);
+
         /* fire a link status change interrupt to start the watchdog */
         ew32(ICS, E1000_ICS_LSC);
 
@@ -3159,6 +3167,7 @@ err_setup_rx:
         e1000e_free_tx_resources(adapter);
 err_setup_tx:
         e1000e_reset(adapter);
+        pm_runtime_put_sync(&pdev->dev);
 
         return err;
 }
@@ -3177,11 +3186,17 @@ err_setup_tx:
 static int e1000_close(struct net_device *netdev)
 {
         struct e1000_adapter *adapter = netdev_priv(netdev);
+        struct pci_dev *pdev = adapter->pdev;
 
         WARN_ON(test_bit(__E1000_RESETTING, &adapter->state));
-        e1000e_down(adapter);
+
+        pm_runtime_get_sync(&pdev->dev);
+
+        if (!test_bit(__E1000_DOWN, &adapter->state)) {
+                e1000e_down(adapter);
+                e1000_free_irq(adapter);
+        }
         e1000_power_down_phy(adapter);
-        e1000_free_irq(adapter);
 
         e1000e_free_tx_resources(adapter);
         e1000e_free_rx_resources(adapter);
@@ -3203,6 +3218,8 @@ static int e1000_close(struct net_device *netdev)
         if (adapter->flags & FLAG_HAS_AMT)
                 e1000_release_hw_control(adapter);
 
+        pm_runtime_put_sync(&pdev->dev);
+
         return 0;
 }
 /**
@@ -3547,6 +3564,9 @@ static void e1000_watchdog_task(struct work_struct *work)
 
         link = e1000e_has_link(adapter);
         if ((netif_carrier_ok(netdev)) && link) {
+                /* Cancel scheduled suspend requests. */
+                pm_runtime_resume(netdev->dev.parent);
+
                 e1000e_enable_receives(adapter);
                 goto link_up;
         }
@@ -3558,6 +3578,10 @@ static void e1000_watchdog_task(struct work_struct *work)
         if (link) {
                 if (!netif_carrier_ok(netdev)) {
                         bool txb2b = 1;
+
+                        /* Cancel scheduled suspend requests. */
+                        pm_runtime_resume(netdev->dev.parent);
+
                         /* update snapshot of PHY registers on LSC */
                         e1000_phy_read_status(adapter);
                         mac->ops.get_link_up_info(&adapter->hw,
@@ -3667,6 +3691,9 @@ static void e1000_watchdog_task(struct work_struct *work)
 
                         if (adapter->flags & FLAG_RX_NEEDS_RESTART)
                                 schedule_work(&adapter->reset_task);
+                        else
+                                pm_schedule_suspend(netdev->dev.parent,
+                                                        LINK_TIMEOUT);
                 }
         }
 
@@ -4464,13 +4491,15 @@ out:
         return retval;
 }
 
-static int __e1000_shutdown(struct pci_dev *pdev, bool *enable_wake)
+static int __e1000_shutdown(struct pci_dev *pdev, bool *enable_wake,
+                            bool runtime)
 {
         struct net_device *netdev = pci_get_drvdata(pdev);
         struct e1000_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
         u32 ctrl, ctrl_ext, rctl, status;
-        u32 wufc = adapter->wol;
+        /* Runtime suspend should only enable wakeup for link changes */
+        u32 wufc = runtime ? E1000_WUFC_LNKC : adapter->wol;
         int retval = 0;
 
         netif_device_detach(netdev);
@@ -4627,43 +4656,21 @@ static void e1000e_disable_l1aspm(struct pci_dev *pdev)
         }
 }
 
-#ifdef CONFIG_PM
-static int e1000_suspend(struct pci_dev *pdev, pm_message_t state)
+#ifdef CONFIG_PM_OPS
+static bool e1000e_pm_ready(struct e1000_adapter *adapter)
 {
-        int retval;
-        bool wake;
-
-        retval = __e1000_shutdown(pdev, &wake);
-        if (!retval)
-                e1000_complete_shutdown(pdev, true, wake);
-
-        return retval;
+        return !!adapter->tx_ring->buffer_info;
 }
 
-static int e1000_resume(struct pci_dev *pdev)
+static int __e1000_resume(struct pci_dev *pdev)
 {
         struct net_device *netdev = pci_get_drvdata(pdev);
         struct e1000_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
         u32 err;
 
-        pci_set_power_state(pdev, PCI_D0);
-        pci_restore_state(pdev);
-        pci_save_state(pdev);
         e1000e_disable_l1aspm(pdev);
 
-        err = pci_enable_device_mem(pdev);
-        if (err) {
-                dev_err(&pdev->dev,
-                        "Cannot enable PCI device from suspend\n");
-                return err;
-        }
-
-        pci_set_master(pdev);
-
-        pci_enable_wake(pdev, PCI_D3hot, 0);
-        pci_enable_wake(pdev, PCI_D3cold, 0);
-
         e1000e_set_interrupt_capability(adapter);
         if (netif_running(netdev)) {
                 err = e1000_request_irq(adapter);
@@ -4721,13 +4728,88 @@ static int e1000_resume(struct pci_dev *pdev)
 
         return 0;
 }
-#endif
+
+#ifdef CONFIG_PM_SLEEP
+static int e1000_suspend(struct device *dev)
+{
+        struct pci_dev *pdev = to_pci_dev(dev);
+        int retval;
+        bool wake;
+
+        retval = __e1000_shutdown(pdev, &wake, false);
+        if (!retval)
+                e1000_complete_shutdown(pdev, true, wake);
+
+        return retval;
+}
+
+static int e1000_resume(struct device *dev)
+{
+        struct pci_dev *pdev = to_pci_dev(dev);
+        struct net_device *netdev = pci_get_drvdata(pdev);
+        struct e1000_adapter *adapter = netdev_priv(netdev);
+
+        if (e1000e_pm_ready(adapter))
+                adapter->idle_check = true;
+
+        return __e1000_resume(pdev);
+}
+#endif /* CONFIG_PM_SLEEP */
+
+#ifdef CONFIG_PM_RUNTIME
+static int e1000_runtime_suspend(struct device *dev)
+{
+        struct pci_dev *pdev = to_pci_dev(dev);
+        struct net_device *netdev = pci_get_drvdata(pdev);
+        struct e1000_adapter *adapter = netdev_priv(netdev);
+
+        if (e1000e_pm_ready(adapter)) {
+                bool wake;
+
+                __e1000_shutdown(pdev, &wake, true);
+        }
+
+        return 0;
+}
+
+static int e1000_idle(struct device *dev)
+{
+        struct pci_dev *pdev = to_pci_dev(dev);
+        struct net_device *netdev = pci_get_drvdata(pdev);
+        struct e1000_adapter *adapter = netdev_priv(netdev);
+
+        if (!e1000e_pm_ready(adapter))
+                return 0;
+
+        if (adapter->idle_check) {
+                adapter->idle_check = false;
+                if (!e1000e_has_link(adapter))
+                        pm_schedule_suspend(dev, MSEC_PER_SEC);
+        }
+
+        return -EBUSY;
+}
+
+static int e1000_runtime_resume(struct device *dev)
+{
+        struct pci_dev *pdev = to_pci_dev(dev);
+        struct net_device *netdev = pci_get_drvdata(pdev);
+        struct e1000_adapter *adapter = netdev_priv(netdev);
+
+        if (!e1000e_pm_ready(adapter))
+                return 0;
+
+        adapter->idle_check = !dev->power.runtime_auto;
+        return __e1000_resume(pdev);
+}
+#endif /* CONFIG_PM_RUNTIME */
+#endif /* CONFIG_PM_OPS */
 
 static void e1000_shutdown(struct pci_dev *pdev)
 {
         bool wake = false;
 
-        __e1000_shutdown(pdev, &wake);
+        __e1000_shutdown(pdev, &wake, false);
 
         if (system_state == SYSTEM_POWER_OFF)
                 e1000_complete_shutdown(pdev, false, wake);
@@ -4800,8 +4882,8 @@ static pci_ers_result_t e1000_io_slot_reset(struct pci_dev *pdev)
                 result = PCI_ERS_RESULT_DISCONNECT;
         } else {
                 pci_set_master(pdev);
+                pdev->state_saved = true;
                 pci_restore_state(pdev);
-                pci_save_state(pdev);
 
                 pci_enable_wake(pdev, PCI_D3hot, 0);
                 pci_enable_wake(pdev, PCI_D3cold, 0);
@@ -5208,6 +5290,12 @@ static int __devinit e1000_probe(struct pci_dev *pdev,
 
         e1000_print_device_info(adapter);
 
+        if (pci_dev_run_wake(pdev)) {
+                pm_runtime_set_active(&pdev->dev);
+                pm_runtime_enable(&pdev->dev);
+        }
+        pm_schedule_suspend(&pdev->dev, MSEC_PER_SEC);
+
         return 0;
 
 err_register:
@@ -5250,12 +5338,16 @@ static void __devexit e1000_remove(struct pci_dev *pdev)
 {
         struct net_device *netdev = pci_get_drvdata(pdev);
         struct e1000_adapter *adapter = netdev_priv(netdev);
+        bool down = test_bit(__E1000_DOWN, &adapter->state);
+
+        pm_runtime_get_sync(&pdev->dev);
 
         /*
          * flush_scheduled work may reschedule our watchdog task, so
          * explicitly disable watchdog tasks from being rescheduled
          */
-        set_bit(__E1000_DOWN, &adapter->state);
+        if (!down)
+                set_bit(__E1000_DOWN, &adapter->state);
         del_timer_sync(&adapter->watchdog_timer);
         del_timer_sync(&adapter->phy_info_timer);
 
@@ -5269,8 +5361,17 @@ static void __devexit e1000_remove(struct pci_dev *pdev)
         if (!(netdev->flags & IFF_UP))
                 e1000_power_down_phy(adapter);
 
+        /* Don't lie to e1000_close() down the road. */
+        if (!down)
+                clear_bit(__E1000_DOWN, &adapter->state);
         unregister_netdev(netdev);
 
+        if (pci_dev_run_wake(pdev)) {
+                pm_runtime_disable(&pdev->dev);
+                pm_runtime_set_suspended(&pdev->dev);
+        }
+        pm_runtime_put_noidle(&pdev->dev);
+
         /*
          * Release control of h/w to f/w.  If f/w is AMT enabled, this
          * would have already happened in close and is redundant.
@@ -5370,16 +5471,22 @@ static DEFINE_PCI_DEVICE_TABLE(e1000_pci_tbl) = {
 };
 MODULE_DEVICE_TABLE(pci, e1000_pci_tbl);
 
+#ifdef CONFIG_PM_OPS
+static const struct dev_pm_ops e1000_pm_ops = {
+        SET_SYSTEM_SLEEP_PM_OPS(e1000_suspend, e1000_resume)
+        SET_RUNTIME_PM_OPS(e1000_runtime_suspend,
+                                e1000_runtime_resume, e1000_idle)
+};
+#endif
+
 /* PCI Device API Driver */
 static struct pci_driver e1000_driver = {
         .name     = e1000e_driver_name,
         .id_table = e1000_pci_tbl,
         .probe    = e1000_probe,
         .remove   = __devexit_p(e1000_remove),
-#ifdef CONFIG_PM
-        /* Power Management Hooks */
-        .suspend  = e1000_suspend,
-        .resume   = e1000_resume,
+#ifdef CONFIG_PM_OPS
+        .driver.pm = &e1000_pm_ops,
 #endif
         .shutdown = e1000_shutdown,
         .err_handler = &e1000_err_handler
@@ -5394,10 +5501,9 @@ static struct pci_driver e1000_driver = {
 static int __init e1000_init_module(void)
 {
         int ret;
-        printk(KERN_INFO "%s: Intel(R) PRO/1000 Network Driver - %s\n",
-               e1000e_driver_name, e1000e_driver_version);
-        printk(KERN_INFO "%s: Copyright (c) 1999 - 2009 Intel Corporation.\n",
-               e1000e_driver_name);
+        pr_info("Intel(R) PRO/1000 Network Driver - %s\n",
+                e1000e_driver_version);
+        pr_info("Copyright (c) 1999 - 2009 Intel Corporation.\n");
         ret = pci_register_driver(&e1000_driver);
 
         return ret;
diff --git a/drivers/net/eepro.c b/drivers/net/eepro.c
index 1b05bdf62c3c..b01e6997403b 100644
--- a/drivers/net/eepro.c
+++ b/drivers/net/eepro.c
@@ -646,7 +646,7 @@ static void __init printEEPROMInfo(struct net_device *dev)
         if (GetBit(Word,ee_PortTPE)) printk(KERN_DEBUG "TPE ");
         if (GetBit(Word,ee_PortBNC)) printk(KERN_DEBUG "BNC ");
         if (GetBit(Word,ee_PortAUI)) printk(KERN_DEBUG "AUI ");
-        printk(KERN_DEBUG "port(s) \n");
+        printk(KERN_DEBUG "port(s)\n");
 
         Word = lp->word[6];
         printk(KERN_DEBUG "Word6:\n");
@@ -766,7 +766,7 @@ static int __init eepro_probe1(struct net_device *dev, int autoprobe)
         /* Grab the region so we can find another board if autoIRQ fails. */
         if (!request_region(ioaddr, EEPRO_IO_EXTENT, DRV_NAME)) {
                 if (!autoprobe)
-                        printk(KERN_WARNING "EEPRO: io-port 0x%04x in use \n",
+                        printk(KERN_WARNING "EEPRO: io-port 0x%04x in use\n",
                                 ioaddr);
                 return -EBUSY;
         }
@@ -1287,7 +1287,7 @@ set_multicast_list(struct net_device *dev)
         struct eepro_local *lp = netdev_priv(dev);
         short ioaddr = dev->base_addr;
         unsigned short mode;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int mc_count = netdev_mc_count(dev);
 
         if (dev->flags&(IFF_ALLMULTI|IFF_PROMISC) || mc_count > 63)
@@ -1332,8 +1332,8 @@ set_multicast_list(struct net_device *dev)
                 outw(0, ioaddr + IO_PORT);
                 outw(6 * (mc_count + 1), ioaddr + IO_PORT);
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        eaddrs = (unsigned short *) dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        eaddrs = (unsigned short *) ha->addr;
                         outw(*eaddrs++, ioaddr + IO_PORT);
                         outw(*eaddrs++, ioaddr + IO_PORT);
                         outw(*eaddrs++, ioaddr + IO_PORT);
diff --git a/drivers/net/eexpress.c b/drivers/net/eexpress.c
index 7013dc8a6cbc..b3882fd8db6d 100644
--- a/drivers/net/eexpress.c
+++ b/drivers/net/eexpress.c
@@ -1576,7 +1576,7 @@ static void eexp_hw_init586(struct net_device *dev)
 
 static void eexp_setup_filter(struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned short ioaddr = dev->base_addr;
         int count = netdev_mc_count(dev);
         int i;
@@ -1589,8 +1589,8 @@ static void eexp_setup_filter(struct net_device *dev)
         outw(CONF_NR_MULTICAST & ~31, ioaddr+SM_PTR);
         outw(6*count, ioaddr+SHADOW(CONF_NR_MULTICAST));
         i = 0;
-        netdev_for_each_mc_addr(dmi, dev) {
-                unsigned short *data = (unsigned short *) dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                unsigned short *data = (unsigned short *) ha->addr;
 
                 if (i == count)
                         break;
diff --git a/drivers/net/ehea/ehea_main.c b/drivers/net/ehea/ehea_main.c
index b004eaba3d7b..b97411aaa77c 100644
--- a/drivers/net/ehea/ehea_main.c
+++ b/drivers/net/ehea/ehea_main.c
@@ -1966,7 +1966,7 @@ static void ehea_add_multicast_entry(struct ehea_port *port, u8 *mc_mac_addr)
 static void ehea_set_multicast_list(struct net_device *dev)
 {
         struct ehea_port *port = netdev_priv(dev);
-        struct dev_mc_list *k_mcl_entry;
+        struct netdev_hw_addr *ha;
         int ret;
 
         if (dev->flags & IFF_PROMISC) {
@@ -1997,8 +1997,8 @@ static void ehea_set_multicast_list(struct net_device *dev)
                         goto out;
                 }
 
-                netdev_for_each_mc_addr(k_mcl_entry, dev)
-                        ehea_add_multicast_entry(port, k_mcl_entry->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        ehea_add_multicast_entry(port, ha->addr);
 
         }
 out:
diff --git a/drivers/net/enic/cq_enet_desc.h b/drivers/net/enic/cq_enet_desc.h
index 03dce9ed612c..337d1943af46 100644
--- a/drivers/net/enic/cq_enet_desc.h
+++ b/drivers/net/enic/cq_enet_desc.h
@@ -101,14 +101,18 @@ static inline void cq_enet_rq_desc_dec(struct cq_enet_rq_desc *desc,
         u8 *tcp_udp_csum_ok, u8 *udp, u8 *tcp, u8 *ipv4_csum_ok,
         u8 *ipv6, u8 *ipv4, u8 *ipv4_fragment, u8 *fcs_ok)
 {
-        u16 completed_index_flags = le16_to_cpu(desc->completed_index_flags);
-        u16 q_number_rss_type_flags =
-                le16_to_cpu(desc->q_number_rss_type_flags);
-        u16 bytes_written_flags = le16_to_cpu(desc->bytes_written_flags);
+        u16 completed_index_flags;
+        u16 q_number_rss_type_flags;
+        u16 bytes_written_flags;
 
         cq_desc_dec((struct cq_desc *)desc, type,
                 color, q_number, completed_index);
 
+        completed_index_flags = le16_to_cpu(desc->completed_index_flags);
+        q_number_rss_type_flags =
+                le16_to_cpu(desc->q_number_rss_type_flags);
+        bytes_written_flags = le16_to_cpu(desc->bytes_written_flags);
+
         *ingress_port = (completed_index_flags &
                 CQ_ENET_RQ_DESC_FLAGS_INGRESS_PORT) ? 1 : 0;
         *fcoe = (completed_index_flags & CQ_ENET_RQ_DESC_FLAGS_FCOE) ?
diff --git a/drivers/net/enic/enic.h b/drivers/net/enic/enic.h
index ee01f5a6d0d4..5fa56f1e5590 100644
--- a/drivers/net/enic/enic.h
+++ b/drivers/net/enic/enic.h
@@ -33,8 +33,8 @@
 #include "vnic_rss.h"
 
 #define DRV_NAME                "enic"
-#define DRV_DESCRIPTION         "Cisco 10G Ethernet Driver"
-#define DRV_VERSION             "1.1.0.241a"
+#define DRV_DESCRIPTION         "Cisco VIC Ethernet NIC Driver"
+#define DRV_VERSION             "1.3.1.1"
 #define DRV_COPYRIGHT           "Copyright 2008-2009 Cisco Systems, Inc"
 #define PFX                     DRV_NAME ": "
 
diff --git a/drivers/net/enic/enic_main.c b/drivers/net/enic/enic_main.c
index cf098bb636b8..1232887c243d 100644
--- a/drivers/net/enic/enic_main.c
+++ b/drivers/net/enic/enic_main.c
@@ -822,14 +822,14 @@ static int enic_set_mac_addr(struct net_device *netdev, char *addr)
 static void enic_set_multicast_list(struct net_device *netdev)
 {
         struct enic *enic = netdev_priv(netdev);
-        struct dev_mc_list *list;
+        struct netdev_hw_addr *ha;
         int directed = 1;
         int multicast = (netdev->flags & IFF_MULTICAST) ? 1 : 0;
         int broadcast = (netdev->flags & IFF_BROADCAST) ? 1 : 0;
         int promisc = (netdev->flags & IFF_PROMISC) ? 1 : 0;
         unsigned int mc_count = netdev_mc_count(netdev);
         int allmulti = (netdev->flags & IFF_ALLMULTI) ||
-                       mc_count > ENIC_MULTICAST_PERFECT_FILTERS;
+                mc_count > ENIC_MULTICAST_PERFECT_FILTERS;
         unsigned int flags = netdev->flags | (allmulti ? IFF_ALLMULTI : 0);
         u8 mc_addr[ENIC_MULTICAST_PERFECT_FILTERS][ETH_ALEN];
         unsigned int i, j;
@@ -852,10 +852,10 @@ static void enic_set_multicast_list(struct net_device *netdev)
          */
 
         i = 0;
-        netdev_for_each_mc_addr(list, netdev) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 if (i == mc_count)
                         break;
-                memcpy(mc_addr[i++], list->dmi_addr, ETH_ALEN);
+                memcpy(mc_addr[i++], ha->addr, ETH_ALEN);
         }
 
         for (i = 0; i < enic->mc_count; i++) {
@@ -2058,8 +2058,7 @@ static int __devinit enic_probe(struct pci_dev *pdev,
         netdev->watchdog_timeo = 2 * HZ;
         netdev->ethtool_ops = &enic_ethtool_ops;
 
-        netdev->features |= NETIF_F_HW_VLAN_TX |
-                NETIF_F_HW_VLAN_RX | NETIF_F_HW_VLAN_FILTER;
+        netdev->features |= NETIF_F_HW_VLAN_TX | NETIF_F_HW_VLAN_RX;
         if (ENIC_SETTING(enic, TXCSUM))
                 netdev->features |= NETIF_F_SG | NETIF_F_HW_CSUM;
         if (ENIC_SETTING(enic, TSO))
diff --git a/drivers/net/enic/vnic_dev.c b/drivers/net/enic/vnic_dev.c
index 69b9b70c7da0..cbc0ba953fc6 100644
--- a/drivers/net/enic/vnic_dev.c
+++ b/drivers/net/enic/vnic_dev.c
@@ -573,22 +573,18 @@ int vnic_dev_raise_intr(struct vnic_dev *vdev, u16 intr)
         return err;
 }
 
-int vnic_dev_notify_set(struct vnic_dev *vdev, u16 intr)
+int vnic_dev_notify_setcmd(struct vnic_dev *vdev,
+        void *notify_addr, dma_addr_t notify_pa, u16 intr)
 {
         u64 a0, a1;
         int wait = 1000;
         int r;
 
-        if (!vdev->notify) {
-                vdev->notify = pci_alloc_consistent(vdev->pdev,
-                        sizeof(struct vnic_devcmd_notify),
-                        &vdev->notify_pa);
-                if (!vdev->notify)
-                        return -ENOMEM;
-                memset(vdev->notify, 0, sizeof(struct vnic_devcmd_notify));
-        }
+        memset(notify_addr, 0, sizeof(struct vnic_devcmd_notify));
+        vdev->notify = notify_addr;
+        vdev->notify_pa = notify_pa;
 
-        a0 = vdev->notify_pa;
+        a0 = (u64)notify_pa;
         a1 = ((u64)intr << 32) & 0x0000ffff00000000ULL;
         a1 += sizeof(struct vnic_devcmd_notify);
 
@@ -597,7 +593,27 @@ int vnic_dev_notify_set(struct vnic_dev *vdev, u16 intr)
         return r;
 }
 
-void vnic_dev_notify_unset(struct vnic_dev *vdev)
+int vnic_dev_notify_set(struct vnic_dev *vdev, u16 intr)
+{
+        void *notify_addr;
+        dma_addr_t notify_pa;
+
+        if (vdev->notify || vdev->notify_pa) {
+                printk(KERN_ERR "notify block %p still allocated",
+                        vdev->notify);
+                return -EINVAL;
+        }
+
+        notify_addr = pci_alloc_consistent(vdev->pdev,
+                        sizeof(struct vnic_devcmd_notify),
+                        &notify_pa);
+        if (!notify_addr)
+                return -ENOMEM;
+
+        return vnic_dev_notify_setcmd(vdev, notify_addr, notify_pa, intr);
+}
+
+void vnic_dev_notify_unsetcmd(struct vnic_dev *vdev)
 {
         u64 a0, a1;
         int wait = 1000;
@@ -607,9 +623,23 @@ void vnic_dev_notify_unset(struct vnic_dev *vdev)
         a1 += sizeof(struct vnic_devcmd_notify);
 
         vnic_dev_cmd(vdev, CMD_NOTIFY, &a0, &a1, wait);
+        vdev->notify = NULL;
+        vdev->notify_pa = 0;
         vdev->notify_sz = 0;
 }
 
+void vnic_dev_notify_unset(struct vnic_dev *vdev)
+{
+        if (vdev->notify) {
+                pci_free_consistent(vdev->pdev,
+                        sizeof(struct vnic_devcmd_notify),
+                        vdev->notify,
+                        vdev->notify_pa);
+        }
+
+        vnic_dev_notify_unsetcmd(vdev);
+}
+
 static int vnic_dev_notify_ready(struct vnic_dev *vdev)
 {
         u32 *words;
diff --git a/drivers/net/enic/vnic_dev.h b/drivers/net/enic/vnic_dev.h
index fc5e3eb35a5e..f5be640b0b5c 100644
--- a/drivers/net/enic/vnic_dev.h
+++ b/drivers/net/enic/vnic_dev.h
@@ -107,7 +107,10 @@ void vnic_dev_add_addr(struct vnic_dev *vdev, u8 *addr);
 void vnic_dev_del_addr(struct vnic_dev *vdev, u8 *addr);
 int vnic_dev_mac_addr(struct vnic_dev *vdev, u8 *mac_addr);
 int vnic_dev_raise_intr(struct vnic_dev *vdev, u16 intr);
+int vnic_dev_notify_setcmd(struct vnic_dev *vdev,
+        void *notify_addr, dma_addr_t notify_pa, u16 intr);
 int vnic_dev_notify_set(struct vnic_dev *vdev, u16 intr);
+void vnic_dev_notify_unsetcmd(struct vnic_dev *vdev);
 void vnic_dev_notify_unset(struct vnic_dev *vdev);
 int vnic_dev_link_status(struct vnic_dev *vdev);
 u32 vnic_dev_port_speed(struct vnic_dev *vdev);
diff --git a/drivers/net/enic/vnic_rq.c b/drivers/net/enic/vnic_rq.c
index 75583978a5e5..7bcd90373487 100644
--- a/drivers/net/enic/vnic_rq.c
+++ b/drivers/net/enic/vnic_rq.c
@@ -167,10 +167,10 @@ int vnic_rq_disable(struct vnic_rq *rq)
         iowrite32(0, &rq->ctrl->enable);
 
         /* Wait for HW to ACK disable request */
-        for (wait = 0; wait < 100; wait++) {
+        for (wait = 0; wait < 1000; wait++) {
                 if (!(ioread32(&rq->ctrl->running)))
                         return 0;
-                udelay(1);
+                udelay(10);
         }
 
         printk(KERN_ERR "Failed to disable RQ[%d]\n", rq->index);
diff --git a/drivers/net/enic/vnic_wq.c b/drivers/net/enic/vnic_wq.c
index d2e00e51b7b5..44fc3234d585 100644
--- a/drivers/net/enic/vnic_wq.c
+++ b/drivers/net/enic/vnic_wq.c
@@ -160,10 +160,10 @@ int vnic_wq_disable(struct vnic_wq *wq)
         iowrite32(0, &wq->ctrl->enable);
 
         /* Wait for HW to ACK disable request */
-        for (wait = 0; wait < 100; wait++) {
+        for (wait = 0; wait < 1000; wait++) {
                 if (!(ioread32(&wq->ctrl->running)))
                         return 0;
-                udelay(1);
+                udelay(10);
         }
 
         printk(KERN_ERR "Failed to disable WQ[%d]\n", wq->index);
diff --git a/drivers/net/epic100.c b/drivers/net/epic100.c
index 39c271b6be44..f6584a1ad3bc 100644
--- a/drivers/net/epic100.c
+++ b/drivers/net/epic100.c
@@ -1400,12 +1400,12 @@ static void set_rx_mode(struct net_device *dev)
                 outl(0x0004, ioaddr + RxCtrl);
                 return;
         } else {                                        /* Never executed, for now. */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         unsigned int bit_nr =
-                                ether_crc_le(ETH_ALEN, mclist->dmi_addr) & 0x3f;
+                                ether_crc_le(ETH_ALEN, ha->addr) & 0x3f;
                         mc_filter[bit_nr >> 3] |= (1 << bit_nr);
                 }
         }
diff --git a/drivers/net/ethoc.c b/drivers/net/ethoc.c
index 209742304e20..f6be5aeaf94c 100644
--- a/drivers/net/ethoc.c
+++ b/drivers/net/ethoc.c
@@ -755,7 +755,7 @@ static void ethoc_set_multicast_list(struct net_device *dev)
 {
         struct ethoc *priv = netdev_priv(dev);
         u32 mode = ethoc_read(priv, MODER);
-        struct dev_mc_list *mc;
+        struct netdev_hw_addr *ha;
         u32 hash[2] = { 0, 0 };
 
         /* set loopback mode if requested */
@@ -783,8 +783,8 @@ static void ethoc_set_multicast_list(struct net_device *dev)
                 hash[0] = 0xffffffff;
                 hash[1] = 0xffffffff;
         } else {
-                netdev_for_each_mc_addr(mc, dev) {
-                        u32 crc = ether_crc(ETH_ALEN, mc->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        u32 crc = ether_crc(ETH_ALEN, ha->addr);
                         int bit = (crc >> 26) & 0x3f;
                         hash[bit >> 5] |= 1 << (bit & 0x1f);
                 }
diff --git a/drivers/net/ewrk3.c b/drivers/net/ewrk3.c
index 91e59f3a9d6d..11ba70f49971 100644
--- a/drivers/net/ewrk3.c
+++ b/drivers/net/ewrk3.c
@@ -1169,7 +1169,7 @@ static void set_multicast_list(struct net_device *dev)
 static void SetMulticastFilter(struct net_device *dev)
 {
         struct ewrk3_private *lp = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         u_long iobase = dev->base_addr;
         int i;
         char *addrs, bit, byte;
@@ -1213,8 +1213,8 @@ static void SetMulticastFilter(struct net_device *dev)
                 }
 
                 /* Update table */
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
                         if ((*addrs & 0x01) == 1) {     /* multicast address? */
                                 crc = ether_crc_le(ETH_ALEN, addrs);
                                 hashcode = crc & ((1 << 9) - 1);        /* hashcode is 9 LSb of CRC */
@@ -1776,8 +1776,7 @@ static int ewrk3_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
                 break;
         case EWRK3_SET_MCA:     /* Set a multicast address */
                 if (capable(CAP_NET_ADMIN)) {
-                        if (ioc->len > 1024)
-                        {
+                        if (ioc->len > HASH_TABLE_LEN) {
                                 status = -EINVAL;
                                 break;
                         }
diff --git a/drivers/net/fealnx.c b/drivers/net/fealnx.c
index 9d5ad08a119f..e8a2705237bf 100644
--- a/drivers/net/fealnx.c
+++ b/drivers/net/fealnx.c
@@ -1792,12 +1792,12 @@ static void __set_rx_mode(struct net_device *dev)
                 memset(mc_filter, 0xff, sizeof(mc_filter));
                 rx_mode = CR_W_AB | CR_W_AM;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         unsigned int bit;
-                        bit = (ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26) ^ 0x3F;
+                        bit = (ether_crc(ETH_ALEN, ha->addr) >> 26) ^ 0x3F;
                         mc_filter[bit >> 5] |= (1 << bit);
                 }
                 rx_mode = CR_W_AB | CR_W_AM;
diff --git a/drivers/net/fec.c b/drivers/net/fec.c
index 9f98c1c4a344..2b1651aee13f 100644
--- a/drivers/net/fec.c
+++ b/drivers/net/fec.c
@@ -40,6 +40,7 @@
 #include <linux/irq.h>
 #include <linux/clk.h>
 #include <linux/platform_device.h>
+#include <linux/phy.h>
 
 #include <asm/cacheflush.h>
 
@@ -61,7 +62,6 @@
  * Define the fixed address of the FEC hardware.
  */
 #if defined(CONFIG_M5272)
-#define HAVE_mii_link_interrupt
 
 static unsigned char    fec_mac_default[] = {
         0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
@@ -86,23 +86,6 @@ static unsigned char	fec_mac_default[] = {
 #endif
 #endif /* CONFIG_M5272 */
 
-/* Forward declarations of some structures to support different PHYs */
-
-typedef struct {
-        uint mii_data;
-        void (*funct)(uint mii_reg, struct net_device *dev);
-} phy_cmd_t;
-
-typedef struct {
-        uint id;
-        char *name;
-
-        const phy_cmd_t *config;
-        const phy_cmd_t *startup;
-        const phy_cmd_t *ack_int;
-        const phy_cmd_t *shutdown;
-} phy_info_t;
-
 /* The number of Tx and Rx buffers.  These are allocated from the page
  * pool.  The code may assume these are power of two, so it it best
  * to keep them that size.
@@ -189,29 +172,21 @@ struct fec_enet_private {
         uint    tx_full;
         /* hold while accessing the HW like ringbuffer for tx/rx but not MAC */
         spinlock_t hw_lock;
-        /* hold while accessing the mii_list_t() elements */
-        spinlock_t mii_lock;
-
-        uint    phy_id;
-        uint    phy_id_done;
-        uint    phy_status;
-        uint    phy_speed;
-        phy_info_t const        *phy;
-        struct work_struct phy_task;
 
-        uint    sequence_done;
-        uint    mii_phy_task_queued;
+        struct  platform_device *pdev;
 
-        uint    phy_addr;
+        int     opened;
 
+        /* Phylib and MDIO interface */
+        struct  mii_bus *mii_bus;
+        struct  phy_device *phy_dev;
+        int     mii_timeout;
+        uint    phy_speed;
         int     index;
-        int     opened;
         int     link;
-        int     old_link;
         int     full_duplex;
 };
 
-static void fec_enet_mii(struct net_device *dev);
 static irqreturn_t fec_enet_interrupt(int irq, void * dev_id);
 static void fec_enet_tx(struct net_device *dev);
 static void fec_enet_rx(struct net_device *dev);
@@ -219,67 +194,20 @@ static int fec_enet_close(struct net_device *dev);
 static void fec_restart(struct net_device *dev, int duplex);
 static void fec_stop(struct net_device *dev);
 
+/* FEC MII MMFR bits definition */
+#define FEC_MMFR_ST             (1 << 30)
+#define FEC_MMFR_OP_READ        (2 << 28)
+#define FEC_MMFR_OP_WRITE       (1 << 28)
+#define FEC_MMFR_PA(v)          ((v & 0x1f) << 23)
+#define FEC_MMFR_RA(v)          ((v & 0x1f) << 18)
+#define FEC_MMFR_TA             (2 << 16)
+#define FEC_MMFR_DATA(v)        (v & 0xffff)
 
-/* MII processing.  We keep this as simple as possible.  Requests are
- * placed on the list (if there is room).  When the request is finished
- * by the MII, an optional function may be called.
- */
-typedef struct mii_list {
-        uint    mii_regval;
-        void    (*mii_func)(uint val, struct net_device *dev);
-        struct  mii_list *mii_next;
-} mii_list_t;
-
-#define         NMII    20
-static mii_list_t       mii_cmds[NMII];
-static mii_list_t       *mii_free;
-static mii_list_t       *mii_head;
-static mii_list_t       *mii_tail;
-
-static int      mii_queue(struct net_device *dev, int request,
-                                void (*func)(uint, struct net_device *));
-
-/* Make MII read/write commands for the FEC */
-#define mk_mii_read(REG)        (0x60020000 | ((REG & 0x1f) << 18))
-#define mk_mii_write(REG, VAL)  (0x50020000 | ((REG & 0x1f) << 18) | \
-                                                (VAL & 0xffff))
-#define mk_mii_end      0
+#define FEC_MII_TIMEOUT         10000
 
 /* Transmitter timeout */
 #define TX_TIMEOUT (2 * HZ)
 
-/* Register definitions for the PHY */
-
-#define MII_REG_CR          0  /* Control Register                         */
-#define MII_REG_SR          1  /* Status Register                          */
-#define MII_REG_PHYIR1      2  /* PHY Identification Register 1            */
-#define MII_REG_PHYIR2      3  /* PHY Identification Register 2            */
-#define MII_REG_ANAR        4  /* A-N Advertisement Register               */
-#define MII_REG_ANLPAR      5  /* A-N Link Partner Ability Register        */
-#define MII_REG_ANER        6  /* A-N Expansion Register                   */
-#define MII_REG_ANNPTR      7  /* A-N Next Page Transmit Register          */
-#define MII_REG_ANLPRNPR    8  /* A-N Link Partner Received Next Page Reg. */
-
-/* values for phy_status */
-
-#define PHY_CONF_ANE    0x0001  /* 1 auto-negotiation enabled */
-#define PHY_CONF_LOOP   0x0002  /* 1 loopback mode enabled */
-#define PHY_CONF_SPMASK 0x00f0  /* mask for speed */
-#define PHY_CONF_10HDX  0x0010  /* 10 Mbit half duplex supported */
-#define PHY_CONF_10FDX  0x0020  /* 10 Mbit full duplex supported */
-#define PHY_CONF_100HDX 0x0040  /* 100 Mbit half duplex supported */
-#define PHY_CONF_100FDX 0x0080  /* 100 Mbit full duplex supported */
-
-#define PHY_STAT_LINK   0x0100  /* 1 up - 0 down */
-#define PHY_STAT_FAULT  0x0200  /* 1 remote fault */
-#define PHY_STAT_ANC    0x0400  /* 1 auto-negotiation complete  */
-#define PHY_STAT_SPMASK 0xf000  /* mask for speed */
-#define PHY_STAT_10HDX  0x1000  /* 10 Mbit half duplex selected */
-#define PHY_STAT_10FDX  0x2000  /* 10 Mbit full duplex selected */
-#define PHY_STAT_100HDX 0x4000  /* 100 Mbit half duplex selected */
-#define PHY_STAT_100FDX 0x8000  /* 100 Mbit full duplex selected */
-
-
 static int
 fec_enet_start_xmit(struct sk_buff *skb, struct net_device *dev)
 {
@@ -406,12 +334,6 @@ fec_enet_interrupt(int irq, void * dev_id)
                         ret = IRQ_HANDLED;
                         fec_enet_tx(dev);
                 }
-
-                if (int_events & FEC_ENET_MII) {
-                        ret = IRQ_HANDLED;
-                        fec_enet_mii(dev);
-                }
-
         } while (int_events);
 
         return ret;
@@ -607,827 +529,311 @@ rx_processing_done:
         spin_unlock(&fep->hw_lock);
 }
 
-/* called from interrupt context */
-static void
-fec_enet_mii(struct net_device *dev)
-{
-        struct  fec_enet_private *fep;
-        mii_list_t      *mip;
-
-        fep = netdev_priv(dev);
-        spin_lock(&fep->mii_lock);
-
-        if ((mip = mii_head) == NULL) {
-                printk("MII and no head!\n");
-                goto unlock;
-        }
-
-        if (mip->mii_func != NULL)
-                (*(mip->mii_func))(readl(fep->hwp + FEC_MII_DATA), dev);
-
-        mii_head = mip->mii_next;
-        mip->mii_next = mii_free;
-        mii_free = mip;
-
-        if ((mip = mii_head) != NULL)
-                writel(mip->mii_regval, fep->hwp + FEC_MII_DATA);
-
-unlock:
-        spin_unlock(&fep->mii_lock);
-}
-
-static int
-mii_queue_unlocked(struct net_device *dev, int regval,
-                void (*func)(uint, struct net_device *))
+/* ------------------------------------------------------------------------- */
+#ifdef CONFIG_M5272
+static void __inline__ fec_get_mac(struct net_device *dev)
 {
-        struct fec_enet_private *fep;
-        mii_list_t      *mip;
-        int             retval;
-
-        /* Add PHY address to register command */
-        fep = netdev_priv(dev);
+        struct fec_enet_private *fep = netdev_priv(dev);
+        unsigned char *iap, tmpaddr[ETH_ALEN];
 
-        regval |= fep->phy_addr << 23;
-        retval = 0;
-
-        if ((mip = mii_free) != NULL) {
-                mii_free = mip->mii_next;
-                mip->mii_regval = regval;
-                mip->mii_func = func;
-                mip->mii_next = NULL;
-                if (mii_head) {
-                        mii_tail->mii_next = mip;
-                        mii_tail = mip;
-                } else {
-                        mii_head = mii_tail = mip;
-                        writel(regval, fep->hwp + FEC_MII_DATA);
-                }
+        if (FEC_FLASHMAC) {
+                /*
+                 * Get MAC address from FLASH.
+                 * If it is all 1's or 0's, use the default.
+                 */
+                iap = (unsigned char *)FEC_FLASHMAC;
+                if ((iap[0] == 0) && (iap[1] == 0) && (iap[2] == 0) &&
+                    (iap[3] == 0) && (iap[4] == 0) && (iap[5] == 0))
+                        iap = fec_mac_default;
+                if ((iap[0] == 0xff) && (iap[1] == 0xff) && (iap[2] == 0xff) &&
+                    (iap[3] == 0xff) && (iap[4] == 0xff) && (iap[5] == 0xff))
+                        iap = fec_mac_default;
         } else {
-                retval = 1;
+                *((unsigned long *) &tmpaddr[0]) = readl(fep->hwp + FEC_ADDR_LOW);
+                *((unsigned short *) &tmpaddr[4]) = (readl(fep->hwp + FEC_ADDR_HIGH) >> 16);
+                iap = &tmpaddr[0];
         }
 
-        return retval;
-}
-
-static int
-mii_queue(struct net_device *dev, int regval,
-                void (*func)(uint, struct net_device *))
-{
-        struct fec_enet_private *fep;
-        unsigned long   flags;
-        int             retval;
-        fep = netdev_priv(dev);
-        spin_lock_irqsave(&fep->mii_lock, flags);
-        retval = mii_queue_unlocked(dev, regval, func);
-        spin_unlock_irqrestore(&fep->mii_lock, flags);
-        return retval;
-}
-
-static void mii_do_cmd(struct net_device *dev, const phy_cmd_t *c)
-{
-        if(!c)
-                return;
+        memcpy(dev->dev_addr, iap, ETH_ALEN);
 
-        for (; c->mii_data != mk_mii_end; c++)
-                mii_queue(dev, c->mii_data, c->funct);
+        /* Adjust MAC if using default MAC address */
+        if (iap == fec_mac_default)
+                 dev->dev_addr[ETH_ALEN-1] = fec_mac_default[ETH_ALEN-1] + fep->index;
 }
+#endif
 
-static void mii_parse_sr(uint mii_reg, struct net_device *dev)
-{
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
-
-        status = *s & ~(PHY_STAT_LINK | PHY_STAT_FAULT | PHY_STAT_ANC);
-
-        if (mii_reg & 0x0004)
-                status |= PHY_STAT_LINK;
-        if (mii_reg & 0x0010)
-                status |= PHY_STAT_FAULT;
-        if (mii_reg & 0x0020)
-                status |= PHY_STAT_ANC;
-        *s = status;
-}
+/* ------------------------------------------------------------------------- */
 
-static void mii_parse_cr(uint mii_reg, struct net_device *dev)
+/*
+ * Phy section
+ */
+static void fec_enet_adjust_link(struct net_device *dev)
 {
         struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
-
-        status = *s & ~(PHY_CONF_ANE | PHY_CONF_LOOP);
-
-        if (mii_reg & 0x1000)
-                status |= PHY_CONF_ANE;
-        if (mii_reg & 0x4000)
-                status |= PHY_CONF_LOOP;
-        *s = status;
-}
+        struct phy_device *phy_dev = fep->phy_dev;
+        unsigned long flags;
 
-static void mii_parse_anar(uint mii_reg, struct net_device *dev)
-{
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
-
-        status = *s & ~(PHY_CONF_SPMASK);
-
-        if (mii_reg & 0x0020)
-                status |= PHY_CONF_10HDX;
-        if (mii_reg & 0x0040)
-                status |= PHY_CONF_10FDX;
-        if (mii_reg & 0x0080)
-                status |= PHY_CONF_100HDX;
-        if (mii_reg & 0x00100)
-                status |= PHY_CONF_100FDX;
-        *s = status;
-}
+        int status_change = 0;
 
-/* ------------------------------------------------------------------------- */
-/* The Level one LXT970 is used by many boards                               */
+        spin_lock_irqsave(&fep->hw_lock, flags);
 
-#define MII_LXT970_MIRROR    16  /* Mirror register           */
-#define MII_LXT970_IER       17  /* Interrupt Enable Register */
-#define MII_LXT970_ISR       18  /* Interrupt Status Register */
-#define MII_LXT970_CONFIG    19  /* Configuration Register    */
-#define MII_LXT970_CSR       20  /* Chip Status Register      */
+        /* Prevent a state halted on mii error */
+        if (fep->mii_timeout && phy_dev->state == PHY_HALTED) {
+                phy_dev->state = PHY_RESUMING;
+                goto spin_unlock;
+        }
 
-static void mii_parse_lxt970_csr(uint mii_reg, struct net_device *dev)
-{
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
+        /* Duplex link change */
+        if (phy_dev->link) {
+                if (fep->full_duplex != phy_dev->duplex) {
+                        fec_restart(dev, phy_dev->duplex);
+                        status_change = 1;
+                }
+        }
 
-        status = *s & ~(PHY_STAT_SPMASK);
-        if (mii_reg & 0x0800) {
-                if (mii_reg & 0x1000)
-                        status |= PHY_STAT_100FDX;
+        /* Link on or off change */
+        if (phy_dev->link != fep->link) {
+                fep->link = phy_dev->link;
+                if (phy_dev->link)
+                        fec_restart(dev, phy_dev->duplex);
                 else
-                        status |= PHY_STAT_100HDX;
-        } else {
-                if (mii_reg & 0x1000)
-                        status |= PHY_STAT_10FDX;
-                else
-                        status |= PHY_STAT_10HDX;
+                        fec_stop(dev);
+                status_change = 1;
         }
-        *s = status;
-}
-
-static phy_cmd_t const phy_cmd_lxt970_config[] = {
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt970_startup[] = { /* enable interrupts */
-                { mk_mii_write(MII_LXT970_IER, 0x0002), NULL },
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt970_ack_int[] = {
-                /* read SR and ISR to acknowledge */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_read(MII_LXT970_ISR), NULL },
-
-                /* find out the current status */
-                { mk_mii_read(MII_LXT970_CSR), mii_parse_lxt970_csr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt970_shutdown[] = { /* disable interrupts */
-                { mk_mii_write(MII_LXT970_IER, 0x0000), NULL },
-                { mk_mii_end, }
-        };
-static phy_info_t const phy_info_lxt970 = {
-        .id = 0x07810000,
-        .name = "LXT970",
-        .config = phy_cmd_lxt970_config,
-        .startup = phy_cmd_lxt970_startup,
-        .ack_int = phy_cmd_lxt970_ack_int,
-        .shutdown = phy_cmd_lxt970_shutdown
-};
 
-/* ------------------------------------------------------------------------- */
-/* The Level one LXT971 is used on some of my custom boards                  */
-
-/* register definitions for the 971 */
+spin_unlock:
+        spin_unlock_irqrestore(&fep->hw_lock, flags);
 
-#define MII_LXT971_PCR       16  /* Port Control Register     */
-#define MII_LXT971_SR2       17  /* Status Register 2         */
-#define MII_LXT971_IER       18  /* Interrupt Enable Register */
-#define MII_LXT971_ISR       19  /* Interrupt Status Register */
-#define MII_LXT971_LCR       20  /* LED Control Register      */
-#define MII_LXT971_TCR       30  /* Transmit Control Register */
+        if (status_change)
+                phy_print_status(phy_dev);
+}
 
 /*
- * I had some nice ideas of running the MDIO faster...
- * The 971 should support 8MHz and I tried it, but things acted really
- * weird, so 2.5 MHz ought to be enough for anyone...
+ * NOTE: a MII transaction is during around 25 us, so polling it...
  */
-
-static void mii_parse_lxt971_sr2(uint mii_reg, struct net_device *dev)
+static int fec_enet_mdio_read(struct mii_bus *bus, int mii_id, int regnum)
 {
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
+        struct fec_enet_private *fep = bus->priv;
+        int timeout = FEC_MII_TIMEOUT;
 
-        status = *s & ~(PHY_STAT_SPMASK | PHY_STAT_LINK | PHY_STAT_ANC);
+        fep->mii_timeout = 0;
 
-        if (mii_reg & 0x0400) {
-                fep->link = 1;
-                status |= PHY_STAT_LINK;
-        } else {
-                fep->link = 0;
-        }
-        if (mii_reg & 0x0080)
-                status |= PHY_STAT_ANC;
-        if (mii_reg & 0x4000) {
-                if (mii_reg & 0x0200)
-                        status |= PHY_STAT_100FDX;
-                else
-                        status |= PHY_STAT_100HDX;
-        } else {
-                if (mii_reg & 0x0200)
-                        status |= PHY_STAT_10FDX;
-                else
-                        status |= PHY_STAT_10HDX;
+        /* clear MII end of transfer bit*/
+        writel(FEC_ENET_MII, fep->hwp + FEC_IEVENT);
+
+        /* start a read op */
+        writel(FEC_MMFR_ST | FEC_MMFR_OP_READ |
+                FEC_MMFR_PA(mii_id) | FEC_MMFR_RA(regnum) |
+                FEC_MMFR_TA, fep->hwp + FEC_MII_DATA);
+
+        /* wait for end of transfer */
+        while (!(readl(fep->hwp + FEC_IEVENT) & FEC_ENET_MII)) {
+                cpu_relax();
+                if (timeout-- < 0) {
+                        fep->mii_timeout = 1;
+                        printk(KERN_ERR "FEC: MDIO read timeout\n");
+                        return -ETIMEDOUT;
+                }
         }
-        if (mii_reg & 0x0008)
-                status |= PHY_STAT_FAULT;
 
-        *s = status;
+        /* return value */
+        return FEC_MMFR_DATA(readl(fep->hwp + FEC_MII_DATA));
 }
 
-static phy_cmd_t const phy_cmd_lxt971_config[] = {
-                /* limit to 10MBit because my prototype board
-                 * doesn't work with 100. */
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_read(MII_LXT971_SR2), mii_parse_lxt971_sr2 },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt971_startup[] = {  /* enable interrupts */
-                { mk_mii_write(MII_LXT971_IER, 0x00f2), NULL },
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_write(MII_LXT971_LCR, 0xd422), NULL }, /* LED config */
-                /* Somehow does the 971 tell me that the link is down
-                 * the first read after power-up.
-                 * read here to get a valid value in ack_int */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt971_ack_int[] = {
-                /* acknowledge the int before reading status ! */
-                { mk_mii_read(MII_LXT971_ISR), NULL },
-                /* find out the current status */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_read(MII_LXT971_SR2), mii_parse_lxt971_sr2 },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_lxt971_shutdown[] = { /* disable interrupts */
-                { mk_mii_write(MII_LXT971_IER, 0x0000), NULL },
-                { mk_mii_end, }
-        };
-static phy_info_t const phy_info_lxt971 = {
-        .id = 0x0001378e,
-        .name = "LXT971",
-        .config = phy_cmd_lxt971_config,
-        .startup = phy_cmd_lxt971_startup,
-        .ack_int = phy_cmd_lxt971_ack_int,
-        .shutdown = phy_cmd_lxt971_shutdown
-};
-
-/* ------------------------------------------------------------------------- */
-/* The Quality Semiconductor QS6612 is used on the RPX CLLF                  */
-
-/* register definitions */
-
-#define MII_QS6612_MCR       17  /* Mode Control Register      */
-#define MII_QS6612_FTR       27  /* Factory Test Register      */
-#define MII_QS6612_MCO       28  /* Misc. Control Register     */
-#define MII_QS6612_ISR       29  /* Interrupt Source Register  */
-#define MII_QS6612_IMR       30  /* Interrupt Mask Register    */
-#define MII_QS6612_PCR       31  /* 100BaseTx PHY Control Reg. */
-
-static void mii_parse_qs6612_pcr(uint mii_reg, struct net_device *dev)
+static int fec_enet_mdio_write(struct mii_bus *bus, int mii_id, int regnum,
+                           u16 value)
 {
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
+        struct fec_enet_private *fep = bus->priv;
+        int timeout = FEC_MII_TIMEOUT;
 
-        status = *s & ~(PHY_STAT_SPMASK);
+        fep->mii_timeout = 0;
 
-        switch((mii_reg >> 2) & 7) {
-        case 1: status |= PHY_STAT_10HDX; break;
-        case 2: status |= PHY_STAT_100HDX; break;
-        case 5: status |= PHY_STAT_10FDX; break;
-        case 6: status |= PHY_STAT_100FDX; break;
-}
-
-        *s = status;
-}
-
-static phy_cmd_t const phy_cmd_qs6612_config[] = {
-                /* The PHY powers up isolated on the RPX,
-                 * so send a command to allow operation.
-                 */
-                { mk_mii_write(MII_QS6612_PCR, 0x0dc0), NULL },
-
-                /* parse cr and anar to get some info */
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_qs6612_startup[] = {  /* enable interrupts */
-                { mk_mii_write(MII_QS6612_IMR, 0x003a), NULL },
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_qs6612_ack_int[] = {
-                /* we need to read ISR, SR and ANER to acknowledge */
-                { mk_mii_read(MII_QS6612_ISR), NULL },
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_read(MII_REG_ANER), NULL },
-
-                /* read pcr to get info */
-                { mk_mii_read(MII_QS6612_PCR), mii_parse_qs6612_pcr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_qs6612_shutdown[] = { /* disable interrupts */
-                { mk_mii_write(MII_QS6612_IMR, 0x0000), NULL },
-                { mk_mii_end, }
-        };
-static phy_info_t const phy_info_qs6612 = {
-        .id = 0x00181440,
-        .name = "QS6612",
-        .config = phy_cmd_qs6612_config,
-        .startup = phy_cmd_qs6612_startup,
-        .ack_int = phy_cmd_qs6612_ack_int,
-        .shutdown = phy_cmd_qs6612_shutdown
-};
-
-/* ------------------------------------------------------------------------- */
-/* AMD AM79C874 phy                                                          */
+        /* clear MII end of transfer bit*/
+        writel(FEC_ENET_MII, fep->hwp + FEC_IEVENT);
 
-/* register definitions for the 874 */
+        /* start a read op */
+        writel(FEC_MMFR_ST | FEC_MMFR_OP_READ |
+                FEC_MMFR_PA(mii_id) | FEC_MMFR_RA(regnum) |
+                FEC_MMFR_TA | FEC_MMFR_DATA(value),
+                fep->hwp + FEC_MII_DATA);
+
+        /* wait for end of transfer */
+        while (!(readl(fep->hwp + FEC_IEVENT) & FEC_ENET_MII)) {
+                cpu_relax();
+                if (timeout-- < 0) {
+                        fep->mii_timeout = 1;
+                        printk(KERN_ERR "FEC: MDIO write timeout\n");
+                        return -ETIMEDOUT;
+                }
+        }
 
-#define MII_AM79C874_MFR       16  /* Miscellaneous Feature Register */
-#define MII_AM79C874_ICSR      17  /* Interrupt/Status Register      */
-#define MII_AM79C874_DR        18  /* Diagnostic Register            */
-#define MII_AM79C874_PMLR      19  /* Power and Loopback Register    */
-#define MII_AM79C874_MCR       21  /* ModeControl Register           */
-#define MII_AM79C874_DC        23  /* Disconnect Counter             */
-#define MII_AM79C874_REC       24  /* Recieve Error Counter          */
+        return 0;
+}
 
-static void mii_parse_am79c874_dr(uint mii_reg, struct net_device *dev)
+static int fec_enet_mdio_reset(struct mii_bus *bus)
 {
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-        uint status;
-
-        status = *s & ~(PHY_STAT_SPMASK | PHY_STAT_ANC);
-
-        if (mii_reg & 0x0080)
-                status |= PHY_STAT_ANC;
-        if (mii_reg & 0x0400)
-                status |= ((mii_reg & 0x0800) ? PHY_STAT_100FDX : PHY_STAT_100HDX);
-        else
-                status |= ((mii_reg & 0x0800) ? PHY_STAT_10FDX : PHY_STAT_10HDX);
-
-        *s = status;
+        return 0;
 }
 
-static phy_cmd_t const phy_cmd_am79c874_config[] = {
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_read(MII_AM79C874_DR), mii_parse_am79c874_dr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_am79c874_startup[] = {  /* enable interrupts */
-                { mk_mii_write(MII_AM79C874_ICSR, 0xff00), NULL },
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_am79c874_ack_int[] = {
-                /* find out the current status */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_read(MII_AM79C874_DR), mii_parse_am79c874_dr },
-                /* we only need to read ISR to acknowledge */
-                { mk_mii_read(MII_AM79C874_ICSR), NULL },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_am79c874_shutdown[] = { /* disable interrupts */
-                { mk_mii_write(MII_AM79C874_ICSR, 0x0000), NULL },
-                { mk_mii_end, }
-        };
-static phy_info_t const phy_info_am79c874 = {
-        .id = 0x00022561,
-        .name = "AM79C874",
-        .config = phy_cmd_am79c874_config,
-        .startup = phy_cmd_am79c874_startup,
-        .ack_int = phy_cmd_am79c874_ack_int,
-        .shutdown = phy_cmd_am79c874_shutdown
-};
-
-
-/* ------------------------------------------------------------------------- */
-/* Kendin KS8721BL phy                                                       */
-
-/* register definitions for the 8721 */
-
-#define MII_KS8721BL_RXERCR     21
-#define MII_KS8721BL_ICSR       27
-#define MII_KS8721BL_PHYCR      31
-
-static phy_cmd_t const phy_cmd_ks8721bl_config[] = {
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_ks8721bl_startup[] = {  /* enable interrupts */
-                { mk_mii_write(MII_KS8721BL_ICSR, 0xff00), NULL },
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_ks8721bl_ack_int[] = {
-                /* find out the current status */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                /* we only need to read ISR to acknowledge */
-                { mk_mii_read(MII_KS8721BL_ICSR), NULL },
-                { mk_mii_end, }
-        };
-static phy_cmd_t const phy_cmd_ks8721bl_shutdown[] = { /* disable interrupts */
-                { mk_mii_write(MII_KS8721BL_ICSR, 0x0000), NULL },
-                { mk_mii_end, }
-        };
-static phy_info_t const phy_info_ks8721bl = {
-        .id = 0x00022161,
-        .name = "KS8721BL",
-        .config = phy_cmd_ks8721bl_config,
-        .startup = phy_cmd_ks8721bl_startup,
-        .ack_int = phy_cmd_ks8721bl_ack_int,
-        .shutdown = phy_cmd_ks8721bl_shutdown
-};
-
-/* ------------------------------------------------------------------------- */
-/* register definitions for the DP83848 */
-
-#define MII_DP8384X_PHYSTST    16  /* PHY Status Register */
-
-static void mii_parse_dp8384x_sr2(uint mii_reg, struct net_device *dev)
+static int fec_enet_mii_probe(struct net_device *dev)
 {
         struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
-
-        *s &= ~(PHY_STAT_SPMASK | PHY_STAT_LINK | PHY_STAT_ANC);
-
-        /* Link up */
-        if (mii_reg & 0x0001) {
-                fep->link = 1;
-                *s |= PHY_STAT_LINK;
-        } else
-                fep->link = 0;
-        /* Status of link */
-        if (mii_reg & 0x0010)   /* Autonegotioation complete */
-                *s |= PHY_STAT_ANC;
-        if (mii_reg & 0x0002) {   /* 10MBps? */
-                if (mii_reg & 0x0004)   /* Full Duplex? */
-                        *s |= PHY_STAT_10FDX;
-                else
-                        *s |= PHY_STAT_10HDX;
-        } else {                  /* 100 Mbps? */
-                if (mii_reg & 0x0004)   /* Full Duplex? */
-                        *s |= PHY_STAT_100FDX;
-                else
-                        *s |= PHY_STAT_100HDX;
-        }
-        if (mii_reg & 0x0008)
-                *s |= PHY_STAT_FAULT;
-}
-
-static phy_info_t phy_info_dp83848= {
-        0x020005c9,
-        "DP83848",
+        struct phy_device *phy_dev = NULL;
+        int phy_addr;
 
-        (const phy_cmd_t []) {  /* config */
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_read(MII_DP8384X_PHYSTST), mii_parse_dp8384x_sr2 },
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) {  /* startup - enable interrupts */
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) { /* ack_int - never happens, no interrupt */
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) {  /* shutdown */
-                { mk_mii_end, }
-        },
-};
+        /* find the first phy */
+        for (phy_addr = 0; phy_addr < PHY_MAX_ADDR; phy_addr++) {
+                if (fep->mii_bus->phy_map[phy_addr]) {
+                        phy_dev = fep->mii_bus->phy_map[phy_addr];
+                        break;
+                }
+        }
 
-static phy_info_t phy_info_lan8700 = {
-        0x0007C0C,
-        "LAN8700",
-        (const phy_cmd_t []) { /* config */
-                { mk_mii_read(MII_REG_CR), mii_parse_cr },
-                { mk_mii_read(MII_REG_ANAR), mii_parse_anar },
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) { /* startup */
-                { mk_mii_write(MII_REG_CR, 0x1200), NULL }, /* autonegotiate */
-                { mk_mii_read(MII_REG_SR), mii_parse_sr },
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) { /* act_int */
-                { mk_mii_end, }
-        },
-        (const phy_cmd_t []) { /* shutdown */
-                { mk_mii_end, }
-        },
-};
-/* ------------------------------------------------------------------------- */
+        if (!phy_dev) {
+                printk(KERN_ERR "%s: no PHY found\n", dev->name);
+                return -ENODEV;
+        }
 
-static phy_info_t const * const phy_info[] = {
-        &phy_info_lxt970,
-        &phy_info_lxt971,
-        &phy_info_qs6612,
-        &phy_info_am79c874,
-        &phy_info_ks8721bl,
-        &phy_info_dp83848,
-        &phy_info_lan8700,
-        NULL
-};
+        /* attach the mac to the phy */
+        phy_dev = phy_connect(dev, dev_name(&phy_dev->dev),
+                             &fec_enet_adjust_link, 0,
+                             PHY_INTERFACE_MODE_MII);
+        if (IS_ERR(phy_dev)) {
+                printk(KERN_ERR "%s: Could not attach to PHY\n", dev->name);
+                return PTR_ERR(phy_dev);
+        }
 
-/* ------------------------------------------------------------------------- */
-#ifdef HAVE_mii_link_interrupt
-static irqreturn_t
-mii_link_interrupt(int irq, void * dev_id);
+        /* mask with MAC supported features */
+        phy_dev->supported &= PHY_BASIC_FEATURES;
+        phy_dev->advertising = phy_dev->supported;
 
-/*
- *      This is specific to the MII interrupt setup of the M5272EVB.
- */
-static void __inline__ fec_request_mii_intr(struct net_device *dev)
-{
-        if (request_irq(66, mii_link_interrupt, IRQF_DISABLED, "fec(MII)", dev) != 0)
-                printk("FEC: Could not allocate fec(MII) IRQ(66)!\n");
-}
+        fep->phy_dev = phy_dev;
+        fep->link = 0;
+        fep->full_duplex = 0;
 
-static void __inline__ fec_disable_phy_intr(struct net_device *dev)
-{
-        free_irq(66, dev);
+        return 0;
 }
-#endif
 
-#ifdef CONFIG_M5272
-static void __inline__ fec_get_mac(struct net_device *dev)
+static int fec_enet_mii_init(struct platform_device *pdev)
 {
+        struct net_device *dev = platform_get_drvdata(pdev);
         struct fec_enet_private *fep = netdev_priv(dev);
-        unsigned char *iap, tmpaddr[ETH_ALEN];
+        int err = -ENXIO, i;
 
-        if (FEC_FLASHMAC) {
-                /*
-                 * Get MAC address from FLASH.
-                 * If it is all 1's or 0's, use the default.
-                 */
-                iap = (unsigned char *)FEC_FLASHMAC;
-                if ((iap[0] == 0) && (iap[1] == 0) && (iap[2] == 0) &&
-                    (iap[3] == 0) && (iap[4] == 0) && (iap[5] == 0))
-                        iap = fec_mac_default;
-                if ((iap[0] == 0xff) && (iap[1] == 0xff) && (iap[2] == 0xff) &&
-                    (iap[3] == 0xff) && (iap[4] == 0xff) && (iap[5] == 0xff))
-                        iap = fec_mac_default;
-        } else {
-                *((unsigned long *) &tmpaddr[0]) = readl(fep->hwp + FEC_ADDR_LOW);
-                *((unsigned short *) &tmpaddr[4]) = (readl(fep->hwp + FEC_ADDR_HIGH) >> 16);
-                iap = &tmpaddr[0];
-        }
-
-        memcpy(dev->dev_addr, iap, ETH_ALEN);
-
-        /* Adjust MAC if using default MAC address */
-        if (iap == fec_mac_default)
-                 dev->dev_addr[ETH_ALEN-1] = fec_mac_default[ETH_ALEN-1] + fep->index;
-}
-#endif
+        fep->mii_timeout = 0;
 
-/* ------------------------------------------------------------------------- */
-
-static void mii_display_status(struct net_device *dev)
-{
-        struct fec_enet_private *fep = netdev_priv(dev);
-        volatile uint *s = &(fep->phy_status);
+        /*
+         * Set MII speed to 2.5 MHz (= clk_get_rate() / 2 * phy_speed)
+         */
+        fep->phy_speed = DIV_ROUND_UP(clk_get_rate(fep->clk), 5000000) << 1;
+        writel(fep->phy_speed, fep->hwp + FEC_MII_SPEED);
 
-        if (!fep->link && !fep->old_link) {
-                /* Link is still down - don't print anything */
-                return;
+        fep->mii_bus = mdiobus_alloc();
+        if (fep->mii_bus == NULL) {
+                err = -ENOMEM;
+                goto err_out;
         }
 
-        printk("%s: status: ", dev->name);
-
-        if (!fep->link) {
-                printk("link down");
-        } else {
-                printk("link up");
-
-                switch(*s & PHY_STAT_SPMASK) {
-                case PHY_STAT_100FDX: printk(", 100MBit Full Duplex"); break;
-                case PHY_STAT_100HDX: printk(", 100MBit Half Duplex"); break;
-                case PHY_STAT_10FDX: printk(", 10MBit Full Duplex"); break;
-                case PHY_STAT_10HDX: printk(", 10MBit Half Duplex"); break;
-                default:
-                        printk(", Unknown speed/duplex");
-                }
-
-                if (*s & PHY_STAT_ANC)
-                        printk(", auto-negotiation complete");
+        fep->mii_bus->name = "fec_enet_mii_bus";
+        fep->mii_bus->read = fec_enet_mdio_read;
+        fep->mii_bus->write = fec_enet_mdio_write;
+        fep->mii_bus->reset = fec_enet_mdio_reset;
+        snprintf(fep->mii_bus->id, MII_BUS_ID_SIZE, "%x", pdev->id);
+        fep->mii_bus->priv = fep;
+        fep->mii_bus->parent = &pdev->dev;
+
+        fep->mii_bus->irq = kmalloc(sizeof(int) * PHY_MAX_ADDR, GFP_KERNEL);
+        if (!fep->mii_bus->irq) {
+                err = -ENOMEM;
+                goto err_out_free_mdiobus;
         }
 
-        if (*s & PHY_STAT_FAULT)
-                printk(", remote fault");
-
-        printk(".\n");
-}
-
-static void mii_display_config(struct work_struct *work)
-{
-        struct fec_enet_private *fep = container_of(work, struct fec_enet_private, phy_task);
-        struct net_device *dev = fep->netdev;
-        uint status = fep->phy_status;
+        for (i = 0; i < PHY_MAX_ADDR; i++)
+                fep->mii_bus->irq[i] = PHY_POLL;
 
-        /*
-        ** When we get here, phy_task is already removed from
-        ** the workqueue.  It is thus safe to allow to reuse it.
-        */
-        fep->mii_phy_task_queued = 0;
-        printk("%s: config: auto-negotiation ", dev->name);
-
-        if (status & PHY_CONF_ANE)
-                printk("on");
-        else
-                printk("off");
+        platform_set_drvdata(dev, fep->mii_bus);
 
-        if (status & PHY_CONF_100FDX)
-                printk(", 100FDX");
-        if (status & PHY_CONF_100HDX)
-                printk(", 100HDX");
-        if (status & PHY_CONF_10FDX)
-                printk(", 10FDX");
-        if (status & PHY_CONF_10HDX)
-                printk(", 10HDX");
-        if (!(status & PHY_CONF_SPMASK))
-                printk(", No speed/duplex selected?");
+        if (mdiobus_register(fep->mii_bus))
+                goto err_out_free_mdio_irq;
 
-        if (status & PHY_CONF_LOOP)
-                printk(", loopback enabled");
+        if (fec_enet_mii_probe(dev) != 0)
+                goto err_out_unregister_bus;
 
-        printk(".\n");
+        return 0;
 
-        fep->sequence_done = 1;
+err_out_unregister_bus:
+        mdiobus_unregister(fep->mii_bus);
+err_out_free_mdio_irq:
+        kfree(fep->mii_bus->irq);
+err_out_free_mdiobus:
+        mdiobus_free(fep->mii_bus);
+err_out:
+        return err;
 }
 
-static void mii_relink(struct work_struct *work)
+static void fec_enet_mii_remove(struct fec_enet_private *fep)
 {
-        struct fec_enet_private *fep = container_of(work, struct fec_enet_private, phy_task);
-        struct net_device *dev = fep->netdev;
-        int duplex;
-
-        /*
-        ** When we get here, phy_task is already removed from
-        ** the workqueue.  It is thus safe to allow to reuse it.
-        */
-        fep->mii_phy_task_queued = 0;
-        fep->link = (fep->phy_status & PHY_STAT_LINK) ? 1 : 0;
-        mii_display_status(dev);
-        fep->old_link = fep->link;
-
-        if (fep->link) {
-                duplex = 0;
-                if (fep->phy_status
-                    & (PHY_STAT_100FDX | PHY_STAT_10FDX))
-                        duplex = 1;
-                fec_restart(dev, duplex);
-        } else
-                fec_stop(dev);
+        if (fep->phy_dev)
+                phy_disconnect(fep->phy_dev);
+        mdiobus_unregister(fep->mii_bus);
+        kfree(fep->mii_bus->irq);
+        mdiobus_free(fep->mii_bus);
 }
 
-/* mii_queue_relink is called in interrupt context from mii_link_interrupt */
-static void mii_queue_relink(uint mii_reg, struct net_device *dev)
+static int fec_enet_get_settings(struct net_device *dev,
+                                  struct ethtool_cmd *cmd)
 {
         struct fec_enet_private *fep = netdev_priv(dev);
+        struct phy_device *phydev = fep->phy_dev;
 
-        /*
-         * We cannot queue phy_task twice in the workqueue.  It
-         * would cause an endless loop in the workqueue.
-         * Fortunately, if the last mii_relink entry has not yet been
-         * executed now, it will do the job for the current interrupt,
-         * which is just what we want.
-         */
-        if (fep->mii_phy_task_queued)
-                return;
+        if (!phydev)
+                return -ENODEV;
 
-        fep->mii_phy_task_queued = 1;
-        INIT_WORK(&fep->phy_task, mii_relink);
-        schedule_work(&fep->phy_task);
+        return phy_ethtool_gset(phydev, cmd);
 }
 
-/* mii_queue_config is called in interrupt context from fec_enet_mii */
-static void mii_queue_config(uint mii_reg, struct net_device *dev)
+static int fec_enet_set_settings(struct net_device *dev,
+                                 struct ethtool_cmd *cmd)
 {
         struct fec_enet_private *fep = netdev_priv(dev);
+        struct phy_device *phydev = fep->phy_dev;
 
-        if (fep->mii_phy_task_queued)
-                return;
+        if (!phydev)
+                return -ENODEV;
 
-        fep->mii_phy_task_queued = 1;
-        INIT_WORK(&fep->phy_task, mii_display_config);
-        schedule_work(&fep->phy_task);
+        return phy_ethtool_sset(phydev, cmd);
 }
 
-phy_cmd_t const phy_cmd_relink[] = {
-        { mk_mii_read(MII_REG_CR), mii_queue_relink },
-        { mk_mii_end, }
-        };
-phy_cmd_t const phy_cmd_config[] = {
-        { mk_mii_read(MII_REG_CR), mii_queue_config },
-        { mk_mii_end, }
-        };
-
-/* Read remainder of PHY ID. */
-static void
-mii_discover_phy3(uint mii_reg, struct net_device *dev)
+static void fec_enet_get_drvinfo(struct net_device *dev,
+                                 struct ethtool_drvinfo *info)
 {
-        struct fec_enet_private *fep;
-        int i;
-
-        fep = netdev_priv(dev);
-        fep->phy_id |= (mii_reg & 0xffff);
-        printk("fec: PHY @ 0x%x, ID 0x%08x", fep->phy_addr, fep->phy_id);
-
-        for(i = 0; phy_info[i]; i++) {
-                if(phy_info[i]->id == (fep->phy_id >> 4))
-                        break;
-        }
-
-        if (phy_info[i])
-                printk(" -- %s\n", phy_info[i]->name);
-        else
-                printk(" -- unknown PHY!\n");
+        struct fec_enet_private *fep = netdev_priv(dev);
 
-        fep->phy = phy_info[i];
-        fep->phy_id_done = 1;
+        strcpy(info->driver, fep->pdev->dev.driver->name);
+        strcpy(info->version, "Revision: 1.0");
+        strcpy(info->bus_info, dev_name(&dev->dev));
 }
 
-/* Scan all of the MII PHY addresses looking for someone to respond
- * with a valid ID.  This usually happens quickly.
- */
-static void
-mii_discover_phy(uint mii_reg, struct net_device *dev)
-{
-        struct fec_enet_private *fep;
-        uint phytype;
-
-        fep = netdev_priv(dev);
-
-        if (fep->phy_addr < 32) {
-                if ((phytype = (mii_reg & 0xffff)) != 0xffff && phytype != 0) {
-
-                        /* Got first part of ID, now get remainder */
-                        fep->phy_id = phytype << 16;
-                        mii_queue_unlocked(dev, mk_mii_read(MII_REG_PHYIR2),
-                                                        mii_discover_phy3);
-                } else {
-                        fep->phy_addr++;
-                        mii_queue_unlocked(dev, mk_mii_read(MII_REG_PHYIR1),
-                                                        mii_discover_phy);
-                }
-        } else {
-                printk("FEC: No PHY device found.\n");
-                /* Disable external MII interface */
-                writel(0, fep->hwp + FEC_MII_SPEED);
-                fep->phy_speed = 0;
-#ifdef HAVE_mii_link_interrupt
-                fec_disable_phy_intr(dev);
-#endif
-        }
-}
+static struct ethtool_ops fec_enet_ethtool_ops = {
+        .get_settings           = fec_enet_get_settings,
+        .set_settings           = fec_enet_set_settings,
+        .get_drvinfo            = fec_enet_get_drvinfo,
+        .get_link               = ethtool_op_get_link,
+};
 
-/* This interrupt occurs when the PHY detects a link change */
-#ifdef HAVE_mii_link_interrupt
-static irqreturn_t
-mii_link_interrupt(int irq, void * dev_id)
+static int fec_enet_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
 {
-        struct  net_device *dev = dev_id;
         struct fec_enet_private *fep = netdev_priv(dev);
+        struct phy_device *phydev = fep->phy_dev;
+
+        if (!netif_running(dev))
+                return -EINVAL;
 
-        mii_do_cmd(dev, fep->phy->ack_int);
-        mii_do_cmd(dev, phy_cmd_relink);  /* restart and display status */
+        if (!phydev)
+                return -ENODEV;
 
-        return IRQ_HANDLED;
+        return phy_mii_ioctl(phydev, if_mii(rq), cmd);
 }
-#endif
 
 static void fec_enet_free_buffers(struct net_device *dev)
 {
@@ -1509,35 +915,8 @@ fec_enet_open(struct net_device *dev)
         if (ret)
                 return ret;
 
-        fep->sequence_done = 0;
-        fep->link = 0;
-
-        fec_restart(dev, 1);
-
-        if (fep->phy) {
-                mii_do_cmd(dev, fep->phy->ack_int);
-                mii_do_cmd(dev, fep->phy->config);
-                mii_do_cmd(dev, phy_cmd_config);  /* display configuration */
-
-                /* Poll until the PHY tells us its configuration
-                 * (not link state).
-                 * Request is initiated by mii_do_cmd above, but answer
-                 * comes by interrupt.
-                 * This should take about 25 usec per register at 2.5 MHz,
-                 * and we read approximately 5 registers.
-                 */
-                while(!fep->sequence_done)
-                        schedule();
-
-                mii_do_cmd(dev, fep->phy->startup);
-        }
-
-        /* Set the initial link state to true. A lot of hardware
-         * based on this device does not implement a PHY interrupt,
-         * so we are never notified of link change.
-         */
-        fep->link = 1;
-
+        /* schedule a link state check */
+        phy_start(fep->phy_dev);
         netif_start_queue(dev);
         fep->opened = 1;
         return 0;
@@ -1550,6 +929,7 @@ fec_enet_close(struct net_device *dev)
 
         /* Don't know what to do yet. */
         fep->opened = 0;
+        phy_stop(fep->phy_dev);
         netif_stop_queue(dev);
         fec_stop(dev);
 
@@ -1574,7 +954,7 @@ fec_enet_close(struct net_device *dev)
 static void set_multicast_list(struct net_device *dev)
 {
         struct fec_enet_private *fep = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned int i, bit, data, crc, tmp;
         unsigned char hash;
 
@@ -1604,16 +984,16 @@ static void set_multicast_list(struct net_device *dev)
         writel(0, fep->hwp + FEC_GRP_HASH_TABLE_HIGH);
         writel(0, fep->hwp + FEC_GRP_HASH_TABLE_LOW);
 
-        netdev_for_each_mc_addr(dmi, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 /* Only support group multicast for now */
-                if (!(dmi->dmi_addr[0] & 1))
+                if (!(ha->addr[0] & 1))
                         continue;
 
                 /* calculate crc32 value of mac address */
                 crc = 0xffffffff;
 
-                for (i = 0; i < dmi->dmi_addrlen; i++) {
-                        data = dmi->dmi_addr[i];
+                for (i = 0; i < dev->addr_len; i++) {
+                        data = ha->addr[i];
                         for (bit = 0; bit < 8; bit++, data >>= 1) {
                                 crc = (crc >> 1) ^
                                 (((crc ^ data) & 1) ? CRC32_POLY : 0);
@@ -1666,6 +1046,7 @@ static const struct net_device_ops fec_netdev_ops = {
         .ndo_validate_addr      = eth_validate_addr,
         .ndo_tx_timeout         = fec_timeout,
         .ndo_set_mac_address    = fec_set_mac_address,
+        .ndo_do_ioctl           = fec_enet_ioctl,
 };
 
  /*
@@ -1689,7 +1070,6 @@ static int fec_enet_init(struct net_device *dev, int index)
         }
 
         spin_lock_init(&fep->hw_lock);
-        spin_lock_init(&fep->mii_lock);
 
         fep->index = index;
         fep->hwp = (void __iomem *)dev->base_addr;
@@ -1716,20 +1096,10 @@ static int fec_enet_init(struct net_device *dev, int index)
         fep->rx_bd_base = cbd_base;
         fep->tx_bd_base = cbd_base + RX_RING_SIZE;
 
-#ifdef HAVE_mii_link_interrupt
-        fec_request_mii_intr(dev);
-#endif
         /* The FEC Ethernet specific entries in the device structure */
         dev->watchdog_timeo = TX_TIMEOUT;
         dev->netdev_ops = &fec_netdev_ops;
-
-        for (i=0; i<NMII-1; i++)
-                mii_cmds[i].mii_next = &mii_cmds[i+1];
-        mii_free = mii_cmds;
-
-        /* Set MII speed to 2.5 MHz */
-        fep->phy_speed = ((((clk_get_rate(fep->clk) / 2 + 4999999)
-                                        / 2500000) / 2) & 0x3F) << 1;
+        dev->ethtool_ops = &fec_enet_ethtool_ops;
 
         /* Initialize the receive buffer descriptors. */
         bdp = fep->rx_bd_base;
@@ -1760,13 +1130,6 @@ static int fec_enet_init(struct net_device *dev, int index)
 
         fec_restart(dev, 0);
 
-        /* Queue up command to detect the PHY and initialize the
-         * remainder of the interface.
-         */
-        fep->phy_id_done = 0;
-        fep->phy_addr = 0;
-        mii_queue(dev, mk_mii_read(MII_REG_PHYIR1), mii_discover_phy);
-
         return 0;
 }
 
@@ -1835,8 +1198,7 @@ fec_restart(struct net_device *dev, int duplex)
         writel(0, fep->hwp + FEC_R_DES_ACTIVE);
 
         /* Enable interrupts we wish to service */
-        writel(FEC_ENET_TXF | FEC_ENET_RXF | FEC_ENET_MII,
-                        fep->hwp + FEC_IMASK);
+        writel(FEC_ENET_TXF | FEC_ENET_RXF, fep->hwp + FEC_IMASK);
 }
 
 static void
@@ -1859,7 +1221,6 @@ fec_stop(struct net_device *dev)
         /* Clear outstanding MII command interrupts. */
         writel(FEC_ENET_MII, fep->hwp + FEC_IEVENT);
 
-        writel(FEC_ENET_MII, fep->hwp + FEC_IMASK);
         writel(fep->phy_speed, fep->hwp + FEC_MII_SPEED);
 }
 
@@ -1891,6 +1252,7 @@ fec_probe(struct platform_device *pdev)
         memset(fep, 0, sizeof(*fep));
 
         ndev->base_addr = (unsigned long)ioremap(r->start, resource_size(r));
+        fep->pdev = pdev;
 
         if (!ndev->base_addr) {
                 ret = -ENOMEM;
@@ -1926,13 +1288,24 @@ fec_probe(struct platform_device *pdev)
         if (ret)
                 goto failed_init;
 
+        ret = fec_enet_mii_init(pdev);
+        if (ret)
+                goto failed_mii_init;
+
         ret = register_netdev(ndev);
         if (ret)
                 goto failed_register;
 
+        printk(KERN_INFO "%s: Freescale FEC PHY driver [%s] "
+                "(mii_bus:phy_addr=%s, irq=%d)\n", ndev->name,
+                fep->phy_dev->drv->name, dev_name(&fep->phy_dev->dev),
+                fep->phy_dev->irq);
+
         return 0;
 
 failed_register:
+        fec_enet_mii_remove(fep);
+failed_mii_init:
 failed_init:
         clk_disable(fep->clk);
         clk_put(fep->clk);
@@ -1959,6 +1332,7 @@ fec_drv_remove(struct platform_device *pdev)
         platform_set_drvdata(pdev, NULL);
 
         fec_stop(ndev);
+        fec_enet_mii_remove(fep);
         clk_disable(fep->clk);
         clk_put(fep->clk);
         iounmap((void __iomem *)ndev->base_addr);
diff --git a/drivers/net/fec_mpc52xx.c b/drivers/net/fec_mpc52xx.c
index 0dbd7219bbde..667ba1391b9d 100644
--- a/drivers/net/fec_mpc52xx.c
+++ b/drivers/net/fec_mpc52xx.c
@@ -435,7 +435,6 @@ static irqreturn_t mpc52xx_fec_rx_interrupt(int irq, void *dev_id)
                                  DMA_FROM_DEVICE);
                 length = status & BCOM_FEC_RX_BD_LEN_MASK;
                 skb_put(rskb, length - 4);      /* length without CRC32 */
-                rskb->dev = dev;
                 rskb->protocol = eth_type_trans(rskb, dev);
                 netif_rx(rskb);
 
@@ -575,12 +574,12 @@ static void mpc52xx_fec_set_multicast_list(struct net_device *dev)
                         out_be32(&fec->gaddr2, 0xffffffff);
                 } else {
                         u32 crc;
-                        struct dev_mc_list *dmi;
+                        struct netdev_hw_addr *ha;
                         u32 gaddr1 = 0x00000000;
                         u32 gaddr2 = 0x00000000;
 
-                        netdev_for_each_mc_addr(dmi, dev) {
-                                crc = ether_crc_le(6, dmi->dmi_addr) >> 26;
+                        netdev_for_each_mc_addr(ha, dev) {
+                                crc = ether_crc_le(6, ha->addr) >> 26;
                                 if (crc >= 32)
                                         gaddr1 |= 1 << (crc-32);
                                 else
diff --git a/drivers/net/forcedeth.c b/drivers/net/forcedeth.c
index ca05e5662029..6a2b64f0a7db 100644
--- a/drivers/net/forcedeth.c
+++ b/drivers/net/forcedeth.c
@@ -3103,12 +3103,14 @@ static void nv_set_multicast(struct net_device *dev)
                         if (dev->flags & IFF_ALLMULTI) {
                                 alwaysOn[0] = alwaysOn[1] = alwaysOff[0] = alwaysOff[1] = 0;
                         } else {
-                                struct dev_mc_list *walk;
+                                struct netdev_hw_addr *ha;
 
-                                netdev_for_each_mc_addr(walk, dev) {
+                                netdev_for_each_mc_addr(ha, dev) {
+                                        unsigned char *addr = ha->addr;
                                         u32 a, b;
-                                        a = le32_to_cpu(*(__le32 *) walk->dmi_addr);
-                                        b = le16_to_cpu(*(__le16 *) (&walk->dmi_addr[4]));
+
+                                        a = le32_to_cpu(*(__le32 *) addr);
+                                        b = le16_to_cpu(*(__le16 *) (&addr[4]));
                                         alwaysOn[0] &= a;
                                         alwaysOff[0] &= ~a;
                                         alwaysOn[1] &= b;
diff --git a/drivers/net/fs_enet/mac-fcc.c b/drivers/net/fs_enet/mac-fcc.c
index cf4f674f9e2e..b3bad7c15d02 100644
--- a/drivers/net/fs_enet/mac-fcc.c
+++ b/drivers/net/fs_enet/mac-fcc.c
@@ -231,12 +231,12 @@ static void set_multicast_finish(struct net_device *dev)
 
 static void set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *pmc;
+        struct netdev_hw_addr *ha;
 
         if ((dev->flags & IFF_PROMISC) == 0) {
                 set_multicast_start(dev);
-                netdev_for_each_mc_addr(pmc, dev)
-                        set_multicast_one(dev, pmc->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        set_multicast_one(dev, ha->addr);
                 set_multicast_finish(dev);
         } else
                 set_promiscuous_mode(dev);
diff --git a/drivers/net/fs_enet/mac-fec.c b/drivers/net/fs_enet/mac-fec.c
index cd2c6cca5f24..75974c6d201b 100644
--- a/drivers/net/fs_enet/mac-fec.c
+++ b/drivers/net/fs_enet/mac-fec.c
@@ -232,12 +232,12 @@ static void set_multicast_finish(struct net_device *dev)
 
 static void set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *pmc;
+        struct netdev_hw_addr *ha;
 
         if ((dev->flags & IFF_PROMISC) == 0) {
                 set_multicast_start(dev);
-                netdev_for_each_mc_addr(pmc, dev)
-                        set_multicast_one(dev, pmc->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        set_multicast_one(dev, ha->addr);
                 set_multicast_finish(dev);
         } else
                 set_promiscuous_mode(dev);
diff --git a/drivers/net/fs_enet/mac-scc.c b/drivers/net/fs_enet/mac-scc.c
index c490a466cae1..0ab6a346a193 100644
--- a/drivers/net/fs_enet/mac-scc.c
+++ b/drivers/net/fs_enet/mac-scc.c
@@ -224,12 +224,12 @@ static void set_multicast_finish(struct net_device *dev)
 
 static void set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *pmc;
+        struct netdev_hw_addr *ha;
 
         if ((dev->flags & IFF_PROMISC) == 0) {
                 set_multicast_start(dev);
-                netdev_for_each_mc_addr(pmc, dev)
-                        set_multicast_one(dev, pmc->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        set_multicast_one(dev, ha->addr);
                 set_multicast_finish(dev);
         } else
                 set_promiscuous_mode(dev);
diff --git a/drivers/net/gianfar.c b/drivers/net/gianfar.c
index 080d1cea5b26..5175233f11f2 100644
--- a/drivers/net/gianfar.c
+++ b/drivers/net/gianfar.c
@@ -2798,7 +2798,7 @@ static void adjust_link(struct net_device *dev)
  * whenever dev->flags is changed */
 static void gfar_set_multi(struct net_device *dev)
 {
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         struct gfar_private *priv = netdev_priv(dev);
         struct gfar __iomem *regs = priv->gfargrp[0].regs;
         u32 tempval;
@@ -2871,13 +2871,12 @@ static void gfar_set_multi(struct net_device *dev)
                         return;
 
                 /* Parse the list, and set the appropriate bits */
-                netdev_for_each_mc_addr(mc_ptr, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         if (idx < em_num) {
-                                gfar_set_mac_for_addr(dev, idx,
-                                                mc_ptr->dmi_addr);
+                                gfar_set_mac_for_addr(dev, idx, ha->addr);
                                 idx++;
                         } else
-                                gfar_set_hash_for_addr(dev, mc_ptr->dmi_addr);
+                                gfar_set_hash_for_addr(dev, ha->addr);
                 }
         }
 
diff --git a/drivers/net/greth.c b/drivers/net/greth.c
index 2b9c1cbc9ec1..fbe6ab6b919b 100644
--- a/drivers/net/greth.c
+++ b/drivers/net/greth.c
@@ -894,7 +894,6 @@ static int greth_rx_gbit(struct net_device *dev, int limit)
                                 else
                                         skb->ip_summed = CHECKSUM_NONE;
 
-                                skb->dev = dev;
                                 skb->protocol = eth_type_trans(skb, dev);
                                 dev->stats.rx_packets++;
                                 netif_receive_skb(skb);
@@ -989,7 +988,7 @@ static u32 greth_hash_get_index(__u8 *addr)
 
 static void greth_set_hash_filter(struct net_device *dev)
 {
-        struct dev_mc_list *curr;
+        struct netdev_hw_addr *ha;
         struct greth_private *greth = netdev_priv(dev);
         struct greth_regs *regs = (struct greth_regs *) greth->regs;
         u32 mc_filter[2];
@@ -997,8 +996,8 @@ static void greth_set_hash_filter(struct net_device *dev)
 
         mc_filter[0] = mc_filter[1] = 0;
 
-        netdev_for_each_mc_addr(curr, dev) {
-                bitnr = greth_hash_get_index(curr->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                bitnr = greth_hash_get_index(ha->addr);
                 mc_filter[bitnr >> 5] |= 1 << (bitnr & 31);
         }
 
diff --git a/drivers/net/hamachi.c b/drivers/net/hamachi.c
index 373546dd0831..2bfcca6d180c 100644
--- a/drivers/net/hamachi.c
+++ b/drivers/net/hamachi.c
@@ -1858,12 +1858,12 @@ static void set_rx_mode(struct net_device *dev)
                 /* Too many to match, or accept all multicasts. */
                 writew(0x000B, ioaddr + AddrMode);
         } else if (!netdev_mc_empty(dev)) { /* Must use the CAM filter. */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 int i = 0;
 
-                netdev_for_each_mc_addr(mclist, dev) {
-                        writel(*(u32*)(mclist->dmi_addr), ioaddr + 0x100 + i*8);
-                        writel(0x20000 | (*(u16*)&mclist->dmi_addr[4]),
+                netdev_for_each_mc_addr(ha, dev) {
+                        writel(*(u32 *)(ha->addr), ioaddr + 0x100 + i*8);
+                        writel(0x20000 | (*(u16 *)&ha->addr[4]),
                                    ioaddr + 0x104 + i*8);
                         i++;
                 }
diff --git a/drivers/net/hamradio/baycom_ser_fdx.c b/drivers/net/hamradio/baycom_ser_fdx.c
index 0cab992b3d1a..3e25f10cabd6 100644
--- a/drivers/net/hamradio/baycom_ser_fdx.c
+++ b/drivers/net/hamradio/baycom_ser_fdx.c
@@ -429,7 +429,7 @@ static int ser12_open(struct net_device *dev)
                 return -EINVAL;
         }
         if (!request_region(dev->base_addr, SER12_EXTENT, "baycom_ser_fdx")) {
-                printk(KERN_WARNING "BAYCOM_SER_FSX: I/O port 0x%04lx busy \n", 
+                printk(KERN_WARNING "BAYCOM_SER_FSX: I/O port 0x%04lx busy\n",
                        dev->base_addr);
                 return -EACCES;
         }
diff --git a/drivers/net/hp100.c b/drivers/net/hp100.c
index b766a69bf0ca..86b2b4332341 100644
--- a/drivers/net/hp100.c
+++ b/drivers/net/hp100.c
@@ -2100,15 +2100,15 @@ static void hp100_set_multicast_list(struct net_device *dev)
                 } else {
                         int i, idx;
                         u_char *addrs;
-                        struct dev_mc_list *dmi;
+                        struct netdev_hw_addr *ha;
 
                         memset(&lp->hash_bytes, 0x00, 8);
 #ifdef HP100_DEBUG
                         printk("hp100: %s: computing hash filter - mc_count = %i\n",
                                dev->name, netdev_mc_count(dev));
 #endif
-                        netdev_for_each_mc_addr(dmi, dev) {
-                                addrs = dmi->dmi_addr;
+                        netdev_for_each_mc_addr(ha, dev) {
+                                addrs = ha->addr;
                                 if ((*addrs & 0x01) == 0x01) {  /* multicast address? */
 #ifdef HP100_DEBUG
                                         printk("hp100: %s: multicast = %pM, ",
diff --git a/drivers/net/ibm_newemac/core.c b/drivers/net/ibm_newemac/core.c
index fb0ac6d7c040..40c78507ef16 100644
--- a/drivers/net/ibm_newemac/core.c
+++ b/drivers/net/ibm_newemac/core.c
@@ -388,18 +388,19 @@ static void emac_hash_mc(struct emac_instance *dev)
         const int regs = EMAC_XAHT_REGS(dev);
         u32 *gaht_base = emac_gaht_base(dev);
         u32 gaht_temp[regs];
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int i;
 
         DBG(dev, "hash_mc %d" NL, netdev_mc_count(dev->ndev));
 
         memset(gaht_temp, 0, sizeof (gaht_temp));
 
-        netdev_for_each_mc_addr(dmi, dev->ndev) {
+        netdev_for_each_mc_addr(ha, dev->ndev) {
                 int slot, reg, mask;
-                DBG2(dev, "mc %pM" NL, dmi->dmi_addr);
+                DBG2(dev, "mc %pM" NL, ha->addr);
 
-                slot = EMAC_XAHT_CRC_TO_SLOT(dev, ether_crc(ETH_ALEN, dmi->dmi_addr));
+                slot = EMAC_XAHT_CRC_TO_SLOT(dev,
+                                             ether_crc(ETH_ALEN, ha->addr));
                 reg = EMAC_XAHT_SLOT_TO_REG(dev, slot);
                 mask = EMAC_XAHT_SLOT_TO_MASK(dev, slot);
 
@@ -1176,7 +1177,7 @@ static int emac_open(struct net_device *ndev)
                 netif_carrier_on(dev->ndev);
 
         /* Required for Pause packet support in EMAC */
-        dev_mc_add(ndev, default_mcast_addr, sizeof(default_mcast_addr), 1);
+        dev_mc_add_global(ndev, default_mcast_addr);
 
         emac_configure(dev);
         mal_poll_add(dev->mal, &dev->commac);
@@ -1699,7 +1700,6 @@ static int emac_poll_rx(void *param, int budget)
 
                 skb_put(skb, len);
         push_packet:
-                skb->dev = dev->ndev;
                 skb->protocol = eth_type_trans(skb, dev->ndev);
                 emac_rx_csum(dev, skb, ctrl);
 
diff --git a/drivers/net/ibmlana.c b/drivers/net/ibmlana.c
index b5d0f4e973f7..76949e08ee84 100644
--- a/drivers/net/ibmlana.c
+++ b/drivers/net/ibmlana.c
@@ -385,7 +385,7 @@ static void InitBoard(struct net_device *dev)
         int camcnt;
         camentry_t cams[16];
         u32 cammask;
-        struct dev_mc_list *mcptr;
+        struct netdev_hw_addr *ha;
         u16 rcrval;
 
         /* reset the SONIC */
@@ -420,8 +420,8 @@ static void InitBoard(struct net_device *dev)
         /* start putting the multicast addresses into the CAM list.  Stop if
            it is full. */
 
-        netdev_for_each_mc_addr(mcptr, dev) {
-                putcam(cams, &camcnt, mcptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                putcam(cams, &camcnt, ha->addr);
                 if (camcnt == 16)
                         break;
         }
@@ -479,7 +479,7 @@ static void InitBoard(struct net_device *dev)
         /* if still multicast addresses left or ALLMULTI is set, set the multicast
            enable bit */
 
-        if ((dev->flags & IFF_ALLMULTI) || (mcptr != NULL))
+        if ((dev->flags & IFF_ALLMULTI) || netdev_mc_count(dev) > camcnt)
                 rcrval |= RCREG_AMC;
 
         /* promiscous mode ? */
diff --git a/drivers/net/ibmveth.c b/drivers/net/ibmveth.c
index 0bc777bac9b4..f468590ed454 100644
--- a/drivers/net/ibmveth.c
+++ b/drivers/net/ibmveth.c
@@ -1072,7 +1072,7 @@ static void ibmveth_set_multicast_list(struct net_device *netdev)
                         ibmveth_error_printk("h_multicast_ctrl rc=%ld when entering promisc mode\n", lpar_rc);
                 }
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 /* clear the filter table & disable filtering */
                 lpar_rc = h_multicast_ctrl(adapter->vdev->unit_address,
                                            IbmVethMcastEnableRecv |
@@ -1083,10 +1083,10 @@ static void ibmveth_set_multicast_list(struct net_device *netdev)
                         ibmveth_error_printk("h_multicast_ctrl rc=%ld when attempting to clear filter table\n", lpar_rc);
                 }
                 /* add the addresses to the filter table */
-                netdev_for_each_mc_addr(mclist, netdev) {
+                netdev_for_each_mc_addr(ha, netdev) {
                         // add the multicast address to the filter table
                         unsigned long mcast_addr = 0;
-                        memcpy(((char *)&mcast_addr)+2, mclist->dmi_addr, 6);
+                        memcpy(((char *)&mcast_addr)+2, ha->addr, 6);
                         lpar_rc = h_multicast_ctrl(adapter->vdev->unit_address,
                                                    IbmVethMcastAddFilter,
                                                    mcast_addr);
diff --git a/drivers/net/igb/e1000_82575.c b/drivers/net/igb/e1000_82575.c
index 0bc990ec4a8e..430631f49d9d 100644
--- a/drivers/net/igb/e1000_82575.c
+++ b/drivers/net/igb/e1000_82575.c
@@ -105,6 +105,12 @@ static s32 igb_get_invariants_82575(struct e1000_hw *hw)
         case E1000_DEV_ID_82580_COPPER_DUAL:
                 mac->type = e1000_82580;
                 break;
+        case E1000_DEV_ID_I350_COPPER:
+        case E1000_DEV_ID_I350_FIBER:
+        case E1000_DEV_ID_I350_SERDES:
+        case E1000_DEV_ID_I350_SGMII:
+                mac->type = e1000_i350;
+                break;
         default:
                 return -E1000_ERR_MAC_INIT;
                 break;
@@ -154,8 +160,10 @@ static s32 igb_get_invariants_82575(struct e1000_hw *hw)
                 mac->rar_entry_count = E1000_RAR_ENTRIES_82576;
         if (mac->type == e1000_82580)
                 mac->rar_entry_count = E1000_RAR_ENTRIES_82580;
+        if (mac->type == e1000_i350)
+                mac->rar_entry_count = E1000_RAR_ENTRIES_I350;
         /* reset */
-        if (mac->type == e1000_82580)
+        if (mac->type >= e1000_82580)
                 mac->ops.reset_hw = igb_reset_hw_82580;
         else
                 mac->ops.reset_hw = igb_reset_hw_82575;
@@ -226,7 +234,7 @@ static s32 igb_get_invariants_82575(struct e1000_hw *hw)
                 phy->ops.reset              = igb_phy_hw_reset_sgmii_82575;
                 phy->ops.read_reg           = igb_read_phy_reg_sgmii_82575;
                 phy->ops.write_reg          = igb_write_phy_reg_sgmii_82575;
-        } else if (hw->mac.type == e1000_82580) {
+        } else if (hw->mac.type >= e1000_82580) {
                 phy->ops.reset              = igb_phy_hw_reset;
                 phy->ops.read_reg           = igb_read_phy_reg_82580;
                 phy->ops.write_reg          = igb_write_phy_reg_82580;
@@ -262,6 +270,7 @@ static s32 igb_get_invariants_82575(struct e1000_hw *hw)
                 phy->ops.set_d3_lplu_state  = igb_set_d3_lplu_state;
                 break;
         case I82580_I_PHY_ID:
+        case I350_I_PHY_ID:
                 phy->type                   = e1000_phy_82580;
                 phy->ops.force_speed_duplex = igb_phy_force_speed_duplex_82580;
                 phy->ops.get_cable_length   = igb_get_cable_length_82580;
@@ -1446,7 +1455,6 @@ void igb_vmdq_set_replication_pf(struct e1000_hw *hw, bool enable)
  **/
 static s32 igb_read_phy_reg_82580(struct e1000_hw *hw, u32 offset, u16 *data)
 {
-        u32 mdicnfg = 0;
         s32 ret_val;
 
 
@@ -1454,15 +1462,6 @@ static s32 igb_read_phy_reg_82580(struct e1000_hw *hw, u32 offset, u16 *data)
         if (ret_val)
                 goto out;
 
-        /*
-         * We config the phy address in MDICNFG register now. Same bits
-         * as before. The values in MDIC can be written but will be
-         * ignored. This allows us to call the old function after
-         * configuring the PHY address in the new register
-         */
-        mdicnfg = (hw->phy.addr << E1000_MDIC_PHY_SHIFT);
-        wr32(E1000_MDICNFG, mdicnfg);
-
         ret_val = igb_read_phy_reg_mdic(hw, offset, data);
 
         hw->phy.ops.release(hw);
@@ -1481,7 +1480,6 @@ out:
  **/
 static s32 igb_write_phy_reg_82580(struct e1000_hw *hw, u32 offset, u16 data)
 {
-        u32 mdicnfg = 0;
         s32 ret_val;
 
 
@@ -1489,15 +1487,6 @@ static s32 igb_write_phy_reg_82580(struct e1000_hw *hw, u32 offset, u16 data)
         if (ret_val)
                 goto out;
 
-        /*
-         * We config the phy address in MDICNFG register now. Same bits
-         * as before. The values in MDIC can be written but will be
-         * ignored. This allows us to call the old function after
-         * configuring the PHY address in the new register
-         */
-        mdicnfg = (hw->phy.addr << E1000_MDIC_PHY_SHIFT);
-        wr32(E1000_MDICNFG, mdicnfg);
-
         ret_val = igb_write_phy_reg_mdic(hw, offset, data);
 
         hw->phy.ops.release(hw);
diff --git a/drivers/net/igb/e1000_82575.h b/drivers/net/igb/e1000_82575.h
index fbe1c99c193c..cbd1e1259e4d 100644
--- a/drivers/net/igb/e1000_82575.h
+++ b/drivers/net/igb/e1000_82575.h
@@ -38,9 +38,10 @@ extern void igb_rx_fifo_flush_82575(struct e1000_hw *hw);
                                      (ID_LED_DEF1_DEF2 <<  4) | \
                                      (ID_LED_OFF1_ON2))
 
-#define E1000_RAR_ENTRIES_82575   16
-#define E1000_RAR_ENTRIES_82576   24
-#define E1000_RAR_ENTRIES_82580   24
+#define E1000_RAR_ENTRIES_82575        16
+#define E1000_RAR_ENTRIES_82576        24
+#define E1000_RAR_ENTRIES_82580        24
+#define E1000_RAR_ENTRIES_I350         32
 
 #define E1000_SW_SYNCH_MB              0x00000100
 #define E1000_STAT_DEV_RST_SET         0x00100000
@@ -52,6 +53,7 @@ extern void igb_rx_fifo_flush_82575(struct e1000_hw *hw);
 #define E1000_SRRCTL_DESCTYPE_ADV_ONEBUF                0x02000000
 #define E1000_SRRCTL_DESCTYPE_HDR_SPLIT_ALWAYS          0x0A000000
 #define E1000_SRRCTL_DROP_EN                            0x80000000
+#define E1000_SRRCTL_TIMESTAMP                          0x40000000
 
 #define E1000_MRQC_ENABLE_RSS_4Q            0x00000002
 #define E1000_MRQC_ENABLE_VMDQ              0x00000003
@@ -108,6 +110,7 @@ union e1000_adv_rx_desc {
 #define E1000_RXDADV_HDRBUFLEN_MASK      0x7FE0
 #define E1000_RXDADV_HDRBUFLEN_SHIFT     5
 #define E1000_RXDADV_STAT_TS             0x10000 /* Pkt was time stamped */
+#define E1000_RXDADV_STAT_TSIP           0x08000 /* timestamp in packet */
 
 /* Transmit Descriptor - Advanced */
 union e1000_adv_tx_desc {
diff --git a/drivers/net/igb/e1000_defines.h b/drivers/net/igb/e1000_defines.h
index fe6cf1b696c7..31d24e0e76de 100644
--- a/drivers/net/igb/e1000_defines.h
+++ b/drivers/net/igb/e1000_defines.h
@@ -629,6 +629,7 @@
 #define M88E1111_I_PHY_ID    0x01410CC0
 #define IGP03E1000_E_PHY_ID  0x02A80390
 #define I82580_I_PHY_ID      0x015403A0
+#define I350_I_PHY_ID        0x015403B0
 #define M88_VENDOR           0x0141
 
 /* M88E1000 Specific Registers */
diff --git a/drivers/net/igb/e1000_hw.h b/drivers/net/igb/e1000_hw.h
index 82a533f5192a..cb8db78b1a05 100644
--- a/drivers/net/igb/e1000_hw.h
+++ b/drivers/net/igb/e1000_hw.h
@@ -31,6 +31,7 @@
 #include <linux/types.h>
 #include <linux/delay.h>
 #include <linux/io.h>
+#include <linux/netdevice.h>
 
 #include "e1000_regs.h"
 #include "e1000_defines.h"
@@ -53,6 +54,10 @@ struct e1000_hw;
 #define E1000_DEV_ID_82580_SERDES             0x1510
 #define E1000_DEV_ID_82580_SGMII              0x1511
 #define E1000_DEV_ID_82580_COPPER_DUAL        0x1516
+#define E1000_DEV_ID_I350_COPPER              0x1521
+#define E1000_DEV_ID_I350_FIBER               0x1522
+#define E1000_DEV_ID_I350_SERDES              0x1523
+#define E1000_DEV_ID_I350_SGMII               0x1524
 
 #define E1000_REVISION_2 2
 #define E1000_REVISION_4 4
@@ -72,6 +77,7 @@ enum e1000_mac_type {
         e1000_82575,
         e1000_82576,
         e1000_82580,
+        e1000_i350,
         e1000_num_macs  /* List is 1-based, so subtract 1 for true count. */
 };
 
@@ -502,14 +508,11 @@ struct e1000_hw {
         u8  revision_id;
 };
 
-#ifdef DEBUG
-extern char *igb_get_hw_dev_name(struct e1000_hw *hw);
+extern struct net_device *igb_get_hw_dev(struct e1000_hw *hw);
 #define hw_dbg(format, arg...) \
-        printk(KERN_DEBUG "%s: " format, igb_get_hw_dev_name(hw), ##arg)
-#else
-#define hw_dbg(format, arg...)
-#endif
-#endif
+        netdev_dbg(igb_get_hw_dev(hw), format, ##arg)
+
 /* These functions must be implemented by drivers */
 s32  igb_read_pcie_cap_reg(struct e1000_hw *hw, u32 reg, u16 *value);
 s32  igb_write_pcie_cap_reg(struct e1000_hw *hw, u32 reg, u16 *value);
+#endif /* _E1000_HW_H_ */
diff --git a/drivers/net/igb/igb.h b/drivers/net/igb/igb.h
index 3b772b822a5d..7d288ccca1ca 100644
--- a/drivers/net/igb/igb.h
+++ b/drivers/net/igb/igb.h
@@ -107,6 +107,7 @@ struct vf_data_storage {
 #define MAXIMUM_ETHERNET_VLAN_SIZE 1522
 
 /* Supported Rx Buffer Sizes */
+#define IGB_RXBUFFER_64    64     /* Used for packet split */
 #define IGB_RXBUFFER_128   128    /* Used for packet split */
 #define IGB_RXBUFFER_1024  1024
 #define IGB_RXBUFFER_2048  2048
@@ -323,6 +324,7 @@ struct igb_adapter {
 
 #define IGB_82576_TSYNC_SHIFT 19
 #define IGB_82580_TSYNC_SHIFT 24
+#define IGB_TS_HDR_LEN        16
 enum e1000_state_t {
         __IGB_TESTING,
         __IGB_RESETTING,
diff --git a/drivers/net/igb/igb_ethtool.c b/drivers/net/igb/igb_ethtool.c
index a4cead12fd98..1d4ee418226d 100644
--- a/drivers/net/igb/igb_ethtool.c
+++ b/drivers/net/igb/igb_ethtool.c
@@ -901,6 +901,49 @@ struct igb_reg_test {
 #define TABLE64_TEST_LO 5
 #define TABLE64_TEST_HI 6
 
+/* i350 reg test */
+static struct igb_reg_test reg_test_i350[] = {
+        { E1000_FCAL,      0x100, 1,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_FCAH,      0x100, 1,  PATTERN_TEST, 0x0000FFFF, 0xFFFFFFFF },
+        { E1000_FCT,       0x100, 1,  PATTERN_TEST, 0x0000FFFF, 0xFFFFFFFF },
+        { E1000_VET,       0x100, 1,  PATTERN_TEST, 0xFFFF0000, 0xFFFF0000 },
+        { E1000_RDBAL(0),  0x100, 4,  PATTERN_TEST, 0xFFFFFF80, 0xFFFFFFFF },
+        { E1000_RDBAH(0),  0x100, 4,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_RDLEN(0),  0x100, 4,  PATTERN_TEST, 0x000FFFF0, 0x000FFFFF },
+        { E1000_RDBAL(4),  0x40,  4,  PATTERN_TEST, 0xFFFFFF80, 0xFFFFFFFF },
+        { E1000_RDBAH(4),  0x40,  4,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_RDLEN(4),  0x40,  4,  PATTERN_TEST, 0x000FFFF0, 0x000FFFFF },
+        /* RDH is read-only for i350, only test RDT. */
+        { E1000_RDT(0),    0x100, 4,  PATTERN_TEST, 0x0000FFFF, 0x0000FFFF },
+        { E1000_RDT(4),    0x40,  4,  PATTERN_TEST, 0x0000FFFF, 0x0000FFFF },
+        { E1000_FCRTH,     0x100, 1,  PATTERN_TEST, 0x0000FFF0, 0x0000FFF0 },
+        { E1000_FCTTV,     0x100, 1,  PATTERN_TEST, 0x0000FFFF, 0x0000FFFF },
+        { E1000_TIPG,      0x100, 1,  PATTERN_TEST, 0x3FFFFFFF, 0x3FFFFFFF },
+        { E1000_TDBAL(0),  0x100, 4,  PATTERN_TEST, 0xFFFFFF80, 0xFFFFFFFF },
+        { E1000_TDBAH(0),  0x100, 4,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_TDLEN(0),  0x100, 4,  PATTERN_TEST, 0x000FFFF0, 0x000FFFFF },
+        { E1000_TDBAL(4),  0x40,  4,  PATTERN_TEST, 0xFFFFFF80, 0xFFFFFFFF },
+        { E1000_TDBAH(4),  0x40,  4,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_TDLEN(4),  0x40,  4,  PATTERN_TEST, 0x000FFFF0, 0x000FFFFF },
+        { E1000_TDT(0),    0x100, 4,  PATTERN_TEST, 0x0000FFFF, 0x0000FFFF },
+        { E1000_TDT(4),    0x40,  4,  PATTERN_TEST, 0x0000FFFF, 0x0000FFFF },
+        { E1000_RCTL,      0x100, 1,  SET_READ_TEST, 0xFFFFFFFF, 0x00000000 },
+        { E1000_RCTL,      0x100, 1,  SET_READ_TEST, 0x04CFB0FE, 0x003FFFFB },
+        { E1000_RCTL,      0x100, 1,  SET_READ_TEST, 0x04CFB0FE, 0xFFFFFFFF },
+        { E1000_TCTL,      0x100, 1,  SET_READ_TEST, 0xFFFFFFFF, 0x00000000 },
+        { E1000_RA,        0, 16, TABLE64_TEST_LO,
+                                                0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_RA,        0, 16, TABLE64_TEST_HI,
+                                                0xC3FFFFFF, 0xFFFFFFFF },
+        { E1000_RA2,       0, 16, TABLE64_TEST_LO,
+                                                0xFFFFFFFF, 0xFFFFFFFF },
+        { E1000_RA2,       0, 16, TABLE64_TEST_HI,
+                                                0xC3FFFFFF, 0xFFFFFFFF },
+        { E1000_MTA,       0, 128, TABLE32_TEST,
+                                                0xFFFFFFFF, 0xFFFFFFFF },
+        { 0, 0, 0, 0 }
+};
+
 /* 82580 reg test */
 static struct igb_reg_test reg_test_82580[] = {
         { E1000_FCAL,      0x100, 1,  PATTERN_TEST, 0xFFFFFFFF, 0xFFFFFFFF },
@@ -1076,6 +1119,10 @@ static int igb_reg_test(struct igb_adapter *adapter, u64 *data)
         u32 i, toggle;
 
         switch (adapter->hw.mac.type) {
+        case e1000_i350:
+                test = reg_test_i350;
+                toggle = 0x7FEFF3FF;
+                break;
         case e1000_82580:
                 test = reg_test_82580;
                 toggle = 0x7FEFF3FF;
@@ -1237,6 +1284,9 @@ static int igb_intr_test(struct igb_adapter *adapter, u64 *data)
         case e1000_82580:
                 ics_mask = 0x77DCFED5;
                 break;
+        case e1000_i350:
+                ics_mask = 0x77DCFED5;
+                break;
         default:
                 ics_mask = 0x7FFFFFFF;
                 break;
diff --git a/drivers/net/igb/igb_main.c b/drivers/net/igb/igb_main.c
index 01c65c7447e1..2745e17fd021 100644
--- a/drivers/net/igb/igb_main.c
+++ b/drivers/net/igb/igb_main.c
@@ -61,6 +61,10 @@ static const struct e1000_info *igb_info_tbl[] = {
 };
 
 static DEFINE_PCI_DEVICE_TABLE(igb_pci_tbl) = {
+        { PCI_VDEVICE(INTEL, E1000_DEV_ID_I350_COPPER), board_82575 },
+        { PCI_VDEVICE(INTEL, E1000_DEV_ID_I350_FIBER), board_82575 },
+        { PCI_VDEVICE(INTEL, E1000_DEV_ID_I350_SERDES), board_82575 },
+        { PCI_VDEVICE(INTEL, E1000_DEV_ID_I350_SGMII), board_82575 },
         { PCI_VDEVICE(INTEL, E1000_DEV_ID_82580_COPPER), board_82575 },
         { PCI_VDEVICE(INTEL, E1000_DEV_ID_82580_FIBER), board_82575 },
         { PCI_VDEVICE(INTEL, E1000_DEV_ID_82580_SERDES), board_82575 },
@@ -222,43 +226,17 @@ static cycle_t igb_read_clock(const struct cyclecounter *tc)
         return stamp;
 }
 
-#ifdef DEBUG
 /**
- * igb_get_hw_dev_name - return device name string
+ * igb_get_hw_dev - return device
  * used by hardware layer to print debugging information
  **/
-char *igb_get_hw_dev_name(struct e1000_hw *hw)
+struct net_device *igb_get_hw_dev(struct e1000_hw *hw)
 {
         struct igb_adapter *adapter = hw->back;
-        return adapter->netdev->name;
+        return adapter->netdev;
 }
 
 /**
- * igb_get_time_str - format current NIC and system time as string
- */
-static char *igb_get_time_str(struct igb_adapter *adapter,
-                              char buffer[160])
-{
-        cycle_t hw = adapter->cycles.read(&adapter->cycles);
-        struct timespec nic = ns_to_timespec(timecounter_read(&adapter->clock));
-        struct timespec sys;
-        struct timespec delta;
-        getnstimeofday(&sys);
-
-        delta = timespec_sub(nic, sys);
-
-        sprintf(buffer,
-                "HW %llu, NIC %ld.%09lus, SYS %ld.%09lus, NIC-SYS %lds + %09luns",
-                hw,
-                (long)nic.tv_sec, nic.tv_nsec,
-                (long)sys.tv_sec, sys.tv_nsec,
-                (long)delta.tv_sec, delta.tv_nsec);
-
-        return buffer;
-}
-#endif
-
-/**
  * igb_init_module - Driver Registration Routine
  *
  * igb_init_module is the first routine called when the driver is
@@ -327,6 +305,7 @@ static void igb_cache_ring_register(struct igb_adapter *adapter)
                 }
         case e1000_82575:
         case e1000_82580:
+        case e1000_i350:
         default:
                 for (; i < adapter->num_rx_queues; i++)
                         adapter->rx_ring[i]->reg_idx = rbase_offset + i;
@@ -470,6 +449,7 @@ static void igb_assign_vector(struct igb_q_vector *q_vector, int msix_vector)
                 q_vector->eims_value = 1 << msix_vector;
                 break;
         case e1000_82580:
+        case e1000_i350:
                 /* 82580 uses the same table-based approach as 82576 but has fewer
                    entries as a result we carry over for queues greater than 4. */
                 if (rx_queue > IGB_N0_QUEUE) {
@@ -550,6 +530,7 @@ static void igb_configure_msix(struct igb_adapter *adapter)
 
         case e1000_82576:
         case e1000_82580:
+        case e1000_i350:
                 /* Turn on MSI-X capability first, or our settings
                  * won't stick.  And it will take days to debug. */
                 wr32(E1000_GPIE, E1000_GPIE_MSIX_MODE |
@@ -1252,6 +1233,7 @@ void igb_reset(struct igb_adapter *adapter)
          * To take effect CTRL.RST is required.
          */
         switch (mac->type) {
+        case e1000_i350:
         case e1000_82580:
                 pba = rd32(E1000_RXPBS);
                 pba = igb_rxpbs_adjust_82580(pba);
@@ -1824,6 +1806,7 @@ static void igb_init_hw_timer(struct igb_adapter *adapter)
         struct e1000_hw *hw = &adapter->hw;
 
         switch (hw->mac.type) {
+        case e1000_i350:
         case e1000_82580:
                 memset(&adapter->cycles, 0, sizeof(adapter->cycles));
                 adapter->cycles.read = igb_read_clock;
@@ -2337,6 +2320,7 @@ static void igb_setup_mrqc(struct igb_adapter *adapter)
         if (adapter->vfs_allocated_count) {
                 /* 82575 and 82576 supports 2 RSS queues for VMDq */
                 switch (hw->mac.type) {
+                case e1000_i350:
                 case e1000_82580:
                         num_rx_queues = 1;
                         shift = 0;
@@ -2588,6 +2572,8 @@ void igb_configure_rx_ring(struct igb_adapter *adapter,
                          E1000_SRRCTL_BSIZEPKT_SHIFT;
                 srrctl |= E1000_SRRCTL_DESCTYPE_ADV_ONEBUF;
         }
+        if (hw->mac.type == e1000_82580)
+                srrctl |= E1000_SRRCTL_TIMESTAMP;
         /* Only set Drop Enable if we are supporting multiple queues */
         if (adapter->vfs_allocated_count || adapter->num_rx_queues > 1)
                 srrctl |= E1000_SRRCTL_DROP_EN;
@@ -2874,7 +2860,7 @@ static int igb_write_mc_addr_list(struct net_device *netdev)
 {
         struct igb_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8  *mta_list;
         int i;
 
@@ -2891,8 +2877,8 @@ static int igb_write_mc_addr_list(struct net_device *netdev)
 
         /* The shared function expects a packed array of only addresses. */
         i = 0;
-        netdev_for_each_mc_addr(mc_ptr, netdev)
-                memcpy(mta_list + (i++ * ETH_ALEN), mc_ptr->dmi_addr, ETH_ALEN);
+        netdev_for_each_mc_addr(ha, netdev)
+                memcpy(mta_list + (i++ * ETH_ALEN), ha->addr, ETH_ALEN);
 
         igb_update_mc_addr_list(hw, mta_list, i);
         kfree(mta_list);
@@ -3918,6 +3904,9 @@ static int igb_change_mtu(struct net_device *netdev, int new_mtu)
          * i.e. RXBUFFER_2048 --> size-4096 slab
          */
 
+        if (adapter->hw.mac.type == e1000_82580)
+                max_frame += IGB_TS_HDR_LEN;
+
         if (max_frame <= IGB_RXBUFFER_1024)
                 rx_buffer_len = IGB_RXBUFFER_1024;
         else if (max_frame <= MAXIMUM_ETHERNET_VLAN_SIZE)
@@ -3925,6 +3914,14 @@ static int igb_change_mtu(struct net_device *netdev, int new_mtu)
         else
                 rx_buffer_len = IGB_RXBUFFER_128;
 
+        if ((max_frame == ETH_FRAME_LEN + ETH_FCS_LEN + IGB_TS_HDR_LEN) ||
+             (max_frame == MAXIMUM_ETHERNET_VLAN_SIZE + IGB_TS_HDR_LEN))
+                rx_buffer_len = MAXIMUM_ETHERNET_VLAN_SIZE + IGB_TS_HDR_LEN;
+
+        if ((adapter->hw.mac.type == e1000_82580) &&
+            (rx_buffer_len == IGB_RXBUFFER_128))
+                rx_buffer_len += IGB_RXBUFFER_64;
+
         if (netif_running(netdev))
                 igb_down(adapter);
 
@@ -5141,7 +5138,7 @@ static inline void igb_rx_checksum_adv(struct igb_ring *ring,
         dev_dbg(&ring->pdev->dev, "cksum success: bits %08X\n", status_err);
 }
 
-static inline void igb_rx_hwtstamp(struct igb_q_vector *q_vector, u32 staterr,
+static void igb_rx_hwtstamp(struct igb_q_vector *q_vector, u32 staterr,
                                    struct sk_buff *skb)
 {
         struct igb_adapter *adapter = q_vector->adapter;
@@ -5159,13 +5156,18 @@ static inline void igb_rx_hwtstamp(struct igb_q_vector *q_vector, u32 staterr,
          * If nothing went wrong, then it should have a skb_shared_tx that we
          * can turn into a skb_shared_hwtstamps.
          */
-        if (likely(!(staterr & E1000_RXDADV_STAT_TS)))
-                return;
-        if (!(rd32(E1000_TSYNCRXCTL) & E1000_TSYNCRXCTL_VALID))
-                return;
+        if (staterr & E1000_RXDADV_STAT_TSIP) {
+                u32 *stamp = (u32 *)skb->data;
+                regval = le32_to_cpu(*(stamp + 2));
+                regval |= (u64)le32_to_cpu(*(stamp + 3)) << 32;
+                skb_pull(skb, IGB_TS_HDR_LEN);
+        } else {
+                if(!(rd32(E1000_TSYNCRXCTL) & E1000_TSYNCRXCTL_VALID))
+                        return;
 
-        regval = rd32(E1000_RXSTMPL);
-        regval |= (u64)rd32(E1000_RXSTMPH) << 32;
+                regval = rd32(E1000_RXSTMPL);
+                regval |= (u64)rd32(E1000_RXSTMPH) << 32;
+        }
 
         igb_systim_to_hwtstamp(adapter, skb_hwtstamps(skb), regval);
 }
@@ -5273,7 +5275,8 @@ send_up:
                         goto next_desc;
                 }
 
-                igb_rx_hwtstamp(q_vector, staterr, skb);
+                if (staterr & (E1000_RXDADV_STAT_TSIP | E1000_RXDADV_STAT_TS))
+                        igb_rx_hwtstamp(q_vector, staterr, skb);
                 total_bytes += skb->len;
                 total_packets++;
 
@@ -5553,6 +5556,16 @@ static int igb_hwtstamp_ioctl(struct net_device *netdev,
                 return 0;
         }
 
+        /*
+         * Per-packet timestamping only works if all packets are
+         * timestamped, so enable timestamping in all packets as
+         * long as one rx filter was configured.
+         */
+        if ((hw->mac.type == e1000_82580) && tsync_rx_ctl) {
+                tsync_rx_ctl = E1000_TSYNCRXCTL_ENABLED;
+                tsync_rx_ctl |= E1000_TSYNCRXCTL_TYPE_ALL;
+        }
+
         /* enable/disable TX */
         regval = rd32(E1000_TSYNCTXCTL);
         regval &= ~E1000_TSYNCTXCTL_ENABLED;
@@ -6129,19 +6142,25 @@ static void igb_vmm_control(struct igb_adapter *adapter)
         struct e1000_hw *hw = &adapter->hw;
         u32 reg;
 
-        /* replication is not supported for 82575 */
-        if (hw->mac.type == e1000_82575)
+        switch (hw->mac.type) {
+        case e1000_82575:
+        default:
+                /* replication is not supported for 82575 */
                 return;
-
-        /* enable replication vlan tag stripping */
-        reg = rd32(E1000_RPLOLR);
-        reg |= E1000_RPLOLR_STRVLAN;
-        wr32(E1000_RPLOLR, reg);
-
-        /* notify HW that the MAC is adding vlan tags */
-        reg = rd32(E1000_DTXCTL);
-        reg |= E1000_DTXCTL_VLAN_ADDED;
-        wr32(E1000_DTXCTL, reg);
+        case e1000_82576:
+                /* notify HW that the MAC is adding vlan tags */
+                reg = rd32(E1000_DTXCTL);
+                reg |= E1000_DTXCTL_VLAN_ADDED;
+                wr32(E1000_DTXCTL, reg);
+        case e1000_82580:
+                /* enable replication vlan tag stripping */
+                reg = rd32(E1000_RPLOLR);
+                reg |= E1000_RPLOLR_STRVLAN;
+                wr32(E1000_RPLOLR, reg);
+        case e1000_i350:
+                /* none of the above registers are supported by i350 */
+                break;
+        }
 
         if (adapter->vfs_allocated_count) {
                 igb_vmdq_set_loopback_pf(hw, true);
diff --git a/drivers/net/igbvf/netdev.c b/drivers/net/igbvf/netdev.c
index b41037ed8083..868855078ebc 100644
--- a/drivers/net/igbvf/netdev.c
+++ b/drivers/net/igbvf/netdev.c
@@ -1397,7 +1397,7 @@ static void igbvf_set_multi(struct net_device *netdev)
 {
         struct igbvf_adapter *adapter = netdev_priv(netdev);
         struct e1000_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8  *mta_list = NULL;
         int i;
 
@@ -1412,8 +1412,8 @@ static void igbvf_set_multi(struct net_device *netdev)
 
         /* prepare a packed array of only addresses. */
         i = 0;
-        netdev_for_each_mc_addr(mc_ptr, netdev)
-                memcpy(mta_list + (i++ * ETH_ALEN), mc_ptr->dmi_addr, ETH_ALEN);
+        netdev_for_each_mc_addr(ha, netdev)
+                memcpy(mta_list + (i++ * ETH_ALEN), ha->addr, ETH_ALEN);
 
         hw->mac.ops.update_mc_addr_list(hw, mta_list, i, 0, 0);
         kfree(mta_list);
diff --git a/drivers/net/ioc3-eth.c b/drivers/net/ioc3-eth.c
index 70871b9b045a..57d873da9789 100644
--- a/drivers/net/ioc3-eth.c
+++ b/drivers/net/ioc3-eth.c
@@ -1664,7 +1664,7 @@ static int ioc3_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
 
 static void ioc3_set_multicast_list(struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         struct ioc3_private *ip = netdev_priv(dev);
         struct ioc3 *ioc3 = ip->regs;
         u64 ehar = 0;
@@ -1688,8 +1688,8 @@ static void ioc3_set_multicast_list(struct net_device *dev)
                         ip->ehar_h = 0xffffffff;
                         ip->ehar_l = 0xffffffff;
                 } else {
-                        netdev_for_each_mc_addr(dmi, dev) {
-                                char *addr = dmi->dmi_addr;
+                        netdev_for_each_mc_addr(ha, dev) {
+                                char *addr = ha->addr;
 
                                 if (!(*addr & 1))
                                         continue;
diff --git a/drivers/net/ipg.c b/drivers/net/ipg.c
index 150415e83f61..67cfc7d9d895 100644
--- a/drivers/net/ipg.c
+++ b/drivers/net/ipg.c
@@ -569,7 +569,7 @@ static int ipg_config_autoneg(struct net_device *dev)
 static void ipg_nic_set_multicast_list(struct net_device *dev)
 {
         void __iomem *ioaddr = ipg_ioaddr(dev);
-        struct dev_mc_list *mc_list_ptr;
+        struct netdev_hw_addr *ha;
         unsigned int hashindex;
         u32 hashtable[2];
         u8 receivemode;
@@ -608,9 +608,9 @@ static void ipg_nic_set_multicast_list(struct net_device *dev)
         hashtable[1] = 0x00000000;
 
         /* Cycle through all multicast addresses to filter. */
-        netdev_for_each_mc_addr(mc_list_ptr, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 /* Calculate CRC result for each multicast address. */
-                hashindex = crc32_le(0xffffffff, mc_list_ptr->dmi_addr,
+                hashindex = crc32_le(0xffffffff, ha->addr,
                                      ETH_ALEN);
 
                 /* Use only the least significant 6 bits. */
@@ -1547,8 +1547,6 @@ static void ipg_reset_after_host_error(struct work_struct *work)
                 container_of(work, struct ipg_nic_private, task.work);
         struct net_device *dev = sp->dev;
 
-        IPG_DDEBUG_MSG("DMACtrl = %8.8x\n", ioread32(sp->ioaddr + IPG_DMACTRL));
-
         /*
          * Acknowledge HostError interrupt by resetting
          * IPG DMA and HOST.
@@ -1825,9 +1823,6 @@ static int ipg_nic_stop(struct net_device *dev)
 
         netif_stop_queue(dev);
 
-        IPG_DDEBUG_MSG("RFDlistendCount = %i\n", sp->RFDlistendCount);
-        IPG_DDEBUG_MSG("RFDListCheckedCount = %i\n", sp->rxdCheckedCount);
-        IPG_DDEBUG_MSG("EmptyRFDListCount = %i\n", sp->EmptyRFDListCount);
         IPG_DUMPTFDLIST(dev);
 
         do {
diff --git a/drivers/net/ipg.h b/drivers/net/ipg.h
index dfc2541bb556..6ce027355fcf 100644
--- a/drivers/net/ipg.h
+++ b/drivers/net/ipg.h
@@ -29,7 +29,7 @@
 /* GMII based PHY IDs */
 #define         NS                              0x2000
 #define         MARVELL                         0x0141
-#define         ICPLUS_PHY              0x243
+#define         ICPLUS_PHY                      0x243
 
 /* NIC Physical Layer Device MII register fields. */
 #define         MII_PHY_SELECTOR_IEEE8023       0x0001
@@ -96,31 +96,31 @@ enum ipg_regs {
 };
 
 /* Ethernet MIB statistic register offsets. */
-#define IPG_OCTETRCVOK          0xA8
+#define IPG_OCTETRCVOK                  0xA8
 #define IPG_MCSTOCTETRCVDOK             0xAC
 #define IPG_BCSTOCTETRCVOK              0xB0
 #define IPG_FRAMESRCVDOK                0xB4
 #define IPG_MCSTFRAMESRCVDOK            0xB8
 #define IPG_BCSTFRAMESRCVDOK            0xBE
 #define IPG_MACCONTROLFRAMESRCVD        0xC6
-#define IPG_FRAMETOOLONGERRRORS 0xC8
-#define IPG_INRANGELENGTHERRORS 0xCA
-#define IPG_FRAMECHECKSEQERRORS 0xCC
-#define IPG_FRAMESLOSTRXERRORS  0xCE
-#define IPG_OCTETXMTOK          0xD0
+#define IPG_FRAMETOOLONGERRRORS         0xC8
+#define IPG_INRANGELENGTHERRORS         0xCA
+#define IPG_FRAMECHECKSEQERRORS         0xCC
+#define IPG_FRAMESLOSTRXERRORS          0xCE
+#define IPG_OCTETXMTOK                  0xD0
 #define IPG_MCSTOCTETXMTOK              0xD4
 #define IPG_BCSTOCTETXMTOK              0xD8
 #define IPG_FRAMESXMTDOK                0xDC
 #define IPG_MCSTFRAMESXMTDOK            0xE0
-#define IPG_FRAMESWDEFERREDXMT  0xE4
+#define IPG_FRAMESWDEFERREDXMT          0xE4
 #define IPG_LATECOLLISIONS              0xE8
 #define IPG_MULTICOLFRAMES              0xEC
 #define IPG_SINGLECOLFRAMES             0xF0
 #define IPG_BCSTFRAMESXMTDOK            0xF6
-#define IPG_CARRIERSENSEERRORS  0xF8
+#define IPG_CARRIERSENSEERRORS          0xF8
 #define IPG_MACCONTROLFRAMESXMTDOK      0xFA
-#define IPG_FRAMESABORTXSCOLLS  0xFC
-#define IPG_FRAMESWEXDEFERRAL   0xFE
+#define IPG_FRAMESABORTXSCOLLS          0xFC
+#define IPG_FRAMESWEXDEFERRAL           0xFE
 
 /* RMON statistic register offsets. */
 #define IPG_ETHERSTATSCOLLISIONS                        0x100
@@ -134,8 +134,8 @@ enum ipg_regs {
 #define IPG_ETHERSTATSPKTS1024TO1518OCTESTSTRANSMIT     0x120
 #define IPG_ETHERSTATSCRCALIGNERRORS                    0x124
 #define IPG_ETHERSTATSUNDERSIZEPKTS                     0x128
-#define IPG_ETHERSTATSFRAGMENTS                 0x12C
-#define IPG_ETHERSTATSJABBERS                   0x130
+#define IPG_ETHERSTATSFRAGMENTS                         0x12C
+#define IPG_ETHERSTATSJABBERS                           0x130
 #define IPG_ETHERSTATSOCTETS                            0x134
 #define IPG_ETHERSTATSPKTS                              0x138
 #define IPG_ETHERSTATSPKTS64OCTESTS                     0x13C
@@ -154,10 +154,10 @@ enum ipg_regs {
 #define IPG_ETHERSTATSDROPEVENTS                        0xCE
 
 /* Serial EEPROM offsets */
-#define IPG_EEPROM_CONFIGPARAM  0x00
+#define IPG_EEPROM_CONFIGPARAM          0x00
 #define IPG_EEPROM_ASICCTRL             0x01
 #define IPG_EEPROM_SUBSYSTEMVENDORID    0x02
-#define IPG_EEPROM_SUBSYSTEMID  0x03
+#define IPG_EEPROM_SUBSYSTEMID          0x03
 #define IPG_EEPROM_STATIONADDRESS0      0x10
 #define IPG_EEPROM_STATIONADDRESS1      0x11
 #define IPG_EEPROM_STATIONADDRESS2      0x12
@@ -168,16 +168,16 @@ enum ipg_regs {
 
 /* IOBaseAddress */
 #define         IPG_PIB_RSVD_MASK               0xFFFFFE01
-#define         IPG_PIB_IOBASEADDRESS   0xFFFFFF00
-#define         IPG_PIB_IOBASEADDRIND   0x00000001
+#define         IPG_PIB_IOBASEADDRESS           0xFFFFFF00
+#define         IPG_PIB_IOBASEADDRIND           0x00000001
 
 /* MemBaseAddress */
 #define         IPG_PMB_RSVD_MASK               0xFFFFFE07
-#define         IPG_PMB_MEMBASEADDRIND  0x00000001
+#define         IPG_PMB_MEMBASEADDRIND          0x00000001
 #define         IPG_PMB_MEMMAPTYPE              0x00000006
 #define         IPG_PMB_MEMMAPTYPE0             0x00000002
 #define         IPG_PMB_MEMMAPTYPE1             0x00000004
-#define         IPG_PMB_MEMBASEADDRESS  0xFFFFFE00
+#define         IPG_PMB_MEMBASEADDRESS          0xFFFFFE00
 
 /* ConfigStatus */
 #define IPG_CS_RSVD_MASK                0xFFB0
@@ -196,20 +196,20 @@ enum ipg_regs {
 
 /* TFDList, TFC */
 #define IPG_TFC_RSVD_MASK                       0x0000FFFF9FFFFFFF
-#define IPG_TFC_FRAMEID                 0x000000000000FFFF
+#define IPG_TFC_FRAMEID                         0x000000000000FFFF
 #define IPG_TFC_WORDALIGN                       0x0000000000030000
 #define IPG_TFC_WORDALIGNTODWORD                0x0000000000000000
-#define IPG_TFC_WORDALIGNTOWORD         0x0000000000020000
+#define IPG_TFC_WORDALIGNTOWORD                 0x0000000000020000
 #define IPG_TFC_WORDALIGNDISABLED               0x0000000000030000
 #define IPG_TFC_TCPCHECKSUMENABLE               0x0000000000040000
 #define IPG_TFC_UDPCHECKSUMENABLE               0x0000000000080000
 #define IPG_TFC_IPCHECKSUMENABLE                0x0000000000100000
 #define IPG_TFC_FCSAPPENDDISABLE                0x0000000000200000
 #define IPG_TFC_TXINDICATE                      0x0000000000400000
-#define IPG_TFC_TXDMAINDICATE           0x0000000000800000
+#define IPG_TFC_TXDMAINDICATE                   0x0000000000800000
 #define IPG_TFC_FRAGCOUNT                       0x000000000F000000
-#define IPG_TFC_VLANTAGINSERT           0x0000000010000000
-#define IPG_TFC_TFDDONE                 0x0000000080000000
+#define IPG_TFC_VLANTAGINSERT                   0x0000000010000000
+#define IPG_TFC_TFDDONE                         0x0000000080000000
 #define IPG_TFC_VID                             0x00000FFF00000000
 #define IPG_TFC_CFI                             0x0000100000000000
 #define IPG_TFC_USERPRIORITY                    0x0000E00000000000
@@ -217,35 +217,35 @@ enum ipg_regs {
 /* TFDList, FragInfo */
 #define IPG_TFI_RSVD_MASK                       0xFFFF00FFFFFFFFFF
 #define IPG_TFI_FRAGADDR                        0x000000FFFFFFFFFF
-#define IPG_TFI_FRAGLEN                 0xFFFF000000000000LL
+#define IPG_TFI_FRAGLEN                         0xFFFF000000000000LL
 
 /* RFD data structure masks. */
 
 /* RFDList, RFS */
 #define IPG_RFS_RSVD_MASK                       0x0000FFFFFFFFFFFF
 #define IPG_RFS_RXFRAMELEN                      0x000000000000FFFF
-#define IPG_RFS_RXFIFOOVERRUN           0x0000000000010000
+#define IPG_RFS_RXFIFOOVERRUN                   0x0000000000010000
 #define IPG_RFS_RXRUNTFRAME                     0x0000000000020000
 #define IPG_RFS_RXALIGNMENTERROR                0x0000000000040000
 #define IPG_RFS_RXFCSERROR                      0x0000000000080000
 #define IPG_RFS_RXOVERSIZEDFRAME                0x0000000000100000
-#define IPG_RFS_RXLENGTHERROR           0x0000000000200000
+#define IPG_RFS_RXLENGTHERROR                   0x0000000000200000
 #define IPG_RFS_VLANDETECTED                    0x0000000000400000
 #define IPG_RFS_TCPDETECTED                     0x0000000000800000
 #define IPG_RFS_TCPERROR                        0x0000000001000000
 #define IPG_RFS_UDPDETECTED                     0x0000000002000000
 #define IPG_RFS_UDPERROR                        0x0000000004000000
 #define IPG_RFS_IPDETECTED                      0x0000000008000000
-#define IPG_RFS_IPERROR                 0x0000000010000000
+#define IPG_RFS_IPERROR                         0x0000000010000000
 #define IPG_RFS_FRAMESTART                      0x0000000020000000
 #define IPG_RFS_FRAMEEND                        0x0000000040000000
-#define IPG_RFS_RFDDONE                 0x0000000080000000
+#define IPG_RFS_RFDDONE                         0x0000000080000000
 #define IPG_RFS_TCI                             0x0000FFFF00000000
 
 /* RFDList, FragInfo */
 #define IPG_RFI_RSVD_MASK                       0xFFFF00FFFFFFFFFF
 #define IPG_RFI_FRAGADDR                        0x000000FFFFFFFFFF
-#define IPG_RFI_FRAGLEN                 0xFFFF000000000000LL
+#define IPG_RFI_FRAGLEN                         0xFFFF000000000000LL
 
 /* I/O Register masks. */
 
@@ -254,37 +254,37 @@ enum ipg_regs {
 
 /* Statistics Mask */
 #define IPG_SM_ALL                                      0x0FFFFFFF
-#define IPG_SM_OCTETRCVOK_FRAMESRCVDOK          0x00000001
-#define IPG_SM_MCSTOCTETRCVDOK_MCSTFRAMESRCVDOK 0x00000002
-#define IPG_SM_BCSTOCTETRCVDOK_BCSTFRAMESRCVDOK 0x00000004
+#define IPG_SM_OCTETRCVOK_FRAMESRCVDOK                  0x00000001
+#define IPG_SM_MCSTOCTETRCVDOK_MCSTFRAMESRCVDOK         0x00000002
+#define IPG_SM_BCSTOCTETRCVDOK_BCSTFRAMESRCVDOK         0x00000004
 #define IPG_SM_RXJUMBOFRAMES                            0x00000008
 #define IPG_SM_TCPCHECKSUMERRORS                        0x00000010
-#define IPG_SM_IPCHECKSUMERRORS                 0x00000020
+#define IPG_SM_IPCHECKSUMERRORS                         0x00000020
 #define IPG_SM_UDPCHECKSUMERRORS                        0x00000040
 #define IPG_SM_MACCONTROLFRAMESRCVD                     0x00000080
 #define IPG_SM_FRAMESTOOLONGERRORS                      0x00000100
 #define IPG_SM_INRANGELENGTHERRORS                      0x00000200
 #define IPG_SM_FRAMECHECKSEQERRORS                      0x00000400
 #define IPG_SM_FRAMESLOSTRXERRORS                       0x00000800
-#define IPG_SM_OCTETXMTOK_FRAMESXMTOK           0x00001000
-#define IPG_SM_MCSTOCTETXMTOK_MCSTFRAMESXMTDOK  0x00002000
-#define IPG_SM_BCSTOCTETXMTOK_BCSTFRAMESXMTDOK  0x00004000
+#define IPG_SM_OCTETXMTOK_FRAMESXMTOK                   0x00001000
+#define IPG_SM_MCSTOCTETXMTOK_MCSTFRAMESXMTDOK          0x00002000
+#define IPG_SM_BCSTOCTETXMTOK_BCSTFRAMESXMTDOK          0x00004000
 #define IPG_SM_FRAMESWDEFERREDXMT                       0x00008000
-#define IPG_SM_LATECOLLISIONS                   0x00010000
-#define IPG_SM_MULTICOLFRAMES                   0x00020000
-#define IPG_SM_SINGLECOLFRAMES                  0x00040000
+#define IPG_SM_LATECOLLISIONS                           0x00010000
+#define IPG_SM_MULTICOLFRAMES                           0x00020000
+#define IPG_SM_SINGLECOLFRAMES                          0x00040000
 #define IPG_SM_TXJUMBOFRAMES                            0x00080000
 #define IPG_SM_CARRIERSENSEERRORS                       0x00100000
 #define IPG_SM_MACCONTROLFRAMESXMTD                     0x00200000
 #define IPG_SM_FRAMESABORTXSCOLLS                       0x00400000
-#define IPG_SM_FRAMESWEXDEFERAL                 0x00800000
+#define IPG_SM_FRAMESWEXDEFERAL                         0x00800000
 
 /* Countdown */
 #define IPG_CD_RSVD_MASK                0x0700FFFF
 #define IPG_CD_COUNT                    0x0000FFFF
-#define IPG_CD_COUNTDOWNSPEED   0x01000000
+#define IPG_CD_COUNTDOWNSPEED           0x01000000
 #define IPG_CD_COUNTDOWNMODE            0x02000000
-#define IPG_CD_COUNTINTENABLED  0x04000000
+#define IPG_CD_COUNTINTENABLED          0x04000000
 
 /* TxDMABurstThresh */
 #define IPG_TB_RSVD_MASK                0xFF
@@ -653,15 +653,28 @@ enum ipg_regs {
  * Miscellaneous macros.
  */
 
-/* Marco for printing debug statements. */
+/* Macros for printing debug statements. */
 #ifdef IPG_DEBUG
-#  define IPG_DEBUG_MSG(args...)
-#  define IPG_DDEBUG_MSG(args...) printk(KERN_DEBUG "IPG: " args)
+#  define IPG_DEBUG_MSG(fmt, args...)                   \
+do {                                                    \
+        if (0)                                          \
+                printk(KERN_DEBUG "IPG: " fmt, ##args); \
+} while (0)
+#  define IPG_DDEBUG_MSG(fmt, args...)                  \
+        printk(KERN_DEBUG "IPG: " fmt, ##args)
 #  define IPG_DUMPRFDLIST(args) ipg_dump_rfdlist(args)
 #  define IPG_DUMPTFDLIST(args) ipg_dump_tfdlist(args)
 #else
-#  define IPG_DEBUG_MSG(args...)
-#  define IPG_DDEBUG_MSG(args...)
+#  define IPG_DEBUG_MSG(fmt, args...)                   \
+do {                                                    \
+        if (0)                                          \
+                printk(KERN_DEBUG "IPG: " fmt, ##args); \
+} while (0)
+#  define IPG_DDEBUG_MSG(fmt, args...)                  \
+do {                                                    \
+        if (0)                                          \
+                printk(KERN_DEBUG "IPG: " fmt, ##args); \
+} while (0)
 #  define IPG_DUMPRFDLIST(args)
 #  define IPG_DUMPTFDLIST(args)
 #endif
diff --git a/drivers/net/irda/Kconfig b/drivers/net/irda/Kconfig
index af10e97345ce..25bb2a015e18 100644
--- a/drivers/net/irda/Kconfig
+++ b/drivers/net/irda/Kconfig
@@ -397,5 +397,11 @@ config MCS_FIR
           To compile it as a module, choose M here: the module will be called
           mcs7780.
 
+config SH_IRDA
+        tristate "SuperH IrDA driver"
+        depends on IRDA && ARCH_SHMOBILE
+        help
+          Say Y here if your want to enable SuperH IrDA devices.
+
 endmenu
 
diff --git a/drivers/net/irda/Makefile b/drivers/net/irda/Makefile
index e030d47e2793..dfc64537f62f 100644
--- a/drivers/net/irda/Makefile
+++ b/drivers/net/irda/Makefile
@@ -19,6 +19,7 @@ obj-$(CONFIG_VIA_FIR)		+= via-ircc.o
 obj-$(CONFIG_PXA_FICP)          += pxaficp_ir.o
 obj-$(CONFIG_MCS_FIR)           += mcs7780.o
 obj-$(CONFIG_AU1000_FIR)        += au1k_ir.o
+obj-$(CONFIG_SH_IRDA)           += sh_irda.o
 # SIR drivers
 obj-$(CONFIG_IRTTY_SIR)         += irtty-sir.o  sir-dev.o
 obj-$(CONFIG_BFIN_SIR)          += bfin_sir.o
diff --git a/drivers/net/irda/ali-ircc.c b/drivers/net/irda/ali-ircc.c
index 12c7b006f767..a32c97e6b39d 100644
--- a/drivers/net/irda/ali-ircc.c
+++ b/drivers/net/irda/ali-ircc.c
@@ -753,18 +753,18 @@ static irqreturn_t ali_ircc_fir_interrupt(struct ali_ircc_cb *self)
                         if(OldMessageCount > ((self->LineStatus+1) & 0x07))
                         {
                                 self->rcvFramesOverflow = TRUE; 
-                                IRDA_DEBUG(1, "%s(), ******* self->rcvFramesOverflow = TRUE ******** \n", __func__);
+                                IRDA_DEBUG(1, "%s(), ******* self->rcvFramesOverflow = TRUE ********\n", __func__);
                         }
                                                 
                         if (ali_ircc_dma_receive_complete(self))
                         {
-                                IRDA_DEBUG(1, "%s(), ******* receive complete ******** \n", __func__);
+                                IRDA_DEBUG(1, "%s(), ******* receive complete ********\n", __func__);
                                 
                                 self->ier = IER_EOM;                            
                         }
                         else
                         {
-                                IRDA_DEBUG(1, "%s(), ******* Not receive complete ******** \n", __func__);
+                                IRDA_DEBUG(1, "%s(), ******* Not receive complete ********\n", __func__);
                                 
                                 self->ier = IER_EOM | IER_TIMER;                                                                
                         }       
@@ -777,7 +777,7 @@ static irqreturn_t ali_ircc_fir_interrupt(struct ali_ircc_cb *self)
                 if(OldMessageCount > ((self->LineStatus+1) & 0x07))
                 {
                         self->rcvFramesOverflow = TRUE; 
-                        IRDA_DEBUG(1, "%s(), ******* self->rcvFramesOverflow = TRUE ******* \n", __func__);
+                        IRDA_DEBUG(1, "%s(), ******* self->rcvFramesOverflow = TRUE *******\n", __func__);
                 }
                 /* Disable Timer */
                 switch_bank(iobase, BANK1);
@@ -942,7 +942,7 @@ static void ali_ircc_sir_write_wakeup(struct ali_ircc_cb *self)
                         // benjamin 2000/11/10 06:32PM
                         if (self->io.speed > 115200)
                         {
-                                IRDA_DEBUG(2, "%s(), ali_ircc_change_speed from UART_LSR_TEMT \n", __func__ );
+                                IRDA_DEBUG(2, "%s(), ali_ircc_change_speed from UART_LSR_TEMT\n", __func__ );
                                         
                                 self->ier = IER_EOM;
                                 // SetCOMInterrupts(self, TRUE);                                                        
@@ -970,7 +970,7 @@ static void ali_ircc_change_speed(struct ali_ircc_cb *self, __u32 baud)
         
         IRDA_DEBUG(1, "%s(), ---------------- Start ----------------\n", __func__ );
         
-        IRDA_DEBUG(2, "%s(), setting speed = %d \n", __func__ , baud);
+        IRDA_DEBUG(2, "%s(), setting speed = %d\n", __func__ , baud);
         
         /* This function *must* be called with irq off and spin-lock.
          * - Jean II */
@@ -1500,7 +1500,7 @@ static netdev_tx_t ali_ircc_fir_hard_xmit(struct sk_buff *skb,
                         diff = self->now.tv_usec - self->stamp.tv_usec;
                         /* self->stamp is set from ali_ircc_dma_receive_complete() */
                                                         
-                        IRDA_DEBUG(1, "%s(), ******* diff = %d ******* \n", __func__ , diff);
+                        IRDA_DEBUG(1, "%s(), ******* diff = %d *******\n", __func__ , diff);
                         
                         if (diff < 0) 
                                 diff += 1000000;
@@ -1641,7 +1641,7 @@ static void ali_ircc_dma_xmit(struct ali_ircc_cb *self)
         tmp = inb(iobase+FIR_LCR_B);
         tmp &= ~0x20; // Disable SIP
         outb(((unsigned char)(tmp & 0x3f) | LCR_B_TX_MODE) & ~LCR_B_BW, iobase+FIR_LCR_B);
-        IRDA_DEBUG(1, "%s(), ******* Change to TX mode: FIR_LCR_B = 0x%x ******* \n", __func__ , inb(iobase+FIR_LCR_B));
+        IRDA_DEBUG(1, "%s(), *** Change to TX mode: FIR_LCR_B = 0x%x ***\n", __func__ , inb(iobase+FIR_LCR_B));
         
         outb(0, iobase+FIR_LSR);
                         
@@ -1768,7 +1768,7 @@ static int ali_ircc_dma_receive(struct ali_ircc_cb *self)
         //switch_bank(iobase, BANK0);
         tmp = inb(iobase+FIR_LCR_B);
         outb((unsigned char)(tmp &0x3f) | LCR_B_RX_MODE | LCR_B_BW , iobase + FIR_LCR_B); // 2000/12/1 05:16PM
-        IRDA_DEBUG(1, "%s(), *** Change To RX mode: FIR_LCR_B = 0x%x *** \n", __func__ , inb(iobase+FIR_LCR_B));
+        IRDA_DEBUG(1, "%s(), *** Change To RX mode: FIR_LCR_B = 0x%x ***\n", __func__ , inb(iobase+FIR_LCR_B));
                         
         /* Set Rx Threshold */
         switch_bank(iobase, BANK1);
@@ -1840,7 +1840,7 @@ static int  ali_ircc_dma_receive_complete(struct ali_ircc_cb *self)
                 /* Check for errors */
                 if ((status & 0xd8) || self->rcvFramesOverflow || (len==0))             
                 {
-                        IRDA_DEBUG(0,"%s(), ************* RX Errors ************ \n", __func__ );
+                        IRDA_DEBUG(0,"%s(), ************* RX Errors ************\n", __func__ );
                         
                         /* Skip frame */
                         self->netdev->stats.rx_errors++;
@@ -1850,29 +1850,29 @@ static int  ali_ircc_dma_receive_complete(struct ali_ircc_cb *self)
                         if (status & LSR_FIFO_UR) 
                         {
                                 self->netdev->stats.rx_frame_errors++;
-                                IRDA_DEBUG(0,"%s(), ************* FIFO Errors ************ \n", __func__ );
+                                IRDA_DEBUG(0,"%s(), ************* FIFO Errors ************\n", __func__ );
                         }       
                         if (status & LSR_FRAME_ERROR)
                         {
                                 self->netdev->stats.rx_frame_errors++;
-                                IRDA_DEBUG(0,"%s(), ************* FRAME Errors ************ \n", __func__ );
+                                IRDA_DEBUG(0,"%s(), ************* FRAME Errors ************\n", __func__ );
                         }
                                                         
                         if (status & LSR_CRC_ERROR) 
                         {
                                 self->netdev->stats.rx_crc_errors++;
-                                IRDA_DEBUG(0,"%s(), ************* CRC Errors ************ \n", __func__ );
+                                IRDA_DEBUG(0,"%s(), ************* CRC Errors ************\n", __func__ );
                         }
                         
                         if(self->rcvFramesOverflow)
                         {
                                 self->netdev->stats.rx_frame_errors++;
-                                IRDA_DEBUG(0,"%s(), ************* Overran DMA buffer ************ \n", __func__ );
+                                IRDA_DEBUG(0,"%s(), ************* Overran DMA buffer ************\n", __func__ );
                         }
                         if(len == 0)
                         {
                                 self->netdev->stats.rx_frame_errors++;
-                                IRDA_DEBUG(0,"%s(), ********** Receive Frame Size = 0 ********* \n", __func__ );
+                                IRDA_DEBUG(0,"%s(), ********** Receive Frame Size = 0 *********\n", __func__ );
                         }
                 }        
                 else 
@@ -1884,7 +1884,7 @@ static int  ali_ircc_dma_receive_complete(struct ali_ircc_cb *self)
                                 val = inb(iobase+FIR_BSR);      
                                 if ((val& BSR_FIFO_NOT_EMPTY)== 0x80) 
                                 {
-                                        IRDA_DEBUG(0, "%s(), ************* BSR_FIFO_NOT_EMPTY ************ \n", __func__ );
+                                        IRDA_DEBUG(0, "%s(), ************* BSR_FIFO_NOT_EMPTY ************\n", __func__ );
                                         
                                         /* Put this entry back in fifo */
                                         st_fifo->head--;
diff --git a/drivers/net/irda/irda-usb.c b/drivers/net/irda/irda-usb.c
index 2c9b3af16612..4441fa3389c2 100644
--- a/drivers/net/irda/irda-usb.c
+++ b/drivers/net/irda/irda-usb.c
@@ -839,7 +839,7 @@ static void irda_usb_receive(struct urb *urb)
                         /* Usually precursor to a hot-unplug on OHCI. */
                 default:
                         self->netdev->stats.rx_errors++;
-                        IRDA_DEBUG(0, "%s(), RX status %d, transfer_flags 0x%04X \n", __func__, urb->status, urb->transfer_flags);
+                        IRDA_DEBUG(0, "%s(), RX status %d, transfer_flags 0x%04X\n", __func__, urb->status, urb->transfer_flags);
                         break;
                 }
                 /* If we received an error, we don't want to resubmit the
diff --git a/drivers/net/irda/sh_irda.c b/drivers/net/irda/sh_irda.c
new file mode 100644
index 000000000000..9a828b06a57e
--- /dev/null
+++ b/drivers/net/irda/sh_irda.c
@@ -0,0 +1,865 @@
+/*
+ * SuperH IrDA Driver
+ *
+ * Copyright (C) 2010 Renesas Solutions Corp.
+ * Kuninori Morimoto <morimoto.kuninori@renesas.com>
+ *
+ * Based on sh_sir.c
+ * Copyright (C) 2009 Renesas Solutions Corp.
+ * Copyright 2006-2009 Analog Devices Inc.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+
+/*
+ * CAUTION
+ *
+ * This driver is very simple.
+ * So, it doesn't have below support now
+ *  - MIR/FIR support
+ *  - DMA transfer support
+ *  - FIFO mode support
+ */
+#include <linux/module.h>
+#include <linux/platform_device.h>
+#include <linux/clk.h>
+#include <net/irda/wrapper.h>
+#include <net/irda/irda_device.h>
+
+#define DRIVER_NAME "sh_irda"
+
+#if defined(CONFIG_ARCH_SH7367) || defined(CONFIG_ARCH_SH7377)
+#define __IRDARAM_LEN   0x13FF
+#else
+#define __IRDARAM_LEN   0x1039
+#endif
+
+#define IRTMR           0x1F00 /* Transfer mode */
+#define IRCFR           0x1F02 /* Configuration */
+#define IRCTR           0x1F04 /* IR control */
+#define IRTFLR          0x1F20 /* Transmit frame length */
+#define IRTCTR          0x1F22 /* Transmit control */
+#define IRRFLR          0x1F40 /* Receive frame length */
+#define IRRCTR          0x1F42 /* Receive control */
+#define SIRISR          0x1F60 /* SIR-UART mode interrupt source */
+#define SIRIMR          0x1F62 /* SIR-UART mode interrupt mask */
+#define SIRICR          0x1F64 /* SIR-UART mode interrupt clear */
+#define SIRBCR          0x1F68 /* SIR-UART mode baud rate count */
+#define MFIRISR         0x1F70 /* MIR/FIR mode interrupt source */
+#define MFIRIMR         0x1F72 /* MIR/FIR mode interrupt mask */
+#define MFIRICR         0x1F74 /* MIR/FIR mode interrupt clear */
+#define CRCCTR          0x1F80 /* CRC engine control */
+#define CRCIR           0x1F86 /* CRC engine input data */
+#define CRCCR           0x1F8A /* CRC engine calculation */
+#define CRCOR           0x1F8E /* CRC engine output data */
+#define FIFOCP          0x1FC0 /* FIFO current pointer */
+#define FIFOFP          0x1FC2 /* FIFO follow pointer */
+#define FIFORSMSK       0x1FC4 /* FIFO receive status mask */
+#define FIFORSOR        0x1FC6 /* FIFO receive status OR */
+#define FIFOSEL         0x1FC8 /* FIFO select */
+#define FIFORS          0x1FCA /* FIFO receive status */
+#define FIFORFL         0x1FCC /* FIFO receive frame length */
+#define FIFORAMCP       0x1FCE /* FIFO RAM current pointer */
+#define FIFORAMFP       0x1FD0 /* FIFO RAM follow pointer */
+#define BIFCTL          0x1FD2 /* BUS interface control */
+#define IRDARAM         0x0000 /* IrDA buffer RAM */
+#define IRDARAM_LEN     __IRDARAM_LEN /* - 8/16/32 (read-only for 32) */
+
+/* IRTMR */
+#define TMD_MASK        (0x3 << 14) /* Transfer Mode */
+#define TMD_SIR         (0x0 << 14)
+#define TMD_MIR         (0x3 << 14)
+#define TMD_FIR         (0x2 << 14)
+
+#define FIFORIM         (1 << 8) /* FIFO receive interrupt mask */
+#define MIM             (1 << 4) /* MIR/FIR Interrupt Mask */
+#define SIM             (1 << 0) /* SIR Interrupt Mask */
+#define xIM_MASK        (FIFORIM | MIM | SIM)
+
+/* IRCFR */
+#define RTO_SHIFT       8 /* shift for Receive Timeout */
+#define RTO             (0x3 << RTO_SHIFT)
+
+/* IRTCTR */
+#define ARMOD           (1 << 15) /* Auto-Receive Mode */
+#define TE              (1 <<  0) /* Transmit Enable */
+
+/* IRRFLR */
+#define RFL_MASK        (0x1FFF) /* mask for Receive Frame Length */
+
+/* IRRCTR */
+#define RE              (1 <<  0) /* Receive Enable */
+
+/*
+ * SIRISR,  SIRIMR,  SIRICR,
+ * MFIRISR, MFIRIMR, MFIRICR
+ */
+#define FRE             (1 << 15) /* Frame Receive End */
+#define TROV            (1 << 11) /* Transfer Area Overflow */
+#define xIR_9           (1 << 9)
+#define TOT             xIR_9     /* for SIR     Timeout */
+#define ABTD            xIR_9     /* for MIR/FIR Abort Detection */
+#define xIR_8           (1 << 8)
+#define FER             xIR_8     /* for SIR     Framing Error */
+#define CRCER           xIR_8     /* for MIR/FIR CRC error */
+#define FTE             (1 << 7)  /* Frame Transmit End */
+#define xIR_MASK        (FRE | TROV | xIR_9 | xIR_8 | FTE)
+
+/* SIRBCR */
+#define BRC_MASK        (0x3F) /* mask for Baud Rate Count */
+
+/* CRCCTR */
+#define CRC_RST         (1 << 15) /* CRC Engine Reset */
+#define CRC_CT_MASK     0x0FFF    /* mask for CRC Engine Input Data Count */
+
+/* CRCIR */
+#define CRC_IN_MASK     0x0FFF    /* mask for CRC Engine Input Data */
+
+/************************************************************************
+
+
+                        enum / structure
+
+
+************************************************************************/
+enum sh_irda_mode {
+        SH_IRDA_NONE = 0,
+        SH_IRDA_SIR,
+        SH_IRDA_MIR,
+        SH_IRDA_FIR,
+};
+
+struct sh_irda_self;
+struct sh_irda_xir_func {
+        int (*xir_fre)  (struct sh_irda_self *self);
+        int (*xir_trov) (struct sh_irda_self *self);
+        int (*xir_9)    (struct sh_irda_self *self);
+        int (*xir_8)    (struct sh_irda_self *self);
+        int (*xir_fte)  (struct sh_irda_self *self);
+};
+
+struct sh_irda_self {
+        void __iomem            *membase;
+        unsigned int             irq;
+        struct clk              *clk;
+
+        struct net_device       *ndev;
+
+        struct irlap_cb         *irlap;
+        struct qos_info         qos;
+
+        iobuff_t                tx_buff;
+        iobuff_t                rx_buff;
+
+        enum sh_irda_mode       mode;
+        spinlock_t              lock;
+
+        struct sh_irda_xir_func *xir_func;
+};
+
+/************************************************************************
+
+
+                        common function
+
+
+************************************************************************/
+static void sh_irda_write(struct sh_irda_self *self, u32 offset, u16 data)
+{
+        unsigned long flags;
+
+        spin_lock_irqsave(&self->lock, flags);
+        iowrite16(data, self->membase + offset);
+        spin_unlock_irqrestore(&self->lock, flags);
+}
+
+static u16 sh_irda_read(struct sh_irda_self *self, u32 offset)
+{
+        unsigned long flags;
+        u16 ret;
+
+        spin_lock_irqsave(&self->lock, flags);
+        ret = ioread16(self->membase + offset);
+        spin_unlock_irqrestore(&self->lock, flags);
+
+        return ret;
+}
+
+static void sh_irda_update_bits(struct sh_irda_self *self, u32 offset,
+                               u16 mask, u16 data)
+{
+        unsigned long flags;
+        u16 old, new;
+
+        spin_lock_irqsave(&self->lock, flags);
+        old = ioread16(self->membase + offset);
+        new = (old & ~mask) | data;
+        if (old != new)
+                iowrite16(data, self->membase + offset);
+        spin_unlock_irqrestore(&self->lock, flags);
+}
+
+/************************************************************************
+
+
+                        mode function
+
+
+************************************************************************/
+/*=====================================
+ *
+ *              common
+ *
+ *=====================================*/
+static void sh_irda_rcv_ctrl(struct sh_irda_self *self, int enable)
+{
+        struct device *dev = &self->ndev->dev;
+
+        sh_irda_update_bits(self, IRRCTR, RE, enable ? RE : 0);
+        dev_dbg(dev, "recv %s\n", enable ? "enable" : "disable");
+}
+
+static int sh_irda_set_timeout(struct sh_irda_self *self, int interval)
+{
+        struct device *dev = &self->ndev->dev;
+
+        if (SH_IRDA_SIR != self->mode)
+                interval = 0;
+
+        if (interval < 0 || interval > 2) {
+                dev_err(dev, "unsupported timeout interval\n");
+                return -EINVAL;
+        }
+
+        sh_irda_update_bits(self, IRCFR, RTO, interval << RTO_SHIFT);
+        return 0;
+}
+
+static int sh_irda_set_baudrate(struct sh_irda_self *self, int baudrate)
+{
+        struct device *dev = &self->ndev->dev;
+        u16 val;
+
+        if (baudrate < 0)
+                return 0;
+
+        if (SH_IRDA_SIR != self->mode) {
+                dev_err(dev, "it is not SIR mode\n");
+                return -EINVAL;
+        }
+
+        /*
+         * Baud rate (bits/s) =
+         *   (48 MHz / 26) / (baud rate counter value + 1) x 16
+         */
+        val = (48000000 / 26 / 16 / baudrate) - 1;
+        dev_dbg(dev, "baudrate = %d,  val = 0x%02x\n", baudrate, val);
+
+        sh_irda_update_bits(self, SIRBCR, BRC_MASK, val);
+
+        return 0;
+}
+
+static int xir_get_rcv_length(struct sh_irda_self *self)
+{
+        return RFL_MASK & sh_irda_read(self, IRRFLR);
+}
+
+/*=====================================
+ *
+ *              NONE MODE
+ *
+ *=====================================*/
+static int xir_fre(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        dev_err(dev, "none mode: frame recv\n");
+        return 0;
+}
+
+static int xir_trov(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        dev_err(dev, "none mode: buffer ram over\n");
+        return 0;
+}
+
+static int xir_9(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        dev_err(dev, "none mode: time over\n");
+        return 0;
+}
+
+static int xir_8(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        dev_err(dev, "none mode: framing error\n");
+        return 0;
+}
+
+static int xir_fte(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        dev_err(dev, "none mode: frame transmit end\n");
+        return 0;
+}
+
+static struct sh_irda_xir_func xir_func = {
+        .xir_fre        = xir_fre,
+        .xir_trov       = xir_trov,
+        .xir_9          = xir_9,
+        .xir_8          = xir_8,
+        .xir_fte        = xir_fte,
+};
+
+/*=====================================
+ *
+ *              MIR/FIR MODE
+ *
+ * MIR/FIR are not supported now
+ *=====================================*/
+static struct sh_irda_xir_func mfir_func = {
+        .xir_fre        = xir_fre,
+        .xir_trov       = xir_trov,
+        .xir_9          = xir_9,
+        .xir_8          = xir_8,
+        .xir_fte        = xir_fte,
+};
+
+/*=====================================
+ *
+ *              SIR MODE
+ *
+ *=====================================*/
+static int sir_fre(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        u16 data16;
+        u8  *data = (u8 *)&data16;
+        int len = xir_get_rcv_length(self);
+        int i, j;
+
+        if (len > IRDARAM_LEN)
+                len = IRDARAM_LEN;
+
+        dev_dbg(dev, "frame recv length = %d\n", len);
+
+        for (i = 0; i < len; i++) {
+                j = i % 2;
+                if (!j)
+                        data16 = sh_irda_read(self, IRDARAM + i);
+
+                async_unwrap_char(self->ndev, &self->ndev->stats,
+                                  &self->rx_buff, data[j]);
+        }
+        self->ndev->last_rx = jiffies;
+
+        sh_irda_rcv_ctrl(self, 1);
+
+        return 0;
+}
+
+static int sir_trov(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+
+        dev_err(dev, "buffer ram over\n");
+        sh_irda_rcv_ctrl(self, 1);
+        return 0;
+}
+
+static int sir_tot(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+
+        dev_err(dev, "time over\n");
+        sh_irda_set_baudrate(self, 9600);
+        sh_irda_rcv_ctrl(self, 1);
+        return 0;
+}
+
+static int sir_fer(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+
+        dev_err(dev, "framing error\n");
+        sh_irda_rcv_ctrl(self, 1);
+        return 0;
+}
+
+static int sir_fte(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+
+        dev_dbg(dev, "frame transmit end\n");
+        netif_wake_queue(self->ndev);
+
+        return 0;
+}
+
+static struct sh_irda_xir_func sir_func = {
+        .xir_fre        = sir_fre,
+        .xir_trov       = sir_trov,
+        .xir_9          = sir_tot,
+        .xir_8          = sir_fer,
+        .xir_fte        = sir_fte,
+};
+
+static void sh_irda_set_mode(struct sh_irda_self *self, enum sh_irda_mode mode)
+{
+        struct device *dev = &self->ndev->dev;
+        struct sh_irda_xir_func *func;
+        const char *name;
+        u16 data;
+
+        switch (mode) {
+        case SH_IRDA_SIR:
+                name    = "SIR";
+                data    = TMD_SIR;
+                func    = &sir_func;
+                break;
+        case SH_IRDA_MIR:
+                name    = "MIR";
+                data    = TMD_MIR;
+                func    = &mfir_func;
+                break;
+        case SH_IRDA_FIR:
+                name    = "FIR";
+                data    = TMD_FIR;
+                func    = &mfir_func;
+                break;
+        default:
+                name = "NONE";
+                data = 0;
+                func = &xir_func;
+                break;
+        }
+
+        self->mode = mode;
+        self->xir_func = func;
+        sh_irda_update_bits(self, IRTMR, TMD_MASK, data);
+
+        dev_dbg(dev, "switch to %s mode", name);
+}
+
+/************************************************************************
+
+
+                        irq function
+
+
+************************************************************************/
+static void sh_irda_set_irq_mask(struct sh_irda_self *self)
+{
+        u16 tmr_hole;
+        u16 xir_reg;
+
+        /* set all mask */
+        sh_irda_update_bits(self, IRTMR,   xIM_MASK, xIM_MASK);
+        sh_irda_update_bits(self, SIRIMR,  xIR_MASK, xIR_MASK);
+        sh_irda_update_bits(self, MFIRIMR, xIR_MASK, xIR_MASK);
+
+        /* clear irq */
+        sh_irda_update_bits(self, SIRICR,  xIR_MASK, xIR_MASK);
+        sh_irda_update_bits(self, MFIRICR, xIR_MASK, xIR_MASK);
+
+        switch (self->mode) {
+        case SH_IRDA_SIR:
+                tmr_hole        = SIM;
+                xir_reg         = SIRIMR;
+                break;
+        case SH_IRDA_MIR:
+        case SH_IRDA_FIR:
+                tmr_hole        = MIM;
+                xir_reg         = MFIRIMR;
+                break;
+        default:
+                tmr_hole        = 0;
+                xir_reg         = 0;
+                break;
+        }
+
+        /* open mask */
+        if (xir_reg) {
+                sh_irda_update_bits(self, IRTMR, tmr_hole, 0);
+                sh_irda_update_bits(self, xir_reg, xIR_MASK, 0);
+        }
+}
+
+static irqreturn_t sh_irda_irq(int irq, void *dev_id)
+{
+        struct sh_irda_self *self = dev_id;
+        struct sh_irda_xir_func *func = self->xir_func;
+        u16 isr = sh_irda_read(self, SIRISR);
+
+        /* clear irq */
+        sh_irda_write(self, SIRICR, isr);
+
+        if (isr & FRE)
+                func->xir_fre(self);
+        if (isr & TROV)
+                func->xir_trov(self);
+        if (isr & xIR_9)
+                func->xir_9(self);
+        if (isr & xIR_8)
+                func->xir_8(self);
+        if (isr & FTE)
+                func->xir_fte(self);
+
+        return IRQ_HANDLED;
+}
+
+/************************************************************************
+
+
+                        CRC function
+
+
+************************************************************************/
+static void sh_irda_crc_reset(struct sh_irda_self *self)
+{
+        sh_irda_write(self, CRCCTR, CRC_RST);
+}
+
+static void sh_irda_crc_add(struct sh_irda_self *self, u16 data)
+{
+        sh_irda_write(self, CRCIR, data & CRC_IN_MASK);
+}
+
+static u16 sh_irda_crc_cnt(struct sh_irda_self *self)
+{
+        return CRC_CT_MASK & sh_irda_read(self, CRCCTR);
+}
+
+static u16 sh_irda_crc_out(struct sh_irda_self *self)
+{
+        return sh_irda_read(self, CRCOR);
+}
+
+static int sh_irda_crc_init(struct sh_irda_self *self)
+{
+        struct device *dev = &self->ndev->dev;
+        int ret = -EIO;
+        u16 val;
+
+        sh_irda_crc_reset(self);
+
+        sh_irda_crc_add(self, 0xCC);
+        sh_irda_crc_add(self, 0xF5);
+        sh_irda_crc_add(self, 0xF1);
+        sh_irda_crc_add(self, 0xA7);
+
+        val = sh_irda_crc_cnt(self);
+        if (4 != val) {
+                dev_err(dev, "CRC count error %x\n", val);
+                goto crc_init_out;
+        }
+
+        val = sh_irda_crc_out(self);
+        if (0x51DF != val) {
+                dev_err(dev, "CRC result error%x\n", val);
+                goto crc_init_out;
+        }
+
+        ret = 0;
+
+crc_init_out:
+
+        sh_irda_crc_reset(self);
+        return ret;
+}
+
+/************************************************************************
+
+
+                        iobuf function
+
+
+************************************************************************/
+static void sh_irda_remove_iobuf(struct sh_irda_self *self)
+{
+        kfree(self->rx_buff.head);
+
+        self->tx_buff.head = NULL;
+        self->tx_buff.data = NULL;
+        self->rx_buff.head = NULL;
+        self->rx_buff.data = NULL;
+}
+
+static int sh_irda_init_iobuf(struct sh_irda_self *self, int rxsize, int txsize)
+{
+        if (self->rx_buff.head ||
+            self->tx_buff.head) {
+                dev_err(&self->ndev->dev, "iobuff has already existed.");
+                return -EINVAL;
+        }
+
+        /* rx_buff */
+        self->rx_buff.head = kmalloc(rxsize, GFP_KERNEL);
+        if (!self->rx_buff.head)
+                return -ENOMEM;
+
+        self->rx_buff.truesize  = rxsize;
+        self->rx_buff.in_frame  = FALSE;
+        self->rx_buff.state     = OUTSIDE_FRAME;
+        self->rx_buff.data      = self->rx_buff.head;
+
+        /* tx_buff */
+        self->tx_buff.head      = self->membase + IRDARAM;
+        self->tx_buff.truesize  = IRDARAM_LEN;
+
+        return 0;
+}
+
+/************************************************************************
+
+
+                        net_device_ops function
+
+
+************************************************************************/
+static int sh_irda_hard_xmit(struct sk_buff *skb, struct net_device *ndev)
+{
+        struct sh_irda_self *self = netdev_priv(ndev);
+        struct device *dev = &self->ndev->dev;
+        int speed = irda_get_next_speed(skb);
+        int ret;
+
+        dev_dbg(dev, "hard xmit\n");
+
+        netif_stop_queue(ndev);
+        sh_irda_rcv_ctrl(self, 0);
+
+        ret = sh_irda_set_baudrate(self, speed);
+        if (ret < 0)
+                return ret;
+
+        self->tx_buff.len = 0;
+        if (skb->len) {
+                unsigned long flags;
+
+                spin_lock_irqsave(&self->lock, flags);
+                self->tx_buff.len = async_wrap_skb(skb,
+                                                   self->tx_buff.head,
+                                                   self->tx_buff.truesize);
+                spin_unlock_irqrestore(&self->lock, flags);
+
+                if (self->tx_buff.len > self->tx_buff.truesize)
+                        self->tx_buff.len = self->tx_buff.truesize;
+
+                sh_irda_write(self, IRTFLR, self->tx_buff.len);
+                sh_irda_write(self, IRTCTR, ARMOD | TE);
+        }
+
+        dev_kfree_skb(skb);
+
+        return 0;
+}
+
+static int sh_irda_ioctl(struct net_device *ndev, struct ifreq *ifreq, int cmd)
+{
+        /*
+         * FIXME
+         *
+         * This function is needed for irda framework.
+         * But nothing to do now
+         */
+        return 0;
+}
+
+static struct net_device_stats *sh_irda_stats(struct net_device *ndev)
+{
+        struct sh_irda_self *self = netdev_priv(ndev);
+
+        return &self->ndev->stats;
+}
+
+static int sh_irda_open(struct net_device *ndev)
+{
+        struct sh_irda_self *self = netdev_priv(ndev);
+        int err;
+
+        clk_enable(self->clk);
+        err = sh_irda_crc_init(self);
+        if (err)
+                goto open_err;
+
+        sh_irda_set_mode(self, SH_IRDA_SIR);
+        sh_irda_set_timeout(self, 2);
+        sh_irda_set_baudrate(self, 9600);
+
+        self->irlap = irlap_open(ndev, &self->qos, DRIVER_NAME);
+        if (!self->irlap) {
+                err = -ENODEV;
+                goto open_err;
+        }
+
+        netif_start_queue(ndev);
+        sh_irda_rcv_ctrl(self, 1);
+        sh_irda_set_irq_mask(self);
+
+        dev_info(&ndev->dev, "opened\n");
+
+        return 0;
+
+open_err:
+        clk_disable(self->clk);
+
+        return err;
+}
+
+static int sh_irda_stop(struct net_device *ndev)
+{
+        struct sh_irda_self *self = netdev_priv(ndev);
+
+        /* Stop IrLAP */
+        if (self->irlap) {
+                irlap_close(self->irlap);
+                self->irlap = NULL;
+        }
+
+        netif_stop_queue(ndev);
+
+        dev_info(&ndev->dev, "stoped\n");
+
+        return 0;
+}
+
+static const struct net_device_ops sh_irda_ndo = {
+        .ndo_open               = sh_irda_open,
+        .ndo_stop               = sh_irda_stop,
+        .ndo_start_xmit         = sh_irda_hard_xmit,
+        .ndo_do_ioctl           = sh_irda_ioctl,
+        .ndo_get_stats          = sh_irda_stats,
+};
+
+/************************************************************************
+
+
+                        platform_driver function
+
+
+************************************************************************/
+static int __devinit sh_irda_probe(struct platform_device *pdev)
+{
+        struct net_device *ndev;
+        struct sh_irda_self *self;
+        struct resource *res;
+        char clk_name[8];
+        unsigned int irq;
+        int err = -ENOMEM;
+
+        res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
+        irq = platform_get_irq(pdev, 0);
+        if (!res || irq < 0) {
+                dev_err(&pdev->dev, "Not enough platform resources.\n");
+                goto exit;
+        }
+
+        ndev = alloc_irdadev(sizeof(*self));
+        if (!ndev)
+                goto exit;
+
+        self = netdev_priv(ndev);
+        self->membase = ioremap_nocache(res->start, resource_size(res));
+        if (!self->membase) {
+                err = -ENXIO;
+                dev_err(&pdev->dev, "Unable to ioremap.\n");
+                goto err_mem_1;
+        }
+
+        err = sh_irda_init_iobuf(self, IRDA_SKB_MAX_MTU, IRDA_SIR_MAX_FRAME);
+        if (err)
+                goto err_mem_2;
+
+        snprintf(clk_name, sizeof(clk_name), "irda%d", pdev->id);
+        self->clk = clk_get(&pdev->dev, clk_name);
+        if (IS_ERR(self->clk)) {
+                dev_err(&pdev->dev, "cannot get clock \"%s\"\n", clk_name);
+                goto err_mem_3;
+        }
+
+        irda_init_max_qos_capabilies(&self->qos);
+
+        ndev->netdev_ops        = &sh_irda_ndo;
+        ndev->irq               = irq;
+
+        self->ndev                      = ndev;
+        self->qos.baud_rate.bits        &= IR_9600; /* FIXME */
+        self->qos.min_turn_time.bits    = 1; /* 10 ms or more */
+        spin_lock_init(&self->lock);
+
+        irda_qos_bits_to_value(&self->qos);
+
+        err = register_netdev(ndev);
+        if (err)
+                goto err_mem_4;
+
+        platform_set_drvdata(pdev, ndev);
+
+        if (request_irq(irq, sh_irda_irq, IRQF_DISABLED, "sh_irda", self)) {
+                dev_warn(&pdev->dev, "Unable to attach sh_irda interrupt\n");
+                goto err_mem_4;
+        }
+
+        dev_info(&pdev->dev, "SuperH IrDA probed\n");
+
+        goto exit;
+
+err_mem_4:
+        clk_put(self->clk);
+err_mem_3:
+        sh_irda_remove_iobuf(self);
+err_mem_2:
+        iounmap(self->membase);
+err_mem_1:
+        free_netdev(ndev);
+exit:
+        return err;
+}
+
+static int __devexit sh_irda_remove(struct platform_device *pdev)
+{
+        struct net_device *ndev = platform_get_drvdata(pdev);
+        struct sh_irda_self *self = netdev_priv(ndev);
+
+        if (!self)
+                return 0;
+
+        unregister_netdev(ndev);
+        clk_put(self->clk);
+        sh_irda_remove_iobuf(self);
+        iounmap(self->membase);
+        free_netdev(ndev);
+        platform_set_drvdata(pdev, NULL);
+
+        return 0;
+}
+
+static struct platform_driver sh_irda_driver = {
+        .probe   = sh_irda_probe,
+        .remove  = __devexit_p(sh_irda_remove),
+        .driver  = {
+                .name = DRIVER_NAME,
+        },
+};
+
+static int __init sh_irda_init(void)
+{
+        return platform_driver_register(&sh_irda_driver);
+}
+
+static void __exit sh_irda_exit(void)
+{
+        platform_driver_unregister(&sh_irda_driver);
+}
+
+module_init(sh_irda_init);
+module_exit(sh_irda_exit);
+
+MODULE_AUTHOR("Kuninori Morimoto <morimoto.kuninori@renesas.com>");
+MODULE_DESCRIPTION("SuperH IrDA driver");
+MODULE_LICENSE("GPL");
diff --git a/drivers/net/irda/sh_sir.c b/drivers/net/irda/sh_sir.c
index d7c983dc91ad..7c17ab8ecc29 100644
--- a/drivers/net/irda/sh_sir.c
+++ b/drivers/net/irda/sh_sir.c
@@ -645,8 +645,10 @@ static int sh_sir_open(struct net_device *ndev)
         sh_sir_set_baudrate(self, 9600);
 
         self->irlap = irlap_open(ndev, &self->qos, DRIVER_NAME);
-        if (!self->irlap)
+        if (!self->irlap) {
+                err = -ENODEV;
                 goto open_err;
+        }
 
         /*
          * Now enable the interrupt then start the queue
@@ -706,7 +708,6 @@ static int __devinit sh_sir_probe(struct platform_device *pdev)
         struct sh_sir_self *self;
         struct resource *res;
         char clk_name[8];
-        void __iomem *base;
         unsigned int irq;
         int err = -ENOMEM;
 
@@ -721,14 +722,14 @@ static int __devinit sh_sir_probe(struct platform_device *pdev)
         if (!ndev)
                 goto exit;
 
-        base = ioremap_nocache(res->start, resource_size(res));
-        if (!base) {
+        self = netdev_priv(ndev);
+        self->membase = ioremap_nocache(res->start, resource_size(res));
+        if (!self->membase) {
                 err = -ENXIO;
                 dev_err(&pdev->dev, "Unable to ioremap.\n");
                 goto err_mem_1;
         }
 
-        self = netdev_priv(ndev);
         err = sh_sir_init_iobuf(self, IRDA_SKB_MAX_MTU, IRDA_SIR_MAX_FRAME);
         if (err)
                 goto err_mem_2;
@@ -745,7 +746,6 @@ static int __devinit sh_sir_probe(struct platform_device *pdev)
         ndev->netdev_ops        = &sh_sir_ndo;
         ndev->irq               = irq;
 
-        self->membase                   = base;
         self->ndev                      = ndev;
         self->qos.baud_rate.bits        &= IR_9600; /* FIXME */
         self->qos.min_turn_time.bits    = 1; /* 10 ms or more */
diff --git a/drivers/net/irda/vlsi_ir.c b/drivers/net/irda/vlsi_ir.c
index 209d4bcfaced..e14505272870 100644
--- a/drivers/net/irda/vlsi_ir.c
+++ b/drivers/net/irda/vlsi_ir.c
@@ -1742,7 +1742,7 @@ static int vlsi_irda_suspend(struct pci_dev *pdev, pm_message_t state)
         vlsi_irda_dev_t *idev;
 
         if (!ndev) {
-                IRDA_ERROR("%s - %s: no netdevice \n",
+                IRDA_ERROR("%s - %s: no netdevice\n",
                            __func__, pci_name(pdev));
                 return 0;
         }
@@ -1781,7 +1781,7 @@ static int vlsi_irda_resume(struct pci_dev *pdev)
         vlsi_irda_dev_t *idev;
 
         if (!ndev) {
-                IRDA_ERROR("%s - %s: no netdevice \n",
+                IRDA_ERROR("%s - %s: no netdevice\n",
                            __func__, pci_name(pdev));
                 return 0;
         }
diff --git a/drivers/net/iseries_veth.c b/drivers/net/iseries_veth.c
index e6e972d9b7ca..cd65b8629bcc 100644
--- a/drivers/net/iseries_veth.c
+++ b/drivers/net/iseries_veth.c
@@ -961,15 +961,15 @@ static void veth_set_multicast_list(struct net_device *dev)
                         (netdev_mc_count(dev) > VETH_MAX_MCAST)) {
                 port->promiscuous = 1;
         } else {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
 
                 port->promiscuous = 0;
 
                 /* Update table */
                 port->num_mcast = 0;
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        u8 *addr = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        u8 *addr = ha->addr;
                         u64 xaddr = 0;
 
                         if (addr[0] & 0x01) {/* multicast address? */
diff --git a/drivers/net/ixgb/ixgb_main.c b/drivers/net/ixgb/ixgb_main.c
index c9fef65cb98b..912dd1d5772c 100644
--- a/drivers/net/ixgb/ixgb_main.c
+++ b/drivers/net/ixgb/ixgb_main.c
@@ -1058,7 +1058,7 @@ ixgb_set_multi(struct net_device *netdev)
 {
         struct ixgb_adapter *adapter = netdev_priv(netdev);
         struct ixgb_hw *hw = &adapter->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u32 rctl;
         int i;
 
@@ -1089,9 +1089,9 @@ ixgb_set_multi(struct net_device *netdev)
                 IXGB_WRITE_REG(hw, RCTL, rctl);
 
                 i = 0;
-                netdev_for_each_mc_addr(mc_ptr, netdev)
+                netdev_for_each_mc_addr(ha, netdev)
                         memcpy(&mta[i++ * IXGB_ETH_LENGTH_OF_ADDRESS],
-                               mc_ptr->dmi_addr, IXGB_ETH_LENGTH_OF_ADDRESS);
+                               ha->addr, IXGB_ETH_LENGTH_OF_ADDRESS);
 
                 ixgb_mc_addr_list_update(hw, mta, netdev_mc_count(netdev), 0);
         }
diff --git a/drivers/net/ixgbe/ixgbe_82599.c b/drivers/net/ixgbe/ixgbe_82599.c
index b405a00817c6..f894bb633040 100644
--- a/drivers/net/ixgbe/ixgbe_82599.c
+++ b/drivers/net/ixgbe/ixgbe_82599.c
@@ -1269,7 +1269,7 @@ s32 ixgbe_reinit_fdir_tables_82599(struct ixgbe_hw *hw)
         }
         if (i >= IXGBE_FDIRCMD_CMD_POLL) {
                 hw_dbg(hw ,"Flow Director previous command isn't complete, "
-                       "aborting table re-initialization. \n");
+                       "aborting table re-initialization.\n");
                 return IXGBE_ERR_FDIR_REINIT_FAILED;
         }
 
diff --git a/drivers/net/ixgbe/ixgbe_common.c b/drivers/net/ixgbe/ixgbe_common.c
index eb49020903c1..6eb5814ca7da 100644
--- a/drivers/net/ixgbe/ixgbe_common.c
+++ b/drivers/net/ixgbe/ixgbe_common.c
@@ -1484,26 +1484,24 @@ static void ixgbe_set_mta(struct ixgbe_hw *hw, u8 *mc_addr)
 /**
  *  ixgbe_update_mc_addr_list_generic - Updates MAC list of multicast addresses
  *  @hw: pointer to hardware structure
- *  @mc_addr_list: the list of new multicast addresses
- *  @mc_addr_count: number of addresses
- *  @next: iterator function to walk the multicast address list
+ *  @netdev: pointer to net device structure
  *
  *  The given list replaces any existing list. Clears the MC addrs from receive
  *  address registers and the multicast table. Uses unused receive address
  *  registers for the first multicast addresses, and hashes the rest into the
  *  multicast table.
  **/
-s32 ixgbe_update_mc_addr_list_generic(struct ixgbe_hw *hw, u8 *mc_addr_list,
-                                      u32 mc_addr_count, ixgbe_mc_addr_itr next)
+s32 ixgbe_update_mc_addr_list_generic(struct ixgbe_hw *hw,
+                                      struct net_device *netdev)
 {
+        struct netdev_hw_addr *ha;
         u32 i;
-        u32 vmdq;
 
         /*
          * Set the new number of MC addresses that we are being requested to
          * use.
          */
-        hw->addr_ctrl.num_mc_addrs = mc_addr_count;
+        hw->addr_ctrl.num_mc_addrs = netdev_mc_count(netdev);
         hw->addr_ctrl.mta_in_use = 0;
 
         /* Clear the MTA */
@@ -1512,9 +1510,9 @@ s32 ixgbe_update_mc_addr_list_generic(struct ixgbe_hw *hw, u8 *mc_addr_list,
                 IXGBE_WRITE_REG(hw, IXGBE_MTA(i), 0);
 
         /* Add the new addresses */
-        for (i = 0; i < mc_addr_count; i++) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 hw_dbg(hw, " Adding the multicast addresses:\n");
-                ixgbe_set_mta(hw, next(hw, &mc_addr_list, &vmdq));
+                ixgbe_set_mta(hw, ha->addr);
         }
 
         /* Enable mta */
diff --git a/drivers/net/ixgbe/ixgbe_common.h b/drivers/net/ixgbe/ixgbe_common.h
index 13606d4809c9..264eef575cd6 100644
--- a/drivers/net/ixgbe/ixgbe_common.h
+++ b/drivers/net/ixgbe/ixgbe_common.h
@@ -56,9 +56,8 @@ s32 ixgbe_set_rar_generic(struct ixgbe_hw *hw, u32 index, u8 *addr, u32 vmdq,
                           u32 enable_addr);
 s32 ixgbe_clear_rar_generic(struct ixgbe_hw *hw, u32 index);
 s32 ixgbe_init_rx_addrs_generic(struct ixgbe_hw *hw);
-s32 ixgbe_update_mc_addr_list_generic(struct ixgbe_hw *hw, u8 *mc_addr_list,
-                                      u32 mc_addr_count,
-                                      ixgbe_mc_addr_itr func);
+s32 ixgbe_update_mc_addr_list_generic(struct ixgbe_hw *hw,
+                                      struct net_device *netdev);
 s32 ixgbe_update_uc_addr_list_generic(struct ixgbe_hw *hw,
                                       struct net_device *netdev);
 s32 ixgbe_enable_mc_generic(struct ixgbe_hw *hw);
diff --git a/drivers/net/ixgbe/ixgbe_main.c b/drivers/net/ixgbe/ixgbe_main.c
index 0c553f6cb534..7216db218442 100644
--- a/drivers/net/ixgbe/ixgbe_main.c
+++ b/drivers/net/ixgbe/ixgbe_main.c
@@ -2537,21 +2537,6 @@ static void ixgbe_restore_vlan(struct ixgbe_adapter *adapter)
         }
 }
 
-static u8 *ixgbe_addr_list_itr(struct ixgbe_hw *hw, u8 **mc_addr_ptr, u32 *vmdq)
-{
-        struct dev_mc_list *mc_ptr;
-        u8 *addr = *mc_addr_ptr;
-        *vmdq = 0;
-
-        mc_ptr = container_of(addr, struct dev_mc_list, dmi_addr[0]);
-        if (mc_ptr->next)
-                *mc_addr_ptr = mc_ptr->next->dmi_addr;
-        else
-                *mc_addr_ptr = NULL;
-
-        return addr;
-}
-
 /**
  * ixgbe_set_rx_mode - Unicast, Multicast and Promiscuous mode set
  * @netdev: network interface device structure
@@ -2566,8 +2551,6 @@ void ixgbe_set_rx_mode(struct net_device *netdev)
         struct ixgbe_adapter *adapter = netdev_priv(netdev);
         struct ixgbe_hw *hw = &adapter->hw;
         u32 fctrl, vlnctrl;
-        u8 *addr_list = NULL;
-        int addr_count = 0;
 
         /* Check for Promiscuous and All Multicast modes */
 
@@ -2596,11 +2579,8 @@ void ixgbe_set_rx_mode(struct net_device *netdev)
         hw->mac.ops.update_uc_addr_list(hw, netdev);
 
         /* reprogram multicast list */
-        addr_count = netdev_mc_count(netdev);
-        if (addr_count)
-                addr_list = netdev->mc_list->dmi_addr;
-        hw->mac.ops.update_mc_addr_list(hw, addr_list, addr_count,
-                                        ixgbe_addr_list_itr);
+        hw->mac.ops.update_mc_addr_list(hw, netdev);
+
         if (adapter->num_vfs)
                 ixgbe_restore_vf_multicasts(adapter);
 }
@@ -3470,12 +3450,12 @@ static inline bool ixgbe_set_fcoe_queues(struct ixgbe_adapter *adapter)
                 adapter->num_tx_queues = 1;
 #ifdef CONFIG_IXGBE_DCB
                 if (adapter->flags & IXGBE_FLAG_DCB_ENABLED) {
-                        DPRINTK(PROBE, INFO, "FCoE enabled with DCB \n");
+                        DPRINTK(PROBE, INFO, "FCoE enabled with DCB\n");
                         ixgbe_set_dcb_queues(adapter);
                 }
 #endif
                 if (adapter->flags & IXGBE_FLAG_RSS_ENABLED) {
-                        DPRINTK(PROBE, INFO, "FCoE enabled with RSS \n");
+                        DPRINTK(PROBE, INFO, "FCoE enabled with RSS\n");
                         if ((adapter->flags & IXGBE_FLAG_FDIR_HASH_CAPABLE) ||
                             (adapter->flags & IXGBE_FLAG_FDIR_PERFECT_CAPABLE))
                                 ixgbe_set_fdir_queues(adapter);
@@ -5091,7 +5071,7 @@ static void ixgbe_fdir_reinit_task(struct work_struct *work)
                                 &(adapter->tx_ring[i]->reinit_state));
         } else {
                 DPRINTK(PROBE, ERR, "failed to finish FDIR re-initialization, "
-                        "ignored adding FDIR ATR filters \n");
+                        "ignored adding FDIR ATR filters\n");
         }
         /* Done FDIR Re-initialization, enable transmits */
         netif_tx_start_all_queues(adapter->netdev);
diff --git a/drivers/net/ixgbe/ixgbe_phy.c b/drivers/net/ixgbe/ixgbe_phy.c
index 1c1efd386956..d6d5b843d625 100644
--- a/drivers/net/ixgbe/ixgbe_phy.c
+++ b/drivers/net/ixgbe/ixgbe_phy.c
@@ -475,7 +475,7 @@ s32 ixgbe_reset_phy_nl(struct ixgbe_hw *hw)
                         msleep(edata);
                         break;
                 case IXGBE_DATA_NL:
-                        hw_dbg(hw, "DATA:  \n");
+                        hw_dbg(hw, "DATA:\n");
                         data_offset++;
                         hw->eeprom.ops.read(hw, data_offset++,
                                             &phy_offset);
@@ -491,7 +491,7 @@ s32 ixgbe_reset_phy_nl(struct ixgbe_hw *hw)
                         break;
                 case IXGBE_CONTROL_NL:
                         data_offset++;
-                        hw_dbg(hw, "CONTROL: \n");
+                        hw_dbg(hw, "CONTROL:\n");
                         if (edata == IXGBE_CONTROL_EOL_NL) {
                                 hw_dbg(hw, "EOL\n");
                                 end_data = true;
diff --git a/drivers/net/ixgbe/ixgbe_type.h b/drivers/net/ixgbe/ixgbe_type.h
index 4ec6dc1a5b75..aed4ed665648 100644
--- a/drivers/net/ixgbe/ixgbe_type.h
+++ b/drivers/net/ixgbe/ixgbe_type.h
@@ -2417,8 +2417,7 @@ struct ixgbe_mac_operations {
         s32 (*clear_vmdq)(struct ixgbe_hw *, u32, u32);
         s32 (*init_rx_addrs)(struct ixgbe_hw *);
         s32 (*update_uc_addr_list)(struct ixgbe_hw *, struct net_device *);
-        s32 (*update_mc_addr_list)(struct ixgbe_hw *, u8 *, u32,
-                                   ixgbe_mc_addr_itr);
+        s32 (*update_mc_addr_list)(struct ixgbe_hw *, struct net_device *);
         s32 (*enable_mc)(struct ixgbe_hw *);
         s32 (*disable_mc)(struct ixgbe_hw *);
         s32 (*clear_vfta)(struct ixgbe_hw *);
diff --git a/drivers/net/ixgbevf/ixgbevf_main.c b/drivers/net/ixgbevf/ixgbevf_main.c
index 1bbbef3ee3f4..65cb133a6a1f 100644
--- a/drivers/net/ixgbevf/ixgbevf_main.c
+++ b/drivers/net/ixgbevf/ixgbevf_main.c
@@ -1495,22 +1495,6 @@ static void ixgbevf_restore_vlan(struct ixgbevf_adapter *adapter)
         }
 }
 
-static u8 *ixgbevf_addr_list_itr(struct ixgbe_hw *hw, u8 **mc_addr_ptr,
-                                 u32 *vmdq)
-{
-        struct dev_mc_list *mc_ptr;
-        u8 *addr = *mc_addr_ptr;
-        *vmdq = 0;
-
-        mc_ptr = container_of(addr, struct dev_mc_list, dmi_addr[0]);
-        if (mc_ptr->next)
-                *mc_addr_ptr = mc_ptr->next->dmi_addr;
-        else
-                *mc_addr_ptr = NULL;
-
-        return addr;
-}
-
 /**
  * ixgbevf_set_rx_mode - Multicast set
  * @netdev: network interface device structure
@@ -1523,16 +1507,10 @@ static void ixgbevf_set_rx_mode(struct net_device *netdev)
 {
         struct ixgbevf_adapter *adapter = netdev_priv(netdev);
         struct ixgbe_hw *hw = &adapter->hw;
-        u8 *addr_list = NULL;
-        int addr_count = 0;
 
         /* reprogram multicast list */
-        addr_count = netdev_mc_count(netdev);
-        if (addr_count)
-                addr_list = netdev->mc_list->dmi_addr;
         if (hw->mac.ops.update_mc_addr_list)
-                hw->mac.ops.update_mc_addr_list(hw, addr_list, addr_count,
-                                                ixgbevf_addr_list_itr);
+                hw->mac.ops.update_mc_addr_list(hw, netdev);
 }
 
 static void ixgbevf_napi_enable_all(struct ixgbevf_adapter *adapter)
@@ -2417,9 +2395,9 @@ static void ixgbevf_watchdog_task(struct work_struct *work)
 
         if (link_up) {
                 if (!netif_carrier_ok(netdev)) {
-                        hw_dbg(&adapter->hw, "NIC Link is Up %s, ",
-                               ((link_speed == IXGBE_LINK_SPEED_10GB_FULL) ?
-                                "10 Gbps\n" : "1 Gbps\n"));
+                        hw_dbg(&adapter->hw, "NIC Link is Up, %u Gbps\n",
+                               (link_speed == IXGBE_LINK_SPEED_10GB_FULL) ?
+                               10 : 1);
                         netif_carrier_on(netdev);
                         netif_tx_wake_all_queues(netdev);
                 } else {
@@ -3481,7 +3459,7 @@ static int __devinit ixgbevf_probe(struct pci_dev *pdev,
 
         hw_dbg(hw, "MAC: %d\n", hw->mac.type);
 
-        hw_dbg(hw, "LRO is disabled \n");
+        hw_dbg(hw, "LRO is disabled\n");
 
         hw_dbg(hw, "Intel(R) 82599 Virtual Function\n");
         cards_found++;
diff --git a/drivers/net/ixgbevf/vf.c b/drivers/net/ixgbevf/vf.c
index 4b5dec0ec140..852e9c4fd934 100644
--- a/drivers/net/ixgbevf/vf.c
+++ b/drivers/net/ixgbevf/vf.c
@@ -252,22 +252,18 @@ static s32 ixgbevf_set_rar_vf(struct ixgbe_hw *hw, u32 index, u8 *addr,
 /**
  *  ixgbevf_update_mc_addr_list_vf - Update Multicast addresses
  *  @hw: pointer to the HW structure
- *  @mc_addr_list: array of multicast addresses to program
- *  @mc_addr_count: number of multicast addresses to program
- *  @next: caller supplied function to return next address in list
+ *  @netdev: pointer to net device structure
  *
  *  Updates the Multicast Table Array.
  **/
-static s32 ixgbevf_update_mc_addr_list_vf(struct ixgbe_hw *hw, u8 *mc_addr_list,
-                                        u32 mc_addr_count,
-                                        ixgbe_mc_addr_itr next)
+static s32 ixgbevf_update_mc_addr_list_vf(struct ixgbe_hw *hw,
+                                          struct net_device *netdev)
 {
+        struct netdev_hw_addr *ha;
         struct ixgbe_mbx_info *mbx = &hw->mbx;
         u32 msgbuf[IXGBE_VFMAILBOX_SIZE];
         u16 *vector_list = (u16 *)&msgbuf[1];
-        u32 vector;
         u32 cnt, i;
-        u32 vmdq;
 
         /* Each entry in the list uses 1 16 bit word.  We have 30
          * 16 bit words available in our HW msg buffer (minus 1 for the
@@ -278,13 +274,17 @@ static s32 ixgbevf_update_mc_addr_list_vf(struct ixgbe_hw *hw, u8 *mc_addr_list,
          * addresses except for in large enterprise network environments.
          */
 
-        cnt = (mc_addr_count > 30) ? 30 : mc_addr_count;
+        cnt = netdev_mc_count(netdev);
+        if (cnt > 30)
+                cnt = 30;
         msgbuf[0] = IXGBE_VF_SET_MULTICAST;
         msgbuf[0] |= cnt << IXGBE_VT_MSGINFO_SHIFT;
 
-        for (i = 0; i < cnt; i++) {
-                vector = ixgbevf_mta_vector(hw, next(hw, &mc_addr_list, &vmdq));
-                vector_list[i] = vector;
+        i = 0;
+        netdev_for_each_mc_addr(ha, netdev) {
+                if (i == cnt)
+                        break;
+                vector_list[i++] = ixgbevf_mta_vector(hw, ha->addr);
         }
 
         mbx->ops.write_posted(hw, msgbuf, IXGBE_VFMAILBOX_SIZE);
diff --git a/drivers/net/ixgbevf/vf.h b/drivers/net/ixgbevf/vf.h
index 1f31b052d4b4..94b750b8874f 100644
--- a/drivers/net/ixgbevf/vf.h
+++ b/drivers/net/ixgbevf/vf.h
@@ -32,6 +32,7 @@
 #include <linux/delay.h>
 #include <linux/interrupt.h>
 #include <linux/if_ether.h>
+#include <linux/netdevice.h>
 
 #include "defines.h"
 #include "regs.h"
@@ -62,8 +63,7 @@ struct ixgbe_mac_operations {
         /* RAR, Multicast, VLAN */
         s32 (*set_rar)(struct ixgbe_hw *, u32, u8 *, u32);
         s32 (*init_rx_addrs)(struct ixgbe_hw *);
-        s32 (*update_mc_addr_list)(struct ixgbe_hw *, u8 *, u32,
-                                   ixgbe_mc_addr_itr);
+        s32 (*update_mc_addr_list)(struct ixgbe_hw *, struct net_device *);
         s32 (*enable_mc)(struct ixgbe_hw *);
         s32 (*disable_mc)(struct ixgbe_hw *);
         s32 (*clear_vfta)(struct ixgbe_hw *);
diff --git a/drivers/net/jme.c b/drivers/net/jme.c
index c0b59a555384..10e816d2caff 100644
--- a/drivers/net/jme.c
+++ b/drivers/net/jme.c
@@ -2009,12 +2009,12 @@ jme_set_multi(struct net_device *netdev)
         } else if (netdev->flags & IFF_ALLMULTI) {
                 jme->reg_rxmcs |= RXMCS_ALLMULFRAME;
         } else if (netdev->flags & IFF_MULTICAST) {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 int bit_nr;
 
                 jme->reg_rxmcs |= RXMCS_MULFRAME | RXMCS_MULFILTERED;
-                netdev_for_each_mc_addr(mclist, netdev) {
-                        bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) & 0x3F;
+                netdev_for_each_mc_addr(ha, netdev) {
+                        bit_nr = ether_crc(ETH_ALEN, ha->addr) & 0x3F;
                         mc_hash[bit_nr >> 5] |= 1 << (bit_nr & 0x1F);
                 }
 
diff --git a/drivers/net/korina.c b/drivers/net/korina.c
index 300c2249812d..26bf1b76b997 100644
--- a/drivers/net/korina.c
+++ b/drivers/net/korina.c
@@ -482,7 +482,7 @@ static void korina_multicast_list(struct net_device *dev)
 {
         struct korina_private *lp = netdev_priv(dev);
         unsigned long flags;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         u32 recognise = ETH_ARC_AB;     /* always accept broadcasts */
         int i;
 
@@ -502,8 +502,8 @@ static void korina_multicast_list(struct net_device *dev)
                 for (i = 0; i < 4; i++)
                         hash_table[i] = 0;
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        char *addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        char *addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
@@ -1135,7 +1135,7 @@ static int korina_probe(struct platform_device *pdev)
 
         r = platform_get_resource_byname(pdev, IORESOURCE_MEM, "korina_regs");
         dev->base_addr = r->start;
-        lp->eth_regs = ioremap_nocache(r->start, r->end - r->start);
+        lp->eth_regs = ioremap_nocache(r->start, resource_size(r));
         if (!lp->eth_regs) {
                 printk(KERN_ERR DRV_NAME ": cannot remap registers\n");
                 rc = -ENXIO;
@@ -1143,7 +1143,7 @@ static int korina_probe(struct platform_device *pdev)
         }
 
         r = platform_get_resource_byname(pdev, IORESOURCE_MEM, "korina_dma_rx");
-        lp->rx_dma_regs = ioremap_nocache(r->start, r->end - r->start);
+        lp->rx_dma_regs = ioremap_nocache(r->start, resource_size(r));
         if (!lp->rx_dma_regs) {
                 printk(KERN_ERR DRV_NAME ": cannot remap Rx DMA registers\n");
                 rc = -ENXIO;
@@ -1151,7 +1151,7 @@ static int korina_probe(struct platform_device *pdev)
         }
 
         r = platform_get_resource_byname(pdev, IORESOURCE_MEM, "korina_dma_tx");
-        lp->tx_dma_regs = ioremap_nocache(r->start, r->end - r->start);
+        lp->tx_dma_regs = ioremap_nocache(r->start, resource_size(r));
         if (!lp->tx_dma_regs) {
                 printk(KERN_ERR DRV_NAME ": cannot remap Tx DMA registers\n");
                 rc = -ENXIO;
diff --git a/drivers/net/ks8842.c b/drivers/net/ks8842.c
index 5c45cb58d023..b91492f4e48a 100644
--- a/drivers/net/ks8842.c
+++ b/drivers/net/ks8842.c
@@ -20,6 +20,8 @@
  * The Micrel KS8842 behind the timberdale FPGA
  */
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #include <linux/kernel.h>
 #include <linux/module.h>
 #include <linux/platform_device.h>
@@ -525,8 +527,7 @@ static int ks8842_open(struct net_device *netdev)
         err = request_irq(adapter->irq, ks8842_irq, IRQF_SHARED, DRV_NAME,
                 adapter);
         if (err) {
-                printk(KERN_ERR "Failed to request IRQ: %d: %d\n",
-                        adapter->irq, err);
+                pr_err("Failed to request IRQ: %d: %d\n", adapter->irq, err);
                 return err;
         }
 
@@ -668,8 +669,7 @@ static int __devinit ks8842_probe(struct platform_device *pdev)
 
         platform_set_drvdata(pdev, netdev);
 
-        printk(KERN_INFO DRV_NAME
-                " Found chip, family: 0x%x, id: 0x%x, rev: 0x%x\n",
+        pr_info("Found chip, family: 0x%x, id: 0x%x, rev: 0x%x\n",
                 (id >> 8) & 0xff, (id >> 4) & 0xf, (id >> 1) & 0x7);
 
         return 0;
diff --git a/drivers/net/ks8851.c b/drivers/net/ks8851.c
index 13cc1ca261d9..4dcd61f81ec2 100644
--- a/drivers/net/ks8851.c
+++ b/drivers/net/ks8851.c
@@ -9,6 +9,8 @@
  * published by the Free Software Foundation.
  */
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #define DEBUG
 
 #include <linux/module.h>
@@ -125,11 +127,6 @@ struct ks8851_net {
 
 static int msg_enable;
 
-#define ks_info(_ks, _msg...) dev_info(&(_ks)->spidev->dev, _msg)
-#define ks_warn(_ks, _msg...) dev_warn(&(_ks)->spidev->dev, _msg)
-#define ks_dbg(_ks, _msg...) dev_dbg(&(_ks)->spidev->dev, _msg)
-#define ks_err(_ks, _msg...) dev_err(&(_ks)->spidev->dev, _msg)
-
 /* shift for byte-enable data */
 #define BYTE_EN(_x)     ((_x) << 2)
 
@@ -167,7 +164,7 @@ static void ks8851_wrreg16(struct ks8851_net *ks, unsigned reg, unsigned val)
 
         ret = spi_sync(ks->spidev, msg);
         if (ret < 0)
-                ks_err(ks, "spi_sync() failed\n");
+                netdev_err(ks->netdev, "spi_sync() failed\n");
 }
 
 /**
@@ -197,7 +194,7 @@ static void ks8851_wrreg8(struct ks8851_net *ks, unsigned reg, unsigned val)
 
         ret = spi_sync(ks->spidev, msg);
         if (ret < 0)
-                ks_err(ks, "spi_sync() failed\n");
+                netdev_err(ks->netdev, "spi_sync() failed\n");
 }
 
 /**
@@ -263,7 +260,7 @@ static void ks8851_rdreg(struct ks8851_net *ks, unsigned op,
 
         ret = spi_sync(ks->spidev, msg);
         if (ret < 0)
-                ks_err(ks, "read: spi_sync() failed\n");
+                netdev_err(ks->netdev, "read: spi_sync() failed\n");
         else if (ks8851_rx_1msg(ks))
                 memcpy(rxb, trx + 2, rxl);
         else
@@ -417,8 +414,8 @@ static void ks8851_rdfifo(struct ks8851_net *ks, u8 *buff, unsigned len)
         u8 txb[1];
         int ret;
 
-        if (netif_msg_rx_status(ks))
-                ks_dbg(ks, "%s: %d@%p\n", __func__, len, buff);
+        netif_dbg(ks, rx_status, ks->netdev,
+                  "%s: %d@%p\n", __func__, len, buff);
 
         /* set the operation we're issuing */
         txb[0] = KS_SPIOP_RXFIFO;
@@ -434,7 +431,7 @@ static void ks8851_rdfifo(struct ks8851_net *ks, u8 *buff, unsigned len)
 
         ret = spi_sync(ks->spidev, msg);
         if (ret < 0)
-                ks_err(ks, "%s: spi_sync() failed\n", __func__);
+                netdev_err(ks->netdev, "%s: spi_sync() failed\n", __func__);
 }
 
 /**
@@ -446,10 +443,11 @@ static void ks8851_rdfifo(struct ks8851_net *ks, u8 *buff, unsigned len)
 */
 static void ks8851_dbg_dumpkkt(struct ks8851_net *ks, u8 *rxpkt)
 {
-        ks_dbg(ks, "pkt %02x%02x%02x%02x %02x%02x%02x%02x %02x%02x%02x%02x\n",
-               rxpkt[4], rxpkt[5], rxpkt[6], rxpkt[7],
-               rxpkt[8], rxpkt[9], rxpkt[10], rxpkt[11],
-               rxpkt[12], rxpkt[13], rxpkt[14], rxpkt[15]);
+        netdev_dbg(ks->netdev,
+                   "pkt %02x%02x%02x%02x %02x%02x%02x%02x %02x%02x%02x%02x\n",
+                   rxpkt[4], rxpkt[5], rxpkt[6], rxpkt[7],
+                   rxpkt[8], rxpkt[9], rxpkt[10], rxpkt[11],
+                   rxpkt[12], rxpkt[13], rxpkt[14], rxpkt[15]);
 }
 
 /**
@@ -471,8 +469,8 @@ static void ks8851_rx_pkts(struct ks8851_net *ks)
 
         rxfc = ks8851_rdreg8(ks, KS_RXFC);
 
-        if (netif_msg_rx_status(ks))
-                ks_dbg(ks, "%s: %d packets\n", __func__, rxfc);
+        netif_dbg(ks, rx_status, ks->netdev,
+                  "%s: %d packets\n", __func__, rxfc);
 
         /* Currently we're issuing a read per packet, but we could possibly
          * improve the code by issuing a single read, getting the receive
@@ -489,9 +487,8 @@ static void ks8851_rx_pkts(struct ks8851_net *ks)
                 rxstat = rxh & 0xffff;
                 rxlen = rxh >> 16;
 
-                if (netif_msg_rx_status(ks))
-                        ks_dbg(ks, "rx: stat 0x%04x, len 0x%04x\n",
-                                rxstat, rxlen);
+                netif_dbg(ks, rx_status, ks->netdev,
+                          "rx: stat 0x%04x, len 0x%04x\n", rxstat, rxlen);
 
                 /* the length of the packet includes the 32bit CRC */
 
@@ -553,9 +550,8 @@ static void ks8851_irq_work(struct work_struct *work)
 
         status = ks8851_rdreg16(ks, KS_ISR);
 
-        if (netif_msg_intr(ks))
-                dev_dbg(&ks->spidev->dev, "%s: status 0x%04x\n",
-                        __func__, status);
+        netif_dbg(ks, intr, ks->netdev,
+                  "%s: status 0x%04x\n", __func__, status);
 
         if (status & IRQ_LCI) {
                 /* should do something about checking link status */
@@ -582,8 +578,8 @@ static void ks8851_irq_work(struct work_struct *work)
                  * system */
                 ks->tx_space = ks8851_rdreg16(ks, KS_TXMIR);
 
-                if (netif_msg_intr(ks))
-                        ks_dbg(ks, "%s: txspace %d\n", __func__, ks->tx_space);
+                netif_dbg(ks, intr, ks->netdev,
+                          "%s: txspace %d\n", __func__, ks->tx_space);
         }
 
         if (status & IRQ_RXI)
@@ -659,9 +655,8 @@ static void ks8851_wrpkt(struct ks8851_net *ks, struct sk_buff *txp, bool irq)
         unsigned fid = 0;
         int ret;
 
-        if (netif_msg_tx_queued(ks))
-                dev_dbg(&ks->spidev->dev, "%s: skb %p, %d@%p, irq %d\n",
-                        __func__, txp, txp->len, txp->data, irq);
+        netif_dbg(ks, tx_queued, ks->netdev, "%s: skb %p, %d@%p, irq %d\n",
+                  __func__, txp, txp->len, txp->data, irq);
 
         fid = ks->fid++;
         fid &= TXFR_TXFID_MASK;
@@ -685,7 +680,7 @@ static void ks8851_wrpkt(struct ks8851_net *ks, struct sk_buff *txp, bool irq)
 
         ret = spi_sync(ks->spidev, msg);
         if (ret < 0)
-                ks_err(ks, "%s: spi_sync() failed\n", __func__);
+                netdev_err(ks->netdev, "%s: spi_sync() failed\n", __func__);
 }
 
 /**
@@ -744,8 +739,7 @@ static void ks8851_set_powermode(struct ks8851_net *ks, unsigned pwrmode)
 {
         unsigned pmecr;
 
-        if (netif_msg_hw(ks))
-                ks_dbg(ks, "setting power mode %d\n", pwrmode);
+        netif_dbg(ks, hw, ks->netdev, "setting power mode %d\n", pwrmode);
 
         pmecr = ks8851_rdreg16(ks, KS_PMECR);
         pmecr &= ~PMECR_PM_MASK;
@@ -769,8 +763,7 @@ static int ks8851_net_open(struct net_device *dev)
          * else at the moment */
         mutex_lock(&ks->lock);
 
-        if (netif_msg_ifup(ks))
-                ks_dbg(ks, "opening %s\n", dev->name);
+        netif_dbg(ks, ifup, ks->netdev, "opening\n");
 
         /* bring chip out of any power saving mode it was in */
         ks8851_set_powermode(ks, PMECR_PM_NORMAL);
@@ -826,8 +819,7 @@ static int ks8851_net_open(struct net_device *dev)
 
         netif_start_queue(ks->netdev);
 
-        if (netif_msg_ifup(ks))
-                ks_dbg(ks, "network device %s up\n", dev->name);
+        netif_dbg(ks, ifup, ks->netdev, "network device up\n");
 
         mutex_unlock(&ks->lock);
         return 0;
@@ -845,8 +837,7 @@ static int ks8851_net_stop(struct net_device *dev)
 {
         struct ks8851_net *ks = netdev_priv(dev);
 
-        if (netif_msg_ifdown(ks))
-                ks_info(ks, "%s: shutting down\n", dev->name);
+        netif_info(ks, ifdown, dev, "shutting down\n");
 
         netif_stop_queue(dev);
 
@@ -874,8 +865,8 @@ static int ks8851_net_stop(struct net_device *dev)
         while (!skb_queue_empty(&ks->txq)) {
                 struct sk_buff *txb = skb_dequeue(&ks->txq);
 
-                if (netif_msg_ifdown(ks))
-                        ks_dbg(ks, "%s: freeing txb %p\n", __func__, txb);
+                netif_dbg(ks, ifdown, ks->netdev,
+                          "%s: freeing txb %p\n", __func__, txb);
 
                 dev_kfree_skb(txb);
         }
@@ -904,9 +895,8 @@ static netdev_tx_t ks8851_start_xmit(struct sk_buff *skb,
         unsigned needed = calc_txlen(skb->len);
         netdev_tx_t ret = NETDEV_TX_OK;
 
-        if (netif_msg_tx_queued(ks))
-                ks_dbg(ks, "%s: skb %p, %d@%p\n", __func__,
-                       skb, skb->len, skb->data);
+        netif_dbg(ks, tx_queued, ks->netdev,
+                  "%s: skb %p, %d@%p\n", __func__, skb, skb->len, skb->data);
 
         spin_lock(&ks->statelock);
 
@@ -966,13 +956,13 @@ static void ks8851_set_rx_mode(struct net_device *dev)
                 rxctrl.rxcr1 = (RXCR1_RXME | RXCR1_RXAE |
                                 RXCR1_RXPAFMA | RXCR1_RXMAFMA);
         } else if (dev->flags & IFF_MULTICAST && !netdev_mc_empty(dev)) {
-                struct dev_mc_list *mcptr;
+                struct netdev_hw_addr *ha;
                 u32 crc;
 
                 /* accept some multicast */
 
-                netdev_for_each_mc_addr(mcptr, dev) {
-                        crc = ether_crc(ETH_ALEN, mcptr->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        crc = ether_crc(ETH_ALEN, ha->addr);
                         crc >>= (32 - 6);  /* get top six bits */
 
                         rxctrl.mchash[crc >> 4] |= (1 << (crc & 0xf));
@@ -1185,17 +1175,17 @@ static int ks8851_read_selftest(struct ks8851_net *ks)
         rd = ks8851_rdreg16(ks, KS_MBIR);
 
         if ((rd & both_done) != both_done) {
-                ks_warn(ks, "Memory selftest not finished\n");
+                netdev_warn(ks->netdev, "Memory selftest not finished\n");
                 return 0;
         }
 
         if (rd & MBIR_TXMBFA) {
-                ks_err(ks, "TX memory selftest fail\n");
+                netdev_err(ks->netdev, "TX memory selftest fail\n");
                 ret |= 1;
         }
 
         if (rd & MBIR_RXMBFA) {
-                ks_err(ks, "RX memory selftest fail\n");
+                netdev_err(ks->netdev, "RX memory selftest fail\n");
                 ret |= 2;
         }
 
@@ -1293,9 +1283,9 @@ static int __devinit ks8851_probe(struct spi_device *spi)
                 goto err_netdev;
         }
 
-        dev_info(&spi->dev, "revision %d, MAC %pM, IRQ %d\n",
-                 CIDER_REV_GET(ks8851_rdreg16(ks, KS_CIDER)),
-                 ndev->dev_addr, ndev->irq);
+        netdev_info(ndev, "revision %d, MAC %pM, IRQ %d\n",
+                    CIDER_REV_GET(ks8851_rdreg16(ks, KS_CIDER)),
+                    ndev->dev_addr, ndev->irq);
 
         return 0;
 
@@ -1314,7 +1304,7 @@ static int __devexit ks8851_remove(struct spi_device *spi)
         struct ks8851_net *priv = dev_get_drvdata(&spi->dev);
 
         if (netif_msg_drv(priv))
-                dev_info(&spi->dev, "remove");
+                dev_info(&spi->dev, "remove\n");
 
         unregister_netdev(priv->netdev);
         free_irq(spi->irq, priv);
diff --git a/drivers/net/ks8851_mll.c b/drivers/net/ks8851_mll.c
index 84b0e15831f9..70a3d98f4bd7 100644
--- a/drivers/net/ks8851_mll.c
+++ b/drivers/net/ks8851_mll.c
@@ -21,6 +21,8 @@
  * KS8851 16bit MLL chip from Micrel Inc.
  */
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #include <linux/module.h>
 #include <linux/kernel.h>
 #include <linux/netdevice.h>
@@ -360,7 +362,6 @@ static u8 KS_DEFAULT_MAC_ADDRESS[] = { 0x00, 0x10, 0xA1, 0x86, 0x95, 0x11 };
 
 #define MAX_MCAST_LST                   32
 #define HW_MCAST_SIZE                   8
-#define MAC_ADDR_LEN                    6
 
 /**
  * union ks_tx_hdr - tx header data
@@ -448,7 +449,7 @@ struct ks_net {
         u16                     promiscuous;
         u16                     all_mcast;
         u16                     mcast_lst_size;
-        u8                      mcast_lst[MAX_MCAST_LST][MAC_ADDR_LEN];
+        u8                      mcast_lst[MAX_MCAST_LST][ETH_ALEN];
         u8                      mcast_bits[HW_MCAST_SIZE];
         u8                      mac_addr[6];
         u8                      fid;
@@ -458,11 +459,6 @@ struct ks_net {
 
 static int msg_enable;
 
-#define ks_info(_ks, _msg...) dev_info(&(_ks)->pdev->dev, _msg)
-#define ks_warn(_ks, _msg...) dev_warn(&(_ks)->pdev->dev, _msg)
-#define ks_dbg(_ks, _msg...) dev_dbg(&(_ks)->pdev->dev, _msg)
-#define ks_err(_ks, _msg...) dev_err(&(_ks)->pdev->dev, _msg)
-
 #define BE3             0x8000      /* Byte Enable 3 */
 #define BE2             0x4000      /* Byte Enable 2 */
 #define BE1             0x2000      /* Byte Enable 1 */
@@ -624,8 +620,7 @@ static void ks_set_powermode(struct ks_net *ks, unsigned pwrmode)
 {
         unsigned pmecr;
 
-        if (netif_msg_hw(ks))
-                ks_dbg(ks, "setting power mode %d\n", pwrmode);
+        netif_dbg(ks, hw, ks->netdev, "setting power mode %d\n", pwrmode);
 
         ks_rdreg16(ks, KS_GRR);
         pmecr = ks_rdreg16(ks, KS_PMECR);
@@ -805,11 +800,10 @@ static void ks_rcv(struct ks_net *ks, struct net_device *netdev)
                         /* read data block including CRC 4 bytes */
                         ks_read_qmu(ks, (u16 *)skb->data, frame_hdr->len);
                         skb_put(skb, frame_hdr->len);
-                        skb->dev = netdev;
                         skb->protocol = eth_type_trans(skb, netdev);
                         netif_rx(skb);
                 } else {
-                        printk(KERN_ERR "%s: err:skb alloc\n", __func__);
+                        pr_err("%s: err:skb alloc\n", __func__);
                         ks_wrreg16(ks, KS_RXQCR, (ks->rc_rxqcr | RXQCR_RRXEF));
                         if (skb)
                                 dev_kfree_skb_irq(skb);
@@ -836,9 +830,8 @@ static void ks_update_link_status(struct net_device *netdev, struct ks_net *ks)
                 netif_carrier_off(netdev);
                 link_up_status = false;
         }
-        if (netif_msg_link(ks))
-                ks_dbg(ks, "%s: %s\n",
-                        __func__, link_up_status ? "UP" : "DOWN");
+        netif_dbg(ks, link, ks->netdev,
+                  "%s: %s\n", __func__, link_up_status ? "UP" : "DOWN");
 }
 
 /**
@@ -908,15 +901,13 @@ static int ks_net_open(struct net_device *netdev)
          * else at the moment.
          */
 
-        if (netif_msg_ifup(ks))
-                ks_dbg(ks, "%s - entry\n", __func__);
+        netif_dbg(ks, ifup, ks->netdev, "%s - entry\n", __func__);
 
         /* reset the HW */
         err = request_irq(ks->irq, ks_irq, KS_INT_FLAGS, DRV_NAME, netdev);
 
         if (err) {
-                printk(KERN_ERR "Failed to request IRQ: %d: %d\n",
-                        ks->irq, err);
+                pr_err("Failed to request IRQ: %d: %d\n", ks->irq, err);
                 return err;
         }
 
@@ -929,8 +920,7 @@ static int ks_net_open(struct net_device *netdev)
         ks_enable_qmu(ks);
         netif_start_queue(ks->netdev);
 
-        if (netif_msg_ifup(ks))
-                ks_dbg(ks, "network device %s up\n", netdev->name);
+        netif_dbg(ks, ifup, ks->netdev, "network device up\n");
 
         return 0;
 }
@@ -947,8 +937,7 @@ static int ks_net_stop(struct net_device *netdev)
 {
         struct ks_net *ks = netdev_priv(netdev);
 
-        if (netif_msg_ifdown(ks))
-                ks_info(ks, "%s: shutting down\n", netdev->name);
+        netif_info(ks, ifdown, netdev, "shutting down\n");
 
         netif_stop_queue(netdev);
 
@@ -1180,7 +1169,7 @@ static void ks_set_mcast(struct ks_net *ks, u16 mcast)
 static void ks_set_rx_mode(struct net_device *netdev)
 {
         struct ks_net *ks = netdev_priv(netdev);
-        struct dev_mc_list *ptr;
+        struct netdev_hw_addr *ha;
 
         /* Turn on/off promiscuous mode. */
         if ((netdev->flags & IFF_PROMISC) == IFF_PROMISC)
@@ -1197,13 +1186,12 @@ static void ks_set_rx_mode(struct net_device *netdev)
                 if (netdev_mc_count(netdev) <= MAX_MCAST_LST) {
                         int i = 0;
 
-                        netdev_for_each_mc_addr(ptr, netdev) {
-                                if (!(*ptr->dmi_addr & 1))
+                        netdev_for_each_mc_addr(ha, netdev) {
+                                if (!(*ha->addr & 1))
                                         continue;
                                 if (i >= MAX_MCAST_LST)
                                         break;
-                                memcpy(ks->mcast_lst[i++], ptr->dmi_addr,
-                                MAC_ADDR_LEN);
+                                memcpy(ks->mcast_lst[i++], ha->addr, ETH_ALEN);
                         }
                         ks->mcast_lst_size = (u8)i;
                         ks_set_grpaddr(ks);
@@ -1429,21 +1417,21 @@ static int ks_read_selftest(struct ks_net *ks)
         rd = ks_rdreg16(ks, KS_MBIR);
 
         if ((rd & both_done) != both_done) {
-                ks_warn(ks, "Memory selftest not finished\n");
+                netdev_warn(ks->netdev, "Memory selftest not finished\n");
                 return 0;
         }
 
         if (rd & MBIR_TXMBFA) {
-                ks_err(ks, "TX memory selftest fails\n");
+                netdev_err(ks->netdev, "TX memory selftest fails\n");
                 ret |= 1;
         }
 
         if (rd & MBIR_RXMBFA) {
-                ks_err(ks, "RX memory selftest fails\n");
+                netdev_err(ks->netdev, "RX memory selftest fails\n");
                 ret |= 2;
         }
 
-        ks_info(ks, "the selftest passes\n");
+        netdev_info(ks->netdev, "the selftest passes\n");
         return ret;
 }
 
@@ -1514,7 +1502,7 @@ static int ks_hw_init(struct ks_net *ks)
         ks->frame_head_info = (struct type_frame_head *) \
                 kmalloc(MHEADER_SIZE, GFP_KERNEL);
         if (!ks->frame_head_info) {
-                printk(KERN_ERR "Error: Fail to allocate frame memory\n");
+                pr_err("Error: Fail to allocate frame memory\n");
                 return false;
         }
 
@@ -1580,7 +1568,7 @@ static int __devinit ks8851_probe(struct platform_device *pdev)
         ks->mii.mdio_read       = ks_phy_read;
         ks->mii.mdio_write      = ks_phy_write;
 
-        ks_info(ks, "message enable is %d\n", msg_enable);
+        netdev_info(netdev, "message enable is %d\n", msg_enable);
         /* set the default message enable */
         ks->msg_enable = netif_msg_init(msg_enable, (NETIF_MSG_DRV |
                                                      NETIF_MSG_PROBE |
@@ -1589,13 +1577,13 @@ static int __devinit ks8851_probe(struct platform_device *pdev)
 
         /* simple check for a valid chip being connected to the bus */
         if ((ks_rdreg16(ks, KS_CIDER) & ~CIDER_REV_MASK) != CIDER_ID) {
-                ks_err(ks, "failed to read device ID\n");
+                netdev_err(netdev, "failed to read device ID\n");
                 err = -ENODEV;
                 goto err_register;
         }
 
         if (ks_read_selftest(ks)) {
-                ks_err(ks, "failed to read device ID\n");
+                netdev_err(netdev, "failed to read device ID\n");
                 err = -ENODEV;
                 goto err_register;
         }
@@ -1626,9 +1614,8 @@ static int __devinit ks8851_probe(struct platform_device *pdev)
 
         id = ks_rdreg16(ks, KS_CIDER);
 
-        printk(KERN_INFO DRV_NAME
-                " Found chip, family: 0x%x, id: 0x%x, rev: 0x%x\n",
-                (id >> 8) & 0xff, (id >> 4) & 0xf, (id >> 1) & 0x7);
+        netdev_info(netdev, "Found chip, family: 0x%x, id: 0x%x, rev: 0x%x\n",
+                    (id >> 8) & 0xff, (id >> 4) & 0xf, (id >> 1) & 0x7);
         return 0;
 
 err_register:
diff --git a/drivers/net/ksz884x.c b/drivers/net/ksz884x.c
index 6c5327af1bf9..097796423b52 100644
--- a/drivers/net/ksz884x.c
+++ b/drivers/net/ksz884x.c
@@ -14,10 +14,11 @@
  * GNU General Public License for more details.
  */
 
+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
+
 #include <linux/init.h>
 #include <linux/kernel.h>
 #include <linux/module.h>
-#include <linux/version.h>
 #include <linux/ioport.h>
 #include <linux/pci.h>
 #include <linux/proc_fs.h>
@@ -1483,11 +1484,6 @@ struct dev_priv {
         int promiscuous;
 };
 
-#define ks_info(_ks, _msg...) dev_info(&(_ks)->pdev->dev, _msg)
-#define ks_warn(_ks, _msg...) dev_warn(&(_ks)->pdev->dev, _msg)
-#define ks_dbg(_ks, _msg...) dev_dbg(&(_ks)->pdev->dev, _msg)
-#define ks_err(_ks, _msg...) dev_err(&(_ks)->pdev->dev, _msg)
-
 #define DRV_NAME                "KSZ884X PCI"
 #define DEVICE_NAME             "KSZ884x PCI"
 #define DRV_VERSION             "1.0.0"
@@ -3834,7 +3830,7 @@ static void ksz_check_desc_num(struct ksz_desc_info *info)
                 alloc >>= 1;
         }
         if (alloc != 1 || shift < MIN_DESC_SHIFT) {
-                printk(KERN_ALERT "Hardware descriptor numbers not right!\n");
+                pr_alert("Hardware descriptor numbers not right!\n");
                 while (alloc) {
                         shift++;
                         alloc >>= 1;
@@ -4545,8 +4541,7 @@ static int ksz_alloc_mem(struct dev_info *adapter)
                 (((sizeof(struct ksz_hw_desc) + DESC_ALIGNMENT - 1) /
                 DESC_ALIGNMENT) * DESC_ALIGNMENT);
         if (hw->rx_desc_info.size != sizeof(struct ksz_hw_desc))
-                printk(KERN_ALERT
-                        "Hardware descriptor size not right!\n");
+                pr_alert("Hardware descriptor size not right!\n");
         ksz_check_desc_num(&hw->rx_desc_info);
         ksz_check_desc_num(&hw->tx_desc_info);
 
@@ -5048,8 +5043,6 @@ static inline int rx_proc(struct net_device *dev, struct ksz_hw* hw,
                         dma_buf->skb->data, packet_len);
         } while (0);
 
-        skb->dev = dev;
-
         skb->protocol = eth_type_trans(skb, dev);
 
         if (hw->rx_cfg & (DMA_RX_CSUM_UDP | DMA_RX_CSUM_TCP))
@@ -5319,10 +5312,10 @@ static irqreturn_t netdev_intr(int irq, void *dev_id)
                         u32 data;
 
                         hw->intr_mask &= ~KS884X_INT_TX_STOPPED;
-                        printk(KERN_INFO "Tx stopped\n");
+                        pr_info("Tx stopped\n");
                         data = readl(hw->io + KS_DMA_TX_CTRL);
                         if (!(data & DMA_TX_ENABLE))
-                                printk(KERN_INFO "Tx disabled\n");
+                                pr_info("Tx disabled\n");
                         break;
                 }
         } while (0);
@@ -5495,6 +5488,18 @@ static int prepare_hardware(struct net_device *dev)
         return 0;
 }
 
+static void set_media_state(struct net_device *dev, int media_state)
+{
+        struct dev_priv *priv = netdev_priv(dev);
+
+        if (media_state == priv->media_state)
+                netif_carrier_on(dev);
+        else
+                netif_carrier_off(dev);
+        netif_info(priv, link, dev, "link %s\n",
+                   media_state == priv->media_state ? "on" : "off");
+}
+
 /**
  * netdev_open - open network device
  * @dev:        Network device.
@@ -5584,15 +5589,7 @@ static int netdev_open(struct net_device *dev)
 
         priv->media_state = port->linked->state;
 
-        if (media_connected == priv->media_state)
-                netif_carrier_on(dev);
-        else
-                netif_carrier_off(dev);
-        if (netif_msg_link(priv))
-                printk(KERN_INFO "%s link %s\n", dev->name,
-                        (media_connected == priv->media_state ?
-                        "on" : "off"));
-
+        set_media_state(dev, media_connected);
         netif_start_queue(dev);
 
         return 0;
@@ -5766,7 +5763,7 @@ static void netdev_set_rx_mode(struct net_device *dev)
         struct dev_priv *priv = netdev_priv(dev);
         struct dev_info *hw_priv = priv->adapter;
         struct ksz_hw *hw = &hw_priv->hw;
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         int multicast = (dev->flags & IFF_ALLMULTI);
 
         dev_set_promiscuous(dev, priv, hw, (dev->flags & IFF_PROMISC));
@@ -5783,7 +5780,7 @@ static void netdev_set_rx_mode(struct net_device *dev)
                 int i = 0;
 
                 /* List too big to support so turn on all multicast mode. */
-                if (dev->mc_count > MAX_MULTICAST_LIST) {
+                if (netdev_mc_count(dev) > MAX_MULTICAST_LIST) {
                         if (MAX_MULTICAST_LIST != hw->multi_list_size) {
                                 hw->multi_list_size = MAX_MULTICAST_LIST;
                                 ++hw->all_multi;
@@ -5792,13 +5789,12 @@ static void netdev_set_rx_mode(struct net_device *dev)
                         return;
                 }
 
-                netdev_for_each_mc_addr(mc_ptr, dev) {
-                        if (!(*mc_ptr->dmi_addr & 1))
+                netdev_for_each_mc_addr(ha, dev) {
+                        if (!(*ha->addr & 1))
                                 continue;
                         if (i >= MAX_MULTICAST_LIST)
                                 break;
-                        memcpy(hw->multi_list[i++], mc_ptr->dmi_addr,
-                                MAC_ADDR_LEN);
+                        memcpy(hw->multi_list[i++], ha->addr, MAC_ADDR_LEN);
                 }
                 hw->multi_list_size = (u8) i;
                 hw_set_grp_addr(hw);
@@ -6682,16 +6678,8 @@ static void update_link(struct net_device *dev, struct dev_priv *priv,
 {
         if (priv->media_state != port->linked->state) {
                 priv->media_state = port->linked->state;
-                if (netif_running(dev)) {
-                        if (media_connected == priv->media_state)
-                                netif_carrier_on(dev);
-                        else
-                                netif_carrier_off(dev);
-                        if (netif_msg_link(priv))
-                                printk(KERN_INFO "%s link %s\n", dev->name,
-                                        (media_connected == priv->media_state ?
-                                        "on" : "off"));
-                }
+                if (netif_running(dev))
+                        set_media_state(dev, media_connected);
         }
 }
 
@@ -6985,7 +6973,7 @@ static int __init pcidev_init(struct pci_dev *pdev,
         int pi;
         int port_count;
         int result;
-        char banner[80];
+        char banner[sizeof(version)];
         struct ksz_switch *sw = NULL;
 
         result = pci_enable_device(pdev);
@@ -7009,10 +6997,9 @@ static int __init pcidev_init(struct pci_dev *pdev,
 
         result = -ENOMEM;
 
-        info = kmalloc(sizeof(struct platform_info), GFP_KERNEL);
+        info = kzalloc(sizeof(struct platform_info), GFP_KERNEL);
         if (!info)
                 goto pcidev_init_dev_err;
-        memset(info, 0, sizeof(struct platform_info));
 
         hw_priv = &info->dev_info;
         hw_priv->pdev = pdev;
@@ -7026,15 +7013,15 @@ static int __init pcidev_init(struct pci_dev *pdev,
         cnt = hw_init(hw);
         if (!cnt) {
                 if (msg_enable & NETIF_MSG_PROBE)
-                        printk(KERN_ALERT "chip not detected\n");
+                        pr_alert("chip not detected\n");
                 result = -ENODEV;
                 goto pcidev_init_alloc_err;
         }
 
-        sprintf(banner, "%s\n", version);
-        banner[13] = cnt + '0';
-        ks_info(hw_priv, "%s", banner);
-        ks_dbg(hw_priv, "Mem = %p; IRQ = %d\n", hw->io, pdev->irq);
+        snprintf(banner, sizeof(banner), "%s", version);
+        banner[13] = cnt + '0';         /* Replace x in "Micrel KSZ884x" */
+        dev_info(&hw_priv->pdev->dev, "%s\n", banner);
+        dev_dbg(&hw_priv->pdev->dev, "Mem = %p; IRQ = %d\n", hw->io, pdev->irq);
 
         /* Assume device is KSZ8841. */
         hw->dev_count = 1;
diff --git a/drivers/net/lib82596.c b/drivers/net/lib82596.c
index 443c39a3732f..fddaf921885e 100644
--- a/drivers/net/lib82596.c
+++ b/drivers/net/lib82596.c
@@ -1388,7 +1388,7 @@ static void set_multicast_list(struct net_device *dev)
         }
 
         if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 unsigned char *cp;
                 struct mc_cmd *cmd;
 
@@ -1396,10 +1396,10 @@ static void set_multicast_list(struct net_device *dev)
                 cmd->cmd.command = SWAP16(CmdMulticastList);
                 cmd->mc_cnt = SWAP16(netdev_mc_count(dev) * 6);
                 cp = cmd->mc_addrs;
-                netdev_for_each_mc_addr(dmi, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         if (!cnt--)
                                 break;
-                        memcpy(cp, dmi->dmi_addr, 6);
+                        memcpy(cp, ha->addr, 6);
                         if (i596_debug > 1)
                                 DEB(DEB_MULTI,
                                     printk(KERN_DEBUG
diff --git a/drivers/net/lib8390.c b/drivers/net/lib8390.c
index 56f66f485400..526dc9cbc3c6 100644
--- a/drivers/net/lib8390.c
+++ b/drivers/net/lib8390.c
@@ -905,10 +905,10 @@ static struct net_device_stats *__ei_get_stats(struct net_device *dev)
 
 static inline void make_mc_bits(u8 *bits, struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
-        netdev_for_each_mc_addr(dmi, dev) {
-                u32 crc = ether_crc(ETH_ALEN, dmi->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                u32 crc = ether_crc(ETH_ALEN, ha->addr);
                 /*
                  * The 8390 uses the 6 most significant bits of the
                  * CRC to index the multicast table.
diff --git a/drivers/net/ll_temac.h b/drivers/net/ll_temac.h
index 1af66a1e6911..c03358434acb 100644
--- a/drivers/net/ll_temac.h
+++ b/drivers/net/ll_temac.h
@@ -5,8 +5,11 @@
 #include <linux/netdevice.h>
 #include <linux/of.h>
 #include <linux/spinlock.h>
+
+#ifdef CONFIG_PPC_DCR
 #include <asm/dcr.h>
 #include <asm/dcr-regs.h>
+#endif
 
 /* packet size info */
 #define XTE_HDR_SIZE                    14      /* size of Ethernet header */
@@ -290,9 +293,6 @@ This option defaults to enabled (set) */
 
 #define TX_CONTROL_CALC_CSUM_MASK   1
 
-#define XTE_ALIGN       32
-#define BUFFER_ALIGN(adr) ((XTE_ALIGN - ((u32) adr)) % XTE_ALIGN)
-
 #define MULTICAST_CAM_TABLE_NUM 4
 
 /* TX/RX CURDESC_PTR points to first descriptor */
@@ -335,9 +335,15 @@ struct temac_local {
         struct mii_bus *mii_bus;        /* MII bus reference */
         int mdio_irqs[PHY_MAX_ADDR];    /* IRQs table for MDIO bus */
 
-        /* IO registers and IRQs */
+        /* IO registers, dma functions and IRQs */
         void __iomem *regs;
+        void __iomem *sdma_regs;
+#ifdef CONFIG_PPC_DCR
         dcr_host_t sdma_dcrs;
+#endif
+        u32 (*dma_in)(struct temac_local *, int);
+        void (*dma_out)(struct temac_local *, int, u32);
+
         int tx_irq;
         int rx_irq;
         int emac_num;
diff --git a/drivers/net/ll_temac_main.c b/drivers/net/ll_temac_main.c
index a18e3485476e..b6edb2fd0a8a 100644
--- a/drivers/net/ll_temac_main.c
+++ b/drivers/net/ll_temac_main.c
@@ -20,9 +20,6 @@
  *   or rx, so this should be okay.
  *
  * TODO:
- * - Fix driver to work on more than just Virtex5.  Right now the driver
- *   assumes that the locallink DMA registers are accessed via DCR
- *   instructions.
  * - Factor out locallink DMA code into separate driver
  * - Fix multicast assignment.
  * - Fix support for hardware checksumming.
@@ -115,17 +112,86 @@ void temac_indirect_out32(struct temac_local *lp, int reg, u32 value)
         temac_iow(lp, XTE_CTL0_OFFSET, CNTLREG_WRITE_ENABLE_MASK | reg);
 }
 
+/**
+ * temac_dma_in32 - Memory mapped DMA read, this function expects a
+ * register input that is based on DCR word addresses which
+ * are then converted to memory mapped byte addresses
+ */
 static u32 temac_dma_in32(struct temac_local *lp, int reg)
 {
-        return dcr_read(lp->sdma_dcrs, reg);
+        return in_be32((u32 *)(lp->sdma_regs + (reg << 2)));
 }
 
+/**
+ * temac_dma_out32 - Memory mapped DMA read, this function expects a
+ * register input that is based on DCR word addresses which
+ * are then converted to memory mapped byte addresses
+ */
 static void temac_dma_out32(struct temac_local *lp, int reg, u32 value)
 {
+        out_be32((u32 *)(lp->sdma_regs + (reg << 2)), value);
+}
+
+/* DMA register access functions can be DCR based or memory mapped.
+ * The PowerPC 440 is DCR based, the PowerPC 405 and MicroBlaze are both
+ * memory mapped.
+ */
+#ifdef CONFIG_PPC_DCR
+
+/**
+ * temac_dma_dcr_in32 - DCR based DMA read
+ */
+static u32 temac_dma_dcr_in(struct temac_local *lp, int reg)
+{
+        return dcr_read(lp->sdma_dcrs, reg);
+}
+
+/**
+ * temac_dma_dcr_out32 - DCR based DMA write
+ */
+static void temac_dma_dcr_out(struct temac_local *lp, int reg, u32 value)
+{
         dcr_write(lp->sdma_dcrs, reg, value);
 }
 
 /**
+ * temac_dcr_setup - If the DMA is DCR based, then setup the address and
+ * I/O  functions
+ */
+static int temac_dcr_setup(struct temac_local *lp, struct of_device *op,
+                                struct device_node *np)
+{
+        unsigned int dcrs;
+
+        /* setup the dcr address mapping if it's in the device tree */
+
+        dcrs = dcr_resource_start(np, 0);
+        if (dcrs != 0) {
+                lp->sdma_dcrs = dcr_map(np, dcrs, dcr_resource_len(np, 0));
+                lp->dma_in = temac_dma_dcr_in;
+                lp->dma_out = temac_dma_dcr_out;
+                dev_dbg(&op->dev, "DCR base: %x\n", dcrs);
+                return 0;
+        }
+        /* no DCR in the device tree, indicate a failure */
+        return -1;
+}
+
+#else
+
+/*
+ * temac_dcr_setup - This is a stub for when DCR is not supported,
+ * such as with MicroBlaze
+ */
+static int temac_dcr_setup(struct temac_local *lp, struct of_device *op,
+                                struct device_node *np)
+{
+        return -1;
+}
+
+#endif
+
+/**
  * temac_dma_bd_init - Setup buffer descriptor rings
  */
 static int temac_dma_bd_init(struct net_device *ndev)
@@ -155,14 +221,14 @@ static int temac_dma_bd_init(struct net_device *ndev)
                 lp->rx_bd_v[i].next = lp->rx_bd_p +
                                 sizeof(*lp->rx_bd_v) * ((i + 1) % RX_BD_NUM);
 
-                skb = alloc_skb(XTE_MAX_JUMBO_FRAME_SIZE
-                                + XTE_ALIGN, GFP_ATOMIC);
+                skb = netdev_alloc_skb_ip_align(ndev,
+                                                XTE_MAX_JUMBO_FRAME_SIZE);
+
                 if (skb == 0) {
                         dev_err(&ndev->dev, "alloc_skb error %d\n", i);
                         return -1;
                 }
                 lp->rx_skb[i] = skb;
-                skb_reserve(skb,  BUFFER_ALIGN(skb->data));
                 /* returns physical address of skb->data */
                 lp->rx_bd_v[i].phys = dma_map_single(ndev->dev.parent,
                                                      skb->data,
@@ -172,23 +238,23 @@ static int temac_dma_bd_init(struct net_device *ndev)
                 lp->rx_bd_v[i].app0 = STS_CTRL_APP0_IRQONEND;
         }
 
-        temac_dma_out32(lp, TX_CHNL_CTRL, 0x10220400 |
+        lp->dma_out(lp, TX_CHNL_CTRL, 0x10220400 |
                                           CHNL_CTRL_IRQ_EN |
                                           CHNL_CTRL_IRQ_DLY_EN |
                                           CHNL_CTRL_IRQ_COAL_EN);
         /* 0x10220483 */
         /* 0x00100483 */
-        temac_dma_out32(lp, RX_CHNL_CTRL, 0xff010000 |
+        lp->dma_out(lp, RX_CHNL_CTRL, 0xff010000 |
                                           CHNL_CTRL_IRQ_EN |
                                           CHNL_CTRL_IRQ_DLY_EN |
                                           CHNL_CTRL_IRQ_COAL_EN |
                                           CHNL_CTRL_IRQ_IOE);
         /* 0xff010283 */
 
-        temac_dma_out32(lp, RX_CURDESC_PTR,  lp->rx_bd_p);
-        temac_dma_out32(lp, RX_TAILDESC_PTR,
+        lp->dma_out(lp, RX_CURDESC_PTR,  lp->rx_bd_p);
+        lp->dma_out(lp, RX_TAILDESC_PTR,
                        lp->rx_bd_p + (sizeof(*lp->rx_bd_v) * (RX_BD_NUM - 1)));
-        temac_dma_out32(lp, TX_CURDESC_PTR, lp->tx_bd_p);
+        lp->dma_out(lp, TX_CURDESC_PTR, lp->tx_bd_p);
 
         return 0;
 }
@@ -250,20 +316,20 @@ static void temac_set_multicast_list(struct net_device *ndev)
                 temac_indirect_out32(lp, XTE_AFM_OFFSET, XTE_AFM_EPPRM_MASK);
                 dev_info(&ndev->dev, "Promiscuous mode enabled.\n");
         } else if (!netdev_mc_empty(ndev)) {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 i = 0;
-                netdev_for_each_mc_addr(mclist, ndev) {
+                netdev_for_each_mc_addr(ha, ndev) {
                         if (i >= MULTICAST_CAM_TABLE_NUM)
                                 break;
-                        multi_addr_msw = ((mclist->dmi_addr[3] << 24) |
-                                          (mclist->dmi_addr[2] << 16) |
-                                          (mclist->dmi_addr[1] << 8) |
-                                          (mclist->dmi_addr[0]));
+                        multi_addr_msw = ((ha->addr[3] << 24) |
+                                          (ha->addr[2] << 16) |
+                                          (ha->addr[1] << 8) |
+                                          (ha->addr[0]));
                         temac_indirect_out32(lp, XTE_MAW0_OFFSET,
                                              multi_addr_msw);
-                        multi_addr_lsw = ((mclist->dmi_addr[5] << 8) |
-                                          (mclist->dmi_addr[4]) | (i << 16));
+                        multi_addr_lsw = ((ha->addr[5] << 8) |
+                                          (ha->addr[4]) | (i << 16));
                         temac_indirect_out32(lp, XTE_MAW1_OFFSET,
                                              multi_addr_lsw);
                         i++;
@@ -426,9 +492,9 @@ static void temac_device_reset(struct net_device *ndev)
         temac_indirect_out32(lp, XTE_RXC1_OFFSET, val & ~XTE_RXC1_RXEN_MASK);
 
         /* Reset Local Link (DMA) */
-        temac_dma_out32(lp, DMA_CONTROL_REG, DMA_CONTROL_RST);
+        lp->dma_out(lp, DMA_CONTROL_REG, DMA_CONTROL_RST);
         timeout = 1000;
-        while (temac_dma_in32(lp, DMA_CONTROL_REG) & DMA_CONTROL_RST) {
+        while (lp->dma_in(lp, DMA_CONTROL_REG) & DMA_CONTROL_RST) {
                 udelay(1);
                 if (--timeout == 0) {
                         dev_err(&ndev->dev,
@@ -436,7 +502,7 @@ static void temac_device_reset(struct net_device *ndev)
                         break;
                 }
         }
-        temac_dma_out32(lp, DMA_CONTROL_REG, DMA_TAIL_ENABLE);
+        lp->dma_out(lp, DMA_CONTROL_REG, DMA_TAIL_ENABLE);
 
         temac_dma_bd_init(ndev);
 
@@ -597,7 +663,7 @@ static int temac_start_xmit(struct sk_buff *skb, struct net_device *ndev)
                 lp->tx_bd_tail = 0;
 
         /* Kick off the transfer */
-        temac_dma_out32(lp, TX_TAILDESC_PTR, tail_p); /* DMA start */
+        lp->dma_out(lp, TX_TAILDESC_PTR, tail_p); /* DMA start */
 
         return NETDEV_TX_OK;
 }
@@ -639,16 +705,15 @@ static void ll_temac_recv(struct net_device *ndev)
                 ndev->stats.rx_packets++;
                 ndev->stats.rx_bytes += length;
 
-                new_skb = alloc_skb(XTE_MAX_JUMBO_FRAME_SIZE + XTE_ALIGN,
-                                GFP_ATOMIC);
+                new_skb = netdev_alloc_skb_ip_align(ndev,
+                                                XTE_MAX_JUMBO_FRAME_SIZE);
+
                 if (new_skb == 0) {
                         dev_err(&ndev->dev, "no memory for new sk_buff\n");
                         spin_unlock_irqrestore(&lp->rx_lock, flags);
                         return;
                 }
 
-                skb_reserve(new_skb, BUFFER_ALIGN(new_skb->data));
-
                 cur_p->app0 = STS_CTRL_APP0_IRQONEND;
                 cur_p->phys = dma_map_single(ndev->dev.parent, new_skb->data,
                                              XTE_MAX_JUMBO_FRAME_SIZE,
@@ -663,7 +728,7 @@ static void ll_temac_recv(struct net_device *ndev)
                 cur_p = &lp->rx_bd_v[lp->rx_bd_ci];
                 bdstat = cur_p->app0;
         }
-        temac_dma_out32(lp, RX_TAILDESC_PTR, tail_p);
+        lp->dma_out(lp, RX_TAILDESC_PTR, tail_p);
 
         spin_unlock_irqrestore(&lp->rx_lock, flags);
 }
@@ -674,8 +739,8 @@ static irqreturn_t ll_temac_tx_irq(int irq, void *_ndev)
         struct temac_local *lp = netdev_priv(ndev);
         unsigned int status;
 
-        status = temac_dma_in32(lp, TX_IRQ_REG);
-        temac_dma_out32(lp, TX_IRQ_REG, status);
+        status = lp->dma_in(lp, TX_IRQ_REG);
+        lp->dma_out(lp, TX_IRQ_REG, status);
 
         if (status & (IRQ_COAL | IRQ_DLY))
                 temac_start_xmit_done(lp->ndev);
@@ -692,8 +757,8 @@ static irqreturn_t ll_temac_rx_irq(int irq, void *_ndev)
         unsigned int status;
 
         /* Read and clear the status registers */
-        status = temac_dma_in32(lp, RX_IRQ_REG);
-        temac_dma_out32(lp, RX_IRQ_REG, status);
+        status = lp->dma_in(lp, RX_IRQ_REG);
+        lp->dma_out(lp, RX_IRQ_REG, status);
 
         if (status & (IRQ_COAL | IRQ_DLY))
                 ll_temac_recv(lp->ndev);
@@ -794,7 +859,7 @@ static ssize_t temac_show_llink_regs(struct device *dev,
         int i, len = 0;
 
         for (i = 0; i < 0x11; i++)
-                len += sprintf(buf + len, "%.8x%s", temac_dma_in32(lp, i),
+                len += sprintf(buf + len, "%.8x%s", lp->dma_in(lp, i),
                                (i % 8) == 7 ? "\n" : " ");
         len += sprintf(buf + len, "\n");
 
@@ -820,7 +885,6 @@ temac_of_probe(struct of_device *op, const struct of_device_id *match)
         struct net_device *ndev;
         const void *addr;
         int size, rc = 0;
-        unsigned int dcrs;
 
         /* Init network device structure */
         ndev = alloc_etherdev(sizeof(*lp));
@@ -870,13 +934,20 @@ temac_of_probe(struct of_device *op, const struct of_device_id *match)
                 goto nodev;
         }
 
-        dcrs = dcr_resource_start(np, 0);
-        if (dcrs == 0) {
-                dev_err(&op->dev, "could not get DMA register address\n");
-                goto nodev;
+        /* Setup the DMA register accesses, could be DCR or memory mapped */
+        if (temac_dcr_setup(lp, op, np)) {
+
+                /* no DCR in the device tree, try non-DCR */
+                lp->sdma_regs = of_iomap(np, 0);
+                if (lp->sdma_regs) {
+                        lp->dma_in = temac_dma_in32;
+                        lp->dma_out = temac_dma_out32;
+                        dev_dbg(&op->dev, "MEM base: %p\n", lp->sdma_regs);
+                } else {
+                        dev_err(&op->dev, "unable to map DMA registers\n");
+                        goto nodev;
+                }
         }
-        lp->sdma_dcrs = dcr_map(np, dcrs, dcr_resource_len(np, 0));
-        dev_dbg(&op->dev, "DCR base: %x\n", dcrs);
 
         lp->rx_irq = irq_of_parse_and_map(np, 0);
         lp->tx_irq = irq_of_parse_and_map(np, 1);
diff --git a/drivers/net/lp486e.c b/drivers/net/lp486e.c
index 3e3cc04defd0..72379c5439dc 100644
--- a/drivers/net/lp486e.c
+++ b/drivers/net/lp486e.c
@@ -1256,7 +1256,7 @@ static void set_multicast_list(struct net_device *dev) {
                         dev->name, netdev_mc_count(dev));
 
         if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 char *cp;
                 cmd = kmalloc(sizeof(struct i596_cmd) + 2 +
                               netdev_mc_count(dev) * 6, GFP_ATOMIC);
@@ -1267,8 +1267,8 @@ static void set_multicast_list(struct net_device *dev) {
                 cmd->command = CmdMulticastList;
                 *((unsigned short *) (cmd + 1)) = netdev_mc_count(dev) * 6;
                 cp = ((char *)(cmd + 1))+2;
-                netdev_for_each_mc_addr(dmi, dev) {
-                        memcpy(cp, dmi->dmi_addr, 6);
+                netdev_for_each_mc_addr(ha, dev) {
+                        memcpy(cp, ha->addr, 6);
                         cp += 6;
                 }
                 if (i596_debug & LOG_SRCDST)
diff --git a/drivers/net/macb.c b/drivers/net/macb.c
index c8a18a6203c8..eab121945d7c 100644
--- a/drivers/net/macb.c
+++ b/drivers/net/macb.c
@@ -882,15 +882,15 @@ static int hash_get_index(__u8 *addr)
  */
 static void macb_sethashtable(struct net_device *dev)
 {
-        struct dev_mc_list *curr;
+        struct netdev_hw_addr *ha;
         unsigned long mc_filter[2];
         unsigned int bitnr;
         struct macb *bp = netdev_priv(dev);
 
         mc_filter[0] = mc_filter[1] = 0;
 
-        netdev_for_each_mc_addr(curr, dev) {
-                bitnr = hash_get_index(curr->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                bitnr = hash_get_index(ha->addr);
                 mc_filter[bitnr >> 5] |= 1 << (bitnr & 31);
         }
 
diff --git a/drivers/net/mace.c b/drivers/net/mace.c
index ab5f0bf6d1ae..2328a7399dcb 100644
--- a/drivers/net/mace.c
+++ b/drivers/net/mace.c
@@ -598,7 +598,7 @@ static void mace_set_multicast(struct net_device *dev)
         mp->maccc |= PROM;
     } else {
         unsigned char multicast_filter[8];
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
         if (dev->flags & IFF_ALLMULTI) {
             for (i = 0; i < 8; i++)
@@ -606,8 +606,8 @@ static void mace_set_multicast(struct net_device *dev)
         } else {
             for (i = 0; i < 8; i++)
                 multicast_filter[i] = 0;
-            netdev_for_each_mc_addr(dmi, dev) {
-                crc = ether_crc_le(6, dmi->dmi_addr);
+            netdev_for_each_mc_addr(ha, dev) {
+                crc = ether_crc_le(6, ha->addr);
                 i = crc >> 26;  /* bit number in multicast_filter */
                 multicast_filter[i >> 3] |= 1 << (i & 7);
             }
diff --git a/drivers/net/macmace.c b/drivers/net/macmace.c
index 13ba8f4afb7e..8a50c67e5928 100644
--- a/drivers/net/macmace.c
+++ b/drivers/net/macmace.c
@@ -508,7 +508,7 @@ static void mace_set_multicast(struct net_device *dev)
                 mb->maccc |= PROM;
         } else {
                 unsigned char multicast_filter[8];
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
 
                 if (dev->flags & IFF_ALLMULTI) {
                         for (i = 0; i < 8; i++) {
@@ -517,8 +517,8 @@ static void mace_set_multicast(struct net_device *dev)
                 } else {
                         for (i = 0; i < 8; i++)
                                 multicast_filter[i] = 0;
-                        netdev_for_each_mc_addr(dmi, dev) {
-                                crc = ether_crc_le(6, dmi->dmi_addr);
+                        netdev_for_each_mc_addr(ha, dev) {
+                                crc = ether_crc_le(6, ha->addr);
                                 /* bit number in multicast_filter */
                                 i = crc >> 26;
                                 multicast_filter[i >> 3] |= 1 << (i & 7);
diff --git a/drivers/net/macvlan.c b/drivers/net/macvlan.c
index 40faa368b07a..9a939d828b47 100644
--- a/drivers/net/macvlan.c
+++ b/drivers/net/macvlan.c
@@ -282,7 +282,7 @@ static int macvlan_open(struct net_device *dev)
         if (macvlan_addr_busy(vlan->port, dev->dev_addr))
                 goto out;
 
-        err = dev_unicast_add(lowerdev, dev->dev_addr);
+        err = dev_uc_add(lowerdev, dev->dev_addr);
         if (err < 0)
                 goto out;
         if (dev->flags & IFF_ALLMULTI) {
@@ -294,7 +294,7 @@ static int macvlan_open(struct net_device *dev)
         return 0;
 
 del_unicast:
-        dev_unicast_delete(lowerdev, dev->dev_addr);
+        dev_uc_del(lowerdev, dev->dev_addr);
 out:
         return err;
 }
@@ -308,7 +308,7 @@ static int macvlan_stop(struct net_device *dev)
         if (dev->flags & IFF_ALLMULTI)
                 dev_set_allmulti(lowerdev, -1);
 
-        dev_unicast_delete(lowerdev, dev->dev_addr);
+        dev_uc_del(lowerdev, dev->dev_addr);
 
         macvlan_hash_del(vlan);
         return 0;
@@ -332,11 +332,11 @@ static int macvlan_set_mac_address(struct net_device *dev, void *p)
                 if (macvlan_addr_busy(vlan->port, addr->sa_data))
                         return -EBUSY;
 
-                err = dev_unicast_add(lowerdev, addr->sa_data);
+                err = dev_uc_add(lowerdev, addr->sa_data);
                 if (err)
                         return err;
 
-                dev_unicast_delete(lowerdev, dev->dev_addr);
+                dev_uc_del(lowerdev, dev->dev_addr);
 
                 macvlan_hash_change_addr(vlan, addr->sa_data);
         }
@@ -748,6 +748,9 @@ static int macvlan_device_event(struct notifier_block *unused,
                 list_for_each_entry_safe(vlan, next, &port->vlans, list)
                         vlan->dev->rtnl_link_ops->dellink(vlan->dev, NULL);
                 break;
+        case NETDEV_PRE_TYPE_CHANGE:
+                /* Forbid underlaying device to change its type. */
+                return NOTIFY_BAD;
         }
         return NOTIFY_DONE;
 }
diff --git a/drivers/net/mlx4/en_netdev.c b/drivers/net/mlx4/en_netdev.c
index c48b0f4b17b7..455464223b43 100644
--- a/drivers/net/mlx4/en_netdev.c
+++ b/drivers/net/mlx4/en_netdev.c
@@ -160,39 +160,29 @@ static void mlx4_en_do_set_mac(struct work_struct *work)
 static void mlx4_en_clear_list(struct net_device *dev)
 {
         struct mlx4_en_priv *priv = netdev_priv(dev);
-        struct dev_mc_list *plist = priv->mc_list;
-        struct dev_mc_list *next;
 
-        while (plist) {
-                next = plist->next;
-                kfree(plist);
-                plist = next;
-        }
-        priv->mc_list = NULL;
+        kfree(priv->mc_addrs);
+        priv->mc_addrs_cnt = 0;
 }
 
 static void mlx4_en_cache_mclist(struct net_device *dev)
 {
         struct mlx4_en_priv *priv = netdev_priv(dev);
-        struct dev_mc_list *mclist;
-        struct dev_mc_list *tmp;
-        struct dev_mc_list *plist = NULL;
-
-        for (mclist = dev->mc_list; mclist; mclist = mclist->next) {
-                tmp = kmalloc(sizeof(struct dev_mc_list), GFP_ATOMIC);
-                if (!tmp) {
-                        en_err(priv, "failed to allocate multicast list\n");
-                        mlx4_en_clear_list(dev);
-                        return;
-                }
-                memcpy(tmp, mclist, sizeof(struct dev_mc_list));
-                tmp->next = NULL;
-                if (plist)
-                        plist->next = tmp;
-                else
-                        priv->mc_list = tmp;
-                plist = tmp;
+        struct netdev_hw_addr *ha;
+        char *mc_addrs;
+        int mc_addrs_cnt = netdev_mc_count(dev);
+        int i;
+
+        mc_addrs = kmalloc(mc_addrs_cnt * ETH_ALEN, GFP_ATOMIC);
+        if (!mc_addrs) {
+                en_err(priv, "failed to allocate multicast list\n");
+                return;
         }
+        i = 0;
+        netdev_for_each_mc_addr(ha, dev)
+                memcpy(mc_addrs + i++ * ETH_ALEN, ha->addr, ETH_ALEN);
+        priv->mc_addrs = mc_addrs;
+        priv->mc_addrs_cnt = mc_addrs_cnt;
 }
 
 
@@ -212,7 +202,6 @@ static void mlx4_en_do_set_multicast(struct work_struct *work)
                                                  mcast_task);
         struct mlx4_en_dev *mdev = priv->mdev;
         struct net_device *dev = priv->dev;
-        struct dev_mc_list *mclist;
         u64 mcast_addr = 0;
         int err;
 
@@ -288,6 +277,8 @@ static void mlx4_en_do_set_multicast(struct work_struct *work)
                 if (err)
                         en_err(priv, "Failed disabling multicast filter\n");
         } else {
+                int i;
+
                 err = mlx4_SET_MCAST_FLTR(mdev->dev, priv->port, 0,
                                           0, MLX4_MCAST_DISABLE);
                 if (err)
@@ -302,8 +293,9 @@ static void mlx4_en_do_set_multicast(struct work_struct *work)
                 netif_tx_lock_bh(dev);
                 mlx4_en_cache_mclist(dev);
                 netif_tx_unlock_bh(dev);
-                for (mclist = priv->mc_list; mclist; mclist = mclist->next) {
-                        mcast_addr = mlx4_en_mac_to_u64(mclist->dmi_addr);
+                for (i = 0; i < priv->mc_addrs_cnt; i++) {
+                        mcast_addr =
+                              mlx4_en_mac_to_u64(priv->mc_addrs + i * ETH_ALEN);
                         mlx4_SET_MCAST_FLTR(mdev->dev, priv->port,
                                             mcast_addr, 0, MLX4_MCAST_CONFIG);
                 }
@@ -511,7 +503,7 @@ static void mlx4_en_do_get_stats(struct work_struct *work)
 
         err = mlx4_en_DUMP_ETH_STATS(mdev, priv->port, 0);
         if (err)
-                en_dbg(HW, priv, "Could not update stats \n");
+                en_dbg(HW, priv, "Could not update stats\n");
 
         mutex_lock(&mdev->state_lock);
         if (mdev->device_up) {
@@ -984,7 +976,6 @@ int mlx4_en_init_netdev(struct mlx4_en_dev *mdev, int port,
         priv->flags = prof->flags;
         priv->tx_ring_num = prof->tx_ring_num;
         priv->rx_ring_num = prof->rx_ring_num;
-        priv->mc_list = NULL;
         priv->mac_index = -1;
         priv->msg_enable = MLX4_EN_MSG_LEVEL;
         spin_lock_init(&priv->stats_lock);
diff --git a/drivers/net/mlx4/mlx4_en.h b/drivers/net/mlx4/mlx4_en.h
index 82c3ebc584e3..b55e46c8b682 100644
--- a/drivers/net/mlx4/mlx4_en.h
+++ b/drivers/net/mlx4/mlx4_en.h
@@ -492,7 +492,8 @@ struct mlx4_en_priv {
         struct mlx4_en_perf_stats pstats;
         struct mlx4_en_pkt_stats pkstats;
         struct mlx4_en_port_stats port_stats;
-        struct dev_mc_list *mc_list;
+        char *mc_addrs;
+        int mc_addrs_cnt;
         struct mlx4_en_stat_out_mbox hw_stats;
 };
 
diff --git a/drivers/net/mv643xx_eth.c b/drivers/net/mv643xx_eth.c
index c97b6e4365a9..d5ebe43b0e65 100644
--- a/drivers/net/mv643xx_eth.c
+++ b/drivers/net/mv643xx_eth.c
@@ -1769,7 +1769,7 @@ static void mv643xx_eth_program_multicast_filter(struct net_device *dev)
         struct mv643xx_eth_private *mp = netdev_priv(dev);
         u32 *mc_spec;
         u32 *mc_other;
-        struct dev_addr_list *addr;
+        struct netdev_hw_addr *ha;
         int i;
 
         if (dev->flags & (IFF_PROMISC | IFF_ALLMULTI)) {
@@ -1794,8 +1794,8 @@ oom:
         memset(mc_spec, 0, 0x100);
         memset(mc_other, 0, 0x100);
 
-        netdev_for_each_mc_addr(addr, dev) {
-                u8 *a = addr->da_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                u8 *a = ha->addr;
                 u32 *table;
                 int entry;
 
diff --git a/drivers/net/myri10ge/myri10ge.c b/drivers/net/myri10ge/myri10ge.c
index e84dd3ee9c5a..6d33adf988dc 100644
--- a/drivers/net/myri10ge/myri10ge.c
+++ b/drivers/net/myri10ge/myri10ge.c
@@ -3001,7 +3001,7 @@ static void myri10ge_set_multicast_list(struct net_device *dev)
 {
         struct myri10ge_priv *mgp = netdev_priv(dev);
         struct myri10ge_cmd cmd;
-        struct dev_mc_list *mc_list;
+        struct netdev_hw_addr *ha;
         __be32 data[2] = { 0, 0 };
         int err;
 
@@ -3038,8 +3038,8 @@ static void myri10ge_set_multicast_list(struct net_device *dev)
         }
 
         /* Walk the multicast list, and add each address */
-        netdev_for_each_mc_addr(mc_list, dev) {
-                memcpy(data, &mc_list->dmi_addr, 6);
+        netdev_for_each_mc_addr(ha, dev) {
+                memcpy(data, &ha->addr, 6);
                 cmd.data0 = ntohl(data[0]);
                 cmd.data1 = ntohl(data[1]);
                 err = myri10ge_send_cmd(mgp, MXGEFW_JOIN_MULTICAST_GROUP,
@@ -3047,7 +3047,7 @@ static void myri10ge_set_multicast_list(struct net_device *dev)
 
                 if (err != 0) {
                         netdev_err(dev, "Failed MXGEFW_JOIN_MULTICAST_GROUP, error status:%d %pM\n",
-                                   err, mc_list->dmi_addr);
+                                   err, ha->addr);
                         goto abort;
                 }
         }
diff --git a/drivers/net/natsemi.c b/drivers/net/natsemi.c
index e52038783245..9250bf6573ec 100644
--- a/drivers/net/natsemi.c
+++ b/drivers/net/natsemi.c
@@ -2493,12 +2493,12 @@ static void __set_rx_mode(struct net_device *dev)
                 rx_mode = RxFilterEnable | AcceptBroadcast
                         | AcceptAllMulticast | AcceptMyPhys;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 int i;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int b = (ether_crc(ETH_ALEN, mclist->dmi_addr) >> 23) & 0x1ff;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int b = (ether_crc(ETH_ALEN, ha->addr) >> 23) & 0x1ff;
                         mc_filter[b/8] |= (1 << (b & 0x07));
                 }
                 rx_mode = RxFilterEnable | AcceptBroadcast
diff --git a/drivers/net/netxen/netxen_nic.h b/drivers/net/netxen/netxen_nic.h
index 0f703838e21a..174ac8ef82fa 100644
--- a/drivers/net/netxen/netxen_nic.h
+++ b/drivers/net/netxen/netxen_nic.h
@@ -420,7 +420,6 @@ struct status_desc {
 } __attribute__ ((aligned(16)));
 
 /* UNIFIED ROMIMAGE *************************/
-#define NX_UNI_FW_MIN_SIZE              0xc8000
 #define NX_UNI_DIR_SECT_PRODUCT_TBL     0x0
 #define NX_UNI_DIR_SECT_BOOTLD          0x6
 #define NX_UNI_DIR_SECT_FW              0x7
diff --git a/drivers/net/netxen/netxen_nic_ethtool.c b/drivers/net/netxen/netxen_nic_ethtool.c
index f8499e56cbee..aecba787f7c8 100644
--- a/drivers/net/netxen/netxen_nic_ethtool.c
+++ b/drivers/net/netxen/netxen_nic_ethtool.c
@@ -703,6 +703,11 @@ netxen_nic_get_ethtool_stats(struct net_device *dev,
         }
 }
 
+static u32 netxen_nic_get_tx_csum(struct net_device *dev)
+{
+        return dev->features & NETIF_F_IP_CSUM;
+}
+
 static u32 netxen_nic_get_rx_csum(struct net_device *dev)
 {
         struct netxen_adapter *adapter = netdev_priv(dev);
@@ -909,6 +914,7 @@ const struct ethtool_ops netxen_nic_ethtool_ops = {
         .set_ringparam = netxen_nic_set_ringparam,
         .get_pauseparam = netxen_nic_get_pauseparam,
         .set_pauseparam = netxen_nic_set_pauseparam,
+        .get_tx_csum = netxen_nic_get_tx_csum,
         .set_tx_csum = ethtool_op_set_tx_csum,
         .set_sg = ethtool_op_set_sg,
         .get_tso = netxen_nic_get_tso,
diff --git a/drivers/net/netxen/netxen_nic_hw.c b/drivers/net/netxen/netxen_nic_hw.c
index a945591298a8..781ca893ee0a 100644
--- a/drivers/net/netxen/netxen_nic_hw.c
+++ b/drivers/net/netxen/netxen_nic_hw.c
@@ -537,7 +537,7 @@ netxen_nic_set_mcast_addr(struct netxen_adapter *adapter,
 void netxen_p2_nic_set_multi(struct net_device *netdev)
 {
         struct netxen_adapter *adapter = netdev_priv(netdev);
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8 null_addr[6];
         int i;
 
@@ -571,8 +571,8 @@ void netxen_p2_nic_set_multi(struct net_device *netdev)
         netxen_nic_enable_mcast_filter(adapter);
 
         i = 0;
-        netdev_for_each_mc_addr(mc_ptr, netdev)
-                netxen_nic_set_mcast_addr(adapter, i++, mc_ptr->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev)
+                netxen_nic_set_mcast_addr(adapter, i++, ha->addr);
 
         /* Clear out remaining addresses */
         while (i < adapter->max_mc_count)
@@ -680,7 +680,7 @@ static int nx_p3_nic_add_mac(struct netxen_adapter *adapter,
 void netxen_p3_nic_set_multi(struct net_device *netdev)
 {
         struct netxen_adapter *adapter = netdev_priv(netdev);
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
         u32 mode = VPORT_MISS_MODE_DROP;
         LIST_HEAD(del_list);
@@ -707,8 +707,8 @@ void netxen_p3_nic_set_multi(struct net_device *netdev)
         }
 
         if (!netdev_mc_empty(netdev)) {
-                netdev_for_each_mc_addr(mc_ptr, netdev)
-                        nx_p3_nic_add_mac(adapter, mc_ptr->dmi_addr, &del_list);
+                netdev_for_each_mc_addr(ha, netdev)
+                        nx_p3_nic_add_mac(adapter, ha->addr, &del_list);
         }
 
 send_fw_cmd:
diff --git a/drivers/net/netxen/netxen_nic_init.c b/drivers/net/netxen/netxen_nic_init.c
index 7eb925a9f36e..ecb6eed1d8e2 100644
--- a/drivers/net/netxen/netxen_nic_init.c
+++ b/drivers/net/netxen/netxen_nic_init.c
@@ -613,22 +613,123 @@ static struct uni_table_desc *nx_get_table_desc(const u8 *unirom, int section)
         return NULL;
 }
 
+#define QLCNIC_FILEHEADER_SIZE  (14 * 4)
+
 static int
-nx_set_product_offs(struct netxen_adapter *adapter)
-{
-        struct uni_table_desc *ptab_descr;
+netxen_nic_validate_header(struct netxen_adapter *adapter)
+ {
         const u8 *unirom = adapter->fw->data;
-        uint32_t i;
+        struct uni_table_desc *directory = (struct uni_table_desc *) &unirom[0];
+        u32 fw_file_size = adapter->fw->size;
+        u32 tab_size;
         __le32 entries;
+        __le32 entry_size;
+
+        if (fw_file_size < QLCNIC_FILEHEADER_SIZE)
+                return -EINVAL;
+
+        entries = cpu_to_le32(directory->num_entries);
+        entry_size = cpu_to_le32(directory->entry_size);
+        tab_size = cpu_to_le32(directory->findex) + (entries * entry_size);
+
+        if (fw_file_size < tab_size)
+                return -EINVAL;
+
+        return 0;
+}
+
+static int
+netxen_nic_validate_bootld(struct netxen_adapter *adapter)
+{
+        struct uni_table_desc *tab_desc;
+        struct uni_data_desc *descr;
+        const u8 *unirom = adapter->fw->data;
+        __le32 idx = cpu_to_le32(*((int *)&unirom[adapter->file_prd_off] +
+                                NX_UNI_BOOTLD_IDX_OFF));
+        u32 offs;
+        u32 tab_size;
+        u32 data_size;
+
+        tab_desc = nx_get_table_desc(unirom, NX_UNI_DIR_SECT_BOOTLD);
+
+        if (!tab_desc)
+                return -EINVAL;
+
+        tab_size = cpu_to_le32(tab_desc->findex) +
+                        (cpu_to_le32(tab_desc->entry_size) * (idx + 1));
+
+        if (adapter->fw->size < tab_size)
+                return -EINVAL;
+
+        offs = cpu_to_le32(tab_desc->findex) +
+                (cpu_to_le32(tab_desc->entry_size) * (idx));
+        descr = (struct uni_data_desc *)&unirom[offs];
+
+        data_size = cpu_to_le32(descr->findex) + cpu_to_le32(descr->size);
+
+        if (adapter->fw->size < data_size)
+                return -EINVAL;
 
+        return 0;
+}
+
+static int
+netxen_nic_validate_fw(struct netxen_adapter *adapter)
+{
+        struct uni_table_desc *tab_desc;
+        struct uni_data_desc *descr;
+        const u8 *unirom = adapter->fw->data;
+        __le32 idx = cpu_to_le32(*((int *)&unirom[adapter->file_prd_off] +
+                                NX_UNI_FIRMWARE_IDX_OFF));
+        u32 offs;
+        u32 tab_size;
+        u32 data_size;
+
+        tab_desc = nx_get_table_desc(unirom, NX_UNI_DIR_SECT_FW);
+
+        if (!tab_desc)
+                return -EINVAL;
+
+        tab_size = cpu_to_le32(tab_desc->findex) +
+                        (cpu_to_le32(tab_desc->entry_size) * (idx + 1));
+
+        if (adapter->fw->size < tab_size)
+                return -EINVAL;
+
+        offs = cpu_to_le32(tab_desc->findex) +
+                (cpu_to_le32(tab_desc->entry_size) * (idx));
+        descr = (struct uni_data_desc *)&unirom[offs];
+        data_size = cpu_to_le32(descr->findex) + cpu_to_le32(descr->size);
+
+        if (adapter->fw->size < data_size)
+                return -EINVAL;
+
+        return 0;
+}
+
+
+static int
+netxen_nic_validate_product_offs(struct netxen_adapter *adapter)
+{
+        struct uni_table_desc *ptab_descr;
+        const u8 *unirom = adapter->fw->data;
         int mn_present = (NX_IS_REVISION_P2(adapter->ahw.revision_id)) ?
                         1 : netxen_p3_has_mn(adapter);
+        __le32 entries;
+        __le32 entry_size;
+        u32 tab_size;
+        u32 i;
 
         ptab_descr = nx_get_table_desc(unirom, NX_UNI_DIR_SECT_PRODUCT_TBL);
         if (ptab_descr == NULL)
-                return -1;
+                return -EINVAL;
 
         entries = cpu_to_le32(ptab_descr->num_entries);
+        entry_size = cpu_to_le32(ptab_descr->entry_size);
+        tab_size = cpu_to_le32(ptab_descr->findex) + (entries * entry_size);
+
+        if (adapter->fw->size < tab_size)
+                return -EINVAL;
 
 nomn:
         for (i = 0; i < entries; i++) {
@@ -657,9 +758,38 @@ nomn:
                 goto nomn;
         }
 
-        return -1;
+        return -EINVAL;
 }
 
+static int
+netxen_nic_validate_unified_romimage(struct netxen_adapter *adapter)
+{
+        if (netxen_nic_validate_header(adapter)) {
+                dev_err(&adapter->pdev->dev,
+                                "unified image: header validation failed\n");
+                return -EINVAL;
+        }
+
+        if (netxen_nic_validate_product_offs(adapter)) {
+                dev_err(&adapter->pdev->dev,
+                                "unified image: product validation failed\n");
+                return -EINVAL;
+        }
+
+        if (netxen_nic_validate_bootld(adapter)) {
+                dev_err(&adapter->pdev->dev,
+                                "unified image: bootld validation failed\n");
+                return -EINVAL;
+        }
+
+        if (netxen_nic_validate_fw(adapter)) {
+                dev_err(&adapter->pdev->dev,
+                                "unified image: firmware validation failed\n");
+                return -EINVAL;
+        }
+
+        return 0;
+}
 
 static struct uni_data_desc *nx_get_data_desc(struct netxen_adapter *adapter,
                         u32 section, u32 idx_offset)
@@ -889,6 +1019,16 @@ netxen_load_firmware(struct netxen_adapter *adapter)
 
                         flashaddr += 8;
                 }
+
+                size = (__force u32)nx_get_fw_size(adapter) % 8;
+                if (size) {
+                        data = cpu_to_le64(ptr64[i]);
+
+                        if (adapter->pci_mem_write(adapter,
+                                                flashaddr, data))
+                                return -EIO;
+                }
+
         } else {
                 u64 data;
                 u32 hi, lo;
@@ -933,27 +1073,23 @@ static int
 netxen_validate_firmware(struct netxen_adapter *adapter)
 {
         __le32 val;
-        u32 ver, min_ver, bios, min_size;
+        u32 ver, min_ver, bios;
         struct pci_dev *pdev = adapter->pdev;
         const struct firmware *fw = adapter->fw;
         u8 fw_type = adapter->fw_type;
 
         if (fw_type == NX_UNIFIED_ROMIMAGE) {
-                if (nx_set_product_offs(adapter))
+                if (netxen_nic_validate_unified_romimage(adapter))
                         return -EINVAL;
-
-                min_size = NX_UNI_FW_MIN_SIZE;
         } else {
                 val = cpu_to_le32(*(u32 *)&fw->data[NX_FW_MAGIC_OFFSET]);
                 if ((__force u32)val != NETXEN_BDINFO_MAGIC)
                         return -EINVAL;
 
-                min_size = NX_FW_MIN_SIZE;
+                if (fw->size < NX_FW_MIN_SIZE)
+                        return -EINVAL;
         }
 
-        if (fw->size < min_size)
-                return -EINVAL;
-
         val = nx_get_fw_version(adapter);
 
         if (NX_IS_REVISION_P3(adapter->ahw.revision_id))
diff --git a/drivers/net/netxen/netxen_nic_main.c b/drivers/net/netxen/netxen_nic_main.c
index 01808b28d1b6..9e82061c0235 100644
--- a/drivers/net/netxen/netxen_nic_main.c
+++ b/drivers/net/netxen/netxen_nic_main.c
@@ -781,15 +781,22 @@ netxen_check_options(struct netxen_adapter *adapter)
         if (NX_IS_REVISION_P3(adapter->ahw.revision_id)) {
                 adapter->msix_supported = !!use_msi_x;
                 adapter->rss_supported = !!use_msi_x;
-        } else if (adapter->fw_version >= NETXEN_VERSION_CODE(3, 4, 336)) {
-                switch (adapter->ahw.board_type) {
-                case NETXEN_BRDTYPE_P2_SB31_10G:
-                case NETXEN_BRDTYPE_P2_SB31_10G_CX4:
-                        adapter->msix_supported = !!use_msi_x;
-                        adapter->rss_supported = !!use_msi_x;
-                        break;
-                default:
-                        break;
+        } else {
+                u32 flashed_ver = 0;
+                netxen_rom_fast_read(adapter,
+                                NX_FW_VERSION_OFFSET, (int *)&flashed_ver);
+                flashed_ver = NETXEN_DECODE_VERSION(flashed_ver);
+
+                if (flashed_ver >= NETXEN_VERSION_CODE(3, 4, 336)) {
+                        switch (adapter->ahw.board_type) {
+                        case NETXEN_BRDTYPE_P2_SB31_10G:
+                        case NETXEN_BRDTYPE_P2_SB31_10G_CX4:
+                                adapter->msix_supported = !!use_msi_x;
+                                adapter->rss_supported = !!use_msi_x;
+                                break;
+                        default:
+                                break;
+                        }
                 }
         }
 
@@ -2303,6 +2310,7 @@ netxen_fwinit_work(struct work_struct *work)
                 }
                 break;
 
+        case NX_DEV_NEED_RESET:
         case NX_DEV_INITALIZING:
                 if (++adapter->fw_wait_cnt < FW_POLL_THRESH) {
                         netxen_schedule_work(adapter,
@@ -2346,6 +2354,9 @@ netxen_detach_work(struct work_struct *work)
 
         ref_cnt = nx_decr_dev_ref_cnt(adapter);
 
+        if (ref_cnt == -EIO)
+                goto err_ret;
+
         delay = (ref_cnt == 0) ? 0 : (2 * FW_POLL_DELAY);
 
         adapter->fw_wait_cnt = 0;
diff --git a/drivers/net/ni52.c b/drivers/net/ni52.c
index 05c29c2cef2a..a76fabe26292 100644
--- a/drivers/net/ni52.c
+++ b/drivers/net/ni52.c
@@ -596,7 +596,7 @@ static int init586(struct net_device *dev)
         struct iasetup_cmd_struct __iomem *ias_cmd;
         struct tdr_cmd_struct __iomem *tdr_cmd;
         struct mcsetup_cmd_struct __iomem *mc_cmd;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int num_addrs = netdev_mc_count(dev);
 
         ptr = p->scb + 1;
@@ -725,8 +725,8 @@ static int init586(struct net_device *dev)
                 writew(num_addrs * 6, &mc_cmd->mc_cnt);
 
                 i = 0;
-                netdev_for_each_mc_addr(dmi, dev)
-                        memcpy_toio(mc_cmd->mc_list[i++], dmi->dmi_addr, 6);
+                netdev_for_each_mc_addr(ha, dev)
+                        memcpy_toio(mc_cmd->mc_list[i++], ha->addr, 6);
 
                 writew(make16(mc_cmd), &p->scb->cbl_offset);
                 writeb(CUC_START, &p->scb->cmd_cuc);
diff --git a/drivers/net/niu.c b/drivers/net/niu.c
index 0678f3106cbc..7b52c466cf48 100644
--- a/drivers/net/niu.c
+++ b/drivers/net/niu.c
@@ -6313,7 +6313,6 @@ static void niu_set_rx_mode(struct net_device *dev)
 {
         struct niu *np = netdev_priv(dev);
         int i, alt_cnt, err;
-        struct dev_addr_list *addr;
         struct netdev_hw_addr *ha;
         unsigned long flags;
         u16 hash[16] = { 0, };
@@ -6365,8 +6364,8 @@ static void niu_set_rx_mode(struct net_device *dev)
                 for (i = 0; i < 16; i++)
                         hash[i] = 0xffff;
         } else if (!netdev_mc_empty(dev)) {
-                netdev_for_each_mc_addr(addr, dev) {
-                        u32 crc = ether_crc_le(ETH_ALEN, addr->da_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        u32 crc = ether_crc_le(ETH_ALEN, ha->addr);
 
                         crc >>= 24;
                         hash[crc >> 4] |= (1 << (15 - (crc & 0xf)));
diff --git a/drivers/net/octeon/octeon_mgmt.c b/drivers/net/octeon/octeon_mgmt.c
index be368e5cbf75..ee894ed35f7f 100644
--- a/drivers/net/octeon/octeon_mgmt.c
+++ b/drivers/net/octeon/octeon_mgmt.c
@@ -474,7 +474,7 @@ static void octeon_mgmt_set_rx_filtering(struct net_device *netdev)
         unsigned int cam_mode = 1; /* 1 - Accept on CAM match */
         unsigned int multicast_mode = 1; /* 1 - Reject all multicast.  */
         struct octeon_mgmt_cam_state cam_state;
-        struct dev_addr_list *list;
+        struct netdev_hw_addr *ha;
         struct list_head *pos;
         int available_cam_entries;
 
@@ -510,8 +510,8 @@ static void octeon_mgmt_set_rx_filtering(struct net_device *netdev)
                 }
         }
         if (multicast_mode == 0) {
-                netdev_for_each_mc_addr(list, netdev)
-                        octeon_mgmt_cam_state_add(&cam_state, list->da_addr);
+                netdev_for_each_mc_addr(ha, netdev)
+                        octeon_mgmt_cam_state_add(&cam_state, ha->addr);
         }
 
 
diff --git a/drivers/net/pci-skeleton.c b/drivers/net/pci-skeleton.c
index 36785853a149..dc3b4c7914fd 100644
--- a/drivers/net/pci-skeleton.c
+++ b/drivers/net/pci-skeleton.c
@@ -1813,12 +1813,12 @@ static void netdrv_set_rx_mode(struct net_device *dev)
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0xffffffff;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
 
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                 }
diff --git a/drivers/net/pcmcia/3c589_cs.c b/drivers/net/pcmcia/3c589_cs.c
index 091e0b00043e..580977f56ad0 100644
--- a/drivers/net/pcmcia/3c589_cs.c
+++ b/drivers/net/pcmcia/3c589_cs.c
@@ -1,20 +1,20 @@
 /*======================================================================
 
     A PCMCIA ethernet driver for the 3com 3c589 card.
-    
+
     Copyright (C) 1999 David A. Hinds -- dahinds@users.sourceforge.net
 
     3c589_cs.c 1.162 2001/10/13 00:08:50
 
     The network driver code is based on Donald Becker's 3c589 code:
-    
+
     Written 1994 by Donald Becker.
     Copyright 1993 United States Government as represented by the
     Director, National Security Agency.  This software may be used and
     distributed according to the terms of the GNU General Public License,
     incorporated herein by reference.
     Donald Becker may be reached at becker@scyld.com
-    
+
     Updated for 2.5.x by Alan Cox <alan@lxorguk.ukuu.org.uk>
 
 ======================================================================*/
@@ -69,31 +69,54 @@
 /* The top five bits written to EL3_CMD are a command, the lower
    11 bits are the parameter, if applicable. */
 enum c509cmd {
-    TotalReset = 0<<11, SelectWindow = 1<<11, StartCoax = 2<<11,
-    RxDisable = 3<<11, RxEnable = 4<<11, RxReset = 5<<11, RxDiscard = 8<<11,
-    TxEnable = 9<<11, TxDisable = 10<<11, TxReset = 11<<11,
-    FakeIntr = 12<<11, AckIntr = 13<<11, SetIntrEnb = 14<<11,
-    SetStatusEnb = 15<<11, SetRxFilter = 16<<11, SetRxThreshold = 17<<11,
-    SetTxThreshold = 18<<11, SetTxStart = 19<<11, StatsEnable = 21<<11,
-    StatsDisable = 22<<11, StopCoax = 23<<11,
+        TotalReset      = 0<<11,
+        SelectWindow    = 1<<11,
+        StartCoax       = 2<<11,
+        RxDisable       = 3<<11,
+        RxEnable        = 4<<11,
+        RxReset         = 5<<11,
+        RxDiscard       = 8<<11,
+        TxEnable        = 9<<11,
+        TxDisable       = 10<<11,
+        TxReset         = 11<<11,
+        FakeIntr        = 12<<11,
+        AckIntr         = 13<<11,
+        SetIntrEnb      = 14<<11,
+        SetStatusEnb    = 15<<11,
+        SetRxFilter     = 16<<11,
+        SetRxThreshold  = 17<<11,
+        SetTxThreshold  = 18<<11,
+        SetTxStart      = 19<<11,
+        StatsEnable     = 21<<11,
+        StatsDisable    = 22<<11,
+        StopCoax        = 23<<11
 };
 
 enum c509status {
-    IntLatch = 0x0001, AdapterFailure = 0x0002, TxComplete = 0x0004,
-    TxAvailable = 0x0008, RxComplete = 0x0010, RxEarly = 0x0020,
-    IntReq = 0x0040, StatsFull = 0x0080, CmdBusy = 0x1000
+        IntLatch        = 0x0001,
+        AdapterFailure  = 0x0002,
+        TxComplete      = 0x0004,
+        TxAvailable     = 0x0008,
+        RxComplete      = 0x0010,
+        RxEarly         = 0x0020,
+        IntReq          = 0x0040,
+        StatsFull       = 0x0080,
+        CmdBusy         = 0x1000
 };
 
 /* The SetRxFilter command accepts the following classes: */
 enum RxFilter {
-    RxStation = 1, RxMulticast = 2, RxBroadcast = 4, RxProm = 8
+        RxStation       = 1,
+        RxMulticast     = 2,
+        RxBroadcast     = 4,
+        RxProm          = 8
 };
 
 /* Register window 1 offsets, the window used in normal operation. */
 #define TX_FIFO         0x00
 #define RX_FIFO         0x00
-#define RX_STATUS       0x08
-#define TX_STATUS       0x0B
+#define RX_STATUS       0x08
+#define TX_STATUS       0x0B
 #define TX_FREE         0x0C    /* Remaining free bytes in Tx buffer. */
 
 #define WN0_IRQ         0x08    /* Window 0: Set IRQ line in bits 12-15. */
@@ -106,13 +129,13 @@ enum RxFilter {
 
 struct el3_private {
         struct pcmcia_device    *p_dev;
-    dev_node_t          node;
-    /* For transceiver monitoring */
-    struct timer_list   media;
-    u16                 media_status;
-    u16                 fast_poll;
-    unsigned long       last_irq;
-    spinlock_t          lock;
+        dev_node_t              node;
+        /* For transceiver monitoring */
+        struct timer_list       media;
+        u16                     media_status;
+        u16                     fast_poll;
+        unsigned long           last_irq;
+        spinlock_t              lock;
 };
 
 static const char *if_names[] = { "auto", "10baseT", "10base2", "AUI" };
@@ -164,15 +187,15 @@ static void tc589_detach(struct pcmcia_device *p_dev);
 ======================================================================*/
 
 static const struct net_device_ops el3_netdev_ops = {
-        .ndo_open               = el3_open,
-        .ndo_stop               = el3_close,
+        .ndo_open               = el3_open,
+        .ndo_stop               = el3_close,
         .ndo_start_xmit         = el3_start_xmit,
-        .ndo_tx_timeout         = el3_tx_timeout,
+        .ndo_tx_timeout         = el3_tx_timeout,
         .ndo_set_config         = el3_config,
         .ndo_get_stats          = el3_get_stats,
         .ndo_set_multicast_list = set_multicast_list,
         .ndo_change_mtu         = eth_change_mtu,
-        .ndo_set_mac_address    = eth_mac_addr,
+        .ndo_set_mac_address    = eth_mac_addr,
         .ndo_validate_addr      = eth_validate_addr,
 };
 
@@ -236,7 +259,7 @@ static void tc589_detach(struct pcmcia_device *link)
     tc589_config() is scheduled to run after a CARD_INSERTION event
     is received, to configure the PCMCIA socket, and to make the
     ethernet device available to the system.
-    
+
 ======================================================================*/
 
 static int tc589_config(struct pcmcia_device *link)
@@ -249,7 +272,7 @@ static int tc589_config(struct pcmcia_device *link)
     char *ram_split[] = {"5:3", "3:1", "1:1", "3:5"};
     u8 *buf;
     size_t len;
-    
+
     dev_dbg(&link->dev, "3c589_config\n");
 
     phys_addr = (__be16 *)dev->dev_addr;
@@ -278,7 +301,7 @@ static int tc589_config(struct pcmcia_device *link)
     ret = pcmcia_request_configuration(link, &link->conf);
     if (ret)
             goto failed;
-        
+
     dev->irq = link->irq.AssignedIRQ;
     dev->base_addr = link->io.BasePort1;
     ioaddr = dev->base_addr;
@@ -312,7 +335,7 @@ static int tc589_config(struct pcmcia_device *link)
         dev->if_port = if_port;
     else
         printk(KERN_ERR "3c589_cs: invalid if_port requested\n");
-    
+
     link->dev_node = &lp->node;
     SET_NETDEV_DEV(dev, &link->dev);
 
@@ -324,13 +347,12 @@ static int tc589_config(struct pcmcia_device *link)
 
     strcpy(lp->node.dev_name, dev->name);
 
-    printk(KERN_INFO "%s: 3Com 3c%s, io %#3lx, irq %d, "
-           "hw_addr %pM\n",
-           dev->name, (multi ? "562" : "589"), dev->base_addr, dev->irq,
-           dev->dev_addr);
-    printk(KERN_INFO "  %dK FIFO split %s Rx:Tx, %s xcvr\n",
-           (fifo & 7) ? 32 : 8, ram_split[(fifo >> 16) & 3],
-           if_names[dev->if_port]);
+    netdev_info(dev, "3Com 3c%s, io %#3lx, irq %d, hw_addr %pM\n",
+                (multi ? "562" : "589"), dev->base_addr, dev->irq,
+                dev->dev_addr);
+    netdev_info(dev, "  %dK FIFO split %s Rx:Tx, %s xcvr\n",
+                (fifo & 7) ? 32 : 8, ram_split[(fifo >> 16) & 3],
+                if_names[dev->if_port]);
     return 0;
 
 failed:
@@ -343,7 +365,7 @@ failed:
     After a card is removed, tc589_release() will unregister the net
     device, and release the PCMCIA configuration.  If the device is
     still open, this will be postponed until it is closed.
-    
+
 ======================================================================*/
 
 static void tc589_release(struct pcmcia_device *link)
@@ -365,7 +387,7 @@ static int tc589_resume(struct pcmcia_device *link)
 {
         struct net_device *dev = link->priv;
 
-        if (link->open) {
+        if (link->open) {
                 tc589_reset(dev);
                 netif_device_attach(dev);
         }
@@ -385,8 +407,7 @@ static void tc589_wait_for_completion(struct net_device *dev, int cmd)
     while (--i > 0)
         if (!(inw(dev->base_addr + EL3_STATUS) & 0x1000)) break;
     if (i == 0)
-        printk(KERN_WARNING "%s: command 0x%04x did not complete!\n",
-               dev->name, cmd);
+        netdev_warn(dev, "command 0x%04x did not complete!\n", cmd);
 }
 
 /*
@@ -412,7 +433,7 @@ static void tc589_set_xcvr(struct net_device *dev, int if_port)
 {
     struct el3_private *lp = netdev_priv(dev);
     unsigned int ioaddr = dev->base_addr;
-    
+
     EL3WINDOW(0);
     switch (if_port) {
     case 0: case 1: outw(0, ioaddr + 6); break;
@@ -435,14 +456,13 @@ static void dump_status(struct net_device *dev)
 {
     unsigned int ioaddr = dev->base_addr;
     EL3WINDOW(1);
-    printk(KERN_INFO "  irq status %04x, rx status %04x, tx status "
-           "%02x  tx free %04x\n", inw(ioaddr+EL3_STATUS),
-           inw(ioaddr+RX_STATUS), inb(ioaddr+TX_STATUS),
-           inw(ioaddr+TX_FREE));
+    netdev_info(dev, "  irq status %04x, rx status %04x, tx status %02x  tx free %04x\n",
+                inw(ioaddr+EL3_STATUS), inw(ioaddr+RX_STATUS),
+                inb(ioaddr+TX_STATUS), inw(ioaddr+TX_FREE));
     EL3WINDOW(4);
-    printk(KERN_INFO "  diagnostics: fifo %04x net %04x ethernet %04x"
-           " media %04x\n", inw(ioaddr+0x04), inw(ioaddr+0x06),
-           inw(ioaddr+0x08), inw(ioaddr+0x0a));
+    netdev_info(dev, "  diagnostics: fifo %04x net %04x ethernet %04x media %04x\n",
+                inw(ioaddr+0x04), inw(ioaddr+0x06), inw(ioaddr+0x08),
+                inw(ioaddr+0x0a));
     EL3WINDOW(1);
 }
 
@@ -451,18 +471,18 @@ static void tc589_reset(struct net_device *dev)
 {
     unsigned int ioaddr = dev->base_addr;
     int i;
-    
+
     EL3WINDOW(0);
-    outw(0x0001, ioaddr + 4);                   /* Activate board. */ 
+    outw(0x0001, ioaddr + 4);                   /* Activate board. */
     outw(0x3f00, ioaddr + 8);                   /* Set the IRQ line. */
-    
+
     /* Set the station address in window 2. */
     EL3WINDOW(2);
     for (i = 0; i < 6; i++)
         outb(dev->dev_addr[i], ioaddr + i);
 
     tc589_set_xcvr(dev, dev->if_port);
-    
+
     /* Switch to the stats window, and clear all stats by reading. */
     outw(StatsDisable, ioaddr + EL3_CMD);
     EL3WINDOW(6);
@@ -470,7 +490,7 @@ static void tc589_reset(struct net_device *dev)
         inb(ioaddr+i);
     inw(ioaddr + 10);
     inw(ioaddr + 12);
-    
+
     /* Switch to register set 1 for normal use. */
     EL3WINDOW(1);
 
@@ -504,8 +524,7 @@ static int el3_config(struct net_device *dev, struct ifmap *map)
     if ((map->port != (u_char)(-1)) && (map->port != dev->if_port)) {
         if (map->port <= 3) {
             dev->if_port = map->port;
-            printk(KERN_INFO "%s: switched to %s port\n",
-                   dev->name, if_names[dev->if_port]);
+            netdev_info(dev, "switched to %s port\n", if_names[dev->if_port]);
             tc589_set_xcvr(dev, dev->if_port);
         } else
             return -EINVAL;
@@ -517,13 +536,13 @@ static int el3_open(struct net_device *dev)
 {
     struct el3_private *lp = netdev_priv(dev);
     struct pcmcia_device *link = lp->p_dev;
-    
+
     if (!pcmcia_dev_present(link))
         return -ENODEV;
 
     link->open++;
     netif_start_queue(dev);
-    
+
     tc589_reset(dev);
     init_timer(&lp->media);
     lp->media.function = &media_check;
@@ -533,15 +552,15 @@ static int el3_open(struct net_device *dev)
 
     dev_dbg(&link->dev, "%s: opened, status %4.4x.\n",
           dev->name, inw(dev->base_addr + EL3_STATUS));
-    
+
     return 0;
 }
 
 static void el3_tx_timeout(struct net_device *dev)
 {
     unsigned int ioaddr = dev->base_addr;
-    
-    printk(KERN_WARNING "%s: Transmit timed out!\n", dev->name);
+
+    netdev_warn(dev, "Transmit timed out!\n");
     dump_status(dev);
     dev->stats.tx_errors++;
     dev->trans_start = jiffies;
@@ -555,19 +574,18 @@ static void pop_tx_status(struct net_device *dev)
 {
     unsigned int ioaddr = dev->base_addr;
     int i;
-    
+
     /* Clear the Tx status stack. */
     for (i = 32; i > 0; i--) {
         u_char tx_status = inb(ioaddr + TX_STATUS);
         if (!(tx_status & 0x84)) break;
         /* reset transmitter on jabber error or underrun */
         if (tx_status & 0x30)
-            tc589_wait_for_completion(dev, TxReset);
+                tc589_wait_for_completion(dev, TxReset);
         if (tx_status & 0x38) {
-            pr_debug("%s: transmit error: status 0x%02x\n",
-                  dev->name, tx_status);
-            outw(TxEnable, ioaddr + EL3_CMD);
-            dev->stats.tx_aborted_errors++;
+                netdev_dbg(dev, "transmit error: status 0x%02x\n", tx_status);
+                outw(TxEnable, ioaddr + EL3_CMD);
+                dev->stats.tx_aborted_errors++;
         }
         outb(0x00, ioaddr + TX_STATUS); /* Pop the status stack. */
     }
@@ -580,11 +598,10 @@ static netdev_tx_t el3_start_xmit(struct sk_buff *skb,
     struct el3_private *priv = netdev_priv(dev);
     unsigned long flags;
 
-    pr_debug("%s: el3_start_xmit(length = %ld) called, "
-          "status %4.4x.\n", dev->name, (long)skb->len,
-          inw(ioaddr + EL3_STATUS));
+    netdev_dbg(dev, "el3_start_xmit(length = %ld) called, status %4.4x.\n",
+               (long)skb->len, inw(ioaddr + EL3_STATUS));
 
-    spin_lock_irqsave(&priv->lock, flags);    
+    spin_lock_irqsave(&priv->lock, flags);
 
     dev->stats.tx_bytes += skb->len;
 
@@ -602,9 +619,9 @@ static netdev_tx_t el3_start_xmit(struct sk_buff *skb,
     }
 
     pop_tx_status(dev);
-    spin_unlock_irqrestore(&priv->lock, flags);    
+    spin_unlock_irqrestore(&priv->lock, flags);
     dev_kfree_skb(skb);
-    
+
     return NETDEV_TX_OK;
 }
 
@@ -616,37 +633,32 @@ static irqreturn_t el3_interrupt(int irq, void *dev_id)
     unsigned int ioaddr;
     __u16 status;
     int i = 0, handled = 1;
-    
+
     if (!netif_device_present(dev))
         return IRQ_NONE;
 
     ioaddr = dev->base_addr;
 
-    pr_debug("%s: interrupt, status %4.4x.\n",
-          dev->name, inw(ioaddr + EL3_STATUS));
+    netdev_dbg(dev, "interrupt, status %4.4x.\n", inw(ioaddr + EL3_STATUS));
 
-    spin_lock(&lp->lock);    
+    spin_lock(&lp->lock);
     while ((status = inw(ioaddr + EL3_STATUS)) &
         (IntLatch | RxComplete | StatsFull)) {
         if ((status & 0xe000) != 0x2000) {
-            pr_debug("%s: interrupt from dead card\n", dev->name);
-            handled = 0;
-            break;
+                netdev_dbg(dev, "interrupt from dead card\n");
+                handled = 0;
+                break;
         }
-        
         if (status & RxComplete)
-            el3_rx(dev);
-        
+                el3_rx(dev);
         if (status & TxAvailable) {
-            pr_debug("    TX room bit was handled.\n");
-            /* There's room in the FIFO for a full-sized packet. */
-            outw(AckIntr | TxAvailable, ioaddr + EL3_CMD);
-            netif_wake_queue(dev);
+                netdev_dbg(dev, "    TX room bit was handled.\n");
+                /* There's room in the FIFO for a full-sized packet. */
+                outw(AckIntr | TxAvailable, ioaddr + EL3_CMD);
+                netif_wake_queue(dev);
         }
-        
         if (status & TxComplete)
-            pop_tx_status(dev);
-
+                pop_tx_status(dev);
         if (status & (AdapterFailure | RxEarly | StatsFull)) {
             /* Handle all uncommon interrupts. */
             if (status & StatsFull)             /* Empty statistics. */
@@ -660,8 +672,8 @@ static irqreturn_t el3_interrupt(int irq, void *dev_id)
                 EL3WINDOW(4);
                 fifo_diag = inw(ioaddr + 4);
                 EL3WINDOW(1);
-                printk(KERN_WARNING "%s: adapter failure, FIFO diagnostic"
-                       " register %04x.\n", dev->name, fifo_diag);
+                netdev_warn(dev, "adapter failure, FIFO diagnostic register %04x.\n",
+                            fifo_diag);
                 if (fifo_diag & 0x0400) {
                     /* Tx overrun */
                     tc589_wait_for_completion(dev, TxReset);
@@ -676,22 +688,20 @@ static irqreturn_t el3_interrupt(int irq, void *dev_id)
                 outw(AckIntr | AdapterFailure, ioaddr + EL3_CMD);
             }
         }
-        
         if (++i > 10) {
-            printk(KERN_ERR "%s: infinite loop in interrupt, "
-                   "status %4.4x.\n", dev->name, status);
-            /* Clear all interrupts */
-            outw(AckIntr | 0xFF, ioaddr + EL3_CMD);
-            break;
+                netdev_err(dev, "infinite loop in interrupt, status %4.4x.\n",
+                           status);
+                /* Clear all interrupts */
+                outw(AckIntr | 0xFF, ioaddr + EL3_CMD);
+                break;
         }
         /* Acknowledge the IRQ. */
         outw(AckIntr | IntReq | IntLatch, ioaddr + EL3_CMD);
     }
-
     lp->last_irq = jiffies;
-    spin_unlock(&lp->lock);    
-    pr_debug("%s: exiting interrupt, status %4.4x.\n",
-          dev->name, inw(ioaddr + EL3_STATUS));
+    spin_unlock(&lp->lock);
+    netdev_dbg(dev, "exiting interrupt, status %4.4x.\n",
+               inw(ioaddr + EL3_STATUS));
     return IRQ_RETVAL(handled);
 }
 
@@ -710,7 +720,7 @@ static void media_check(unsigned long arg)
     if ((inw(ioaddr + EL3_STATUS) & IntLatch) &&
         (inb(ioaddr + EL3_TIMER) == 0xff)) {
         if (!lp->fast_poll)
-            printk(KERN_WARNING "%s: interrupt(s) dropped!\n", dev->name);
+                netdev_warn(dev, "interrupt(s) dropped!\n");
 
         local_irq_save(flags);
         el3_interrupt(dev->irq, dev);
@@ -727,7 +737,7 @@ static void media_check(unsigned long arg)
 
     /* lp->lock guards the EL3 window. Window should always be 1 except
        when the lock is held */
-    spin_lock_irqsave(&lp->lock, flags);    
+    spin_lock_irqsave(&lp->lock, flags);
     EL3WINDOW(4);
     media = inw(ioaddr+WN4_MEDIA) & 0xc810;
 
@@ -747,32 +757,30 @@ static void media_check(unsigned long arg)
     if (media != lp->media_status) {
         if ((media & lp->media_status & 0x8000) &&
             ((lp->media_status ^ media) & 0x0800))
-            printk(KERN_INFO "%s: %s link beat\n", dev->name,
-                   (lp->media_status & 0x0800 ? "lost" : "found"));
+                netdev_info(dev, "%s link beat\n",
+                            (lp->media_status & 0x0800 ? "lost" : "found"));
         else if ((media & lp->media_status & 0x4000) &&
                  ((lp->media_status ^ media) & 0x0010))
-            printk(KERN_INFO "%s: coax cable %s\n", dev->name,
-                   (lp->media_status & 0x0010 ? "ok" : "problem"));
+                netdev_info(dev, "coax cable %s\n",
+                            (lp->media_status & 0x0010 ? "ok" : "problem"));
         if (dev->if_port == 0) {
             if (media & 0x8000) {
                 if (media & 0x0800)
-                    printk(KERN_INFO "%s: flipped to 10baseT\n",
-                           dev->name);
+                        netdev_info(dev, "flipped to 10baseT\n");
                 else
-                    tc589_set_xcvr(dev, 2);
+                        tc589_set_xcvr(dev, 2);
             } else if (media & 0x4000) {
                 if (media & 0x0010)
                     tc589_set_xcvr(dev, 1);
                 else
-                    printk(KERN_INFO "%s: flipped to 10base2\n",
-                           dev->name);
+                    netdev_info(dev, "flipped to 10base2\n");
             }
         }
         lp->media_status = media;
     }
-    
+
     EL3WINDOW(1);
-    spin_unlock_irqrestore(&lp->lock, flags);    
+    spin_unlock_irqrestore(&lp->lock, flags);
 
 reschedule:
     lp->media.expires = jiffies + HZ;
@@ -786,7 +794,7 @@ static struct net_device_stats *el3_get_stats(struct net_device *dev)
     struct pcmcia_device *link = lp->p_dev;
 
     if (pcmcia_dev_present(link)) {
-        spin_lock_irqsave(&lp->lock, flags);
+        spin_lock_irqsave(&lp->lock, flags);
         update_stats(dev);
         spin_unlock_irqrestore(&lp->lock, flags);
     }
@@ -798,21 +806,21 @@ static struct net_device_stats *el3_get_stats(struct net_device *dev)
   single-threaded if the device is active. This is expected to be a rare
   operation, and it's simpler for the rest of the driver to assume that
   window 1 is always valid rather than use a special window-state variable.
-  
+
   Caller must hold the lock for this
 */
 static void update_stats(struct net_device *dev)
 {
     unsigned int ioaddr = dev->base_addr;
 
-    pr_debug("%s: updating the statistics.\n", dev->name);
+    netdev_dbg(dev, "updating the statistics.\n");
     /* Turn off statistics updates while reading. */
     outw(StatsDisable, ioaddr + EL3_CMD);
     /* Switch to the stats window, and read everything. */
     EL3WINDOW(6);
-    dev->stats.tx_carrier_errors        += inb(ioaddr + 0);
+    dev->stats.tx_carrier_errors        += inb(ioaddr + 0);
     dev->stats.tx_heartbeat_errors      += inb(ioaddr + 1);
-    /* Multiple collisions. */          inb(ioaddr + 2);
+    /* Multiple collisions. */          inb(ioaddr + 2);
     dev->stats.collisions               += inb(ioaddr + 3);
     dev->stats.tx_window_errors         += inb(ioaddr + 4);
     dev->stats.rx_fifo_errors           += inb(ioaddr + 5);
@@ -821,7 +829,7 @@ static void update_stats(struct net_device *dev)
     /* Tx deferrals */                  inb(ioaddr + 8);
     /* Rx octets */                     inw(ioaddr + 10);
     /* Tx octets */                     inw(ioaddr + 12);
-    
+
     /* Back to window 1, and turn statistics back on. */
     EL3WINDOW(1);
     outw(StatsEnable, ioaddr + EL3_CMD);
@@ -832,9 +840,9 @@ static int el3_rx(struct net_device *dev)
     unsigned int ioaddr = dev->base_addr;
     int worklimit = 32;
     short rx_status;
-    
-    pr_debug("%s: in rx_packet(), status %4.4x, rx_status %4.4x.\n",
-          dev->name, inw(ioaddr+EL3_STATUS), inw(ioaddr+RX_STATUS));
+
+    netdev_dbg(dev, "in rx_packet(), status %4.4x, rx_status %4.4x.\n",
+               inw(ioaddr+EL3_STATUS), inw(ioaddr+RX_STATUS));
     while (!((rx_status = inw(ioaddr + RX_STATUS)) & 0x8000) &&
                     worklimit > 0) {
         worklimit--;
@@ -852,11 +860,11 @@ static int el3_rx(struct net_device *dev)
         } else {
             short pkt_len = rx_status & 0x7ff;
             struct sk_buff *skb;
-            
+
             skb = dev_alloc_skb(pkt_len+5);
-            
-            pr_debug("    Receiving packet size %d status %4.4x.\n",
-                  pkt_len, rx_status);
+
+            netdev_dbg(dev, "    Receiving packet size %d status %4.4x.\n",
+                       pkt_len, rx_status);
             if (skb != NULL) {
                 skb_reserve(skb, 2);
                 insl(ioaddr+RX_FIFO, skb_put(skb, pkt_len),
@@ -866,8 +874,8 @@ static int el3_rx(struct net_device *dev)
                 dev->stats.rx_packets++;
                 dev->stats.rx_bytes += pkt_len;
             } else {
-                pr_debug("%s: couldn't allocate a sk_buff of"
-                      " size %d.\n", dev->name, pkt_len);
+                netdev_dbg(dev, "couldn't allocate a sk_buff of size %d.\n",
+                           pkt_len);
                 dev->stats.rx_dropped++;
             }
         }
@@ -875,7 +883,7 @@ static int el3_rx(struct net_device *dev)
         tc589_wait_for_completion(dev, RxDiscard);
     }
     if (worklimit == 0)
-        printk(KERN_WARNING "%s: too much work in el3_rx!\n", dev->name);
+        netdev_warn(dev, "too much work in el3_rx!\n");
     return 0;
 }
 
@@ -906,17 +914,17 @@ static int el3_close(struct net_device *dev)
     struct el3_private *lp = netdev_priv(dev);
     struct pcmcia_device *link = lp->p_dev;
     unsigned int ioaddr = dev->base_addr;
-    
+
     dev_dbg(&link->dev, "%s: shutting down ethercard.\n", dev->name);
 
     if (pcmcia_dev_present(link)) {
         /* Turn off statistics ASAP.  We update dev->stats below. */
         outw(StatsDisable, ioaddr + EL3_CMD);
-        
+
         /* Disable the receiver and transmitter. */
         outw(RxDisable, ioaddr + EL3_CMD);
         outw(TxDisable, ioaddr + EL3_CMD);
-        
+
         if (dev->if_port == 2)
             /* Turn off thinnet power.  Green! */
             outw(StopCoax, ioaddr + EL3_CMD);
@@ -925,12 +933,12 @@ static int el3_close(struct net_device *dev)
             EL3WINDOW(4);
             outw(0, ioaddr + WN4_MEDIA);
         }
-        
+
         /* Switching back to window 0 disables the IRQ. */
         EL3WINDOW(0);
         /* But we explicitly zero the IRQ line select anyway. */
         outw(0x0f00, ioaddr + WN0_IRQ);
-        
+
         /* Check if the card still exists */
         if ((inw(ioaddr+EL3_STATUS) & 0xe000) == 0x2000)
             update_stats(dev);
@@ -939,7 +947,7 @@ static int el3_close(struct net_device *dev)
     link->open--;
     netif_stop_queue(dev);
     del_timer_sync(&lp->media);
-    
+
     return 0;
 }
 
@@ -961,7 +969,7 @@ static struct pcmcia_driver tc589_driver = {
         },
         .probe          = tc589_probe,
         .remove         = tc589_detach,
-        .id_table       = tc589_ids,
+        .id_table       = tc589_ids,
         .suspend        = tc589_suspend,
         .resume         = tc589_resume,
 };
diff --git a/drivers/net/pcmcia/axnet_cs.c b/drivers/net/pcmcia/axnet_cs.c
index 09291e60d309..333cb3344d54 100644
--- a/drivers/net/pcmcia/axnet_cs.c
+++ b/drivers/net/pcmcia/axnet_cs.c
@@ -1623,11 +1623,11 @@ static struct net_device_stats *get_stats(struct net_device *dev)
  
 static inline void make_mc_bits(u8 *bits, struct net_device *dev)
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         u32 crc;
 
-        netdev_for_each_mc_addr(dmi, dev) {
-                crc = ether_crc(ETH_ALEN, dmi->dmi_addr);
+        netdev_for_each_mc_addr(ha, dev) {
+                crc = ether_crc(ETH_ALEN, ha->addr);
                 /* 
                  * The 8390 uses the 6 most significant bits of the
                  * CRC to index the multicast table.
diff --git a/drivers/net/pcmcia/fmvj18x_cs.c b/drivers/net/pcmcia/fmvj18x_cs.c
index b9dc80b9d04a..6734f7d6da98 100644
--- a/drivers/net/pcmcia/fmvj18x_cs.c
+++ b/drivers/net/pcmcia/fmvj18x_cs.c
@@ -1196,11 +1196,11 @@ static void set_rx_mode(struct net_device *dev)
         memset(mc_filter, 0x00, sizeof(mc_filter));
         outb(1, ioaddr + RX_MODE);      /* Ignore almost all multicasts. */
     } else {
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
 
         memset(mc_filter, 0, sizeof(mc_filter));
-        netdev_for_each_mc_addr(mclist, dev) {
-            unsigned int bit = ether_crc_le(ETH_ALEN, mclist->dmi_addr) >> 26;
+        netdev_for_each_mc_addr(ha, dev) {
+            unsigned int bit = ether_crc_le(ETH_ALEN, ha->addr) >> 26;
             mc_filter[bit >> 3] |= (1 << (bit & 7));
         }
         outb(2, ioaddr + RX_MODE);      /* Use normal mode. */
diff --git a/drivers/net/pcmcia/nmclan_cs.c b/drivers/net/pcmcia/nmclan_cs.c
index c717b143f11a..c516c1996354 100644
--- a/drivers/net/pcmcia/nmclan_cs.c
+++ b/drivers/net/pcmcia/nmclan_cs.c
@@ -1475,7 +1475,7 @@ static void set_multicast_list(struct net_device *dev)
 {
   mace_private *lp = netdev_priv(dev);
   int adr[ETHER_ADDR_LEN] = {0}; /* Ethernet address */
-  struct dev_mc_list *dmi;
+  struct netdev_hw_addr *ha;
 
 #ifdef PCMCIA_DEBUG
   {
@@ -1495,8 +1495,8 @@ static void set_multicast_list(struct net_device *dev)
   if (num_addrs > 0) {
     /* Calculate multicast logical address filter */
     memset(lp->multicast_ladrf, 0, MACE_LADRF_LEN);
-    netdev_for_each_mc_addr(dmi, dev) {
-      memcpy(adr, dmi->dmi_addr, ETHER_ADDR_LEN);
+    netdev_for_each_mc_addr(ha, dev) {
+      memcpy(adr, ha->addr, ETHER_ADDR_LEN);
       BuildLAF(lp->multicast_ladrf, adr);
     }
   }
diff --git a/drivers/net/pcmcia/smc91c92_cs.c b/drivers/net/pcmcia/smc91c92_cs.c
index ff7eb9116b6a..ad2267646187 100644
--- a/drivers/net/pcmcia/smc91c92_cs.c
+++ b/drivers/net/pcmcia/smc91c92_cs.c
@@ -1618,12 +1618,12 @@ static void set_rx_mode(struct net_device *dev)
         rx_cfg_setting = RxStripCRC | RxEnable | RxAllMulti;
     else {
         if (!netdev_mc_empty(dev)) {
-            struct dev_mc_list *mc_addr;
+            struct netdev_hw_addr *ha;
 
-            netdev_for_each_mc_addr(mc_addr, dev) {
-                u_int position = ether_crc(6, mc_addr->dmi_addr);
+            netdev_for_each_mc_addr(ha, dev) {
+                u_int position = ether_crc(6, ha->addr);
 #ifndef final_version           /* Verify multicast address. */
-                if ((mc_addr->dmi_addr[0] & 1) == 0)
+                if ((ha->addr[0] & 1) == 0)
                     continue;
 #endif
                 multicast_table[position >> 29] |= 1 << ((position >> 26) & 7);
diff --git a/drivers/net/pcmcia/xirc2ps_cs.c b/drivers/net/pcmcia/xirc2ps_cs.c
index 4d1802e457be..656be931207a 100644
--- a/drivers/net/pcmcia/xirc2ps_cs.c
+++ b/drivers/net/pcmcia/xirc2ps_cs.c
@@ -1398,7 +1398,7 @@ static void set_addresses(struct net_device *dev)
 {
         unsigned int ioaddr = dev->base_addr;
         local_info_t *lp = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         struct set_address_info sa_info;
         int i;
 
@@ -1413,10 +1413,10 @@ static void set_addresses(struct net_device *dev)
 
         set_address(&sa_info, dev->dev_addr);
         i = 0;
-        netdev_for_each_mc_addr(dmi, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 if (i++ == 9)
                         break;
-                set_address(&sa_info, dmi->dmi_addr);
+                set_address(&sa_info, ha->addr);
         }
         while (i++ < 9)
                 set_address(&sa_info, dev->dev_addr);
diff --git a/drivers/net/pcnet32.c b/drivers/net/pcnet32.c
index 084d78dd1637..a2254f749a9a 100644
--- a/drivers/net/pcnet32.c
+++ b/drivers/net/pcnet32.c
@@ -2590,7 +2590,7 @@ static void pcnet32_load_multicast(struct net_device *dev)
         struct pcnet32_private *lp = netdev_priv(dev);
         volatile struct pcnet32_init_block *ib = lp->init_block;
         volatile __le16 *mcast_table = (__le16 *)ib->filter;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned long ioaddr = dev->base_addr;
         char *addrs;
         int i;
@@ -2611,8 +2611,8 @@ static void pcnet32_load_multicast(struct net_device *dev)
         ib->filter[1] = 0;
 
         /* Add addresses */
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* multicast address? */
                 if (!(*addrs & 1))
diff --git a/drivers/net/phy/bcm63xx.c b/drivers/net/phy/bcm63xx.c
index 4fed95e8350e..ac5e49861dbd 100644
--- a/drivers/net/phy/bcm63xx.c
+++ b/drivers/net/phy/bcm63xx.c
@@ -130,3 +130,11 @@ static void __exit bcm63xx_phy_exit(void)
 
 module_init(bcm63xx_phy_init);
 module_exit(bcm63xx_phy_exit);
+
+static struct mdio_device_id bcm63xx_tbl[] = {
+        { 0x00406000, 0xfffffc00 },
+        { 0x002bdc00, 0xfffffc00 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, bcm64xx_tbl);
diff --git a/drivers/net/phy/broadcom.c b/drivers/net/phy/broadcom.c
index f482fc4f8cf1..cecdbbd549ec 100644
--- a/drivers/net/phy/broadcom.c
+++ b/drivers/net/phy/broadcom.c
@@ -908,3 +908,19 @@ static void __exit broadcom_exit(void)
 
 module_init(broadcom_init);
 module_exit(broadcom_exit);
+
+static struct mdio_device_id broadcom_tbl[] = {
+        { 0x00206070, 0xfffffff0 },
+        { 0x002060e0, 0xfffffff0 },
+        { 0x002060c0, 0xfffffff0 },
+        { 0x002060b0, 0xfffffff0 },
+        { 0x0143bca0, 0xfffffff0 },
+        { 0x0143bcb0, 0xfffffff0 },
+        { PHY_ID_BCM50610, 0xfffffff0 },
+        { PHY_ID_BCM50610M, 0xfffffff0 },
+        { PHY_ID_BCM57780, 0xfffffff0 },
+        { PHY_ID_BCMAC131, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, broadcom_tbl);
diff --git a/drivers/net/phy/cicada.c b/drivers/net/phy/cicada.c
index a1bd599c8a5b..efc608f35d10 100644
--- a/drivers/net/phy/cicada.c
+++ b/drivers/net/phy/cicada.c
@@ -159,3 +159,11 @@ static void __exit cicada_exit(void)
 
 module_init(cicada_init);
 module_exit(cicada_exit);
+
+static struct mdio_device_id cicada_tbl[] = {
+        { 0x000fc410, 0x000ffff0 },
+        { 0x000fc440, 0x000fffc0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, cicada_tbl);
diff --git a/drivers/net/phy/davicom.c b/drivers/net/phy/davicom.c
index d926168bc780..e02b18cb0d30 100644
--- a/drivers/net/phy/davicom.c
+++ b/drivers/net/phy/davicom.c
@@ -219,3 +219,12 @@ static void __exit davicom_exit(void)
 
 module_init(davicom_init);
 module_exit(davicom_exit);
+
+static struct mdio_device_id davicom_tbl[] = {
+        { 0x0181b880, 0x0ffffff0 },
+        { 0x0181b8a0, 0x0ffffff0 },
+        { 0x00181b80, 0x0ffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, davicom_tbl);
diff --git a/drivers/net/phy/et1011c.c b/drivers/net/phy/et1011c.c
index b031fa21f1aa..500f0fd2c138 100644
--- a/drivers/net/phy/et1011c.c
+++ b/drivers/net/phy/et1011c.c
@@ -111,3 +111,10 @@ static void __exit et1011c_exit(void)
 
 module_init(et1011c_init);
 module_exit(et1011c_exit);
+
+static struct mdio_device_id et1011c_tbl[] = {
+        { 0x0282f014, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, et1011c_tbl);
diff --git a/drivers/net/phy/icplus.c b/drivers/net/phy/icplus.c
index af3f1f2a9f87..e661e9078a7d 100644
--- a/drivers/net/phy/icplus.c
+++ b/drivers/net/phy/icplus.c
@@ -132,3 +132,10 @@ static void __exit ip175c_exit(void)
 
 module_init(ip175c_init);
 module_exit(ip175c_exit);
+
+static struct mdio_device_id icplus_tbl[] = {
+        { 0x02430d80, 0x0ffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, icplus_tbl);
diff --git a/drivers/net/phy/lxt.c b/drivers/net/phy/lxt.c
index 4cf3324ba166..1d94f1d610e4 100644
--- a/drivers/net/phy/lxt.c
+++ b/drivers/net/phy/lxt.c
@@ -174,3 +174,11 @@ static void __exit lxt_exit(void)
 
 module_init(lxt_init);
 module_exit(lxt_exit);
+
+static struct mdio_device_id lxt_tbl[] = {
+        { 0x78100000, 0xfffffff0 },
+        { 0x001378e0, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, lxt_tbl);
diff --git a/drivers/net/phy/marvell.c b/drivers/net/phy/marvell.c
index 65ed385c2ceb..c7e5b9f12861 100644
--- a/drivers/net/phy/marvell.c
+++ b/drivers/net/phy/marvell.c
@@ -649,3 +649,16 @@ static void __exit marvell_exit(void)
 
 module_init(marvell_init);
 module_exit(marvell_exit);
+
+static struct mdio_device_id marvell_tbl[] = {
+        { 0x01410c60, 0xfffffff0 },
+        { 0x01410c90, 0xfffffff0 },
+        { 0x01410cc0, 0xfffffff0 },
+        { 0x01410e10, 0xfffffff0 },
+        { 0x01410cb0, 0xfffffff0 },
+        { 0x01410cd0, 0xfffffff0 },
+        { 0x01410e30, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, marvell_tbl);
diff --git a/drivers/net/phy/mdio-bitbang.c b/drivers/net/phy/mdio-bitbang.c
index 2576055b350b..0ff06617a4ab 100644
--- a/drivers/net/phy/mdio-bitbang.c
+++ b/drivers/net/phy/mdio-bitbang.c
@@ -23,8 +23,13 @@
 #include <linux/types.h>
 #include <linux/delay.h>
 
-#define MDIO_READ 1
-#define MDIO_WRITE 0
+#define MDIO_READ 2
+#define MDIO_WRITE 1
+
+#define MDIO_C45 (1<<15)
+#define MDIO_C45_ADDR (MDIO_C45 | 0)
+#define MDIO_C45_READ (MDIO_C45 | 3)
+#define MDIO_C45_WRITE (MDIO_C45 | 1)
 
 #define MDIO_SETUP_TIME 10
 #define MDIO_HOLD_TIME 10
@@ -90,7 +95,7 @@ static u16 mdiobb_get_num(struct mdiobb_ctrl *ctrl, int bits)
 /* Utility to send the preamble, address, and
  * register (common to read and write).
  */
-static void mdiobb_cmd(struct mdiobb_ctrl *ctrl, int read, u8 phy, u8 reg)
+static void mdiobb_cmd(struct mdiobb_ctrl *ctrl, int op, u8 phy, u8 reg)
 {
         const struct mdiobb_ops *ops = ctrl->ops;
         int i;
@@ -109,23 +114,56 @@ static void mdiobb_cmd(struct mdiobb_ctrl *ctrl, int read, u8 phy, u8 reg)
         for (i = 0; i < 32; i++)
                 mdiobb_send_bit(ctrl, 1);
 
-        /* send the start bit (01) and the read opcode (10) or write (10) */
+        /* send the start bit (01) and the read opcode (10) or write (10).
+           Clause 45 operation uses 00 for the start and 11, 10 for
+           read/write */
         mdiobb_send_bit(ctrl, 0);
-        mdiobb_send_bit(ctrl, 1);
-        mdiobb_send_bit(ctrl, read);
-        mdiobb_send_bit(ctrl, !read);
+        if (op & MDIO_C45)
+                mdiobb_send_bit(ctrl, 0);
+        else
+                mdiobb_send_bit(ctrl, 1);
+        mdiobb_send_bit(ctrl, (op >> 1) & 1);
+        mdiobb_send_bit(ctrl, (op >> 0) & 1);
 
         mdiobb_send_num(ctrl, phy, 5);
         mdiobb_send_num(ctrl, reg, 5);
 }
 
+/* In clause 45 mode all commands are prefixed by MDIO_ADDR to specify the
+   lower 16 bits of the 21 bit address. This transfer is done identically to a
+   MDIO_WRITE except for a different code. To enable clause 45 mode or
+   MII_ADDR_C45 into the address. Theoretically clause 45 and normal devices
+   can exist on the same bus. Normal devices should ignore the MDIO_ADDR
+   phase. */
+static int mdiobb_cmd_addr(struct mdiobb_ctrl *ctrl, int phy, u32 addr)
+{
+        unsigned int dev_addr = (addr >> 16) & 0x1F;
+        unsigned int reg = addr & 0xFFFF;
+        mdiobb_cmd(ctrl, MDIO_C45_ADDR, phy, dev_addr);
+
+        /* send the turnaround (10) */
+        mdiobb_send_bit(ctrl, 1);
+        mdiobb_send_bit(ctrl, 0);
+
+        mdiobb_send_num(ctrl, reg, 16);
+
+        ctrl->ops->set_mdio_dir(ctrl, 0);
+        mdiobb_get_bit(ctrl);
+
+        return dev_addr;
+}
 
 static int mdiobb_read(struct mii_bus *bus, int phy, int reg)
 {
         struct mdiobb_ctrl *ctrl = bus->priv;
         int ret, i;
 
-        mdiobb_cmd(ctrl, MDIO_READ, phy, reg);
+        if (reg & MII_ADDR_C45) {
+                reg = mdiobb_cmd_addr(ctrl, phy, reg);
+                mdiobb_cmd(ctrl, MDIO_C45_READ, phy, reg);
+        } else
+                mdiobb_cmd(ctrl, MDIO_READ, phy, reg);
+
         ctrl->ops->set_mdio_dir(ctrl, 0);
 
         /* check the turnaround bit: the PHY should be driving it to zero */
@@ -148,7 +186,11 @@ static int mdiobb_write(struct mii_bus *bus, int phy, int reg, u16 val)
 {
         struct mdiobb_ctrl *ctrl = bus->priv;
 
-        mdiobb_cmd(ctrl, MDIO_WRITE, phy, reg);
+        if (reg & MII_ADDR_C45) {
+                reg = mdiobb_cmd_addr(ctrl, phy, reg);
+                mdiobb_cmd(ctrl, MDIO_C45_WRITE, phy, reg);
+        } else
+                mdiobb_cmd(ctrl, MDIO_WRITE, phy, reg);
 
         /* send the turnaround (10) */
         mdiobb_send_bit(ctrl, 1);
diff --git a/drivers/net/phy/mdio_bus.c b/drivers/net/phy/mdio_bus.c
index e17b70291bbc..6a6b8199a0d6 100644
--- a/drivers/net/phy/mdio_bus.c
+++ b/drivers/net/phy/mdio_bus.c
@@ -208,7 +208,7 @@ EXPORT_SYMBOL(mdiobus_scan);
  * because the bus read/write functions may wait for an interrupt
  * to conclude the operation.
  */
-int mdiobus_read(struct mii_bus *bus, int addr, u16 regnum)
+int mdiobus_read(struct mii_bus *bus, int addr, u32 regnum)
 {
         int retval;
 
@@ -233,7 +233,7 @@ EXPORT_SYMBOL(mdiobus_read);
  * because the bus read/write functions may wait for an interrupt
  * to conclude the operation.
  */
-int mdiobus_write(struct mii_bus *bus, int addr, u16 regnum, u16 val)
+int mdiobus_write(struct mii_bus *bus, int addr, u32 regnum, u16 val)
 {
         int err;
 
diff --git a/drivers/net/phy/national.c b/drivers/net/phy/national.c
index 6c636eb72089..729ab29ba28c 100644
--- a/drivers/net/phy/national.c
+++ b/drivers/net/phy/national.c
@@ -153,3 +153,10 @@ MODULE_LICENSE("GPL");
 
 module_init(ns_init);
 module_exit(ns_exit);
+
+static struct mdio_device_id ns_tbl[] = {
+        { DP83865_PHY_ID, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, ns_tbl);
diff --git a/drivers/net/phy/phy_device.c b/drivers/net/phy/phy_device.c
index db1794546c56..1a99bb244106 100644
--- a/drivers/net/phy/phy_device.c
+++ b/drivers/net/phy/phy_device.c
@@ -149,6 +149,7 @@ EXPORT_SYMBOL(phy_scan_fixups);
 struct phy_device* phy_device_create(struct mii_bus *bus, int addr, int phy_id)
 {
         struct phy_device *dev;
+
         /* We allocate the device, and initialize the
          * default values */
         dev = kzalloc(sizeof(*dev), GFP_KERNEL);
@@ -179,6 +180,17 @@ struct phy_device* phy_device_create(struct mii_bus *bus, int addr, int phy_id)
         mutex_init(&dev->lock);
         INIT_DELAYED_WORK(&dev->state_queue, phy_state_machine);
 
+        /* Request the appropriate module unconditionally; don't
+           bother trying to do so only if it isn't already loaded,
+           because that gets complicated. A hotplug event would have
+           done an unconditional modprobe anyway.
+           We don't do normal hotplug because it won't work for MDIO
+           -- because it relies on the device staying around for long
+           enough for the driver to get loaded. With MDIO, the NIC
+           driver will get bored and give up as soon as it finds that
+           there's no driver _already_ loaded. */
+        request_module(MDIO_MODULE_PREFIX MDIO_ID_FMT, MDIO_ID_ARGS(phy_id));
+
         return dev;
 }
 EXPORT_SYMBOL(phy_device_create);
diff --git a/drivers/net/phy/qsemi.c b/drivers/net/phy/qsemi.c
index 23062d067231..3ec9610ee520 100644
--- a/drivers/net/phy/qsemi.c
+++ b/drivers/net/phy/qsemi.c
@@ -138,3 +138,10 @@ static void __exit qs6612_exit(void)
 
 module_init(qs6612_init);
 module_exit(qs6612_exit);
+
+static struct mdio_device_id qs6612_tbl[] = {
+        { 0x00181440, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, qs6612_tbl);
diff --git a/drivers/net/phy/realtek.c b/drivers/net/phy/realtek.c
index a052a6744a51..f567c0e1aaa1 100644
--- a/drivers/net/phy/realtek.c
+++ b/drivers/net/phy/realtek.c
@@ -78,3 +78,10 @@ static void __exit realtek_exit(void)
 
 module_init(realtek_init);
 module_exit(realtek_exit);
+
+static struct mdio_device_id realtek_tbl[] = {
+        { 0x001cc912, 0x001fffff },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, realtek_tbl);
diff --git a/drivers/net/phy/smsc.c b/drivers/net/phy/smsc.c
index ed2644a57500..78fa988256fc 100644
--- a/drivers/net/phy/smsc.c
+++ b/drivers/net/phy/smsc.c
@@ -253,3 +253,14 @@ MODULE_LICENSE("GPL");
 
 module_init(smsc_init);
 module_exit(smsc_exit);
+
+static struct mdio_device_id smsc_tbl[] = {
+        { 0x0007c0a0, 0xfffffff0 },
+        { 0x0007c0b0, 0xfffffff0 },
+        { 0x0007c0c0, 0xfffffff0 },
+        { 0x0007c0d0, 0xfffffff0 },
+        { 0x0007c0f0, 0xfffffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, smsc_tbl);
diff --git a/drivers/net/phy/ste10Xp.c b/drivers/net/phy/ste10Xp.c
index 6bdb0d53aaf9..72290099e5e1 100644
--- a/drivers/net/phy/ste10Xp.c
+++ b/drivers/net/phy/ste10Xp.c
@@ -132,6 +132,14 @@ static void __exit ste10Xp_exit(void)
 module_init(ste10Xp_init);
 module_exit(ste10Xp_exit);
 
+static struct mdio_device_id ste10Xp_tbl[] = {
+        { STE101P_PHY_ID, 0xfffffff0 },
+        { STE100P_PHY_ID, 0xffffffff },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, ste10Xp_tbl);
+
 MODULE_DESCRIPTION("STMicroelectronics STe10Xp PHY driver");
 MODULE_AUTHOR("Giuseppe Cavallaro <peppe.cavallaro@st.com>");
 MODULE_LICENSE("GPL");
diff --git a/drivers/net/phy/vitesse.c b/drivers/net/phy/vitesse.c
index dd3b2447e85a..45cce50a2799 100644
--- a/drivers/net/phy/vitesse.c
+++ b/drivers/net/phy/vitesse.c
@@ -191,3 +191,11 @@ static void __exit vsc82xx_exit(void)
 
 module_init(vsc82xx_init);
 module_exit(vsc82xx_exit);
+
+static struct mdio_device_id vitesse_tbl[] = {
+        { PHY_ID_VSC8244, 0x000fffc0 },
+        { PHY_ID_VSC8221, 0x000ffff0 },
+        { }
+};
+
+MODULE_DEVICE_TABLE(mdio, vitesse_tbl);
diff --git a/drivers/net/ppp_generic.c b/drivers/net/ppp_generic.c
index 6d61602208c1..8a0dd8a843a9 100644
--- a/drivers/net/ppp_generic.c
+++ b/drivers/net/ppp_generic.c
@@ -2163,6 +2163,24 @@ int ppp_unit_number(struct ppp_channel *chan)
 }
 
 /*
+ * Return the PPP device interface name of a channel.
+ */
+char *ppp_dev_name(struct ppp_channel *chan)
+{
+        struct channel *pch = chan->ppp;
+        char *name = NULL;
+
+        if (pch) {
+                read_lock_bh(&pch->upl);
+                if (pch->ppp && pch->ppp->dev)
+                        name = pch->ppp->dev->name;
+                read_unlock_bh(&pch->upl);
+        }
+        return name;
+}
+
+
+/*
  * Disconnect a channel from the generic layer.
  * This must be called in process context.
  */
@@ -2890,6 +2908,7 @@ EXPORT_SYMBOL(ppp_register_channel);
 EXPORT_SYMBOL(ppp_unregister_channel);
 EXPORT_SYMBOL(ppp_channel_index);
 EXPORT_SYMBOL(ppp_unit_number);
+EXPORT_SYMBOL(ppp_dev_name);
 EXPORT_SYMBOL(ppp_input);
 EXPORT_SYMBOL(ppp_input_error);
 EXPORT_SYMBOL(ppp_output_wakeup);
diff --git a/drivers/net/pppol2tp.c b/drivers/net/pppol2tp.c
deleted file mode 100644
index 449a9825200d..000000000000
--- a/drivers/net/pppol2tp.c
+++ /dev/null
@@ -1,2680 +0,0 @@
-/*****************************************************************************
- * Linux PPP over L2TP (PPPoX/PPPoL2TP) Sockets
- *
- * PPPoX    --- Generic PPP encapsulation socket family
- * PPPoL2TP --- PPP over L2TP (RFC 2661)
- *
- * Version:     1.0.0
- *
- * Authors:     Martijn van Oosterhout <kleptog@svana.org>
- *              James Chapman (jchapman@katalix.com)
- * Contributors:
- *              Michal Ostrowski <mostrows@speakeasy.net>
- *              Arnaldo Carvalho de Melo <acme@xconectiva.com.br>
- *              David S. Miller (davem@redhat.com)
- *
- * License:
- *              This program is free software; you can redistribute it and/or
- *              modify it under the terms of the GNU General Public License
- *              as published by the Free Software Foundation; either version
- *              2 of the License, or (at your option) any later version.
- *
- */
-
-/* This driver handles only L2TP data frames; control frames are handled by a
- * userspace application.
- *
- * To send data in an L2TP session, userspace opens a PPPoL2TP socket and
- * attaches it to a bound UDP socket with local tunnel_id / session_id and
- * peer tunnel_id / session_id set. Data can then be sent or received using
- * regular socket sendmsg() / recvmsg() calls. Kernel parameters of the socket
- * can be read or modified using ioctl() or [gs]etsockopt() calls.
- *
- * When a PPPoL2TP socket is connected with local and peer session_id values
- * zero, the socket is treated as a special tunnel management socket.
- *
- * Here's example userspace code to create a socket for sending/receiving data
- * over an L2TP session:-
- *
- *      struct sockaddr_pppol2tp sax;
- *      int fd;
- *      int session_fd;
- *
- *      fd = socket(AF_PPPOX, SOCK_DGRAM, PX_PROTO_OL2TP);
- *
- *      sax.sa_family = AF_PPPOX;
- *      sax.sa_protocol = PX_PROTO_OL2TP;
- *      sax.pppol2tp.fd = tunnel_fd;    // bound UDP socket
- *      sax.pppol2tp.addr.sin_addr.s_addr = addr->sin_addr.s_addr;
- *      sax.pppol2tp.addr.sin_port = addr->sin_port;
- *      sax.pppol2tp.addr.sin_family = AF_INET;
- *      sax.pppol2tp.s_tunnel  = tunnel_id;
- *      sax.pppol2tp.s_session = session_id;
- *      sax.pppol2tp.d_tunnel  = peer_tunnel_id;
- *      sax.pppol2tp.d_session = peer_session_id;
- *
- *      session_fd = connect(fd, (struct sockaddr *)&sax, sizeof(sax));
- *
- * A pppd plugin that allows PPP traffic to be carried over L2TP using
- * this driver is available from the OpenL2TP project at
- * http://openl2tp.sourceforge.net.
- */
-
-#include <linux/module.h>
-#include <linux/string.h>
-#include <linux/list.h>
-#include <asm/uaccess.h>
-
-#include <linux/kernel.h>
-#include <linux/spinlock.h>
-#include <linux/kthread.h>
-#include <linux/sched.h>
-#include <linux/slab.h>
-#include <linux/errno.h>
-#include <linux/jiffies.h>
-
-#include <linux/netdevice.h>
-#include <linux/net.h>
-#include <linux/inetdevice.h>
-#include <linux/skbuff.h>
-#include <linux/init.h>
-#include <linux/ip.h>
-#include <linux/udp.h>
-#include <linux/if_pppox.h>
-#include <linux/if_pppol2tp.h>
-#include <net/sock.h>
-#include <linux/ppp_channel.h>
-#include <linux/ppp_defs.h>
-#include <linux/if_ppp.h>
-#include <linux/file.h>
-#include <linux/hash.h>
-#include <linux/sort.h>
-#include <linux/proc_fs.h>
-#include <linux/nsproxy.h>
-#include <net/net_namespace.h>
-#include <net/netns/generic.h>
-#include <net/dst.h>
-#include <net/ip.h>
-#include <net/udp.h>
-#include <net/xfrm.h>
-
-#include <asm/byteorder.h>
-#include <asm/atomic.h>
-
-
-#define PPPOL2TP_DRV_VERSION    "V1.0"
-
-/* L2TP header constants */
-#define L2TP_HDRFLAG_T     0x8000
-#define L2TP_HDRFLAG_L     0x4000
-#define L2TP_HDRFLAG_S     0x0800
-#define L2TP_HDRFLAG_O     0x0200
-#define L2TP_HDRFLAG_P     0x0100
-
-#define L2TP_HDR_VER_MASK  0x000F
-#define L2TP_HDR_VER       0x0002
-
-/* Space for UDP, L2TP and PPP headers */
-#define PPPOL2TP_HEADER_OVERHEAD        40
-
-/* Just some random numbers */
-#define L2TP_TUNNEL_MAGIC       0x42114DDA
-#define L2TP_SESSION_MAGIC      0x0C04EB7D
-
-#define PPPOL2TP_HASH_BITS      4
-#define PPPOL2TP_HASH_SIZE      (1 << PPPOL2TP_HASH_BITS)
-
-/* Default trace flags */
-#define PPPOL2TP_DEFAULT_DEBUG_FLAGS    0
-
-#define PRINTK(_mask, _type, _lvl, _fmt, args...)                       \
-        do {                                                            \
-                if ((_mask) & (_type))                                  \
-                        printk(_lvl "PPPOL2TP: " _fmt, ##args);         \
-        } while(0)
-
-/* Number of bytes to build transmit L2TP headers.
- * Unfortunately the size is different depending on whether sequence numbers
- * are enabled.
- */
-#define PPPOL2TP_L2TP_HDR_SIZE_SEQ              10
-#define PPPOL2TP_L2TP_HDR_SIZE_NOSEQ            6
-
-struct pppol2tp_tunnel;
-
-/* Describes a session. It is the sk_user_data field in the PPPoL2TP
- * socket. Contains information to determine incoming packets and transmit
- * outgoing ones.
- */
-struct pppol2tp_session
-{
-        int                     magic;          /* should be
-                                                 * L2TP_SESSION_MAGIC */
-        int                     owner;          /* pid that opened the socket */
-
-        struct sock             *sock;          /* Pointer to the session
-                                                 * PPPoX socket */
-        struct sock             *tunnel_sock;   /* Pointer to the tunnel UDP
-                                                 * socket */
-
-        struct pppol2tp_addr    tunnel_addr;    /* Description of tunnel */
-
-        struct pppol2tp_tunnel  *tunnel;        /* back pointer to tunnel
-                                                 * context */
-
-        char                    name[20];       /* "sess xxxxx/yyyyy", where
-                                                 * x=tunnel_id, y=session_id */
-        int                     mtu;
-        int                     mru;
-        int                     flags;          /* accessed by PPPIOCGFLAGS.
-                                                 * Unused. */
-        unsigned                recv_seq:1;     /* expect receive packets with
-                                                 * sequence numbers? */
-        unsigned                send_seq:1;     /* send packets with sequence
-                                                 * numbers? */
-        unsigned                lns_mode:1;     /* behave as LNS? LAC enables
-                                                 * sequence numbers under
-                                                 * control of LNS. */
-        int                     debug;          /* bitmask of debug message
-                                                 * categories */
-        int                     reorder_timeout; /* configured reorder timeout
-                                                  * (in jiffies) */
-        u16                     nr;             /* session NR state (receive) */
-        u16                     ns;             /* session NR state (send) */
-        struct sk_buff_head     reorder_q;      /* receive reorder queue */
-        struct pppol2tp_ioc_stats stats;
-        struct hlist_node       hlist;          /* Hash list node */
-};
-
-/* The sk_user_data field of the tunnel's UDP socket. It contains info to track
- * all the associated sessions so incoming packets can be sorted out
- */
-struct pppol2tp_tunnel
-{
-        int                     magic;          /* Should be L2TP_TUNNEL_MAGIC */
-        rwlock_t                hlist_lock;     /* protect session_hlist */
-        struct hlist_head       session_hlist[PPPOL2TP_HASH_SIZE];
-                                                /* hashed list of sessions,
-                                                 * hashed by id */
-        int                     debug;          /* bitmask of debug message
-                                                 * categories */
-        char                    name[12];       /* "tunl xxxxx" */
-        struct pppol2tp_ioc_stats stats;
-
-        void (*old_sk_destruct)(struct sock *);
-
-        struct sock             *sock;          /* Parent socket */
-        struct list_head        list;           /* Keep a list of all open
-                                                 * prepared sockets */
-        struct net              *pppol2tp_net;  /* the net we belong to */
-
-        atomic_t                ref_count;
-};
-
-/* Private data stored for received packets in the skb.
- */
-struct pppol2tp_skb_cb {
-        u16                     ns;
-        u16                     nr;
-        u16                     has_seq;
-        u16                     length;
-        unsigned long           expires;
-};
-
-#define PPPOL2TP_SKB_CB(skb)    ((struct pppol2tp_skb_cb *) &skb->cb[sizeof(struct inet_skb_parm)])
-
-static int pppol2tp_xmit(struct ppp_channel *chan, struct sk_buff *skb);
-static void pppol2tp_tunnel_free(struct pppol2tp_tunnel *tunnel);
-
-static atomic_t pppol2tp_tunnel_count;
-static atomic_t pppol2tp_session_count;
-static struct ppp_channel_ops pppol2tp_chan_ops = { pppol2tp_xmit , NULL };
-static const struct proto_ops pppol2tp_ops;
-
-/* per-net private data for this module */
-static int pppol2tp_net_id __read_mostly;
-struct pppol2tp_net {
-        struct list_head pppol2tp_tunnel_list;
-        rwlock_t pppol2tp_tunnel_list_lock;
-};
-
-static inline struct pppol2tp_net *pppol2tp_pernet(struct net *net)
-{
-        BUG_ON(!net);
-
-        return net_generic(net, pppol2tp_net_id);
-}
-
-/* Helpers to obtain tunnel/session contexts from sockets.
- */
-static inline struct pppol2tp_session *pppol2tp_sock_to_session(struct sock *sk)
-{
-        struct pppol2tp_session *session;
-
-        if (sk == NULL)
-                return NULL;
-
-        sock_hold(sk);
-        session = (struct pppol2tp_session *)(sk->sk_user_data);
-        if (session == NULL) {
-                sock_put(sk);
-                goto out;
-        }
-
-        BUG_ON(session->magic != L2TP_SESSION_MAGIC);
-out:
-        return session;
-}
-
-static inline struct pppol2tp_tunnel *pppol2tp_sock_to_tunnel(struct sock *sk)
-{
-        struct pppol2tp_tunnel *tunnel;
-
-        if (sk == NULL)
-                return NULL;
-
-        sock_hold(sk);
-        tunnel = (struct pppol2tp_tunnel *)(sk->sk_user_data);
-        if (tunnel == NULL) {
-                sock_put(sk);
-                goto out;
-        }
-
-        BUG_ON(tunnel->magic != L2TP_TUNNEL_MAGIC);
-out:
-        return tunnel;
-}
-
-/* Tunnel reference counts. Incremented per session that is added to
- * the tunnel.
- */
-static inline void pppol2tp_tunnel_inc_refcount(struct pppol2tp_tunnel *tunnel)
-{
-        atomic_inc(&tunnel->ref_count);
-}
-
-static inline void pppol2tp_tunnel_dec_refcount(struct pppol2tp_tunnel *tunnel)
-{
-        if (atomic_dec_and_test(&tunnel->ref_count))
-                pppol2tp_tunnel_free(tunnel);
-}
-
-/* Session hash list.
- * The session_id SHOULD be random according to RFC2661, but several
- * L2TP implementations (Cisco and Microsoft) use incrementing
- * session_ids.  So we do a real hash on the session_id, rather than a
- * simple bitmask.
- */
-static inline struct hlist_head *
-pppol2tp_session_id_hash(struct pppol2tp_tunnel *tunnel, u16 session_id)
-{
-        unsigned long hash_val = (unsigned long) session_id;
-        return &tunnel->session_hlist[hash_long(hash_val, PPPOL2TP_HASH_BITS)];
-}
-
-/* Lookup a session by id
- */
-static struct pppol2tp_session *
-pppol2tp_session_find(struct pppol2tp_tunnel *tunnel, u16 session_id)
-{
-        struct hlist_head *session_list =
-                pppol2tp_session_id_hash(tunnel, session_id);
-        struct pppol2tp_session *session;
-        struct hlist_node *walk;
-
-        read_lock_bh(&tunnel->hlist_lock);
-        hlist_for_each_entry(session, walk, session_list, hlist) {
-                if (session->tunnel_addr.s_session == session_id) {
-                        read_unlock_bh(&tunnel->hlist_lock);
-                        return session;
-                }
-        }
-        read_unlock_bh(&tunnel->hlist_lock);
-
-        return NULL;
-}
-
-/* Lookup a tunnel by id
- */
-static struct pppol2tp_tunnel *pppol2tp_tunnel_find(struct net *net, u16 tunnel_id)
-{
-        struct pppol2tp_tunnel *tunnel;
-        struct pppol2tp_net *pn = pppol2tp_pernet(net);
-
-        read_lock_bh(&pn->pppol2tp_tunnel_list_lock);
-        list_for_each_entry(tunnel, &pn->pppol2tp_tunnel_list, list) {
-                if (tunnel->stats.tunnel_id == tunnel_id) {
-                        read_unlock_bh(&pn->pppol2tp_tunnel_list_lock);
-                        return tunnel;
-                }
-        }
-        read_unlock_bh(&pn->pppol2tp_tunnel_list_lock);
-
-        return NULL;
-}
-
-/*****************************************************************************
- * Receive data handling
- *****************************************************************************/
-
-/* Queue a skb in order. We come here only if the skb has an L2TP sequence
- * number.
- */
-static void pppol2tp_recv_queue_skb(struct pppol2tp_session *session, struct sk_buff *skb)
-{
-        struct sk_buff *skbp;
-        struct sk_buff *tmp;
-        u16 ns = PPPOL2TP_SKB_CB(skb)->ns;
-
-        spin_lock_bh(&session->reorder_q.lock);
-        skb_queue_walk_safe(&session->reorder_q, skbp, tmp) {
-                if (PPPOL2TP_SKB_CB(skbp)->ns > ns) {
-                        __skb_queue_before(&session->reorder_q, skbp, skb);
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                               "%s: pkt %hu, inserted before %hu, reorder_q len=%d\n",
-                               session->name, ns, PPPOL2TP_SKB_CB(skbp)->ns,
-                               skb_queue_len(&session->reorder_q));
-                        session->stats.rx_oos_packets++;
-                        goto out;
-                }
-        }
-
-        __skb_queue_tail(&session->reorder_q, skb);
-
-out:
-        spin_unlock_bh(&session->reorder_q.lock);
-}
-
-/* Dequeue a single skb.
- */
-static void pppol2tp_recv_dequeue_skb(struct pppol2tp_session *session, struct sk_buff *skb)
-{
-        struct pppol2tp_tunnel *tunnel = session->tunnel;
-        int length = PPPOL2TP_SKB_CB(skb)->length;
-        struct sock *session_sock = NULL;
-
-        /* We're about to requeue the skb, so return resources
-         * to its current owner (a socket receive buffer).
-         */
-        skb_orphan(skb);
-
-        tunnel->stats.rx_packets++;
-        tunnel->stats.rx_bytes += length;
-        session->stats.rx_packets++;
-        session->stats.rx_bytes += length;
-
-        if (PPPOL2TP_SKB_CB(skb)->has_seq) {
-                /* Bump our Nr */
-                session->nr++;
-                PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                       "%s: updated nr to %hu\n", session->name, session->nr);
-        }
-
-        /* If the socket is bound, send it in to PPP's input queue. Otherwise
-         * queue it on the session socket.
-         */
-        session_sock = session->sock;
-        if (session_sock->sk_state & PPPOX_BOUND) {
-                struct pppox_sock *po;
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: recv %d byte data frame, passing to ppp\n",
-                       session->name, length);
-
-                /* We need to forget all info related to the L2TP packet
-                 * gathered in the skb as we are going to reuse the same
-                 * skb for the inner packet.
-                 * Namely we need to:
-                 * - reset xfrm (IPSec) information as it applies to
-                 *   the outer L2TP packet and not to the inner one
-                 * - release the dst to force a route lookup on the inner
-                 *   IP packet since skb->dst currently points to the dst
-                 *   of the UDP tunnel
-                 * - reset netfilter information as it doesn't apply
-                 *   to the inner packet either
-                 */
-                secpath_reset(skb);
-                skb_dst_drop(skb);
-                nf_reset(skb);
-
-                po = pppox_sk(session_sock);
-                ppp_input(&po->chan, skb);
-        } else {
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_INFO,
-                       "%s: socket not bound\n", session->name);
-
-                /* Not bound. Nothing we can do, so discard. */
-                session->stats.rx_errors++;
-                kfree_skb(skb);
-        }
-
-        sock_put(session->sock);
-}
-
-/* Dequeue skbs from the session's reorder_q, subject to packet order.
- * Skbs that have been in the queue for too long are simply discarded.
- */
-static void pppol2tp_recv_dequeue(struct pppol2tp_session *session)
-{
-        struct sk_buff *skb;
-        struct sk_buff *tmp;
-
-        /* If the pkt at the head of the queue has the nr that we
-         * expect to send up next, dequeue it and any other
-         * in-sequence packets behind it.
-         */
-        spin_lock_bh(&session->reorder_q.lock);
-        skb_queue_walk_safe(&session->reorder_q, skb, tmp) {
-                if (time_after(jiffies, PPPOL2TP_SKB_CB(skb)->expires)) {
-                        session->stats.rx_seq_discards++;
-                        session->stats.rx_errors++;
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                               "%s: oos pkt %hu len %d discarded (too old), "
-                               "waiting for %hu, reorder_q_len=%d\n",
-                               session->name, PPPOL2TP_SKB_CB(skb)->ns,
-                               PPPOL2TP_SKB_CB(skb)->length, session->nr,
-                               skb_queue_len(&session->reorder_q));
-                        __skb_unlink(skb, &session->reorder_q);
-                        kfree_skb(skb);
-                        sock_put(session->sock);
-                        continue;
-                }
-
-                if (PPPOL2TP_SKB_CB(skb)->has_seq) {
-                        if (PPPOL2TP_SKB_CB(skb)->ns != session->nr) {
-                                PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                                       "%s: holding oos pkt %hu len %d, "
-                                       "waiting for %hu, reorder_q_len=%d\n",
-                                       session->name, PPPOL2TP_SKB_CB(skb)->ns,
-                                       PPPOL2TP_SKB_CB(skb)->length, session->nr,
-                                       skb_queue_len(&session->reorder_q));
-                                goto out;
-                        }
-                }
-                __skb_unlink(skb, &session->reorder_q);
-
-                /* Process the skb. We release the queue lock while we
-                 * do so to let other contexts process the queue.
-                 */
-                spin_unlock_bh(&session->reorder_q.lock);
-                pppol2tp_recv_dequeue_skb(session, skb);
-                spin_lock_bh(&session->reorder_q.lock);
-        }
-
-out:
-        spin_unlock_bh(&session->reorder_q.lock);
-}
-
-static inline int pppol2tp_verify_udp_checksum(struct sock *sk,
-                                               struct sk_buff *skb)
-{
-        struct udphdr *uh = udp_hdr(skb);
-        u16 ulen = ntohs(uh->len);
-        struct inet_sock *inet;
-        __wsum psum;
-
-        if (sk->sk_no_check || skb_csum_unnecessary(skb) || !uh->check)
-                return 0;
-
-        inet = inet_sk(sk);
-        psum = csum_tcpudp_nofold(inet->inet_saddr, inet->inet_daddr, ulen,
-                                  IPPROTO_UDP, 0);
-
-        if ((skb->ip_summed == CHECKSUM_COMPLETE) &&
-            !csum_fold(csum_add(psum, skb->csum)))
-                return 0;
-
-        skb->csum = psum;
-
-        return __skb_checksum_complete(skb);
-}
-
-/* Internal receive frame. Do the real work of receiving an L2TP data frame
- * here. The skb is not on a list when we get here.
- * Returns 0 if the packet was a data packet and was successfully passed on.
- * Returns 1 if the packet was not a good data packet and could not be
- * forwarded.  All such packets are passed up to userspace to deal with.
- */
-static int pppol2tp_recv_core(struct sock *sock, struct sk_buff *skb)
-{
-        struct pppol2tp_session *session = NULL;
-        struct pppol2tp_tunnel *tunnel;
-        unsigned char *ptr, *optr;
-        u16 hdrflags;
-        u16 tunnel_id, session_id;
-        int length;
-        int offset;
-
-        tunnel = pppol2tp_sock_to_tunnel(sock);
-        if (tunnel == NULL)
-                goto no_tunnel;
-
-        if (tunnel->sock && pppol2tp_verify_udp_checksum(tunnel->sock, skb))
-                goto discard_bad_csum;
-
-        /* UDP always verifies the packet length. */
-        __skb_pull(skb, sizeof(struct udphdr));
-
-        /* Short packet? */
-        if (!pskb_may_pull(skb, 12)) {
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_DATA, KERN_INFO,
-                       "%s: recv short packet (len=%d)\n", tunnel->name, skb->len);
-                goto error;
-        }
-
-        /* Point to L2TP header */
-        optr = ptr = skb->data;
-
-        /* Get L2TP header flags */
-        hdrflags = ntohs(*(__be16*)ptr);
-
-        /* Trace packet contents, if enabled */
-        if (tunnel->debug & PPPOL2TP_MSG_DATA) {
-                length = min(16u, skb->len);
-                if (!pskb_may_pull(skb, length))
-                        goto error;
-
-                printk(KERN_DEBUG "%s: recv: ", tunnel->name);
-
-                offset = 0;
-                do {
-                        printk(" %02X", ptr[offset]);
-                } while (++offset < length);
-
-                printk("\n");
-        }
-
-        /* Get length of L2TP packet */
-        length = skb->len;
-
-        /* If type is control packet, it is handled by userspace. */
-        if (hdrflags & L2TP_HDRFLAG_T) {
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: recv control packet, len=%d\n", tunnel->name, length);
-                goto error;
-        }
-
-        /* Skip flags */
-        ptr += 2;
-
-        /* If length is present, skip it */
-        if (hdrflags & L2TP_HDRFLAG_L)
-                ptr += 2;
-
-        /* Extract tunnel and session ID */
-        tunnel_id = ntohs(*(__be16 *) ptr);
-        ptr += 2;
-        session_id = ntohs(*(__be16 *) ptr);
-        ptr += 2;
-
-        /* Find the session context */
-        session = pppol2tp_session_find(tunnel, session_id);
-        if (!session) {
-                /* Not found? Pass to userspace to deal with */
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_DATA, KERN_INFO,
-                       "%s: no socket found (%hu/%hu). Passing up.\n",
-                       tunnel->name, tunnel_id, session_id);
-                goto error;
-        }
-        sock_hold(session->sock);
-
-        /* The ref count on the socket was increased by the above call since
-         * we now hold a pointer to the session. Take care to do sock_put()
-         * when exiting this function from now on...
-         */
-
-        /* Handle the optional sequence numbers.  If we are the LAC,
-         * enable/disable sequence numbers under the control of the LNS.  If
-         * no sequence numbers present but we were expecting them, discard
-         * frame.
-         */
-        if (hdrflags & L2TP_HDRFLAG_S) {
-                u16 ns, nr;
-                ns = ntohs(*(__be16 *) ptr);
-                ptr += 2;
-                nr = ntohs(*(__be16 *) ptr);
-                ptr += 2;
-
-                /* Received a packet with sequence numbers. If we're the LNS,
-                 * check if we sre sending sequence numbers and if not,
-                 * configure it so.
-                 */
-                if ((!session->lns_mode) && (!session->send_seq)) {
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_INFO,
-                               "%s: requested to enable seq numbers by LNS\n",
-                               session->name);
-                        session->send_seq = -1;
-                }
-
-                /* Store L2TP info in the skb */
-                PPPOL2TP_SKB_CB(skb)->ns = ns;
-                PPPOL2TP_SKB_CB(skb)->nr = nr;
-                PPPOL2TP_SKB_CB(skb)->has_seq = 1;
-
-                PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                       "%s: recv data ns=%hu, nr=%hu, session nr=%hu\n",
-                       session->name, ns, nr, session->nr);
-        } else {
-                /* No sequence numbers.
-                 * If user has configured mandatory sequence numbers, discard.
-                 */
-                if (session->recv_seq) {
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_WARNING,
-                               "%s: recv data has no seq numbers when required. "
-                               "Discarding\n", session->name);
-                        session->stats.rx_seq_discards++;
-                        goto discard;
-                }
-
-                /* If we're the LAC and we're sending sequence numbers, the
-                 * LNS has requested that we no longer send sequence numbers.
-                 * If we're the LNS and we're sending sequence numbers, the
-                 * LAC is broken. Discard the frame.
-                 */
-                if ((!session->lns_mode) && (session->send_seq)) {
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_INFO,
-                               "%s: requested to disable seq numbers by LNS\n",
-                               session->name);
-                        session->send_seq = 0;
-                } else if (session->send_seq) {
-                        PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_WARNING,
-                               "%s: recv data has no seq numbers when required. "
-                               "Discarding\n", session->name);
-                        session->stats.rx_seq_discards++;
-                        goto discard;
-                }
-
-                /* Store L2TP info in the skb */
-                PPPOL2TP_SKB_CB(skb)->has_seq = 0;
-        }
-
-        /* If offset bit set, skip it. */
-        if (hdrflags & L2TP_HDRFLAG_O) {
-                offset = ntohs(*(__be16 *)ptr);
-                ptr += 2 + offset;
-        }
-
-        offset = ptr - optr;
-        if (!pskb_may_pull(skb, offset))
-                goto discard;
-
-        __skb_pull(skb, offset);
-
-        /* Skip PPP header, if present.  In testing, Microsoft L2TP clients
-         * don't send the PPP header (PPP header compression enabled), but
-         * other clients can include the header. So we cope with both cases
-         * here. The PPP header is always FF03 when using L2TP.
-         *
-         * Note that skb->data[] isn't dereferenced from a u16 ptr here since
-         * the field may be unaligned.
-         */
-        if (!pskb_may_pull(skb, 2))
-                goto discard;
-
-        if ((skb->data[0] == 0xff) && (skb->data[1] == 0x03))
-                skb_pull(skb, 2);
-
-        /* Prepare skb for adding to the session's reorder_q.  Hold
-         * packets for max reorder_timeout or 1 second if not
-         * reordering.
-         */
-        PPPOL2TP_SKB_CB(skb)->length = length;
-        PPPOL2TP_SKB_CB(skb)->expires = jiffies +
-                (session->reorder_timeout ? session->reorder_timeout : HZ);
-
-        /* Add packet to the session's receive queue. Reordering is done here, if
-         * enabled. Saved L2TP protocol info is stored in skb->sb[].
-         */
-        if (PPPOL2TP_SKB_CB(skb)->has_seq) {
-                if (session->reorder_timeout != 0) {
-                        /* Packet reordering enabled. Add skb to session's
-                         * reorder queue, in order of ns.
-                         */
-                        pppol2tp_recv_queue_skb(session, skb);
-                } else {
-                        /* Packet reordering disabled. Discard out-of-sequence
-                         * packets
-                         */
-                        if (PPPOL2TP_SKB_CB(skb)->ns != session->nr) {
-                                session->stats.rx_seq_discards++;
-                                PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                                       "%s: oos pkt %hu len %d discarded, "
-                                       "waiting for %hu, reorder_q_len=%d\n",
-                                       session->name, PPPOL2TP_SKB_CB(skb)->ns,
-                                       PPPOL2TP_SKB_CB(skb)->length, session->nr,
-                                       skb_queue_len(&session->reorder_q));
-                                goto discard;
-                        }
-                        skb_queue_tail(&session->reorder_q, skb);
-                }
-        } else {
-                /* No sequence numbers. Add the skb to the tail of the
-                 * reorder queue. This ensures that it will be
-                 * delivered after all previous sequenced skbs.
-                 */
-                skb_queue_tail(&session->reorder_q, skb);
-        }
-
-        /* Try to dequeue as many skbs from reorder_q as we can. */
-        pppol2tp_recv_dequeue(session);
-        sock_put(sock);
-
-        return 0;
-
-discard:
-        session->stats.rx_errors++;
-        kfree_skb(skb);
-        sock_put(session->sock);
-        sock_put(sock);
-
-        return 0;
-
-discard_bad_csum:
-        LIMIT_NETDEBUG("%s: UDP: bad checksum\n", tunnel->name);
-        UDP_INC_STATS_USER(&init_net, UDP_MIB_INERRORS, 0);
-        tunnel->stats.rx_errors++;
-        kfree_skb(skb);
-        sock_put(sock);
-
-        return 0;
-
-error:
-        /* Put UDP header back */
-        __skb_push(skb, sizeof(struct udphdr));
-        sock_put(sock);
-
-no_tunnel:
-        return 1;
-}
-
-/* UDP encapsulation receive handler. See net/ipv4/udp.c.
- * Return codes:
- * 0 : success.
- * <0: error
- * >0: skb should be passed up to userspace as UDP.
- */
-static int pppol2tp_udp_encap_recv(struct sock *sk, struct sk_buff *skb)
-{
-        struct pppol2tp_tunnel *tunnel;
-
-        tunnel = pppol2tp_sock_to_tunnel(sk);
-        if (tunnel == NULL)
-                goto pass_up;
-
-        PRINTK(tunnel->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-               "%s: received %d bytes\n", tunnel->name, skb->len);
-
-        if (pppol2tp_recv_core(sk, skb))
-                goto pass_up_put;
-
-        sock_put(sk);
-        return 0;
-
-pass_up_put:
-        sock_put(sk);
-pass_up:
-        return 1;
-}
-
-/* Receive message. This is the recvmsg for the PPPoL2TP socket.
- */
-static int pppol2tp_recvmsg(struct kiocb *iocb, struct socket *sock,
-                            struct msghdr *msg, size_t len,
-                            int flags)
-{
-        int err;
-        struct sk_buff *skb;
-        struct sock *sk = sock->sk;
-
-        err = -EIO;
-        if (sk->sk_state & PPPOX_BOUND)
-                goto end;
-
-        msg->msg_namelen = 0;
-
-        err = 0;
-        skb = skb_recv_datagram(sk, flags & ~MSG_DONTWAIT,
-                                flags & MSG_DONTWAIT, &err);
-        if (!skb)
-                goto end;
-
-        if (len > skb->len)
-                len = skb->len;
-        else if (len < skb->len)
-                msg->msg_flags |= MSG_TRUNC;
-
-        err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, len);
-        if (likely(err == 0))
-                err = len;
-
-        kfree_skb(skb);
-end:
-        return err;
-}
-
-/************************************************************************
- * Transmit handling
- ***********************************************************************/
-
-/* Tell how big L2TP headers are for a particular session. This
- * depends on whether sequence numbers are being used.
- */
-static inline int pppol2tp_l2tp_header_len(struct pppol2tp_session *session)
-{
-        if (session->send_seq)
-                return PPPOL2TP_L2TP_HDR_SIZE_SEQ;
-
-        return PPPOL2TP_L2TP_HDR_SIZE_NOSEQ;
-}
-
-/* Build an L2TP header for the session into the buffer provided.
- */
-static void pppol2tp_build_l2tp_header(struct pppol2tp_session *session,
-                                       void *buf)
-{
-        __be16 *bufp = buf;
-        u16 flags = L2TP_HDR_VER;
-
-        if (session->send_seq)
-                flags |= L2TP_HDRFLAG_S;
-
-        /* Setup L2TP header.
-         * FIXME: Can this ever be unaligned? Is direct dereferencing of
-         * 16-bit header fields safe here for all architectures?
-         */
-        *bufp++ = htons(flags);
-        *bufp++ = htons(session->tunnel_addr.d_tunnel);
-        *bufp++ = htons(session->tunnel_addr.d_session);
-        if (session->send_seq) {
-                *bufp++ = htons(session->ns);
-                *bufp++ = 0;
-                session->ns++;
-                PRINTK(session->debug, PPPOL2TP_MSG_SEQ, KERN_DEBUG,
-                       "%s: updated ns to %hu\n", session->name, session->ns);
-        }
-}
-
-/* This is the sendmsg for the PPPoL2TP pppol2tp_session socket.  We come here
- * when a user application does a sendmsg() on the session socket. L2TP and
- * PPP headers must be inserted into the user's data.
- */
-static int pppol2tp_sendmsg(struct kiocb *iocb, struct socket *sock, struct msghdr *m,
-                            size_t total_len)
-{
-        static const unsigned char ppph[2] = { 0xff, 0x03 };
-        struct sock *sk = sock->sk;
-        struct inet_sock *inet;
-        __wsum csum;
-        struct sk_buff *skb;
-        int error;
-        int hdr_len;
-        struct pppol2tp_session *session;
-        struct pppol2tp_tunnel *tunnel;
-        struct udphdr *uh;
-        unsigned int len;
-        struct sock *sk_tun;
-        u16 udp_len;
-
-        error = -ENOTCONN;
-        if (sock_flag(sk, SOCK_DEAD) || !(sk->sk_state & PPPOX_CONNECTED))
-                goto error;
-
-        /* Get session and tunnel contexts */
-        error = -EBADF;
-        session = pppol2tp_sock_to_session(sk);
-        if (session == NULL)
-                goto error;
-
-        sk_tun = session->tunnel_sock;
-        tunnel = pppol2tp_sock_to_tunnel(sk_tun);
-        if (tunnel == NULL)
-                goto error_put_sess;
-
-        /* What header length is configured for this session? */
-        hdr_len = pppol2tp_l2tp_header_len(session);
-
-        /* Allocate a socket buffer */
-        error = -ENOMEM;
-        skb = sock_wmalloc(sk, NET_SKB_PAD + sizeof(struct iphdr) +
-                           sizeof(struct udphdr) + hdr_len +
-                           sizeof(ppph) + total_len,
-                           0, GFP_KERNEL);
-        if (!skb)
-                goto error_put_sess_tun;
-
-        /* Reserve space for headers. */
-        skb_reserve(skb, NET_SKB_PAD);
-        skb_reset_network_header(skb);
-        skb_reserve(skb, sizeof(struct iphdr));
-        skb_reset_transport_header(skb);
-
-        /* Build UDP header */
-        inet = inet_sk(sk_tun);
-        udp_len = hdr_len + sizeof(ppph) + total_len;
-        uh = (struct udphdr *) skb->data;
-        uh->source = inet->inet_sport;
-        uh->dest = inet->inet_dport;
-        uh->len = htons(udp_len);
-        uh->check = 0;
-        skb_put(skb, sizeof(struct udphdr));
-
-        /* Build L2TP header */
-        pppol2tp_build_l2tp_header(session, skb->data);
-        skb_put(skb, hdr_len);
-
-        /* Add PPP header */
-        skb->data[0] = ppph[0];
-        skb->data[1] = ppph[1];
-        skb_put(skb, 2);
-
-        /* Copy user data into skb */
-        error = memcpy_fromiovec(skb->data, m->msg_iov, total_len);
-        if (error < 0) {
-                kfree_skb(skb);
-                goto error_put_sess_tun;
-        }
-        skb_put(skb, total_len);
-
-        /* Calculate UDP checksum if configured to do so */
-        if (sk_tun->sk_no_check == UDP_CSUM_NOXMIT)
-                skb->ip_summed = CHECKSUM_NONE;
-        else if (!(skb_dst(skb)->dev->features & NETIF_F_V4_CSUM)) {
-                skb->ip_summed = CHECKSUM_COMPLETE;
-                csum = skb_checksum(skb, 0, udp_len, 0);
-                uh->check = csum_tcpudp_magic(inet->inet_saddr,
-                                              inet->inet_daddr,
-                                              udp_len, IPPROTO_UDP, csum);
-                if (uh->check == 0)
-                        uh->check = CSUM_MANGLED_0;
-        } else {
-                skb->ip_summed = CHECKSUM_PARTIAL;
-                skb->csum_start = skb_transport_header(skb) - skb->head;
-                skb->csum_offset = offsetof(struct udphdr, check);
-                uh->check = ~csum_tcpudp_magic(inet->inet_saddr,
-                                               inet->inet_daddr,
-                                               udp_len, IPPROTO_UDP, 0);
-        }
-
-        /* Debug */
-        if (session->send_seq)
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: send %Zd bytes, ns=%hu\n", session->name,
-                       total_len, session->ns - 1);
-        else
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: send %Zd bytes\n", session->name, total_len);
-
-        if (session->debug & PPPOL2TP_MSG_DATA) {
-                int i;
-                unsigned char *datap = skb->data;
-
-                printk(KERN_DEBUG "%s: xmit:", session->name);
-                for (i = 0; i < total_len; i++) {
-                        printk(" %02X", *datap++);
-                        if (i == 15) {
-                                printk(" ...");
-                                break;
-                        }
-                }
-                printk("\n");
-        }
-
-        /* Queue the packet to IP for output */
-        len = skb->len;
-        error = ip_queue_xmit(skb, 1);
-
-        /* Update stats */
-        if (error >= 0) {
-                tunnel->stats.tx_packets++;
-                tunnel->stats.tx_bytes += len;
-                session->stats.tx_packets++;
-                session->stats.tx_bytes += len;
-        } else {
-                tunnel->stats.tx_errors++;
-                session->stats.tx_errors++;
-        }
-
-        return error;
-
-error_put_sess_tun:
-        sock_put(session->tunnel_sock);
-error_put_sess:
-        sock_put(sk);
-error:
-        return error;
-}
-
-/* Automatically called when the skb is freed.
- */
-static void pppol2tp_sock_wfree(struct sk_buff *skb)
-{
-        sock_put(skb->sk);
-}
-
-/* For data skbs that we transmit, we associate with the tunnel socket
- * but don't do accounting.
- */
-static inline void pppol2tp_skb_set_owner_w(struct sk_buff *skb, struct sock *sk)
-{
-        sock_hold(sk);
-        skb->sk = sk;
-        skb->destructor = pppol2tp_sock_wfree;
-}
-
-/* Transmit function called by generic PPP driver.  Sends PPP frame
- * over PPPoL2TP socket.
- *
- * This is almost the same as pppol2tp_sendmsg(), but rather than
- * being called with a msghdr from userspace, it is called with a skb
- * from the kernel.
- *
- * The supplied skb from ppp doesn't have enough headroom for the
- * insertion of L2TP, UDP and IP headers so we need to allocate more
- * headroom in the skb. This will create a cloned skb. But we must be
- * careful in the error case because the caller will expect to free
- * the skb it supplied, not our cloned skb. So we take care to always
- * leave the original skb unfreed if we return an error.
- */
-static int pppol2tp_xmit(struct ppp_channel *chan, struct sk_buff *skb)
-{
-        static const u8 ppph[2] = { 0xff, 0x03 };
-        struct sock *sk = (struct sock *) chan->private;
-        struct sock *sk_tun;
-        int hdr_len;
-        u16 udp_len;
-        struct pppol2tp_session *session;
-        struct pppol2tp_tunnel *tunnel;
-        int rc;
-        int headroom;
-        int data_len = skb->len;
-        struct inet_sock *inet;
-        __wsum csum;
-        struct udphdr *uh;
-        unsigned int len;
-        int old_headroom;
-        int new_headroom;
-
-        if (sock_flag(sk, SOCK_DEAD) || !(sk->sk_state & PPPOX_CONNECTED))
-                goto abort;
-
-        /* Get session and tunnel contexts from the socket */
-        session = pppol2tp_sock_to_session(sk);
-        if (session == NULL)
-                goto abort;
-
-        sk_tun = session->tunnel_sock;
-        if (sk_tun == NULL)
-                goto abort_put_sess;
-        tunnel = pppol2tp_sock_to_tunnel(sk_tun);
-        if (tunnel == NULL)
-                goto abort_put_sess;
-
-        /* What header length is configured for this session? */
-        hdr_len = pppol2tp_l2tp_header_len(session);
-
-        /* Check that there's enough headroom in the skb to insert IP,
-         * UDP and L2TP and PPP headers. If not enough, expand it to
-         * make room. Adjust truesize.
-         */
-        headroom = NET_SKB_PAD + sizeof(struct iphdr) +
-                sizeof(struct udphdr) + hdr_len + sizeof(ppph);
-        old_headroom = skb_headroom(skb);
-        if (skb_cow_head(skb, headroom))
-                goto abort_put_sess_tun;
-
-        new_headroom = skb_headroom(skb);
-        skb_orphan(skb);
-        skb->truesize += new_headroom - old_headroom;
-
-        /* Setup PPP header */
-        __skb_push(skb, sizeof(ppph));
-        skb->data[0] = ppph[0];
-        skb->data[1] = ppph[1];
-
-        /* Setup L2TP header */
-        pppol2tp_build_l2tp_header(session, __skb_push(skb, hdr_len));
-
-        udp_len = sizeof(struct udphdr) + hdr_len + sizeof(ppph) + data_len;
-
-        /* Setup UDP header */
-        inet = inet_sk(sk_tun);
-        __skb_push(skb, sizeof(*uh));
-        skb_reset_transport_header(skb);
-        uh = udp_hdr(skb);
-        uh->source = inet->inet_sport;
-        uh->dest = inet->inet_dport;
-        uh->len = htons(udp_len);
-        uh->check = 0;
-
-        /* Debug */
-        if (session->send_seq)
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: send %d bytes, ns=%hu\n", session->name,
-                       data_len, session->ns - 1);
-        else
-                PRINTK(session->debug, PPPOL2TP_MSG_DATA, KERN_DEBUG,
-                       "%s: send %d bytes\n", session->name, data_len);
-
-        if (session->debug & PPPOL2TP_MSG_DATA) {
-                int i;
-                unsigned char *datap = skb->data;
-
-                printk(KERN_DEBUG "%s: xmit:", session->name);
-                for (i = 0; i < data_len; i++) {
-                        printk(" %02X", *datap++);
-                        if (i == 31) {
-                                printk(" ...");
-                                break;
-                        }
-                }
-                printk("\n");
-        }
-
-        memset(&(IPCB(skb)->opt), 0, sizeof(IPCB(skb)->opt));
-        IPCB(skb)->flags &= ~(IPSKB_XFRM_TUNNEL_SIZE | IPSKB_XFRM_TRANSFORMED |
-                              IPSKB_REROUTED);
-        nf_reset(skb);
-
-        /* Get routing info from the tunnel socket */
-        skb_dst_drop(skb);
-        skb_dst_set(skb, dst_clone(__sk_dst_get(sk_tun)));
-        pppol2tp_skb_set_owner_w(skb, sk_tun);
-
-        /* Calculate UDP checksum if configured to do so */
-        if (sk_tun->sk_no_check == UDP_CSUM_NOXMIT)
-                skb->ip_summed = CHECKSUM_NONE;
-        else if ((skb_dst(skb) && skb_dst(skb)->dev) &&
-                 (!(skb_dst(skb)->dev->features & NETIF_F_V4_CSUM))) {
-                skb->ip_summed = CHECKSUM_COMPLETE;
-                csum = skb_checksum(skb, 0, udp_len, 0);
-                uh->check = csum_tcpudp_magic(inet->inet_saddr,
-                                              inet->inet_daddr,
-                                              udp_len, IPPROTO_UDP, csum);
-                if (uh->check == 0)
-                        uh->check = CSUM_MANGLED_0;
-        } else {
-                skb->ip_summed = CHECKSUM_PARTIAL;
-                skb->csum_start = skb_transport_header(skb) - skb->head;
-                skb->csum_offset = offsetof(struct udphdr, check);
-                uh->check = ~csum_tcpudp_magic(inet->inet_saddr,
-                                               inet->inet_daddr,
-                                               udp_len, IPPROTO_UDP, 0);
-        }
-
-        /* Queue the packet to IP for output */
-        len = skb->len;
-        rc = ip_queue_xmit(skb, 1);
-
-        /* Update stats */
-        if (rc >= 0) {
-                tunnel->stats.tx_packets++;
-                tunnel->stats.tx_bytes += len;
-                session->stats.tx_packets++;
-                session->stats.tx_bytes += len;
-        } else {
-                tunnel->stats.tx_errors++;
-                session->stats.tx_errors++;
-        }
-
-        sock_put(sk_tun);
-        sock_put(sk);
-        return 1;
-
-abort_put_sess_tun:
-        sock_put(sk_tun);
-abort_put_sess:
-        sock_put(sk);
-abort:
-        /* Free the original skb */
-        kfree_skb(skb);
-        return 1;
-}
-
-/*****************************************************************************
- * Session (and tunnel control) socket create/destroy.
- *****************************************************************************/
-
-/* When the tunnel UDP socket is closed, all the attached sockets need to go
- * too.
- */
-static void pppol2tp_tunnel_closeall(struct pppol2tp_tunnel *tunnel)
-{
-        int hash;
-        struct hlist_node *walk;
-        struct hlist_node *tmp;
-        struct pppol2tp_session *session;
-        struct sock *sk;
-
-        BUG_ON(tunnel == NULL);
-
-        PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-               "%s: closing all sessions...\n", tunnel->name);
-
-        write_lock_bh(&tunnel->hlist_lock);
-        for (hash = 0; hash < PPPOL2TP_HASH_SIZE; hash++) {
-again:
-                hlist_for_each_safe(walk, tmp, &tunnel->session_hlist[hash]) {
-                        struct sk_buff *skb;
-
-                        session = hlist_entry(walk, struct pppol2tp_session, hlist);
-
-                        sk = session->sock;
-
-                        PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                               "%s: closing session\n", session->name);
-
-                        hlist_del_init(&session->hlist);
-
-                        /* Since we should hold the sock lock while
-                         * doing any unbinding, we need to release the
-                         * lock we're holding before taking that lock.
-                         * Hold a reference to the sock so it doesn't
-                         * disappear as we're jumping between locks.
-                         */
-                        sock_hold(sk);
-                        write_unlock_bh(&tunnel->hlist_lock);
-                        lock_sock(sk);
-
-                        if (sk->sk_state & (PPPOX_CONNECTED | PPPOX_BOUND)) {
-                                pppox_unbind_sock(sk);
-                                sk->sk_state = PPPOX_DEAD;
-                                sk->sk_state_change(sk);
-                        }
-
-                        /* Purge any queued data */
-                        skb_queue_purge(&sk->sk_receive_queue);
-                        skb_queue_purge(&sk->sk_write_queue);
-                        while ((skb = skb_dequeue(&session->reorder_q))) {
-                                kfree_skb(skb);
-                                sock_put(sk);
-                        }
-
-                        release_sock(sk);
-                        sock_put(sk);
-
-                        /* Now restart from the beginning of this hash
-                         * chain.  We always remove a session from the
-                         * list so we are guaranteed to make forward
-                         * progress.
-                         */
-                        write_lock_bh(&tunnel->hlist_lock);
-                        goto again;
-                }
-        }
-        write_unlock_bh(&tunnel->hlist_lock);
-}
-
-/* Really kill the tunnel.
- * Come here only when all sessions have been cleared from the tunnel.
- */
-static void pppol2tp_tunnel_free(struct pppol2tp_tunnel *tunnel)
-{
-        struct pppol2tp_net *pn = pppol2tp_pernet(tunnel->pppol2tp_net);
-
-        /* Remove from socket list */
-        write_lock_bh(&pn->pppol2tp_tunnel_list_lock);
-        list_del_init(&tunnel->list);
-        write_unlock_bh(&pn->pppol2tp_tunnel_list_lock);
-
-        atomic_dec(&pppol2tp_tunnel_count);
-        kfree(tunnel);
-}
-
-/* Tunnel UDP socket destruct hook.
- * The tunnel context is deleted only when all session sockets have been
- * closed.
- */
-static void pppol2tp_tunnel_destruct(struct sock *sk)
-{
-        struct pppol2tp_tunnel *tunnel;
-
-        tunnel = sk->sk_user_data;
-        if (tunnel == NULL)
-                goto end;
-
-        PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-               "%s: closing...\n", tunnel->name);
-
-        /* Close all sessions */
-        pppol2tp_tunnel_closeall(tunnel);
-
-        /* No longer an encapsulation socket. See net/ipv4/udp.c */
-        (udp_sk(sk))->encap_type = 0;
-        (udp_sk(sk))->encap_rcv = NULL;
-
-        /* Remove hooks into tunnel socket */
-        tunnel->sock = NULL;
-        sk->sk_destruct = tunnel->old_sk_destruct;
-        sk->sk_user_data = NULL;
-
-        /* Call original (UDP) socket descructor */
-        if (sk->sk_destruct != NULL)
-                (*sk->sk_destruct)(sk);
-
-        pppol2tp_tunnel_dec_refcount(tunnel);
-
-end:
-        return;
-}
-
-/* Really kill the session socket. (Called from sock_put() if
- * refcnt == 0.)
- */
-static void pppol2tp_session_destruct(struct sock *sk)
-{
-        struct pppol2tp_session *session = NULL;
-
-        if (sk->sk_user_data != NULL) {
-                struct pppol2tp_tunnel *tunnel;
-
-                session = sk->sk_user_data;
-                if (session == NULL)
-                        goto out;
-
-                BUG_ON(session->magic != L2TP_SESSION_MAGIC);
-
-                /* Don't use pppol2tp_sock_to_tunnel() here to
-                 * get the tunnel context because the tunnel
-                 * socket might have already been closed (its
-                 * sk->sk_user_data will be NULL) so use the
-                 * session's private tunnel ptr instead.
-                 */
-                tunnel = session->tunnel;
-                if (tunnel != NULL) {
-                        BUG_ON(tunnel->magic != L2TP_TUNNEL_MAGIC);
-
-                        /* If session_id is zero, this is a null
-                         * session context, which was created for a
-                         * socket that is being used only to manage
-                         * tunnels.
-                         */
-                        if (session->tunnel_addr.s_session != 0) {
-                                /* Delete the session socket from the
-                                 * hash
-                                 */
-                                write_lock_bh(&tunnel->hlist_lock);
-                                hlist_del_init(&session->hlist);
-                                write_unlock_bh(&tunnel->hlist_lock);
-
-                                atomic_dec(&pppol2tp_session_count);
-                        }
-
-                        /* This will delete the tunnel context if this
-                         * is the last session on the tunnel.
-                         */
-                        session->tunnel = NULL;
-                        session->tunnel_sock = NULL;
-                        pppol2tp_tunnel_dec_refcount(tunnel);
-                }
-        }
-
-        kfree(session);
-out:
-        return;
-}
-
-/* Called when the PPPoX socket (session) is closed.
- */
-static int pppol2tp_release(struct socket *sock)
-{
-        struct sock *sk = sock->sk;
-        struct pppol2tp_session *session;
-        int error;
-
-        if (!sk)
-                return 0;
-
-        error = -EBADF;
-        lock_sock(sk);
-        if (sock_flag(sk, SOCK_DEAD) != 0)
-                goto error;
-
-        pppox_unbind_sock(sk);
-
-        /* Signal the death of the socket. */
-        sk->sk_state = PPPOX_DEAD;
-        sock_orphan(sk);
-        sock->sk = NULL;
-
-        session = pppol2tp_sock_to_session(sk);
-
-        /* Purge any queued data */
-        skb_queue_purge(&sk->sk_receive_queue);
-        skb_queue_purge(&sk->sk_write_queue);
-        if (session != NULL) {
-                struct sk_buff *skb;
-                while ((skb = skb_dequeue(&session->reorder_q))) {
-                        kfree_skb(skb);
-                        sock_put(sk);
-                }
-                sock_put(sk);
-        }
-
-        release_sock(sk);
-
-        /* This will delete the session context via
-         * pppol2tp_session_destruct() if the socket's refcnt drops to
-         * zero.
-         */
-        sock_put(sk);
-
-        return 0;
-
-error:
-        release_sock(sk);
-        return error;
-}
-
-/* Internal function to prepare a tunnel (UDP) socket to have PPPoX
- * sockets attached to it.
- */
-static struct sock *pppol2tp_prepare_tunnel_socket(struct net *net,
-                                        int fd, u16 tunnel_id, int *error)
-{
-        int err;
-        struct socket *sock = NULL;
-        struct sock *sk;
-        struct pppol2tp_tunnel *tunnel;
-        struct pppol2tp_net *pn;
-        struct sock *ret = NULL;
-
-        /* Get the tunnel UDP socket from the fd, which was opened by
-         * the userspace L2TP daemon.
-         */
-        err = -EBADF;
-        sock = sockfd_lookup(fd, &err);
-        if (!sock) {
-                PRINTK(-1, PPPOL2TP_MSG_CONTROL, KERN_ERR,
-                       "tunl %hu: sockfd_lookup(fd=%d) returned %d\n",
-                       tunnel_id, fd, err);
-                goto err;
-        }
-
-        sk = sock->sk;
-
-        /* Quick sanity checks */
-        err = -EPROTONOSUPPORT;
-        if (sk->sk_protocol != IPPROTO_UDP) {
-                PRINTK(-1, PPPOL2TP_MSG_CONTROL, KERN_ERR,
-                       "tunl %hu: fd %d wrong protocol, got %d, expected %d\n",
-                       tunnel_id, fd, sk->sk_protocol, IPPROTO_UDP);
-                goto err;
-        }
-        err = -EAFNOSUPPORT;
-        if (sock->ops->family != AF_INET) {
-                PRINTK(-1, PPPOL2TP_MSG_CONTROL, KERN_ERR,
-                       "tunl %hu: fd %d wrong family, got %d, expected %d\n",
-                       tunnel_id, fd, sock->ops->family, AF_INET);
-                goto err;
-        }
-
-        err = -ENOTCONN;
-
-        /* Check if this socket has already been prepped */
-        tunnel = (struct pppol2tp_tunnel *)sk->sk_user_data;
-        if (tunnel != NULL) {
-                /* User-data field already set */
-                err = -EBUSY;
-                BUG_ON(tunnel->magic != L2TP_TUNNEL_MAGIC);
-
-                /* This socket has already been prepped */
-                ret = tunnel->sock;
-                goto out;
-        }
-
-        /* This socket is available and needs prepping. Create a new tunnel
-         * context and init it.
-         */
-        sk->sk_user_data = tunnel = kzalloc(sizeof(struct pppol2tp_tunnel), GFP_KERNEL);
-        if (sk->sk_user_data == NULL) {
-                err = -ENOMEM;
-                goto err;
-        }
-
-        tunnel->magic = L2TP_TUNNEL_MAGIC;
-        sprintf(&tunnel->name[0], "tunl %hu", tunnel_id);
-
-        tunnel->stats.tunnel_id = tunnel_id;
-        tunnel->debug = PPPOL2TP_DEFAULT_DEBUG_FLAGS;
-
-        /* Hook on the tunnel socket destructor so that we can cleanup
-         * if the tunnel socket goes away.
-         */
-        tunnel->old_sk_destruct = sk->sk_destruct;
-        sk->sk_destruct = pppol2tp_tunnel_destruct;
-
-        tunnel->sock = sk;
-        sk->sk_allocation = GFP_ATOMIC;
-
-        /* Misc init */
-        rwlock_init(&tunnel->hlist_lock);
-
-        /* The net we belong to */
-        tunnel->pppol2tp_net = net;
-        pn = pppol2tp_pernet(net);
-
-        /* Add tunnel to our list */
-        INIT_LIST_HEAD(&tunnel->list);
-        write_lock_bh(&pn->pppol2tp_tunnel_list_lock);
-        list_add(&tunnel->list, &pn->pppol2tp_tunnel_list);
-        write_unlock_bh(&pn->pppol2tp_tunnel_list_lock);
-        atomic_inc(&pppol2tp_tunnel_count);
-
-        /* Bump the reference count. The tunnel context is deleted
-         * only when this drops to zero.
-         */
-        pppol2tp_tunnel_inc_refcount(tunnel);
-
-        /* Mark socket as an encapsulation socket. See net/ipv4/udp.c */
-        (udp_sk(sk))->encap_type = UDP_ENCAP_L2TPINUDP;
-        (udp_sk(sk))->encap_rcv = pppol2tp_udp_encap_recv;
-
-        ret = tunnel->sock;
-
-        *error = 0;
-out:
-        if (sock)
-                sockfd_put(sock);
-
-        return ret;
-
-err:
-        *error = err;
-        goto out;
-}
-
-static struct proto pppol2tp_sk_proto = {
-        .name     = "PPPOL2TP",
-        .owner    = THIS_MODULE,
-        .obj_size = sizeof(struct pppox_sock),
-};
-
-/* socket() handler. Initialize a new struct sock.
- */
-static int pppol2tp_create(struct net *net, struct socket *sock)
-{
-        int error = -ENOMEM;
-        struct sock *sk;
-
-        sk = sk_alloc(net, PF_PPPOX, GFP_KERNEL, &pppol2tp_sk_proto);
-        if (!sk)
-                goto out;
-
-        sock_init_data(sock, sk);
-
-        sock->state  = SS_UNCONNECTED;
-        sock->ops    = &pppol2tp_ops;
-
-        sk->sk_backlog_rcv = pppol2tp_recv_core;
-        sk->sk_protocol    = PX_PROTO_OL2TP;
-        sk->sk_family      = PF_PPPOX;
-        sk->sk_state       = PPPOX_NONE;
-        sk->sk_type        = SOCK_STREAM;
-        sk->sk_destruct    = pppol2tp_session_destruct;
-
-        error = 0;
-
-out:
-        return error;
-}
-
-/* connect() handler. Attach a PPPoX socket to a tunnel UDP socket
- */
-static int pppol2tp_connect(struct socket *sock, struct sockaddr *uservaddr,
-                            int sockaddr_len, int flags)
-{
-        struct sock *sk = sock->sk;
-        struct sockaddr_pppol2tp *sp = (struct sockaddr_pppol2tp *) uservaddr;
-        struct pppox_sock *po = pppox_sk(sk);
-        struct sock *tunnel_sock = NULL;
-        struct pppol2tp_session *session = NULL;
-        struct pppol2tp_tunnel *tunnel;
-        struct dst_entry *dst;
-        int error = 0;
-
-        lock_sock(sk);
-
-        error = -EINVAL;
-        if (sp->sa_protocol != PX_PROTO_OL2TP)
-                goto end;
-
-        /* Check for already bound sockets */
-        error = -EBUSY;
-        if (sk->sk_state & PPPOX_CONNECTED)
-                goto end;
-
-        /* We don't supporting rebinding anyway */
-        error = -EALREADY;
-        if (sk->sk_user_data)
-                goto end; /* socket is already attached */
-
-        /* Don't bind if s_tunnel is 0 */
-        error = -EINVAL;
-        if (sp->pppol2tp.s_tunnel == 0)
-                goto end;
-
-        /* Special case: prepare tunnel socket if s_session and
-         * d_session is 0. Otherwise look up tunnel using supplied
-         * tunnel id.
-         */
-        if ((sp->pppol2tp.s_session == 0) && (sp->pppol2tp.d_session == 0)) {
-                tunnel_sock = pppol2tp_prepare_tunnel_socket(sock_net(sk),
-                                                             sp->pppol2tp.fd,
-                                                             sp->pppol2tp.s_tunnel,
-                                                             &error);
-                if (tunnel_sock == NULL)
-                        goto end;
-
-                sock_hold(tunnel_sock);
-                tunnel = tunnel_sock->sk_user_data;
-        } else {
-                tunnel = pppol2tp_tunnel_find(sock_net(sk), sp->pppol2tp.s_tunnel);
-
-                /* Error if we can't find the tunnel */
-                error = -ENOENT;
-                if (tunnel == NULL)
-                        goto end;
-
-                tunnel_sock = tunnel->sock;
-        }
-
-        /* Check that this session doesn't already exist */
-        error = -EEXIST;
-        session = pppol2tp_session_find(tunnel, sp->pppol2tp.s_session);
-        if (session != NULL)
-                goto end;
-
-        /* Allocate and initialize a new session context. */
-        session = kzalloc(sizeof(struct pppol2tp_session), GFP_KERNEL);
-        if (session == NULL) {
-                error = -ENOMEM;
-                goto end;
-        }
-
-        skb_queue_head_init(&session->reorder_q);
-
-        session->magic       = L2TP_SESSION_MAGIC;
-        session->owner       = current->pid;
-        session->sock        = sk;
-        session->tunnel      = tunnel;
-        session->tunnel_sock = tunnel_sock;
-        session->tunnel_addr = sp->pppol2tp;
-        sprintf(&session->name[0], "sess %hu/%hu",
-                session->tunnel_addr.s_tunnel,
-                session->tunnel_addr.s_session);
-
-        session->stats.tunnel_id  = session->tunnel_addr.s_tunnel;
-        session->stats.session_id = session->tunnel_addr.s_session;
-
-        INIT_HLIST_NODE(&session->hlist);
-
-        /* Inherit debug options from tunnel */
-        session->debug = tunnel->debug;
-
-        /* Default MTU must allow space for UDP/L2TP/PPP
-         * headers.
-         */
-        session->mtu = session->mru = 1500 - PPPOL2TP_HEADER_OVERHEAD;
-
-        /* If PMTU discovery was enabled, use the MTU that was discovered */
-        dst = sk_dst_get(sk);
-        if (dst != NULL) {
-                u32 pmtu = dst_mtu(__sk_dst_get(sk));
-                if (pmtu != 0)
-                        session->mtu = session->mru = pmtu -
-                                PPPOL2TP_HEADER_OVERHEAD;
-                dst_release(dst);
-        }
-
-        /* Special case: if source & dest session_id == 0x0000, this socket is
-         * being created to manage the tunnel. Don't add the session to the
-         * session hash list, just set up the internal context for use by
-         * ioctl() and sockopt() handlers.
-         */
-        if ((session->tunnel_addr.s_session == 0) &&
-            (session->tunnel_addr.d_session == 0)) {
-                error = 0;
-                sk->sk_user_data = session;
-                goto out_no_ppp;
-        }
-
-        /* Get tunnel context from the tunnel socket */
-        tunnel = pppol2tp_sock_to_tunnel(tunnel_sock);
-        if (tunnel == NULL) {
-                error = -EBADF;
-                goto end;
-        }
-
-        /* Right now, because we don't have a way to push the incoming skb's
-         * straight through the UDP layer, the only header we need to worry
-         * about is the L2TP header. This size is different depending on
-         * whether sequence numbers are enabled for the data channel.
-         */
-        po->chan.hdrlen = PPPOL2TP_L2TP_HDR_SIZE_NOSEQ;
-
-        po->chan.private = sk;
-        po->chan.ops     = &pppol2tp_chan_ops;
-        po->chan.mtu     = session->mtu;
-
-        error = ppp_register_net_channel(sock_net(sk), &po->chan);
-        if (error)
-                goto end_put_tun;
-
-        /* This is how we get the session context from the socket. */
-        sk->sk_user_data = session;
-
-        /* Add session to the tunnel's hash list */
-        write_lock_bh(&tunnel->hlist_lock);
-        hlist_add_head(&session->hlist,
-                       pppol2tp_session_id_hash(tunnel,
-                                                session->tunnel_addr.s_session));
-        write_unlock_bh(&tunnel->hlist_lock);
-
-        atomic_inc(&pppol2tp_session_count);
-
-out_no_ppp:
-        pppol2tp_tunnel_inc_refcount(tunnel);
-        sk->sk_state = PPPOX_CONNECTED;
-        PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-               "%s: created\n", session->name);
-
-end_put_tun:
-        sock_put(tunnel_sock);
-end:
-        release_sock(sk);
-
-        if (error != 0) {
-                if (session)
-                        PRINTK(session->debug,
-                                PPPOL2TP_MSG_CONTROL, KERN_WARNING,
-                                "%s: connect failed: %d\n",
-                                session->name, error);
-                else
-                        PRINTK(-1, PPPOL2TP_MSG_CONTROL, KERN_WARNING,
-                                "connect failed: %d\n", error);
-        }
-
-        return error;
-}
-
-/* getname() support.
- */
-static int pppol2tp_getname(struct socket *sock, struct sockaddr *uaddr,
-                            int *usockaddr_len, int peer)
-{
-        int len = sizeof(struct sockaddr_pppol2tp);
-        struct sockaddr_pppol2tp sp;
-        int error = 0;
-        struct pppol2tp_session *session;
-
-        error = -ENOTCONN;
-        if (sock->sk->sk_state != PPPOX_CONNECTED)
-                goto end;
-
-        session = pppol2tp_sock_to_session(sock->sk);
-        if (session == NULL) {
-                error = -EBADF;
-                goto end;
-        }
-
-        sp.sa_family    = AF_PPPOX;
-        sp.sa_protocol  = PX_PROTO_OL2TP;
-        memcpy(&sp.pppol2tp, &session->tunnel_addr,
-               sizeof(struct pppol2tp_addr));
-
-        memcpy(uaddr, &sp, len);
-
-        *usockaddr_len = len;
-
-        error = 0;
-        sock_put(sock->sk);
-
-end:
-        return error;
-}
-
-/****************************************************************************
- * ioctl() handlers.
- *
- * The PPPoX socket is created for L2TP sessions: tunnels have their own UDP
- * sockets. However, in order to control kernel tunnel features, we allow
- * userspace to create a special "tunnel" PPPoX socket which is used for
- * control only.  Tunnel PPPoX sockets have session_id == 0 and simply allow
- * the user application to issue L2TP setsockopt(), getsockopt() and ioctl()
- * calls.
- ****************************************************************************/
-
-/* Session ioctl helper.
- */
-static int pppol2tp_session_ioctl(struct pppol2tp_session *session,
-                                  unsigned int cmd, unsigned long arg)
-{
-        struct ifreq ifr;
-        int err = 0;
-        struct sock *sk = session->sock;
-        int val = (int) arg;
-
-        PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_DEBUG,
-               "%s: pppol2tp_session_ioctl(cmd=%#x, arg=%#lx)\n",
-               session->name, cmd, arg);
-
-        sock_hold(sk);
-
-        switch (cmd) {
-        case SIOCGIFMTU:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                err = -EFAULT;
-                if (copy_from_user(&ifr, (void __user *) arg, sizeof(struct ifreq)))
-                        break;
-                ifr.ifr_mtu = session->mtu;
-                if (copy_to_user((void __user *) arg, &ifr, sizeof(struct ifreq)))
-                        break;
-
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get mtu=%d\n", session->name, session->mtu);
-                err = 0;
-                break;
-
-        case SIOCSIFMTU:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                err = -EFAULT;
-                if (copy_from_user(&ifr, (void __user *) arg, sizeof(struct ifreq)))
-                        break;
-
-                session->mtu = ifr.ifr_mtu;
-
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set mtu=%d\n", session->name, session->mtu);
-                err = 0;
-                break;
-
-        case PPPIOCGMRU:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                err = -EFAULT;
-                if (put_user(session->mru, (int __user *) arg))
-                        break;
-
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get mru=%d\n", session->name, session->mru);
-                err = 0;
-                break;
-
-        case PPPIOCSMRU:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                err = -EFAULT;
-                if (get_user(val,(int __user *) arg))
-                        break;
-
-                session->mru = val;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set mru=%d\n", session->name, session->mru);
-                err = 0;
-                break;
-
-        case PPPIOCGFLAGS:
-                err = -EFAULT;
-                if (put_user(session->flags, (int __user *) arg))
-                        break;
-
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get flags=%d\n", session->name, session->flags);
-                err = 0;
-                break;
-
-        case PPPIOCSFLAGS:
-                err = -EFAULT;
-                if (get_user(val, (int __user *) arg))
-                        break;
-                session->flags = val;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set flags=%d\n", session->name, session->flags);
-                err = 0;
-                break;
-
-        case PPPIOCGL2TPSTATS:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                if (copy_to_user((void __user *) arg, &session->stats,
-                                 sizeof(session->stats)))
-                        break;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get L2TP stats\n", session->name);
-                err = 0;
-                break;
-
-        default:
-                err = -ENOSYS;
-                break;
-        }
-
-        sock_put(sk);
-
-        return err;
-}
-
-/* Tunnel ioctl helper.
- *
- * Note the special handling for PPPIOCGL2TPSTATS below. If the ioctl data
- * specifies a session_id, the session ioctl handler is called. This allows an
- * application to retrieve session stats via a tunnel socket.
- */
-static int pppol2tp_tunnel_ioctl(struct pppol2tp_tunnel *tunnel,
-                                 unsigned int cmd, unsigned long arg)
-{
-        int err = 0;
-        struct sock *sk = tunnel->sock;
-        struct pppol2tp_ioc_stats stats_req;
-
-        PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_DEBUG,
-               "%s: pppol2tp_tunnel_ioctl(cmd=%#x, arg=%#lx)\n", tunnel->name,
-               cmd, arg);
-
-        sock_hold(sk);
-
-        switch (cmd) {
-        case PPPIOCGL2TPSTATS:
-                err = -ENXIO;
-                if (!(sk->sk_state & PPPOX_CONNECTED))
-                        break;
-
-                if (copy_from_user(&stats_req, (void __user *) arg,
-                                   sizeof(stats_req))) {
-                        err = -EFAULT;
-                        break;
-                }
-                if (stats_req.session_id != 0) {
-                        /* resend to session ioctl handler */
-                        struct pppol2tp_session *session =
-                                pppol2tp_session_find(tunnel, stats_req.session_id);
-                        if (session != NULL)
-                                err = pppol2tp_session_ioctl(session, cmd, arg);
-                        else
-                                err = -EBADR;
-                        break;
-                }
-#ifdef CONFIG_XFRM
-                tunnel->stats.using_ipsec = (sk->sk_policy[0] || sk->sk_policy[1]) ? 1 : 0;
-#endif
-                if (copy_to_user((void __user *) arg, &tunnel->stats,
-                                 sizeof(tunnel->stats))) {
-                        err = -EFAULT;
-                        break;
-                }
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get L2TP stats\n", tunnel->name);
-                err = 0;
-                break;
-
-        default:
-                err = -ENOSYS;
-                break;
-        }
-
-        sock_put(sk);
-
-        return err;
-}
-
-/* Main ioctl() handler.
- * Dispatch to tunnel or session helpers depending on the socket.
- */
-static int pppol2tp_ioctl(struct socket *sock, unsigned int cmd,
-                          unsigned long arg)
-{
-        struct sock *sk = sock->sk;
-        struct pppol2tp_session *session;
-        struct pppol2tp_tunnel *tunnel;
-        int err;
-
-        if (!sk)
-                return 0;
-
-        err = -EBADF;
-        if (sock_flag(sk, SOCK_DEAD) != 0)
-                goto end;
-
-        err = -ENOTCONN;
-        if ((sk->sk_user_data == NULL) ||
-            (!(sk->sk_state & (PPPOX_CONNECTED | PPPOX_BOUND))))
-                goto end;
-
-        /* Get session context from the socket */
-        err = -EBADF;
-        session = pppol2tp_sock_to_session(sk);
-        if (session == NULL)
-                goto end;
-
-        /* Special case: if session's session_id is zero, treat ioctl as a
-         * tunnel ioctl
-         */
-        if ((session->tunnel_addr.s_session == 0) &&
-            (session->tunnel_addr.d_session == 0)) {
-                err = -EBADF;
-                tunnel = pppol2tp_sock_to_tunnel(session->tunnel_sock);
-                if (tunnel == NULL)
-                        goto end_put_sess;
-
-                err = pppol2tp_tunnel_ioctl(tunnel, cmd, arg);
-                sock_put(session->tunnel_sock);
-                goto end_put_sess;
-        }
-
-        err = pppol2tp_session_ioctl(session, cmd, arg);
-
-end_put_sess:
-        sock_put(sk);
-end:
-        return err;
-}
-
-/*****************************************************************************
- * setsockopt() / getsockopt() support.
- *
- * The PPPoX socket is created for L2TP sessions: tunnels have their own UDP
- * sockets. In order to control kernel tunnel features, we allow userspace to
- * create a special "tunnel" PPPoX socket which is used for control only.
- * Tunnel PPPoX sockets have session_id == 0 and simply allow the user
- * application to issue L2TP setsockopt(), getsockopt() and ioctl() calls.
- *****************************************************************************/
-
-/* Tunnel setsockopt() helper.
- */
-static int pppol2tp_tunnel_setsockopt(struct sock *sk,
-                                      struct pppol2tp_tunnel *tunnel,
-                                      int optname, int val)
-{
-        int err = 0;
-
-        switch (optname) {
-        case PPPOL2TP_SO_DEBUG:
-                tunnel->debug = val;
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set debug=%x\n", tunnel->name, tunnel->debug);
-                break;
-
-        default:
-                err = -ENOPROTOOPT;
-                break;
-        }
-
-        return err;
-}
-
-/* Session setsockopt helper.
- */
-static int pppol2tp_session_setsockopt(struct sock *sk,
-                                       struct pppol2tp_session *session,
-                                       int optname, int val)
-{
-        int err = 0;
-
-        switch (optname) {
-        case PPPOL2TP_SO_RECVSEQ:
-                if ((val != 0) && (val != 1)) {
-                        err = -EINVAL;
-                        break;
-                }
-                session->recv_seq = val ? -1 : 0;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set recv_seq=%d\n", session->name,
-                       session->recv_seq);
-                break;
-
-        case PPPOL2TP_SO_SENDSEQ:
-                if ((val != 0) && (val != 1)) {
-                        err = -EINVAL;
-                        break;
-                }
-                session->send_seq = val ? -1 : 0;
-                {
-                        struct sock *ssk      = session->sock;
-                        struct pppox_sock *po = pppox_sk(ssk);
-                        po->chan.hdrlen = val ? PPPOL2TP_L2TP_HDR_SIZE_SEQ :
-                                PPPOL2TP_L2TP_HDR_SIZE_NOSEQ;
-                }
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set send_seq=%d\n", session->name, session->send_seq);
-                break;
-
-        case PPPOL2TP_SO_LNSMODE:
-                if ((val != 0) && (val != 1)) {
-                        err = -EINVAL;
-                        break;
-                }
-                session->lns_mode = val ? -1 : 0;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set lns_mode=%d\n", session->name,
-                       session->lns_mode);
-                break;
-
-        case PPPOL2TP_SO_DEBUG:
-                session->debug = val;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set debug=%x\n", session->name, session->debug);
-                break;
-
-        case PPPOL2TP_SO_REORDERTO:
-                session->reorder_timeout = msecs_to_jiffies(val);
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: set reorder_timeout=%d\n", session->name,
-                       session->reorder_timeout);
-                break;
-
-        default:
-                err = -ENOPROTOOPT;
-                break;
-        }
-
-        return err;
-}
-
-/* Main setsockopt() entry point.
- * Does API checks, then calls either the tunnel or session setsockopt
- * handler, according to whether the PPPoL2TP socket is a for a regular
- * session or the special tunnel type.
- */
-static int pppol2tp_setsockopt(struct socket *sock, int level, int optname,
-                               char __user *optval, unsigned int optlen)
-{
-        struct sock *sk = sock->sk;
-        struct pppol2tp_session *session = sk->sk_user_data;
-        struct pppol2tp_tunnel *tunnel;
-        int val;
-        int err;
-
-        if (level != SOL_PPPOL2TP)
-                return udp_prot.setsockopt(sk, level, optname, optval, optlen);
-
-        if (optlen < sizeof(int))
-                return -EINVAL;
-
-        if (get_user(val, (int __user *)optval))
-                return -EFAULT;
-
-        err = -ENOTCONN;
-        if (sk->sk_user_data == NULL)
-                goto end;
-
-        /* Get session context from the socket */
-        err = -EBADF;
-        session = pppol2tp_sock_to_session(sk);
-        if (session == NULL)
-                goto end;
-
-        /* Special case: if session_id == 0x0000, treat as operation on tunnel
-         */
-        if ((session->tunnel_addr.s_session == 0) &&
-            (session->tunnel_addr.d_session == 0)) {
-                err = -EBADF;
-                tunnel = pppol2tp_sock_to_tunnel(session->tunnel_sock);
-                if (tunnel == NULL)
-                        goto end_put_sess;
-
-                err = pppol2tp_tunnel_setsockopt(sk, tunnel, optname, val);
-                sock_put(session->tunnel_sock);
-        } else
-                err = pppol2tp_session_setsockopt(sk, session, optname, val);
-
-        err = 0;
-
-end_put_sess:
-        sock_put(sk);
-end:
-        return err;
-}
-
-/* Tunnel getsockopt helper. Called with sock locked.
- */
-static int pppol2tp_tunnel_getsockopt(struct sock *sk,
-                                      struct pppol2tp_tunnel *tunnel,
-                                      int optname, int *val)
-{
-        int err = 0;
-
-        switch (optname) {
-        case PPPOL2TP_SO_DEBUG:
-                *val = tunnel->debug;
-                PRINTK(tunnel->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get debug=%x\n", tunnel->name, tunnel->debug);
-                break;
-
-        default:
-                err = -ENOPROTOOPT;
-                break;
-        }
-
-        return err;
-}
-
-/* Session getsockopt helper. Called with sock locked.
- */
-static int pppol2tp_session_getsockopt(struct sock *sk,
-                                       struct pppol2tp_session *session,
-                                       int optname, int *val)
-{
-        int err = 0;
-
-        switch (optname) {
-        case PPPOL2TP_SO_RECVSEQ:
-                *val = session->recv_seq;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get recv_seq=%d\n", session->name, *val);
-                break;
-
-        case PPPOL2TP_SO_SENDSEQ:
-                *val = session->send_seq;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get send_seq=%d\n", session->name, *val);
-                break;
-
-        case PPPOL2TP_SO_LNSMODE:
-                *val = session->lns_mode;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get lns_mode=%d\n", session->name, *val);
-                break;
-
-        case PPPOL2TP_SO_DEBUG:
-                *val = session->debug;
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get debug=%d\n", session->name, *val);
-                break;
-
-        case PPPOL2TP_SO_REORDERTO:
-                *val = (int) jiffies_to_msecs(session->reorder_timeout);
-                PRINTK(session->debug, PPPOL2TP_MSG_CONTROL, KERN_INFO,
-                       "%s: get reorder_timeout=%d\n", session->name, *val);
-                break;
-
-        default:
-                err = -ENOPROTOOPT;
-        }
-
-        return err;
-}
-
-/* Main getsockopt() entry point.
- * Does API checks, then calls either the tunnel or session getsockopt
- * handler, according to whether the PPPoX socket is a for a regular session
- * or the special tunnel type.
- */
-static int pppol2tp_getsockopt(struct socket *sock, int level,
-                               int optname, char __user *optval, int __user *optlen)
-{
-        struct sock *sk = sock->sk;
-        struct pppol2tp_session *session = sk->sk_user_data;
-        struct pppol2tp_tunnel *tunnel;
-        int val, len;
-        int err;
-
-        if (level != SOL_PPPOL2TP)
-                return udp_prot.getsockopt(sk, level, optname, optval, optlen);
-
-        if (get_user(len, (int __user *) optlen))
-                return -EFAULT;
-
-        len = min_t(unsigned int, len, sizeof(int));
-
-        if (len < 0)
-                return -EINVAL;
-
-        err = -ENOTCONN;
-        if (sk->sk_user_data == NULL)
-                goto end;
-
-        /* Get the session context */
-        err = -EBADF;
-        session = pppol2tp_sock_to_session(sk);
-        if (session == NULL)
-                goto end;
-
-        /* Special case: if session_id == 0x0000, treat as operation on tunnel */
-        if ((session->tunnel_addr.s_session == 0) &&
-            (session->tunnel_addr.d_session == 0)) {
-                err = -EBADF;
-                tunnel = pppol2tp_sock_to_tunnel(session->tunnel_sock);
-                if (tunnel == NULL)
-                        goto end_put_sess;
-
-                err = pppol2tp_tunnel_getsockopt(sk, tunnel, optname, &val);
-                sock_put(session->tunnel_sock);
-        } else
-                err = pppol2tp_session_getsockopt(sk, session, optname, &val);
-
-        err = -EFAULT;
-        if (put_user(len, (int __user *) optlen))
-                goto end_put_sess;
-
-        if (copy_to_user((void __user *) optval, &val, len))
-                goto end_put_sess;
-
-        err = 0;
-
-end_put_sess:
-        sock_put(sk);
-end:
-        return err;
-}
-
-/*****************************************************************************
- * /proc filesystem for debug
- *****************************************************************************/
-
-#ifdef CONFIG_PROC_FS
-
-#include <linux/seq_file.h>
-
-struct pppol2tp_seq_data {
-        struct seq_net_private p;
-        struct pppol2tp_tunnel *tunnel;         /* current tunnel */
-        struct pppol2tp_session *session;       /* NULL means get first session in tunnel */
-};
-
-static struct pppol2tp_session *next_session(struct pppol2tp_tunnel *tunnel, struct pppol2tp_session *curr)
-{
-        struct pppol2tp_session *session = NULL;
-        struct hlist_node *walk;
-        int found = 0;
-        int next = 0;
-        int i;
-
-        read_lock_bh(&tunnel->hlist_lock);
-        for (i = 0; i < PPPOL2TP_HASH_SIZE; i++) {
-                hlist_for_each_entry(session, walk, &tunnel->session_hlist[i], hlist) {
-                        if (curr == NULL) {
-                                found = 1;
-                                goto out;
-                        }
-                        if (session == curr) {
-                                next = 1;
-                                continue;
-                        }
-                        if (next) {
-                                found = 1;
-                                goto out;
-                        }
-                }
-        }
-out:
-        read_unlock_bh(&tunnel->hlist_lock);
-        if (!found)
-                session = NULL;
-
-        return session;
-}
-
-static struct pppol2tp_tunnel *next_tunnel(struct pppol2tp_net *pn,
-                                           struct pppol2tp_tunnel *curr)
-{
-        struct pppol2tp_tunnel *tunnel = NULL;
-
-        read_lock_bh(&pn->pppol2tp_tunnel_list_lock);
-        if (list_is_last(&curr->list, &pn->pppol2tp_tunnel_list)) {
-                goto out;
-        }
-        tunnel = list_entry(curr->list.next, struct pppol2tp_tunnel, list);
-out:
-        read_unlock_bh(&pn->pppol2tp_tunnel_list_lock);
-
-        return tunnel;
-}
-
-static void *pppol2tp_seq_start(struct seq_file *m, loff_t *offs)
-{
-        struct pppol2tp_seq_data *pd = SEQ_START_TOKEN;
-        struct pppol2tp_net *pn;
-        loff_t pos = *offs;
-
-        if (!pos)
-                goto out;
-
-        BUG_ON(m->private == NULL);
-        pd = m->private;
-        pn = pppol2tp_pernet(seq_file_net(m));
-
-        if (pd->tunnel == NULL) {
-                if (!list_empty(&pn->pppol2tp_tunnel_list))
-                        pd->tunnel = list_entry(pn->pppol2tp_tunnel_list.next, struct pppol2tp_tunnel, list);
-        } else {
-                pd->session = next_session(pd->tunnel, pd->session);
-                if (pd->session == NULL) {
-                        pd->tunnel = next_tunnel(pn, pd->tunnel);
-                }
-        }
-
-        /* NULL tunnel and session indicates end of list */
-        if ((pd->tunnel == NULL) && (pd->session == NULL))
-                pd = NULL;
-
-out:
-        return pd;
-}
-
-static void *pppol2tp_seq_next(struct seq_file *m, void *v, loff_t *pos)
-{
-        (*pos)++;
-        return NULL;
-}
-
-static void pppol2tp_seq_stop(struct seq_file *p, void *v)
-{
-        /* nothing to do */
-}
-
-static void pppol2tp_seq_tunnel_show(struct seq_file *m, void *v)
-{
-        struct pppol2tp_tunnel *tunnel = v;
-
-        seq_printf(m, "\nTUNNEL '%s', %c %d\n",
-                   tunnel->name,
-                   (tunnel == tunnel->sock->sk_user_data) ? 'Y':'N',
-                   atomic_read(&tunnel->ref_count) - 1);
-        seq_printf(m, " %08x %llu/%llu/%llu %llu/%llu/%llu\n",
-                   tunnel->debug,
-                   (unsigned long long)tunnel->stats.tx_packets,
-                   (unsigned long long)tunnel->stats.tx_bytes,
-                   (unsigned long long)tunnel->stats.tx_errors,
-                   (unsigned long long)tunnel->stats.rx_packets,
-                   (unsigned long long)tunnel->stats.rx_bytes,
-                   (unsigned long long)tunnel->stats.rx_errors);
-}
-
-static void pppol2tp_seq_session_show(struct seq_file *m, void *v)
-{
-        struct pppol2tp_session *session = v;
-
-        seq_printf(m, "  SESSION '%s' %08X/%d %04X/%04X -> "
-                   "%04X/%04X %d %c\n",
-                   session->name,
-                   ntohl(session->tunnel_addr.addr.sin_addr.s_addr),
-                   ntohs(session->tunnel_addr.addr.sin_port),
-                   session->tunnel_addr.s_tunnel,
-                   session->tunnel_addr.s_session,
-                   session->tunnel_addr.d_tunnel,
-                   session->tunnel_addr.d_session,
-                   session->sock->sk_state,
-                   (session == session->sock->sk_user_data) ?
-                   'Y' : 'N');
-        seq_printf(m, "   %d/%d/%c/%c/%s %08x %u\n",
-                   session->mtu, session->mru,
-                   session->recv_seq ? 'R' : '-',
-                   session->send_seq ? 'S' : '-',
-                   session->lns_mode ? "LNS" : "LAC",
-                   session->debug,
-                   jiffies_to_msecs(session->reorder_timeout));
-        seq_printf(m, "   %hu/%hu %llu/%llu/%llu %llu/%llu/%llu\n",
-                   session->nr, session->ns,
-                   (unsigned long long)session->stats.tx_packets,
-                   (unsigned long long)session->stats.tx_bytes,
-                   (unsigned long long)session->stats.tx_errors,
-                   (unsigned long long)session->stats.rx_packets,
-                   (unsigned long long)session->stats.rx_bytes,
-                   (unsigned long long)session->stats.rx_errors);
-}
-
-static int pppol2tp_seq_show(struct seq_file *m, void *v)
-{
-        struct pppol2tp_seq_data *pd = v;
-
-        /* display header on line 1 */
-        if (v == SEQ_START_TOKEN) {
-                seq_puts(m, "PPPoL2TP driver info, " PPPOL2TP_DRV_VERSION "\n");
-                seq_puts(m, "TUNNEL name, user-data-ok session-count\n");
-                seq_puts(m, " debug tx-pkts/bytes/errs rx-pkts/bytes/errs\n");
-                seq_puts(m, "  SESSION name, addr/port src-tid/sid "
-                         "dest-tid/sid state user-data-ok\n");
-                seq_puts(m, "   mtu/mru/rcvseq/sendseq/lns debug reorderto\n");
-                seq_puts(m, "   nr/ns tx-pkts/bytes/errs rx-pkts/bytes/errs\n");
-                goto out;
-        }
-
-        /* Show the tunnel or session context.
-         */
-        if (pd->session == NULL)
-                pppol2tp_seq_tunnel_show(m, pd->tunnel);
-        else
-                pppol2tp_seq_session_show(m, pd->session);
-
-out:
-        return 0;
-}
-
-static const struct seq_operations pppol2tp_seq_ops = {
-        .start          = pppol2tp_seq_start,
-        .next           = pppol2tp_seq_next,
-        .stop           = pppol2tp_seq_stop,
-        .show           = pppol2tp_seq_show,
-};
-
-/* Called when our /proc file is opened. We allocate data for use when
- * iterating our tunnel / session contexts and store it in the private
- * data of the seq_file.
- */
-static int pppol2tp_proc_open(struct inode *inode, struct file *file)
-{
-        return seq_open_net(inode, file, &pppol2tp_seq_ops,
-                            sizeof(struct pppol2tp_seq_data));
-}
-
-static const struct file_operations pppol2tp_proc_fops = {
-        .owner          = THIS_MODULE,
-        .open           = pppol2tp_proc_open,
-        .read           = seq_read,
-        .llseek         = seq_lseek,
-        .release        = seq_release_net,
-};
-
-#endif /* CONFIG_PROC_FS */
-
-/*****************************************************************************
- * Init and cleanup
- *****************************************************************************/
-
-static const struct proto_ops pppol2tp_ops = {
-        .family         = AF_PPPOX,
-        .owner          = THIS_MODULE,
-        .release        = pppol2tp_release,
-        .bind           = sock_no_bind,
-        .connect        = pppol2tp_connect,
-        .socketpair     = sock_no_socketpair,
-        .accept         = sock_no_accept,
-        .getname        = pppol2tp_getname,
-        .poll           = datagram_poll,
-        .listen         = sock_no_listen,
-        .shutdown       = sock_no_shutdown,
-        .setsockopt     = pppol2tp_setsockopt,
-        .getsockopt     = pppol2tp_getsockopt,
-        .sendmsg        = pppol2tp_sendmsg,
-        .recvmsg        = pppol2tp_recvmsg,
-        .mmap           = sock_no_mmap,
-        .ioctl          = pppox_ioctl,
-};
-
-static struct pppox_proto pppol2tp_proto = {
-        .create         = pppol2tp_create,
-        .ioctl          = pppol2tp_ioctl
-};
-
-static __net_init int pppol2tp_init_net(struct net *net)
-{
-        struct pppol2tp_net *pn = pppol2tp_pernet(net);
-        struct proc_dir_entry *pde;
-
-        INIT_LIST_HEAD(&pn->pppol2tp_tunnel_list);
-        rwlock_init(&pn->pppol2tp_tunnel_list_lock);
-
-        pde = proc_net_fops_create(net, "pppol2tp", S_IRUGO, &pppol2tp_proc_fops);
-#ifdef CONFIG_PROC_FS
-        if (!pde)
-                return -ENOMEM;
-#endif
-
-        return 0;
-}
-
-static __net_exit void pppol2tp_exit_net(struct net *net)
-{
-        proc_net_remove(net, "pppol2tp");
-}
-
-static struct pernet_operations pppol2tp_net_ops = {
-        .init = pppol2tp_init_net,
-        .exit = pppol2tp_exit_net,
-        .id   = &pppol2tp_net_id,
-        .size = sizeof(struct pppol2tp_net),
-};
-
-static int __init pppol2tp_init(void)
-{
-        int err;
-
-        err = proto_register(&pppol2tp_sk_proto, 0);
-        if (err)
-                goto out;
-        err = register_pppox_proto(PX_PROTO_OL2TP, &pppol2tp_proto);
-        if (err)
-                goto out_unregister_pppol2tp_proto;
-
-        err = register_pernet_device(&pppol2tp_net_ops);
-        if (err)
-                goto out_unregister_pppox_proto;
-
-        printk(KERN_INFO "PPPoL2TP kernel driver, %s\n",
-               PPPOL2TP_DRV_VERSION);
-
-out:
-        return err;
-out_unregister_pppox_proto:
-        unregister_pppox_proto(PX_PROTO_OL2TP);
-out_unregister_pppol2tp_proto:
-        proto_unregister(&pppol2tp_sk_proto);
-        goto out;
-}
-
-static void __exit pppol2tp_exit(void)
-{
-        unregister_pppox_proto(PX_PROTO_OL2TP);
-        unregister_pernet_device(&pppol2tp_net_ops);
-        proto_unregister(&pppol2tp_sk_proto);
-}
-
-module_init(pppol2tp_init);
-module_exit(pppol2tp_exit);
-
-MODULE_AUTHOR("Martijn van Oosterhout <kleptog@svana.org>, "
-              "James Chapman <jchapman@katalix.com>");
-MODULE_DESCRIPTION("PPP over L2TP over UDP");
-MODULE_LICENSE("GPL");
-MODULE_VERSION(PPPOL2TP_DRV_VERSION);
diff --git a/drivers/net/ps3_gelic_net.c b/drivers/net/ps3_gelic_net.c
index a849f6f23a17..fed5df9c5ea1 100644
--- a/drivers/net/ps3_gelic_net.c
+++ b/drivers/net/ps3_gelic_net.c
@@ -326,7 +326,7 @@ static int gelic_descr_prepare_rx(struct gelic_card *card,
         unsigned int bufsize;
 
         if (gelic_descr_get_status(descr) !=  GELIC_DESCR_DMA_NOT_IN_USE)
-                dev_info(ctodev(card), "%s: ERROR status \n", __func__);
+                dev_info(ctodev(card), "%s: ERROR status\n", __func__);
         /* we need to round up the buffer size to a multiple of 128 */
         bufsize = ALIGN(GELIC_NET_MAX_MTU, GELIC_NET_RXBUF_ALIGN);
 
@@ -546,7 +546,7 @@ out:
 void gelic_net_set_multi(struct net_device *netdev)
 {
         struct gelic_card *card = netdev_card(netdev);
-        struct dev_mc_list *mc;
+        struct netdev_hw_addr *ha;
         unsigned int i;
         uint8_t *p;
         u64 addr;
@@ -580,9 +580,9 @@ void gelic_net_set_multi(struct net_device *netdev)
         }
 
         /* set multicast addresses */
-        netdev_for_each_mc_addr(mc, netdev) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 addr = 0;
-                p = mc->dmi_addr;
+                p = ha->addr;
                 for (i = 0; i < ETH_ALEN; i++) {
                         addr <<= 8;
                         addr |= *p++;
@@ -1434,7 +1434,7 @@ static void gelic_net_tx_timeout_task(struct work_struct *work)
                 container_of(work, struct gelic_card, tx_timeout_task);
         struct net_device *netdev = card->netdev[GELIC_PORT_ETHERNET_0];
 
-        dev_info(ctodev(card), "%s:Timed out. Restarting... \n", __func__);
+        dev_info(ctodev(card), "%s:Timed out. Restarting...\n", __func__);
 
         if (!(netdev->flags & IFF_UP))
                 goto out;
diff --git a/drivers/net/ps3_gelic_wireless.c b/drivers/net/ps3_gelic_wireless.c
index 2663b2fdc0bb..a9153a3481e1 100644
--- a/drivers/net/ps3_gelic_wireless.c
+++ b/drivers/net/ps3_gelic_wireless.c
@@ -527,7 +527,7 @@ static void gelic_wl_parse_ie(u8 *data, size_t len,
         u8 item_len;
         u8 item_id;
 
-        pr_debug("%s: data=%p len=%ld \n", __func__,
+        pr_debug("%s: data=%p len=%ld\n", __func__,
                  data, len);
         memset(ie_info, 0, sizeof(struct ie_info));
 
@@ -978,7 +978,7 @@ static int gelic_wl_set_essid(struct net_device *netdev,
                 pr_debug("%s: essid = '%s'\n", __func__, extra);
                 set_bit(GELIC_WL_STAT_ESSID_SET, &wl->stat);
         } else {
-                pr_debug("%s: ESSID any \n", __func__);
+                pr_debug("%s: ESSID any\n", __func__);
                 clear_bit(GELIC_WL_STAT_ESSID_SET, &wl->stat);
         }
         set_bit(GELIC_WL_STAT_CONFIGURED, &wl->stat);
@@ -986,7 +986,7 @@ static int gelic_wl_set_essid(struct net_device *netdev,
 
 
         gelic_wl_try_associate(netdev); /* FIXME */
-        pr_debug("%s: -> \n", __func__);
+        pr_debug("%s: ->\n", __func__);
         return 0;
 }
 
@@ -997,7 +997,7 @@ static int gelic_wl_get_essid(struct net_device *netdev,
         struct gelic_wl_info *wl = port_wl(netdev_priv(netdev));
         unsigned long irqflag;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         mutex_lock(&wl->assoc_stat_lock);
         spin_lock_irqsave(&wl->lock, irqflag);
         if (test_bit(GELIC_WL_STAT_ESSID_SET, &wl->stat) ||
@@ -1010,7 +1010,7 @@ static int gelic_wl_get_essid(struct net_device *netdev,
 
         mutex_unlock(&wl->assoc_stat_lock);
         spin_unlock_irqrestore(&wl->lock, irqflag);
-        pr_debug("%s: -> len=%d \n", __func__, data->essid.length);
+        pr_debug("%s: -> len=%d\n", __func__, data->essid.length);
 
         return 0;
 }
@@ -1027,7 +1027,7 @@ static int gelic_wl_set_encode(struct net_device *netdev,
         int key_index, index_specified;
         int ret = 0;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         flags = enc->flags & IW_ENCODE_FLAGS;
         key_index = enc->flags & IW_ENCODE_INDEX;
 
@@ -1086,7 +1086,7 @@ static int gelic_wl_set_encode(struct net_device *netdev,
         set_bit(GELIC_WL_STAT_CONFIGURED, &wl->stat);
 done:
         spin_unlock_irqrestore(&wl->lock, irqflag);
-        pr_debug("%s: -> \n", __func__);
+        pr_debug("%s: ->\n", __func__);
         return ret;
 }
 
@@ -1100,7 +1100,7 @@ static int gelic_wl_get_encode(struct net_device *netdev,
         unsigned int key_index, index_specified;
         int ret = 0;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         key_index = enc->flags & IW_ENCODE_INDEX;
         pr_debug("%s: flag=%#x point=%p len=%d extra=%p\n", __func__,
                  enc->flags, enc->pointer, enc->length, extra);
@@ -1214,7 +1214,7 @@ static int gelic_wl_set_encodeext(struct net_device *netdev,
         int key_index;
         int ret = 0;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         flags = enc->flags & IW_ENCODE_FLAGS;
         alg = ext->alg;
         key_index = enc->flags & IW_ENCODE_INDEX;
@@ -1287,7 +1287,7 @@ static int gelic_wl_set_encodeext(struct net_device *netdev,
         }
 done:
         spin_unlock_irqrestore(&wl->lock, irqflag);
-        pr_debug("%s: -> \n", __func__);
+        pr_debug("%s: ->\n", __func__);
         return ret;
 }
 
@@ -1303,7 +1303,7 @@ static int gelic_wl_get_encodeext(struct net_device *netdev,
         int ret = 0;
         int max_key_len;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
 
         max_key_len = enc->length - sizeof(struct iw_encode_ext);
         if (max_key_len < 0)
@@ -1358,7 +1358,7 @@ static int gelic_wl_get_encodeext(struct net_device *netdev,
         }
 out:
         spin_unlock_irqrestore(&wl->lock, irqflag);
-        pr_debug("%s: -> \n", __func__);
+        pr_debug("%s: ->\n", __func__);
         return ret;
 }
 /* SIOC{S,G}IWMODE */
@@ -1369,7 +1369,7 @@ static int gelic_wl_set_mode(struct net_device *netdev,
         __u32 mode = data->mode;
         int ret;
 
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         if (mode == IW_MODE_INFRA)
                 ret = 0;
         else
@@ -1383,7 +1383,7 @@ static int gelic_wl_get_mode(struct net_device *netdev,
                              union iwreq_data *data, char *extra)
 {
         __u32 *mode = &data->mode;
-        pr_debug("%s: <- \n", __func__);
+        pr_debug("%s: <-\n", __func__);
         *mode = IW_MODE_INFRA;
         pr_debug("%s: ->\n", __func__);
         return 0;
@@ -2021,7 +2021,7 @@ static int gelic_wl_associate_bss(struct gelic_wl_info *wl,
 
         if (!rc) {
                 /* timeouted.  Maybe key or cyrpt mode is wrong */
-                pr_info("%s: connect timeout \n", __func__);
+                pr_info("%s: connect timeout\n", __func__);
                 cmd = gelic_eurus_sync_cmd(wl, GELIC_EURUS_CMD_DISASSOC,
                                            NULL, 0);
                 kfree(cmd);
@@ -2062,7 +2062,7 @@ static void gelic_wl_connected_event(struct gelic_wl_info *wl,
         }
 
         if (desired_event == event) {
-                pr_debug("%s: completed \n", __func__);
+                pr_debug("%s: completed\n", __func__);
                 complete(&wl->assoc_done);
                 netif_carrier_on(port_to_netdev(wl_port(wl)));
         } else
@@ -2279,26 +2279,25 @@ void gelic_wl_interrupt(struct net_device *netdev, u64 status)
 /*
  * driver helpers
  */
-#define IW_IOCTL(n) [(n) - SIOCSIWCOMMIT]
 static const iw_handler gelic_wl_wext_handler[] =
 {
-        IW_IOCTL(SIOCGIWNAME)           = gelic_wl_get_name,
-        IW_IOCTL(SIOCGIWRANGE)          = gelic_wl_get_range,
-        IW_IOCTL(SIOCSIWSCAN)           = gelic_wl_set_scan,
-        IW_IOCTL(SIOCGIWSCAN)           = gelic_wl_get_scan,
-        IW_IOCTL(SIOCSIWAUTH)           = gelic_wl_set_auth,
-        IW_IOCTL(SIOCGIWAUTH)           = gelic_wl_get_auth,
-        IW_IOCTL(SIOCSIWESSID)          = gelic_wl_set_essid,
-        IW_IOCTL(SIOCGIWESSID)          = gelic_wl_get_essid,
-        IW_IOCTL(SIOCSIWENCODE)         = gelic_wl_set_encode,
-        IW_IOCTL(SIOCGIWENCODE)         = gelic_wl_get_encode,
-        IW_IOCTL(SIOCSIWAP)             = gelic_wl_set_ap,
-        IW_IOCTL(SIOCGIWAP)             = gelic_wl_get_ap,
-        IW_IOCTL(SIOCSIWENCODEEXT)      = gelic_wl_set_encodeext,
-        IW_IOCTL(SIOCGIWENCODEEXT)      = gelic_wl_get_encodeext,
-        IW_IOCTL(SIOCSIWMODE)           = gelic_wl_set_mode,
-        IW_IOCTL(SIOCGIWMODE)           = gelic_wl_get_mode,
-        IW_IOCTL(SIOCGIWNICKN)          = gelic_wl_get_nick,
+        IW_HANDLER(SIOCGIWNAME, gelic_wl_get_name),
+        IW_HANDLER(SIOCGIWRANGE, gelic_wl_get_range),
+        IW_HANDLER(SIOCSIWSCAN, gelic_wl_set_scan),
+        IW_HANDLER(SIOCGIWSCAN, gelic_wl_get_scan),
+        IW_HANDLER(SIOCSIWAUTH, gelic_wl_set_auth),
+        IW_HANDLER(SIOCGIWAUTH, gelic_wl_get_auth),
+        IW_HANDLER(SIOCSIWESSID, gelic_wl_set_essid),
+        IW_HANDLER(SIOCGIWESSID, gelic_wl_get_essid),
+        IW_HANDLER(SIOCSIWENCODE, gelic_wl_set_encode),
+        IW_HANDLER(SIOCGIWENCODE, gelic_wl_get_encode),
+        IW_HANDLER(SIOCSIWAP, gelic_wl_set_ap),
+        IW_HANDLER(SIOCGIWAP, gelic_wl_get_ap),
+        IW_HANDLER(SIOCSIWENCODEEXT, gelic_wl_set_encodeext),
+        IW_HANDLER(SIOCGIWENCODEEXT, gelic_wl_get_encodeext),
+        IW_HANDLER(SIOCSIWMODE, gelic_wl_set_mode),
+        IW_HANDLER(SIOCGIWMODE, gelic_wl_get_mode),
+        IW_HANDLER(SIOCGIWNICKN, gelic_wl_get_nick),
 };
 
 static const struct iw_handler_def gelic_wl_wext_handler_def = {
@@ -2317,7 +2316,7 @@ static struct net_device * __devinit gelic_wl_alloc(struct gelic_card *card)
         pr_debug("%s:start\n", __func__);
         netdev = alloc_etherdev(sizeof(struct gelic_port) +
                                 sizeof(struct gelic_wl_info));
-        pr_debug("%s: netdev =%p card=%p \np", __func__, netdev, card);
+        pr_debug("%s: netdev =%p card=%p\n", __func__, netdev, card);
         if (!netdev)
                 return NULL;
 
diff --git a/drivers/net/qla3xxx.c b/drivers/net/qla3xxx.c
index 4ef0afbcbe1b..fc11ad3f64b0 100644
--- a/drivers/net/qla3xxx.c
+++ b/drivers/net/qla3xxx.c
@@ -2258,7 +2258,7 @@ static int ql_tx_rx_clean(struct ql3_adapter *qdev,
                                        "%x.\n",
                                        ndev->name, net_rsp->opcode);
                                 printk(KERN_ERR PFX
-                                       "0x%08lx 0x%08lx 0x%08lx 0x%08lx \n",
+                                       "0x%08lx 0x%08lx 0x%08lx 0x%08lx\n",
                                        (unsigned long int)tmp[0],
                                        (unsigned long int)tmp[1],
                                        (unsigned long int)tmp[2],
diff --git a/drivers/net/qlcnic/qlcnic.h b/drivers/net/qlcnic/qlcnic.h
index 0da94b208db1..28c148cbe37b 100644
--- a/drivers/net/qlcnic/qlcnic.h
+++ b/drivers/net/qlcnic/qlcnic.h
@@ -51,8 +51,8 @@
 
 #define _QLCNIC_LINUX_MAJOR 5
 #define _QLCNIC_LINUX_MINOR 0
-#define _QLCNIC_LINUX_SUBVERSION 0
-#define QLCNIC_LINUX_VERSIONID  "5.0.0"
+#define _QLCNIC_LINUX_SUBVERSION 1
+#define QLCNIC_LINUX_VERSIONID  "5.0.1"
 
 #define QLCNIC_VERSION_CODE(a, b, c)    (((a) << 24) + ((b) << 16) + (c))
 #define _major(v)       (((v) >> 24) & 0xff)
@@ -958,8 +958,10 @@ struct qlcnic_adapter {
         u8 dev_state;
         u8 diag_test;
         u8 diag_cnt;
+        u8 reset_ack_timeo;
+        u8 dev_init_timeo;
         u8 rsrd1;
-        u16 rsrd2;
+        u16 msg_enable;
 
         u8 mac_addr[ETH_ALEN];
 
@@ -994,6 +996,11 @@ u32 qlcnic_hw_read_wx_2M(struct qlcnic_adapter *adapter, ulong off);
 int qlcnic_hw_write_wx_2M(struct qlcnic_adapter *, ulong off, u32 data);
 int qlcnic_pci_mem_write_2M(struct qlcnic_adapter *, u64 off, u64 data);
 int qlcnic_pci_mem_read_2M(struct qlcnic_adapter *, u64 off, u64 *data);
+void qlcnic_pci_camqm_read_2M(struct qlcnic_adapter *, u64, u64 *);
+void qlcnic_pci_camqm_write_2M(struct qlcnic_adapter *, u64, u64);
+
+#define ADDR_IN_RANGE(addr, low, high)  \
+        (((addr) < (high)) && ((addr) >= (low)))
 
 #define QLCRD32(adapter, off) \
         (qlcnic_hw_read_wx_2M(adapter, off))
@@ -1035,6 +1042,7 @@ int qlcnic_need_fw_reset(struct qlcnic_adapter *adapter);
 void qlcnic_request_firmware(struct qlcnic_adapter *adapter);
 void qlcnic_release_firmware(struct qlcnic_adapter *adapter);
 int qlcnic_pinit_from_rom(struct qlcnic_adapter *adapter);
+void qlcnic_setup_idc_param(struct qlcnic_adapter *adapter);
 
 int qlcnic_rom_fast_read(struct qlcnic_adapter *adapter, int addr, int *valp);
 int qlcnic_rom_fast_read_words(struct qlcnic_adapter *adapter, int addr,
@@ -1128,4 +1136,11 @@ static inline u32 qlcnic_tx_avail(struct qlcnic_host_tx_ring *tx_ring)
 
 extern const struct ethtool_ops qlcnic_ethtool_ops;
 
+#define QLCDB(adapter, lvl, _fmt, _args...) do {        \
+        if (NETIF_MSG_##lvl & adapter->msg_enable)      \
+                printk(KERN_INFO "%s: %s: " _fmt,       \
+                         dev_name(&adapter->pdev->dev), \
+                        __func__, ##_args);             \
+        } while (0)
+
 #endif                          /* __QLCNIC_H_ */
diff --git a/drivers/net/qlcnic/qlcnic_ethtool.c b/drivers/net/qlcnic/qlcnic_ethtool.c
index f83e15fe3e1b..08d6f105371f 100644
--- a/drivers/net/qlcnic/qlcnic_ethtool.c
+++ b/drivers/net/qlcnic/qlcnic_ethtool.c
@@ -998,6 +998,20 @@ static int qlcnic_set_flags(struct net_device *netdev, u32 data)
         return 0;
 }
 
+static u32 qlcnic_get_msglevel(struct net_device *netdev)
+{
+        struct qlcnic_adapter *adapter = netdev_priv(netdev);
+
+        return adapter->msg_enable;
+}
+
+static void qlcnic_set_msglevel(struct net_device *netdev, u32 msglvl)
+{
+        struct qlcnic_adapter *adapter = netdev_priv(netdev);
+
+        adapter->msg_enable = msglvl;
+}
+
 const struct ethtool_ops qlcnic_ethtool_ops = {
         .get_settings = qlcnic_get_settings,
         .set_settings = qlcnic_set_settings,
@@ -1029,4 +1043,6 @@ const struct ethtool_ops qlcnic_ethtool_ops = {
         .get_flags = ethtool_op_get_flags,
         .set_flags = qlcnic_set_flags,
         .phys_id = qlcnic_blink_led,
+        .set_msglevel = qlcnic_set_msglevel,
+        .get_msglevel = qlcnic_get_msglevel,
 };
diff --git a/drivers/net/qlcnic/qlcnic_hdr.h b/drivers/net/qlcnic/qlcnic_hdr.h
index 0469f84360a4..51fa3fbcf58a 100644
--- a/drivers/net/qlcnic/qlcnic_hdr.h
+++ b/drivers/net/qlcnic/qlcnic_hdr.h
@@ -435,9 +435,10 @@ enum {
 #define QLCNIC_PCI_MS_2M        (0x80000)
 #define QLCNIC_PCI_OCM0_2M      (0x000c0000UL)
 #define QLCNIC_PCI_CRBSPACE     (0x06000000UL)
+#define QLCNIC_PCI_CAMQM        (0x04800000UL)
+#define QLCNIC_PCI_CAMQM_END    (0x04800800UL)
 #define QLCNIC_PCI_2MB_SIZE     (0x00200000UL)
 #define QLCNIC_PCI_CAMQM_2M_BASE        (0x000ff800UL)
-#define QLCNIC_PCI_CAMQM_2M_END         (0x04800800UL)
 
 #define QLCNIC_CRB_CAM  QLCNIC_PCI_CRB_WINDOW(QLCNIC_HW_PX_MAP_CRB_CAM)
 
@@ -448,7 +449,7 @@ enum {
 #define QLCNIC_ADDR_OCM1        (0x0000000200400000ULL)
 #define QLCNIC_ADDR_OCM1_MAX    (0x00000002004fffffULL)
 #define QLCNIC_ADDR_QDR_NET     (0x0000000300000000ULL)
-#define QLCNIC_ADDR_QDR_NET_MAX_P3 (0x0000000303ffffffULL)
+#define QLCNIC_ADDR_QDR_NET_MAX (0x0000000307ffffffULL)
 
 /*
  *   Register offsets for MN
@@ -694,6 +695,8 @@ enum {
 #define QLCNIC_CRB_DRV_SCRATCH             (QLCNIC_CAM_RAM(0x148))
 #define QLCNIC_CRB_DEV_PARTITION_INFO      (QLCNIC_CAM_RAM(0x14c))
 #define QLCNIC_CRB_DRV_IDC_VER             (QLCNIC_CAM_RAM(0x14c))
+#define QLCNIC_ROM_DEV_INIT_TIMEOUT     (0x3e885c)
+#define QLCNIC_ROM_DRV_RESET_TIMEOUT    (0x3e8860)
 
                  /* Device State */
 #define QLCNIC_DEV_COLD                 1
diff --git a/drivers/net/qlcnic/qlcnic_hw.c b/drivers/net/qlcnic/qlcnic_hw.c
index da00e162b6d3..9a1daa4ebe22 100644
--- a/drivers/net/qlcnic/qlcnic_hw.c
+++ b/drivers/net/qlcnic/qlcnic_hw.c
@@ -53,21 +53,6 @@ static inline void writeq(u64 val, void __iomem *addr)
 }
 #endif
 
-#define ADDR_IN_RANGE(addr, low, high)  \
-        (((addr) < (high)) && ((addr) >= (low)))
-
-#define PCI_OFFSET_FIRST_RANGE(adapter, off)    \
-        ((adapter)->ahw.pci_base0 + (off))
-
-static void __iomem *pci_base_offset(struct qlcnic_adapter *adapter,
-                                            unsigned long off)
-{
-        if (ADDR_IN_RANGE(off, FIRST_PAGE_GROUP_START, FIRST_PAGE_GROUP_END))
-                return PCI_OFFSET_FIRST_RANGE(adapter, off);
-
-        return NULL;
-}
-
 static const struct crb_128M_2M_block_map
 crb_128M_2M_map[64] __cacheline_aligned_in_smp = {
     {{{0, 0,         0,         0} } },         /* 0: PCI */
@@ -309,8 +294,12 @@ qlcnic_pcie_sem_lock(struct qlcnic_adapter *adapter, int sem, u32 id_reg)
                 done = QLCRD32(adapter, QLCNIC_PCIE_REG(PCIE_SEM_LOCK(sem)));
                 if (done == 1)
                         break;
-                if (++timeout >= QLCNIC_PCIE_SEM_TIMEOUT)
+                if (++timeout >= QLCNIC_PCIE_SEM_TIMEOUT) {
+                        dev_err(&adapter->pdev->dev,
+                                "Failed to acquire sem=%d lock;reg_id=%d\n",
+                                sem, id_reg);
                         return -EIO;
+                }
                 msleep(1);
         }
 
@@ -426,7 +415,7 @@ static int qlcnic_nic_add_mac(struct qlcnic_adapter *adapter, u8 *addr)
 void qlcnic_set_multi(struct net_device *netdev)
 {
         struct qlcnic_adapter *adapter = netdev_priv(netdev);
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
         u32 mode = VPORT_MISS_MODE_DROP;
 
@@ -445,8 +434,8 @@ void qlcnic_set_multi(struct net_device *netdev)
         }
 
         if (!netdev_mc_empty(netdev)) {
-                netdev_for_each_mc_addr(mc_ptr, netdev) {
-                        qlcnic_nic_add_mac(adapter, mc_ptr->dmi_addr);
+                netdev_for_each_mc_addr(ha, netdev) {
+                        qlcnic_nic_add_mac(adapter, ha->addr);
                 }
         }
 
@@ -874,13 +863,6 @@ qlcnic_pci_set_window_2M(struct qlcnic_adapter *adapter,
                 u64 addr, u32 *start)
 {
         u32 window;
-        struct pci_dev *pdev = adapter->pdev;
-
-        if ((addr & 0x00ff800) == 0xff800) {
-                if (printk_ratelimit())
-                        dev_warn(&pdev->dev, "QM access not handled\n");
-                return -EIO;
-        }
 
         window = OCM_WIN_P3P(addr);
 
@@ -897,8 +879,7 @@ static int
 qlcnic_pci_mem_access_direct(struct qlcnic_adapter *adapter, u64 off,
                 u64 *data, int op)
 {
-        void __iomem *addr, *mem_ptr = NULL;
-        resource_size_t mem_base;
+        void __iomem *addr;
         int ret;
         u32 start;
 
@@ -908,21 +889,8 @@ qlcnic_pci_mem_access_direct(struct qlcnic_adapter *adapter, u64 off,
         if (ret != 0)
                 goto unlock;
 
-        addr = pci_base_offset(adapter, start);
-        if (addr)
-                goto noremap;
+        addr = adapter->ahw.pci_base0 + start;
 
-        mem_base = pci_resource_start(adapter->pdev, 0) + (start & PAGE_MASK);
-
-        mem_ptr = ioremap(mem_base, PAGE_SIZE);
-        if (mem_ptr == NULL) {
-                ret = -EIO;
-                goto unlock;
-        }
-
-        addr = mem_ptr + (start & (PAGE_SIZE - 1));
-
-noremap:
         if (op == 0)    /* read */
                 *data = readq(addr);
         else            /* write */
@@ -931,11 +899,31 @@ noremap:
 unlock:
         mutex_unlock(&adapter->ahw.mem_lock);
 
-        if (mem_ptr)
-                iounmap(mem_ptr);
         return ret;
 }
 
+void
+qlcnic_pci_camqm_read_2M(struct qlcnic_adapter *adapter, u64 off, u64 *data)
+{
+        void __iomem *addr = adapter->ahw.pci_base0 +
+                QLCNIC_PCI_CAMQM_2M_BASE + (off - QLCNIC_PCI_CAMQM);
+
+        mutex_lock(&adapter->ahw.mem_lock);
+        *data = readq(addr);
+        mutex_unlock(&adapter->ahw.mem_lock);
+}
+
+void
+qlcnic_pci_camqm_write_2M(struct qlcnic_adapter *adapter, u64 off, u64 data)
+{
+        void __iomem *addr = adapter->ahw.pci_base0 +
+                QLCNIC_PCI_CAMQM_2M_BASE + (off - QLCNIC_PCI_CAMQM);
+
+        mutex_lock(&adapter->ahw.mem_lock);
+        writeq(data, addr);
+        mutex_unlock(&adapter->ahw.mem_lock);
+}
+
 #define MAX_CTL_CHECK   1000
 
 int
@@ -944,7 +932,6 @@ qlcnic_pci_mem_write_2M(struct qlcnic_adapter *adapter,
 {
         int i, j, ret;
         u32 temp, off8;
-        u64 stride;
         void __iomem *mem_crb;
 
         /* Only 64-bit aligned access */
@@ -953,7 +940,7 @@ qlcnic_pci_mem_write_2M(struct qlcnic_adapter *adapter,
 
         /* P3 onward, test agent base for MIU and SIU is same */
         if (ADDR_IN_RANGE(off, QLCNIC_ADDR_QDR_NET,
-                                QLCNIC_ADDR_QDR_NET_MAX_P3)) {
+                                QLCNIC_ADDR_QDR_NET_MAX)) {
                 mem_crb = qlcnic_get_ioaddr(adapter,
                                 QLCNIC_CRB_QDR_NET+MIU_TEST_AGT_BASE);
                 goto correct;
@@ -971,9 +958,7 @@ qlcnic_pci_mem_write_2M(struct qlcnic_adapter *adapter,
         return -EIO;
 
 correct:
-        stride = QLCNIC_IS_REVISION_P3P(adapter->ahw.revision_id) ? 16 : 8;
-
-        off8 = off & ~(stride-1);
+        off8 = off & ~0xf;
 
         mutex_lock(&adapter->ahw.mem_lock);
 
@@ -981,30 +966,28 @@ correct:
         writel(0, (mem_crb + MIU_TEST_AGT_ADDR_HI));
 
         i = 0;
-        if (stride == 16) {
-                writel(TA_CTL_ENABLE, (mem_crb + TEST_AGT_CTRL));
-                writel((TA_CTL_START | TA_CTL_ENABLE),
-                                (mem_crb + TEST_AGT_CTRL));
-
-                for (j = 0; j < MAX_CTL_CHECK; j++) {
-                        temp = readl(mem_crb + TEST_AGT_CTRL);
-                        if ((temp & TA_CTL_BUSY) == 0)
-                                break;
-                }
+        writel(TA_CTL_ENABLE, (mem_crb + TEST_AGT_CTRL));
+        writel((TA_CTL_START | TA_CTL_ENABLE),
+                        (mem_crb + TEST_AGT_CTRL));
 
-                if (j >= MAX_CTL_CHECK) {
-                        ret = -EIO;
-                        goto done;
-                }
+        for (j = 0; j < MAX_CTL_CHECK; j++) {
+                temp = readl(mem_crb + TEST_AGT_CTRL);
+                if ((temp & TA_CTL_BUSY) == 0)
+                        break;
+        }
 
-                i = (off & 0xf) ? 0 : 2;
-                writel(readl(mem_crb + MIU_TEST_AGT_RDDATA(i)),
-                                mem_crb + MIU_TEST_AGT_WRDATA(i));
-                writel(readl(mem_crb + MIU_TEST_AGT_RDDATA(i+1)),
-                                mem_crb + MIU_TEST_AGT_WRDATA(i+1));
-                i = (off & 0xf) ? 2 : 0;
+        if (j >= MAX_CTL_CHECK) {
+                ret = -EIO;
+                goto done;
         }
 
+        i = (off & 0xf) ? 0 : 2;
+        writel(readl(mem_crb + MIU_TEST_AGT_RDDATA(i)),
+                        mem_crb + MIU_TEST_AGT_WRDATA(i));
+        writel(readl(mem_crb + MIU_TEST_AGT_RDDATA(i+1)),
+                        mem_crb + MIU_TEST_AGT_WRDATA(i+1));
+        i = (off & 0xf) ? 2 : 0;
+
         writel(data & 0xffffffff,
                         mem_crb + MIU_TEST_AGT_WRDATA(i));
         writel((data >> 32) & 0xffffffff,
@@ -1040,7 +1023,7 @@ qlcnic_pci_mem_read_2M(struct qlcnic_adapter *adapter,
 {
         int j, ret;
         u32 temp, off8;
-        u64 val, stride;
+        u64 val;
         void __iomem *mem_crb;
 
         /* Only 64-bit aligned access */
@@ -1049,7 +1032,7 @@ qlcnic_pci_mem_read_2M(struct qlcnic_adapter *adapter,
 
         /* P3 onward, test agent base for MIU and SIU is same */
         if (ADDR_IN_RANGE(off, QLCNIC_ADDR_QDR_NET,
-                                QLCNIC_ADDR_QDR_NET_MAX_P3)) {
+                                QLCNIC_ADDR_QDR_NET_MAX)) {
                 mem_crb = qlcnic_get_ioaddr(adapter,
                                 QLCNIC_CRB_QDR_NET+MIU_TEST_AGT_BASE);
                 goto correct;
@@ -1069,9 +1052,7 @@ qlcnic_pci_mem_read_2M(struct qlcnic_adapter *adapter,
         return -EIO;
 
 correct:
-        stride = QLCNIC_IS_REVISION_P3P(adapter->ahw.revision_id) ? 16 : 8;
-
-        off8 = off & ~(stride-1);
+        off8 = off & ~0xf;
 
         mutex_lock(&adapter->ahw.mem_lock);
 
@@ -1093,7 +1074,7 @@ correct:
                 ret = -EIO;
         } else {
                 off8 = MIU_TEST_AGT_RDDATA_LO;
-                if ((stride == 16) && (off & 0xf))
+                if (off & 0xf)
                         off8 = MIU_TEST_AGT_RDDATA_UPPER_LO;
 
                 temp = readl(mem_crb + off8 + 4);
diff --git a/drivers/net/qlcnic/qlcnic_init.c b/drivers/net/qlcnic/qlcnic_init.c
index 7c34e4e29b3f..89c64e8ec849 100644
--- a/drivers/net/qlcnic/qlcnic_init.c
+++ b/drivers/net/qlcnic/qlcnic_init.c
@@ -529,6 +529,22 @@ int qlcnic_pinit_from_rom(struct qlcnic_adapter *adapter)
         return 0;
 }
 
+void
+qlcnic_setup_idc_param(struct qlcnic_adapter *adapter) {
+
+        int timeo;
+
+        if (qlcnic_rom_fast_read(adapter, QLCNIC_ROM_DEV_INIT_TIMEOUT, &timeo))
+                timeo = 30;
+
+        adapter->dev_init_timeo = timeo;
+
+        if (qlcnic_rom_fast_read(adapter, QLCNIC_ROM_DRV_RESET_TIMEOUT, &timeo))
+                timeo = 10;
+
+        adapter->reset_ack_timeo = timeo;
+}
+
 static int
 qlcnic_has_mn(struct qlcnic_adapter *adapter)
 {
@@ -611,7 +627,7 @@ qlcnic_validate_bootld(struct qlcnic_adapter *adapter)
                 return -EINVAL;
 
         tab_size = cpu_to_le32(tab_desc->findex) +
-                        (cpu_to_le32(tab_desc->entry_size * (idx + 1)));
+                        (cpu_to_le32(tab_desc->entry_size) * (idx + 1));
 
         if (adapter->fw->size < tab_size)
                 return -EINVAL;
@@ -620,7 +636,7 @@ qlcnic_validate_bootld(struct qlcnic_adapter *adapter)
                 (cpu_to_le32(tab_desc->entry_size) * (idx));
         descr = (struct uni_data_desc *)&unirom[offs];
 
-        data_size = descr->findex + cpu_to_le32(descr->size);
+        data_size = cpu_to_le32(descr->findex) + cpu_to_le32(descr->size);
 
         if (adapter->fw->size < data_size)
                 return -EINVAL;
@@ -646,7 +662,7 @@ qlcnic_validate_fw(struct qlcnic_adapter *adapter)
                 return -EINVAL;
 
         tab_size = cpu_to_le32(tab_desc->findex) +
-                        (cpu_to_le32(tab_desc->entry_size * (idx + 1)));
+                        (cpu_to_le32(tab_desc->entry_size) * (idx + 1));
 
         if (adapter->fw->size < tab_size)
                 return -EINVAL;
@@ -654,7 +670,7 @@ qlcnic_validate_fw(struct qlcnic_adapter *adapter)
         offs = cpu_to_le32(tab_desc->findex) +
                 (cpu_to_le32(tab_desc->entry_size) * (idx));
         descr = (struct uni_data_desc *)&unirom[offs];
-        data_size = descr->findex + cpu_to_le32(descr->size);
+        data_size = cpu_to_le32(descr->findex) + cpu_to_le32(descr->size);
 
         if (adapter->fw->size < data_size)
                 return -EINVAL;
@@ -949,6 +965,16 @@ qlcnic_load_firmware(struct qlcnic_adapter *adapter)
 
                         flashaddr += 8;
                 }
+
+                size = (__force u32)qlcnic_get_fw_size(adapter) % 8;
+                if (size) {
+                        data = cpu_to_le64(ptr64[i]);
+
+                        if (qlcnic_pci_mem_write_2M(adapter,
+                                                flashaddr, data))
+                                return -EIO;
+                }
+
         } else {
                 u64 data;
                 u32 hi, lo;
diff --git a/drivers/net/qlcnic/qlcnic_main.c b/drivers/net/qlcnic/qlcnic_main.c
index fc721564e69e..7ae464085b0d 100644
--- a/drivers/net/qlcnic/qlcnic_main.c
+++ b/drivers/net/qlcnic/qlcnic_main.c
@@ -649,7 +649,10 @@ qlcnic_start_firmware(struct qlcnic_adapter *adapter)
         if (err)
                 return err;
 
-        if (!qlcnic_can_start_firmware(adapter))
+        err = qlcnic_can_start_firmware(adapter);
+        if (err < 0)
+                return err;
+        else if (!err)
                 goto wait_init;
 
         first_boot = QLCRD32(adapter, QLCNIC_CAM_RAM(0x1fc));
@@ -949,11 +952,11 @@ void qlcnic_diag_free_res(struct net_device *netdev, int max_sds_rings)
         adapter->max_sds_rings = max_sds_rings;
 
         if (qlcnic_attach(adapter))
-                return;
+                goto out;
 
         if (netif_running(netdev))
                 __qlcnic_up(adapter, netdev);
-
+out:
         netif_device_attach(netdev);
 }
 
@@ -975,8 +978,10 @@ int qlcnic_diag_alloc_res(struct net_device *netdev, int test)
         adapter->diag_test = test;
 
         ret = qlcnic_attach(adapter);
-        if (ret)
+        if (ret) {
+                netif_device_attach(netdev);
                 return ret;
+        }
 
         if (adapter->diag_test == QLCNIC_INTERRUPT_TEST) {
                 for (ring = 0; ring < adapter->max_sds_rings; ring++) {
@@ -1009,16 +1014,12 @@ qlcnic_reset_context(struct qlcnic_adapter *adapter)
                 if (netif_running(netdev)) {
                         err = qlcnic_attach(adapter);
                         if (!err)
-                                err = __qlcnic_up(adapter, netdev);
-
-                        if (err)
-                                goto done;
+                                __qlcnic_up(adapter, netdev);
                 }
 
                 netif_device_attach(netdev);
         }
 
-done:
         clear_bit(__QLCNIC_RESETTING, &adapter->state);
         return err;
 }
@@ -1138,6 +1139,7 @@ qlcnic_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
                 goto err_out_iounmap;
         }
 
+        qlcnic_setup_idc_param(adapter);
 
         err = qlcnic_start_firmware(adapter);
         if (err)
@@ -1333,6 +1335,7 @@ err_out_detach:
         qlcnic_detach(adapter);
 err_out:
         qlcnic_clr_all_drv_state(adapter);
+        netif_device_attach(netdev);
         return err;
 }
 #endif
@@ -1738,6 +1741,7 @@ static void qlcnic_tx_timeout_task(struct work_struct *work)
 request_reset:
         adapter->need_fw_reset = 1;
         clear_bit(__QLCNIC_RESETTING, &adapter->state);
+        QLCDB(adapter, DRV, "Resetting adapter\n");
 }
 
 static struct net_device_stats *qlcnic_get_stats(struct net_device *netdev)
@@ -2027,7 +2031,7 @@ static int
 qlcnic_can_start_firmware(struct qlcnic_adapter *adapter)
 {
         u32 val, prev_state;
-        int cnt = 0;
+        u8 dev_init_timeo = adapter->dev_init_timeo;
         int portnum = adapter->portnum;
 
         if (qlcnic_api_lock(adapter))
@@ -2042,6 +2046,7 @@ qlcnic_can_start_firmware(struct qlcnic_adapter *adapter)
         }
 
         prev_state = QLCRD32(adapter, QLCNIC_CRB_DEV_STATE);
+        QLCDB(adapter, HW, "Device state = %u\n", prev_state);
 
         switch (prev_state) {
         case QLCNIC_DEV_COLD:
@@ -2072,13 +2077,17 @@ start_fw:
         }
 
         qlcnic_api_unlock(adapter);
-        msleep(1000);
-        while ((QLCRD32(adapter, QLCNIC_CRB_DEV_STATE) != QLCNIC_DEV_READY) &&
-                        ++cnt < 20)
+
+        do {
                 msleep(1000);
+        } while ((QLCRD32(adapter, QLCNIC_CRB_DEV_STATE) != QLCNIC_DEV_READY)
+                        && --dev_init_timeo);
 
-        if (cnt >= 20)
+        if (!dev_init_timeo) {
+                dev_err(&adapter->pdev->dev,
+                        "Waiting for device to initialize timeout\n");
                 return -1;
+        }
 
         if (qlcnic_api_lock(adapter))
                 return -1;
@@ -2099,17 +2108,16 @@ qlcnic_fwinit_work(struct work_struct *work)
                         struct qlcnic_adapter, fw_work.work);
         int dev_state;
 
-        if (++adapter->fw_wait_cnt > FW_POLL_THRESH)
-                goto err_ret;
-
         if (test_bit(__QLCNIC_START_FW, &adapter->state)) {
 
-                if (qlcnic_check_drv_state(adapter)) {
+                if (qlcnic_check_drv_state(adapter) &&
+                        (adapter->fw_wait_cnt++ < adapter->reset_ack_timeo)) {
                         qlcnic_schedule_work(adapter,
                                         qlcnic_fwinit_work, FW_POLL_DELAY);
                         return;
                 }
 
+                QLCDB(adapter, DRV, "Resetting FW\n");
                 if (!qlcnic_start_firmware(adapter)) {
                         qlcnic_schedule_work(adapter, qlcnic_attach_work, 0);
                         return;
@@ -2118,7 +2126,15 @@ qlcnic_fwinit_work(struct work_struct *work)
                 goto err_ret;
         }
 
+        if (adapter->fw_wait_cnt++ > (adapter->dev_init_timeo / 2)) {
+                dev_err(&adapter->pdev->dev,
+                                "Waiting for device to reset timeout\n");
+                goto err_ret;
+        }
+
         dev_state = QLCRD32(adapter, QLCNIC_CRB_DEV_STATE);
+        QLCDB(adapter, HW, "Func waiting: Device state=%d\n", dev_state);
+
         switch (dev_state) {
         case QLCNIC_DEV_READY:
                 if (!qlcnic_start_firmware(adapter)) {
@@ -2135,6 +2151,7 @@ qlcnic_fwinit_work(struct work_struct *work)
         }
 
 err_ret:
+        netif_device_attach(adapter->netdev);
         qlcnic_clr_all_drv_state(adapter);
 }
 
@@ -2171,6 +2188,9 @@ qlcnic_detach_work(struct work_struct *work)
         return;
 
 err_ret:
+        dev_err(&adapter->pdev->dev, "detach failed; status=%d temp=%d\n",
+                        status, adapter->temp);
+        netif_device_attach(netdev);
         qlcnic_clr_all_drv_state(adapter);
 
 }
@@ -2188,6 +2208,7 @@ qlcnic_dev_request_reset(struct qlcnic_adapter *adapter)
         if (state != QLCNIC_DEV_INITALIZING && state != QLCNIC_DEV_NEED_RESET) {
                 QLCWR32(adapter, QLCNIC_CRB_DEV_STATE, QLCNIC_DEV_NEED_RESET);
                 set_bit(__QLCNIC_START_FW, &adapter->state);
+                QLCDB(adapter, DRV, "NEED_RESET state set\n");
         }
 
         qlcnic_api_unlock(adapter);
@@ -2232,9 +2253,8 @@ qlcnic_attach_work(struct work_struct *work)
                 qlcnic_config_indev_addr(netdev, NETDEV_UP);
         }
 
-        netif_device_attach(netdev);
-
 done:
+        netif_device_attach(netdev);
         adapter->fw_fail_cnt = 0;
         clear_bit(__QLCNIC_RESETTING, &adapter->state);
 
@@ -2284,8 +2304,11 @@ detach:
                 QLCNIC_DEV_NEED_RESET;
 
         if ((auto_fw_reset == AUTO_FW_RESET_ENABLED) &&
-                        !test_and_set_bit(__QLCNIC_RESETTING, &adapter->state))
+                !test_and_set_bit(__QLCNIC_RESETTING, &adapter->state)) {
+
                 qlcnic_schedule_work(adapter, qlcnic_detach_work, 0);
+                QLCDB(adapter, DRV, "fw recovery scheduled.\n");
+        }
 
         return 1;
 }
@@ -2386,14 +2409,21 @@ static int
 qlcnic_sysfs_validate_crb(struct qlcnic_adapter *adapter,
                 loff_t offset, size_t size)
 {
+        size_t crb_size = 4;
+
         if (!(adapter->flags & QLCNIC_DIAG_ENABLED))
                 return -EIO;
 
-        if ((size != 4) || (offset & 0x3))
-                return  -EINVAL;
+        if (offset < QLCNIC_PCI_CRBSPACE) {
+                if (ADDR_IN_RANGE(offset, QLCNIC_PCI_CAMQM,
+                                        QLCNIC_PCI_CAMQM_END))
+                        crb_size = 8;
+                else
+                        return -EINVAL;
+        }
 
-        if (offset < QLCNIC_PCI_CRBSPACE)
-                return -EINVAL;
+        if ((size != crb_size) || (offset & (crb_size-1)))
+                return  -EINVAL;
 
         return 0;
 }
@@ -2405,14 +2435,20 @@ qlcnic_sysfs_read_crb(struct kobject *kobj, struct bin_attribute *attr,
         struct device *dev = container_of(kobj, struct device, kobj);
         struct qlcnic_adapter *adapter = dev_get_drvdata(dev);
         u32 data;
+        u64 qmdata;
         int ret;
 
         ret = qlcnic_sysfs_validate_crb(adapter, offset, size);
         if (ret != 0)
                 return ret;
 
-        data = QLCRD32(adapter, offset);
-        memcpy(buf, &data, size);
+        if (ADDR_IN_RANGE(offset, QLCNIC_PCI_CAMQM, QLCNIC_PCI_CAMQM_END)) {
+                qlcnic_pci_camqm_read_2M(adapter, offset, &qmdata);
+                memcpy(buf, &qmdata, size);
+        } else {
+                data = QLCRD32(adapter, offset);
+                memcpy(buf, &data, size);
+        }
         return size;
 }
 
@@ -2423,14 +2459,20 @@ qlcnic_sysfs_write_crb(struct kobject *kobj, struct bin_attribute *attr,
         struct device *dev = container_of(kobj, struct device, kobj);
         struct qlcnic_adapter *adapter = dev_get_drvdata(dev);
         u32 data;
+        u64 qmdata;
         int ret;
 
         ret = qlcnic_sysfs_validate_crb(adapter, offset, size);
         if (ret != 0)
                 return ret;
 
-        memcpy(&data, buf, size);
-        QLCWR32(adapter, offset, data);
+        if (ADDR_IN_RANGE(offset, QLCNIC_PCI_CAMQM, QLCNIC_PCI_CAMQM_END)) {
+                memcpy(&qmdata, buf, size);
+                qlcnic_pci_camqm_write_2M(adapter, offset, qmdata);
+        } else {
+                memcpy(&data, buf, size);
+                QLCWR32(adapter, offset, data);
+        }
         return size;
 }
 
diff --git a/drivers/net/qlge/qlge_dbg.c b/drivers/net/qlge/qlge_dbg.c
index ff8550d2ca82..947a7aa2400e 100644
--- a/drivers/net/qlge/qlge_dbg.c
+++ b/drivers/net/qlge/qlge_dbg.c
@@ -1338,7 +1338,7 @@ void ql_mpi_core_to_log(struct work_struct *work)
 
         for (i = 0; i < count; i += 8) {
                 printk(KERN_ERR "%.08x: %.08x %.08x %.08x %.08x %.08x "
-                        "%.08x %.08x %.08x \n", i,
+                        "%.08x %.08x %.08x\n", i,
                         tmp[i + 0],
                         tmp[i + 1],
                         tmp[i + 2],
@@ -2056,7 +2056,7 @@ void ql_dump_ob_mac_iocb(struct ob_mac_iocb_req *ob_mac_iocb)
                ob_mac_tso_iocb->flags2 & OB_MAC_TSO_IOCB_LSO ? "LSO" : "",
                ob_mac_tso_iocb->flags2 & OB_MAC_TSO_IOCB_UC ? "UC" : "",
                ob_mac_tso_iocb->flags2 & OB_MAC_TSO_IOCB_TC ? "TC" : "");
-        printk(KERN_ERR PFX "flags3          = %s %s %s \n",
+        printk(KERN_ERR PFX "flags3          = %s %s %s\n",
                ob_mac_tso_iocb->flags3 & OB_MAC_TSO_IOCB_IC ? "IC" : "",
                ob_mac_tso_iocb->flags3 & OB_MAC_TSO_IOCB_DFP ? "DFP" : "",
                ob_mac_tso_iocb->flags3 & OB_MAC_TSO_IOCB_V ? "V" : "");
diff --git a/drivers/net/qlge/qlge_main.c b/drivers/net/qlge/qlge_main.c
index fd34f266c0a8..76df96813a7b 100644
--- a/drivers/net/qlge/qlge_main.c
+++ b/drivers/net/qlge/qlge_main.c
@@ -4207,7 +4207,7 @@ static struct net_device_stats *qlge_get_stats(struct net_device
 static void qlge_set_multicast_list(struct net_device *ndev)
 {
         struct ql_adapter *qdev = (struct ql_adapter *)netdev_priv(ndev);
-        struct dev_mc_list *mc_ptr;
+        struct netdev_hw_addr *ha;
         int i, status;
 
         status = ql_sem_spinlock(qdev, SEM_RT_IDX_MASK);
@@ -4271,8 +4271,8 @@ static void qlge_set_multicast_list(struct net_device *ndev)
                 if (status)
                         goto exit;
                 i = 0;
-                netdev_for_each_mc_addr(mc_ptr, ndev) {
-                        if (ql_set_mac_addr_reg(qdev, (u8 *) mc_ptr->dmi_addr,
+                netdev_for_each_mc_addr(ha, ndev) {
+                        if (ql_set_mac_addr_reg(qdev, (u8 *) ha->addr,
                                                 MAC_ADDR_TYPE_MULTI_MAC, i)) {
                                 netif_err(qdev, hw, qdev->ndev,
                                           "Failed to loadmulticast address.\n");
diff --git a/drivers/net/r6040.c b/drivers/net/r6040.c
index 15d5373dc8f3..f5a0e963e688 100644
--- a/drivers/net/r6040.c
+++ b/drivers/net/r6040.c
@@ -938,7 +938,7 @@ static void r6040_multicast_list(struct net_device *dev)
         u16 *adrp;
         u16 reg;
         unsigned long flags;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int i;
 
         /* MAC Address */
@@ -973,8 +973,8 @@ static void r6040_multicast_list(struct net_device *dev)
                 for (i = 0; i < 4; i++)
                         hash_table[i] = 0;
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        char *addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        char *addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
@@ -994,9 +994,9 @@ static void r6040_multicast_list(struct net_device *dev)
         }
         /* Multicast Address 1~4 case */
         i = 0;
-        netdev_for_each_mc_addr(dmi, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 if (i < MCAST_MAX) {
-                        adrp = (u16 *) dmi->dmi_addr;
+                        adrp = (u16 *) ha->addr;
                         iowrite16(adrp[0], ioaddr + MID_1L + 8 * i);
                         iowrite16(adrp[1], ioaddr + MID_1M + 8 * i);
                         iowrite16(adrp[2], ioaddr + MID_1H + 8 * i);
diff --git a/drivers/net/r8169.c b/drivers/net/r8169.c
index dbb1f5a1824c..340da3915b96 100644
--- a/drivers/net/r8169.c
+++ b/drivers/net/r8169.c
@@ -23,6 +23,7 @@
 #include <linux/tcp.h>
 #include <linux/init.h>
 #include <linux/dma-mapping.h>
+#include <linux/pm_runtime.h>
 
 #include <asm/system.h>
 #include <asm/io.h>
@@ -509,6 +510,7 @@ struct rtl8169_private {
 
         struct mii_if_info mii;
         struct rtl8169_counters counters;
+        u32 saved_wolopts;
 };
 
 MODULE_AUTHOR("Realtek and the Linux r8169 crew <netdev@vger.kernel.org>");
@@ -748,53 +750,61 @@ static void rtl8169_check_link_status(struct net_device *dev,
 
         spin_lock_irqsave(&tp->lock, flags);
         if (tp->link_ok(ioaddr)) {
+                /* This is to cancel a scheduled suspend if there's one. */
+                pm_request_resume(&tp->pci_dev->dev);
                 netif_carrier_on(dev);
                 netif_info(tp, ifup, dev, "link up\n");
         } else {
                 netif_carrier_off(dev);
                 netif_info(tp, ifdown, dev, "link down\n");
+                pm_schedule_suspend(&tp->pci_dev->dev, 100);
         }
         spin_unlock_irqrestore(&tp->lock, flags);
 }
 
-static void rtl8169_get_wol(struct net_device *dev, struct ethtool_wolinfo *wol)
+#define WAKE_ANY (WAKE_PHY | WAKE_MAGIC | WAKE_UCAST | WAKE_BCAST | WAKE_MCAST)
+
+static u32 __rtl8169_get_wol(struct rtl8169_private *tp)
 {
-        struct rtl8169_private *tp = netdev_priv(dev);
         void __iomem *ioaddr = tp->mmio_addr;
         u8 options;
-
-        wol->wolopts = 0;
-
-#define WAKE_ANY (WAKE_PHY | WAKE_MAGIC | WAKE_UCAST | WAKE_BCAST | WAKE_MCAST)
-        wol->supported = WAKE_ANY;
-
-        spin_lock_irq(&tp->lock);
+        u32 wolopts = 0;
 
         options = RTL_R8(Config1);
         if (!(options & PMEnable))
-                goto out_unlock;
+                return 0;
 
         options = RTL_R8(Config3);
         if (options & LinkUp)
-                wol->wolopts |= WAKE_PHY;
+                wolopts |= WAKE_PHY;
         if (options & MagicPacket)
-                wol->wolopts |= WAKE_MAGIC;
+                wolopts |= WAKE_MAGIC;
 
         options = RTL_R8(Config5);
         if (options & UWF)
-                wol->wolopts |= WAKE_UCAST;
+                wolopts |= WAKE_UCAST;
         if (options & BWF)
-                wol->wolopts |= WAKE_BCAST;
+                wolopts |= WAKE_BCAST;
         if (options & MWF)
-                wol->wolopts |= WAKE_MCAST;
+                wolopts |= WAKE_MCAST;
 
-out_unlock:
-        spin_unlock_irq(&tp->lock);
+        return wolopts;
 }
 
-static int rtl8169_set_wol(struct net_device *dev, struct ethtool_wolinfo *wol)
+static void rtl8169_get_wol(struct net_device *dev, struct ethtool_wolinfo *wol)
 {
         struct rtl8169_private *tp = netdev_priv(dev);
+
+        spin_lock_irq(&tp->lock);
+
+        wol->supported = WAKE_ANY;
+        wol->wolopts = __rtl8169_get_wol(tp);
+
+        spin_unlock_irq(&tp->lock);
+}
+
+static void __rtl8169_set_wol(struct rtl8169_private *tp, u32 wolopts)
+{
         void __iomem *ioaddr = tp->mmio_addr;
         unsigned int i;
         static const struct {
@@ -811,23 +821,29 @@ static int rtl8169_set_wol(struct net_device *dev, struct ethtool_wolinfo *wol)
                 { WAKE_ANY,   Config5, LanWake }
         };
 
-        spin_lock_irq(&tp->lock);
-
         RTL_W8(Cfg9346, Cfg9346_Unlock);
 
         for (i = 0; i < ARRAY_SIZE(cfg); i++) {
                 u8 options = RTL_R8(cfg[i].reg) & ~cfg[i].mask;
-                if (wol->wolopts & cfg[i].opt)
+                if (wolopts & cfg[i].opt)
                         options |= cfg[i].mask;
                 RTL_W8(cfg[i].reg, options);
         }
 
         RTL_W8(Cfg9346, Cfg9346_Lock);
+}
+
+static int rtl8169_set_wol(struct net_device *dev, struct ethtool_wolinfo *wol)
+{
+        struct rtl8169_private *tp = netdev_priv(dev);
+
+        spin_lock_irq(&tp->lock);
 
         if (wol->wolopts)
                 tp->features |= RTL_FEATURE_WOL;
         else
                 tp->features &= ~RTL_FEATURE_WOL;
+        __rtl8169_set_wol(tp, wol->wolopts);
         device_set_wakeup_enable(&tp->pci_dev->dev, wol->wolopts);
 
         spin_unlock_irq(&tp->lock);
@@ -1042,14 +1058,14 @@ static void rtl8169_vlan_rx_register(struct net_device *dev,
 }
 
 static int rtl8169_rx_vlan_skb(struct rtl8169_private *tp, struct RxDesc *desc,
-                               struct sk_buff *skb)
+                               struct sk_buff *skb, int polling)
 {
         u32 opts2 = le32_to_cpu(desc->opts2);
         struct vlan_group *vlgrp = tp->vlgrp;
         int ret;
 
         if (vlgrp && (opts2 & RxVlanTag)) {
-                vlan_hwaccel_receive_skb(skb, vlgrp, swab16(opts2 & 0xffff));
+                __vlan_hwaccel_rx(skb, vlgrp, swab16(opts2 & 0xffff), polling);
                 ret = 0;
         } else
                 ret = -1;
@@ -1066,7 +1082,7 @@ static inline u32 rtl8169_tx_vlan_tag(struct rtl8169_private *tp,
 }
 
 static int rtl8169_rx_vlan_skb(struct rtl8169_private *tp, struct RxDesc *desc,
-                               struct sk_buff *skb)
+                               struct sk_buff *skb, int polling)
 {
         return -1;
 }
@@ -3187,6 +3203,12 @@ rtl8169_init_one(struct pci_dev *pdev, const struct pci_device_id *ent)
 
         device_set_wakeup_enable(&pdev->dev, tp->features & RTL_FEATURE_WOL);
 
+        if (pci_dev_run_wake(pdev)) {
+                pm_runtime_set_active(&pdev->dev);
+                pm_runtime_enable(&pdev->dev);
+        }
+        pm_runtime_idle(&pdev->dev);
+
 out:
         return rc;
 
@@ -3209,10 +3231,18 @@ static void __devexit rtl8169_remove_one(struct pci_dev *pdev)
         struct net_device *dev = pci_get_drvdata(pdev);
         struct rtl8169_private *tp = netdev_priv(dev);
 
+        pm_runtime_get_sync(&pdev->dev);
+
         flush_scheduled_work();
 
         unregister_netdev(dev);
 
+        if (pci_dev_run_wake(pdev)) {
+                pm_runtime_disable(&pdev->dev);
+                pm_runtime_set_suspended(&pdev->dev);
+        }
+        pm_runtime_put_noidle(&pdev->dev);
+
         /* restore original MAC address */
         rtl_rar_set(tp, dev->perm_addr);
 
@@ -3239,6 +3269,7 @@ static int rtl8169_open(struct net_device *dev)
         struct pci_dev *pdev = tp->pci_dev;
         int retval = -ENOMEM;
 
+        pm_runtime_get_sync(&pdev->dev);
 
         /*
          * Note that we use a magic value here, its wierd I know
@@ -3259,7 +3290,7 @@ static int rtl8169_open(struct net_device *dev)
         tp->TxDescArray = pci_alloc_consistent(pdev, R8169_TX_RING_BYTES,
                                                &tp->TxPhyAddr);
         if (!tp->TxDescArray)
-                goto out;
+                goto err_pm_runtime_put;
 
         tp->RxDescArray = pci_alloc_consistent(pdev, R8169_RX_RING_BYTES,
                                                &tp->RxPhyAddr);
@@ -3286,6 +3317,9 @@ static int rtl8169_open(struct net_device *dev)
 
         rtl8169_request_timer(dev);
 
+        tp->saved_wolopts = 0;
+        pm_runtime_put_noidle(&pdev->dev);
+
         rtl8169_check_link_status(dev, tp, tp->mmio_addr);
 out:
         return retval;
@@ -3295,9 +3329,13 @@ err_release_ring_2:
 err_free_rx_1:
         pci_free_consistent(pdev, R8169_RX_RING_BYTES, tp->RxDescArray,
                             tp->RxPhyAddr);
+        tp->RxDescArray = NULL;
 err_free_tx_0:
         pci_free_consistent(pdev, R8169_TX_RING_BYTES, tp->TxDescArray,
                             tp->TxPhyAddr);
+        tp->TxDescArray = NULL;
+err_pm_runtime_put:
+        pm_runtime_put_noidle(&pdev->dev);
         goto out;
 }
 
@@ -4441,12 +4479,20 @@ out:
         return done;
 }
 
+/*
+ * Warning : rtl8169_rx_interrupt() might be called :
+ * 1) from NAPI (softirq) context
+ *      (polling = 1 : we should call netif_receive_skb())
+ * 2) from process context (rtl8169_reset_task())
+ *      (polling = 0 : we must call netif_rx() instead)
+ */
 static int rtl8169_rx_interrupt(struct net_device *dev,
                                 struct rtl8169_private *tp,
                                 void __iomem *ioaddr, u32 budget)
 {
         unsigned int cur_rx, rx_left;
         unsigned int delta, count;
+        int polling = (budget != ~(u32)0) ? 1 : 0;
 
         cur_rx = tp->cur_rx;
         rx_left = NUM_RX_DESC + tp->dirty_rx - cur_rx;
@@ -4508,8 +4554,12 @@ static int rtl8169_rx_interrupt(struct net_device *dev,
                         skb_put(skb, pkt_size);
                         skb->protocol = eth_type_trans(skb, dev);
 
-                        if (rtl8169_rx_vlan_skb(tp, desc, skb) < 0)
-                                netif_receive_skb(skb);
+                        if (rtl8169_rx_vlan_skb(tp, desc, skb, polling) < 0) {
+                                if (likely(polling))
+                                        netif_receive_skb(skb);
+                                else
+                                        netif_rx(skb);
+                        }
 
                         dev->stats.rx_bytes += pkt_size;
                         dev->stats.rx_packets++;
@@ -4704,6 +4754,8 @@ static int rtl8169_close(struct net_device *dev)
         struct rtl8169_private *tp = netdev_priv(dev);
         struct pci_dev *pdev = tp->pci_dev;
 
+        pm_runtime_get_sync(&pdev->dev);
+
         /* update counters before going down */
         rtl8169_update_counters(dev);
 
@@ -4718,6 +4770,8 @@ static int rtl8169_close(struct net_device *dev)
         tp->TxDescArray = NULL;
         tp->RxDescArray = NULL;
 
+        pm_runtime_put_sync(&pdev->dev);
+
         return 0;
 }
 
@@ -4743,12 +4797,12 @@ static void rtl_set_rx_mode(struct net_device *dev)
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0xffffffff;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 rx_mode = AcceptBroadcast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                         rx_mode |= AcceptMulticast;
                 }
@@ -4816,21 +4870,74 @@ static int rtl8169_suspend(struct device *device)
         return 0;
 }
 
+static void __rtl8169_resume(struct net_device *dev)
+{
+        netif_device_attach(dev);
+        rtl8169_schedule_work(dev, rtl8169_reset_task);
+}
+
 static int rtl8169_resume(struct device *device)
 {
         struct pci_dev *pdev = to_pci_dev(device);
         struct net_device *dev = pci_get_drvdata(pdev);
 
-        if (!netif_running(dev))
-                goto out;
+        if (netif_running(dev))
+                __rtl8169_resume(dev);
 
-        netif_device_attach(dev);
+        return 0;
+}
+
+static int rtl8169_runtime_suspend(struct device *device)
+{
+        struct pci_dev *pdev = to_pci_dev(device);
+        struct net_device *dev = pci_get_drvdata(pdev);
+        struct rtl8169_private *tp = netdev_priv(dev);
+
+        if (!tp->TxDescArray)
+                return 0;
+
+        spin_lock_irq(&tp->lock);
+        tp->saved_wolopts = __rtl8169_get_wol(tp);
+        __rtl8169_set_wol(tp, WAKE_ANY);
+        spin_unlock_irq(&tp->lock);
+
+        rtl8169_net_suspend(dev);
 
-        rtl8169_schedule_work(dev, rtl8169_reset_task);
-out:
         return 0;
 }
 
+static int rtl8169_runtime_resume(struct device *device)
+{
+        struct pci_dev *pdev = to_pci_dev(device);
+        struct net_device *dev = pci_get_drvdata(pdev);
+        struct rtl8169_private *tp = netdev_priv(dev);
+
+        if (!tp->TxDescArray)
+                return 0;
+
+        spin_lock_irq(&tp->lock);
+        __rtl8169_set_wol(tp, tp->saved_wolopts);
+        tp->saved_wolopts = 0;
+        spin_unlock_irq(&tp->lock);
+
+        __rtl8169_resume(dev);
+
+        return 0;
+}
+
+static int rtl8169_runtime_idle(struct device *device)
+{
+        struct pci_dev *pdev = to_pci_dev(device);
+        struct net_device *dev = pci_get_drvdata(pdev);
+        struct rtl8169_private *tp = netdev_priv(dev);
+
+        if (!tp->TxDescArray)
+                return 0;
+
+        rtl8169_check_link_status(dev, tp, tp->mmio_addr);
+        return -EBUSY;
+}
+
 static const struct dev_pm_ops rtl8169_pm_ops = {
         .suspend = rtl8169_suspend,
         .resume = rtl8169_resume,
@@ -4838,6 +4945,9 @@ static const struct dev_pm_ops rtl8169_pm_ops = {
         .thaw = rtl8169_resume,
         .poweroff = rtl8169_suspend,
         .restore = rtl8169_resume,
+        .runtime_suspend = rtl8169_runtime_suspend,
+        .runtime_resume = rtl8169_runtime_resume,
+        .runtime_idle = rtl8169_runtime_idle,
 };
 
 #define RTL8169_PM_OPS  (&rtl8169_pm_ops)
diff --git a/drivers/net/s2io.c b/drivers/net/s2io.c
index 2eb7f8a0d926..ad5a6a873b29 100644
--- a/drivers/net/s2io.c
+++ b/drivers/net/s2io.c
@@ -4964,7 +4964,7 @@ static struct net_device_stats *s2io_get_stats(struct net_device *dev)
 static void s2io_set_multicast(struct net_device *dev)
 {
         int i, j, prev_cnt;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         struct s2io_nic *sp = netdev_priv(dev);
         struct XENA_dev_config __iomem *bar0 = sp->bar0;
         u64 val64 = 0, multi_mac = 0x010203040506ULL, mask =
@@ -5093,12 +5093,12 @@ static void s2io_set_multicast(struct net_device *dev)
 
                 /* Create the new Rx filter list and update the same in H/W. */
                 i = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        memcpy(sp->usr_addrs[i].addr, mclist->dmi_addr,
+                netdev_for_each_mc_addr(ha, dev) {
+                        memcpy(sp->usr_addrs[i].addr, ha->addr,
                                ETH_ALEN);
                         mac_addr = 0;
                         for (j = 0; j < ETH_ALEN; j++) {
-                                mac_addr |= mclist->dmi_addr[j];
+                                mac_addr |= ha->addr[j];
                                 mac_addr <<= 8;
                         }
                         mac_addr >>= 8;
diff --git a/drivers/net/s6gmac.c b/drivers/net/s6gmac.c
index 45f26344b368..6b12524ad7c1 100644
--- a/drivers/net/s6gmac.c
+++ b/drivers/net/s6gmac.c
@@ -396,7 +396,6 @@ static void s6gmac_rx_interrupt(struct net_device *dev)
                 } else {
                         skb_put(skb, (pfx >> S6_GMAC_BURST_POSTRD_LEN)
                                 & S6_GMAC_BURST_POSTRD_LEN_MASK);
-                        skb->dev = dev;
                         skb->protocol = eth_type_trans(skb, dev);
                         skb->ip_summed = CHECKSUM_UNNECESSARY;
                         netif_rx(skb);
diff --git a/drivers/net/sb1250-mac.c b/drivers/net/sb1250-mac.c
index 9944e5d662c0..332031747a23 100644
--- a/drivers/net/sb1250-mac.c
+++ b/drivers/net/sb1250-mac.c
@@ -2112,7 +2112,7 @@ static void sbmac_setmulti(struct sbmac_softc *sc)
         uint64_t reg;
         void __iomem *port;
         int idx;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         struct net_device *dev = sc->sbm_dev;
 
         /*
@@ -2161,10 +2161,10 @@ static void sbmac_setmulti(struct sbmac_softc *sc)
          * XXX if the table overflows */
 
         idx = 1;                /* skip station address */
-        netdev_for_each_mc_addr(mclist, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 if (idx == MAC_ADDR_COUNT)
                         break;
-                reg = sbmac_addr2reg(mclist->dmi_addr);
+                reg = sbmac_addr2reg(ha->addr);
                 port = sc->sbm_base + R_MAC_ADDR_BASE+(idx * sizeof(uint64_t));
                 __raw_writeq(reg, port);
                 idx++;
@@ -2664,7 +2664,6 @@ static int sbmac_close(struct net_device *dev)
 static int sbmac_poll(struct napi_struct *napi, int budget)
 {
         struct sbmac_softc *sc = container_of(napi, struct sbmac_softc, napi);
-        struct net_device *dev = sc->sbm_dev;
         int work_done;
 
         work_done = sbdma_rx_process(sc, &(sc->sbm_rxdma), budget, 1);
diff --git a/drivers/net/sc92031.c b/drivers/net/sc92031.c
index d87c4787fffa..1b3260588933 100644
--- a/drivers/net/sc92031.c
+++ b/drivers/net/sc92031.c
@@ -433,13 +433,13 @@ static void _sc92031_set_mar(struct net_device *dev)
             (dev->flags & IFF_ALLMULTI))
                 mar0 = mar1 = 0xffffffff;
         else if (dev->flags & IFF_MULTICAST) {
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
 
-                netdev_for_each_mc_addr(mc_list, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         u32 crc;
                         unsigned bit = 0;
 
-                        crc = ~ether_crc(ETH_ALEN, mc_list->dmi_addr);
+                        crc = ~ether_crc(ETH_ALEN, ha->addr);
                         crc >>= 24;
 
                         if (crc & 0x01) bit |= 0x02;
diff --git a/drivers/net/sfc/efx.c b/drivers/net/sfc/efx.c
index 88f2fb193abe..e07b82b266d9 100644
--- a/drivers/net/sfc/efx.c
+++ b/drivers/net/sfc/efx.c
@@ -1602,7 +1602,7 @@ static int efx_set_mac_address(struct net_device *net_dev, void *data)
 static void efx_set_multicast_list(struct net_device *net_dev)
 {
         struct efx_nic *efx = netdev_priv(net_dev);
-        struct dev_mc_list *mc_list;
+        struct netdev_hw_addr *ha;
         union efx_multicast_hash *mc_hash = &efx->multicast_hash;
         u32 crc;
         int bit;
@@ -1614,8 +1614,8 @@ static void efx_set_multicast_list(struct net_device *net_dev)
                 memset(mc_hash, 0xff, sizeof(*mc_hash));
         } else {
                 memset(mc_hash, 0x00, sizeof(*mc_hash));
-                netdev_for_each_mc_addr(mc_list, net_dev) {
-                        crc = ether_crc_le(ETH_ALEN, mc_list->dmi_addr);
+                netdev_for_each_mc_addr(ha, net_dev) {
+                        crc = ether_crc_le(ETH_ALEN, ha->addr);
                         bit = crc & (EFX_MCAST_HASH_ENTRIES - 1);
                         set_bit_le(bit, mc_hash->byte);
                 }
diff --git a/drivers/net/sis190.c b/drivers/net/sis190.c
index 760d9e83a465..6a05b93ae6c9 100644
--- a/drivers/net/sis190.c
+++ b/drivers/net/sis190.c
@@ -848,13 +848,13 @@ static void sis190_set_rx_mode(struct net_device *dev)
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0xffffffff;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 rx_mode = AcceptBroadcast | AcceptMyPhys;
                 mc_filter[1] = mc_filter[0] = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         int bit_nr =
-                                ether_crc(ETH_ALEN, mclist->dmi_addr) & 0x3f;
+                                ether_crc(ETH_ALEN, ha->addr) & 0x3f;
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                         rx_mode |= AcceptMulticast;
                 }
diff --git a/drivers/net/sis900.c b/drivers/net/sis900.c
index cc0c731c4f09..6293592635be 100644
--- a/drivers/net/sis900.c
+++ b/drivers/net/sis900.c
@@ -1499,7 +1499,7 @@ static void sis900_read_mode(struct net_device *net_dev, int *speed, int *duplex
         }
 
         if(netif_msg_link(sis_priv))
-                printk(KERN_INFO "%s: Media Link On %s %s-duplex \n",
+                printk(KERN_INFO "%s: Media Link On %s %s-duplex\n",
                                         net_dev->name,
                                         *speed == HW_SPEED_100_MBPS ?
                                                 "100mbps" : "10mbps",
@@ -1523,7 +1523,7 @@ static void sis900_tx_timeout(struct net_device *net_dev)
         int i;
 
         if(netif_msg_tx_err(sis_priv))
-                printk(KERN_INFO "%s: Transmit timeout, status %8.8x %8.8x \n",
+                printk(KERN_INFO "%s: Transmit timeout, status %8.8x %8.8x\n",
                         net_dev->name, inl(ioaddr + cr), inl(ioaddr + isr));
 
         /* Disable interrupts by clearing the interrupt mask. */
@@ -2298,12 +2298,14 @@ static void set_rx_mode(struct net_device *net_dev)
                 /* Accept Broadcast packet, destination address matchs our
                  * MAC address, use Receive Filter to reject unwanted MCAST
                  * packets */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 rx_mode = RFAAB;
 
-                netdev_for_each_mc_addr(mclist, net_dev) {
-                        unsigned int bit_nr =
-                                sis900_mcast_bitnr(mclist->dmi_addr, sis_priv->chipset_rev);
+                netdev_for_each_mc_addr(ha, net_dev) {
+                        unsigned int bit_nr;
+
+                        bit_nr = sis900_mcast_bitnr(ha->addr,
+                                                    sis_priv->chipset_rev);
                         mc_filter[bit_nr >> 4] |= (1 << (bit_nr & 0xf));
                 }
         }
diff --git a/drivers/net/skfp/fplustm.c b/drivers/net/skfp/fplustm.c
index 6028bbb3b28a..9d8d1ac48176 100644
--- a/drivers/net/skfp/fplustm.c
+++ b/drivers/net/skfp/fplustm.c
@@ -1352,7 +1352,7 @@ void rtm_set_timer(struct s_smc *smc)
         /*
          * MIB timer and hardware timer have the same resolution of 80nS
          */
-        DB_RMT("RMT: setting new fddiPATHT_Rmode, t = %d ns \n",
+        DB_RMT("RMT: setting new fddiPATHT_Rmode, t = %d ns\n",
                 (int) smc->mib.a[PATH0].fddiPATHT_Rmode,0) ;
         outpd(ADDR(B2_RTM_INI),smc->mib.a[PATH0].fddiPATHT_Rmode) ;
 }
diff --git a/drivers/net/skfp/pcmplc.c b/drivers/net/skfp/pcmplc.c
index e6b33ee05ede..ba45bc794d77 100644
--- a/drivers/net/skfp/pcmplc.c
+++ b/drivers/net/skfp/pcmplc.c
@@ -1277,7 +1277,7 @@ static void pc_rcode_actions(struct s_smc *smc, int bit, struct s_phy *phy)
 
         mib = phy->mib ;
 
-        DB_PCMN(1,"SIG rec %x %x: \n", bit,phy->r_val[bit] ) ;
+        DB_PCMN(1,"SIG rec %x %x:\n", bit,phy->r_val[bit] ) ;
         bit++ ;
 
         switch(bit) {
@@ -1580,7 +1580,7 @@ static void pc_tcode_actions(struct s_smc *smc, const int bit, struct s_phy *phy
                 mib->fddiPORTMacIndicated.T_val = phy->t_val[9] ;
                 break ;
         }
-        DB_PCMN(1,"SIG snd %x %x: \n", bit,phy->t_val[bit] ) ;
+        DB_PCMN(1,"SIG snd %x %x:\n", bit,phy->t_val[bit] ) ;
 }
 
 /*
diff --git a/drivers/net/skfp/skfddi.c b/drivers/net/skfp/skfddi.c
index 1921a54ea995..7e5b9f310fb2 100644
--- a/drivers/net/skfp/skfddi.c
+++ b/drivers/net/skfp/skfddi.c
@@ -852,7 +852,7 @@ static void skfp_ctl_set_multicast_list(struct net_device *dev)
 static void skfp_ctl_set_multicast_list_wo_lock(struct net_device *dev)
 {
         struct s_smc *smc = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
         /* Enable promiscuous mode, if necessary */
         if (dev->flags & IFF_PROMISC) {
@@ -876,13 +876,13 @@ static void skfp_ctl_set_multicast_list_wo_lock(struct net_device *dev)
                                 /* use exact filtering */
 
                                 // point to first multicast addr
-                                netdev_for_each_mc_addr(dmi, dev) {
-                                        mac_add_multicast(smc, 
-                                                          (struct fddi_addr *)dmi->dmi_addr, 
-                                                          1);
+                                netdev_for_each_mc_addr(ha, dev) {
+                                        mac_add_multicast(smc,
+                                                (struct fddi_addr *)ha->addr,
+                                                1);
 
                                         pr_debug(KERN_INFO "ENABLE MC ADDRESS: %pMF\n",
-                                                dmi->dmi_addr);
+                                                ha->addr);
                                 }
 
                         } else {        // more MC addresses than HW supports
diff --git a/drivers/net/skfp/srf.c b/drivers/net/skfp/srf.c
index 6caf713b744c..40882b3faba6 100644
--- a/drivers/net/skfp/srf.c
+++ b/drivers/net/skfp/srf.c
@@ -414,7 +414,7 @@ static void smt_send_srf(struct s_smc *smc)
         smt->smt_len = SMT_MAX_INFO_LEN - pcon.pc_len ;
         mb->sm_len = smt->smt_len + sizeof(struct smt_header) ;
 
-        DB_SMT("SRF: sending SRF at %x, len %d \n",smt,mb->sm_len) ;
+        DB_SMT("SRF: sending SRF at %x, len %d\n",smt,mb->sm_len) ;
         DB_SMT("SRF: state SR%d Threshold %d\n",
                 smc->srf.sr_state,smc->srf.SRThreshold/TICKS_PER_SECOND) ;
 #ifdef  DEBUG
diff --git a/drivers/net/skge.c b/drivers/net/skge.c
index d0058e5bb6ae..de5ef3877baf 100644
--- a/drivers/net/skge.c
+++ b/drivers/net/skge.c
@@ -2917,7 +2917,7 @@ static void genesis_set_multicast(struct net_device *dev)
         struct skge_port *skge = netdev_priv(dev);
         struct skge_hw *hw = skge->hw;
         int port = skge->port;
-        struct dev_mc_list *list;
+        struct netdev_hw_addr *ha;
         u32 mode;
         u8 filter[8];
 
@@ -2937,8 +2937,8 @@ static void genesis_set_multicast(struct net_device *dev)
                     skge->flow_status == FLOW_STAT_SYMMETRIC)
                         genesis_add_filter(filter, pause_mc_addr);
 
-                netdev_for_each_mc_addr(list, dev)
-                        genesis_add_filter(filter, list->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        genesis_add_filter(filter, ha->addr);
         }
 
         xm_write32(hw, port, XM_MODE, mode);
@@ -2956,7 +2956,7 @@ static void yukon_set_multicast(struct net_device *dev)
         struct skge_port *skge = netdev_priv(dev);
         struct skge_hw *hw = skge->hw;
         int port = skge->port;
-        struct dev_mc_list *list;
+        struct netdev_hw_addr *ha;
         int rx_pause = (skge->flow_status == FLOW_STAT_REM_SEND ||
                         skge->flow_status == FLOW_STAT_SYMMETRIC);
         u16 reg;
@@ -2979,8 +2979,8 @@ static void yukon_set_multicast(struct net_device *dev)
                 if (rx_pause)
                         yukon_add_filter(filter, pause_mc_addr);
 
-                netdev_for_each_mc_addr(list, dev)
-                        yukon_add_filter(filter, list->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        yukon_add_filter(filter, ha->addr);
         }
 
 
@@ -3666,7 +3666,7 @@ static int skge_debug_show(struct seq_file *seq, void *v)
                            t->csum_offs, t->csum_write, t->csum_start);
         }
 
-        seq_printf(seq, "\nRx Ring: \n");
+        seq_printf(seq, "\nRx Ring:\n");
         for (e = skge->rx_ring.to_clean; ; e = e->next) {
                 const struct skge_rx_desc *r = e->desc;
 
diff --git a/drivers/net/sky2.c b/drivers/net/sky2.c
index d8ec4c11fd49..5b97edb7a35f 100644
--- a/drivers/net/sky2.c
+++ b/drivers/net/sky2.c
@@ -226,7 +226,7 @@ static void sky2_power_on(struct sky2_hw *hw)
         /* disable Core Clock Division, */
         sky2_write32(hw, B2_Y2_CLK_CTRL, Y2_CLK_DIV_DIS);
 
-        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > 1)
+        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > CHIP_REV_YU_XL_A1)
                 /* enable bits are inverted */
                 sky2_write8(hw, B2_Y2_CLK_GATE,
                             Y2_PCI_CLK_LNK1_DIS | Y2_COR_CLK_LNK1_DIS |
@@ -268,7 +268,7 @@ static void sky2_power_on(struct sky2_hw *hw)
 
 static void sky2_power_aux(struct sky2_hw *hw)
 {
-        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > 1)
+        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > CHIP_REV_YU_XL_A1)
                 sky2_write8(hw, B2_Y2_CLK_GATE, 0);
         else
                 /* enable bits are inverted */
@@ -651,7 +651,7 @@ static void sky2_phy_power_up(struct sky2_hw *hw, unsigned port)
         reg1 = sky2_pci_read32(hw, PCI_DEV_REG1);
         reg1 &= ~phy_power[port];
 
-        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > 1)
+        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev > CHIP_REV_YU_XL_A1)
                 reg1 |= coma_mode[port];
 
         sky2_pci_write32(hw, PCI_DEV_REG1, reg1);
@@ -823,7 +823,9 @@ static void sky2_mac_init(struct sky2_hw *hw, unsigned port)
 
         sky2_write8(hw, SK_REG(port, GMAC_CTRL), GMC_RST_CLR);
 
-        if (hw->chip_id == CHIP_ID_YUKON_XL && hw->chip_rev == 0 && port == 1) {
+        if (hw->chip_id == CHIP_ID_YUKON_XL &&
+            hw->chip_rev == CHIP_REV_YU_XL_A0 &&
+            port == 1) {
                 /* WA DEV_472 -- looks like crossed wires on port 2 */
                 /* clear GMAC 1 Control reset */
                 sky2_write8(hw, SK_REG(0, GMAC_CTRL), GMC_RST_CLR);
@@ -877,6 +879,10 @@ static void sky2_mac_init(struct sky2_hw *hw, unsigned port)
         if (hw->dev[port]->mtu > ETH_DATA_LEN)
                 reg |= GM_SMOD_JUMBO_ENA;
 
+        if (hw->chip_id == CHIP_ID_YUKON_EC_U &&
+            hw->chip_rev == CHIP_REV_YU_EC_U_B1)
+                reg |= GM_NEW_FLOW_CTRL;
+
         gma_write16(hw, port, GM_SERIAL_MODE, reg);
 
         /* virtual address for data */
@@ -1413,8 +1419,7 @@ static void sky2_rx_start(struct sky2_port *sky2)
         /* These chips have no ram buffer?
          * MAC Rx RAM Read is controlled by hardware */
         if (hw->chip_id == CHIP_ID_YUKON_EC_U &&
-            (hw->chip_rev == CHIP_REV_YU_EC_U_A1 ||
-             hw->chip_rev == CHIP_REV_YU_EC_U_B0))
+            hw->chip_rev > CHIP_REV_YU_EC_U_A0)
                 sky2_write32(hw, Q_ADDR(rxq, Q_TEST), F_M_RX_RAM_DIS);
 
         sky2_prefetch_init(hw, rxq, sky2->rx_le_map, RX_LE_SIZE - 1);
@@ -2141,7 +2146,8 @@ static void sky2_phy_intr(struct sky2_hw *hw, unsigned port)
                    istatus, phystat);
 
         if (istatus & PHY_M_IS_AN_COMPL) {
-                if (sky2_autoneg_done(sky2, phystat) == 0)
+                if (sky2_autoneg_done(sky2, phystat) == 0 &&
+                    !netif_carrier_ok(dev))
                         sky2_link_up(sky2);
                 goto out;
         }
@@ -3621,7 +3627,7 @@ static void sky2_set_multicast(struct net_device *dev)
         struct sky2_port *sky2 = netdev_priv(dev);
         struct sky2_hw *hw = sky2->hw;
         unsigned port = sky2->port;
-        struct dev_mc_list *list;
+        struct netdev_hw_addr *ha;
         u16 reg;
         u8 filter[8];
         int rx_pause;
@@ -3645,8 +3651,8 @@ static void sky2_set_multicast(struct net_device *dev)
                 if (rx_pause)
                         sky2_add_filter(filter, pause_mc_addr);
 
-                netdev_for_each_mc_addr(list, dev)
-                        sky2_add_filter(filter, list->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        sky2_add_filter(filter, ha->addr);
         }
 
         gma_write16(hw, port, GM_MC_ADDR_H1,
diff --git a/drivers/net/sky2.h b/drivers/net/sky2.h
index a5e182dd9819..0bebfb3638f6 100644
--- a/drivers/net/sky2.h
+++ b/drivers/net/sky2.h
@@ -548,6 +548,14 @@ enum {
         CHIP_ID_YUKON_UL_2 = 0xba, /* YUKON-2 Ultra 2 */
         CHIP_ID_YUKON_OPT  = 0xbc, /* YUKON-2 Optima */
 };
+
+enum yukon_xl_rev {
+        CHIP_REV_YU_XL_A0  = 0,
+        CHIP_REV_YU_XL_A1  = 1,
+        CHIP_REV_YU_XL_A2  = 2,
+        CHIP_REV_YU_XL_A3  = 3,
+};
+
 enum yukon_ec_rev {
         CHIP_REV_YU_EC_A1    = 0,  /* Chip Rev. for Yukon-EC A1/A0 */
         CHIP_REV_YU_EC_A2    = 1,  /* Chip Rev. for Yukon-EC A2 */
@@ -557,6 +565,7 @@ enum yukon_ec_u_rev {
         CHIP_REV_YU_EC_U_A0  = 1,
         CHIP_REV_YU_EC_U_A1  = 2,
         CHIP_REV_YU_EC_U_B0  = 3,
+        CHIP_REV_YU_EC_U_B1  = 5,
 };
 enum yukon_fe_rev {
         CHIP_REV_YU_FE_A1    = 1,
@@ -1775,10 +1784,13 @@ enum {
 /*      GM_SERIAL_MODE                  16 bit r/w      Serial Mode Register */
 enum {
         GM_SMOD_DATABL_MSK      = 0x1f<<11, /* Bit 15..11:      Data Blinder (r/o) */
-        GM_SMOD_LIMIT_4         = 1<<10, /* Bit 10:     4 consecutive Tx trials */
-        GM_SMOD_VLAN_ENA        = 1<<9, /* Bit  9:      Enable VLAN  (Max. Frame Len) */
-        GM_SMOD_JUMBO_ENA       = 1<<8, /* Bit  8:      Enable Jumbo (Max. Frame Len) */
-         GM_SMOD_IPG_MSK        = 0x1f  /* Bit 4..0:    Inter-Packet Gap (IPG) */
+        GM_SMOD_LIMIT_4         = 1<<10, /* 4 consecutive Tx trials */
+        GM_SMOD_VLAN_ENA        = 1<<9,  /* Enable VLAN  (Max. Frame Len) */
+        GM_SMOD_JUMBO_ENA       = 1<<8,  /* Enable Jumbo (Max. Frame Len) */
+
+        GM_NEW_FLOW_CTRL        = 1<<6,  /* Enable New Flow-Control */
+
+        GM_SMOD_IPG_MSK         = 0x1f   /* Bit 4..0:   Inter-Packet Gap (IPG) */
 };
 
 #define DATA_BLIND_VAL(x)       (((x)<<11) & GM_SMOD_DATABL_MSK)
diff --git a/drivers/net/smc911x.c b/drivers/net/smc911x.c
index 9871a2b61f86..6278734c735f 100644
--- a/drivers/net/smc911x.c
+++ b/drivers/net/smc911x.c
@@ -383,7 +383,7 @@ static inline void	 smc911x_rcv(struct net_device *dev)
         DBG(SMC_DEBUG_FUNC | SMC_DEBUG_RX, "%s: --> %s\n",
                 dev->name, __func__);
         status = SMC_GET_RX_STS_FIFO(lp);
-        DBG(SMC_DEBUG_RX, "%s: Rx pkt len %d status 0x%08x \n",
+        DBG(SMC_DEBUG_RX, "%s: Rx pkt len %d status 0x%08x\n",
                 dev->name, (status & 0x3fff0000) >> 16, status & 0xc000ffff);
         pkt_len = (status & RX_STS_PKT_LEN_) >> 16;
         if (status & RX_STS_ES_) {
@@ -1136,7 +1136,7 @@ static irqreturn_t smc911x_interrupt(int irq, void *dev_id)
                 }
 #else
                 if (status & INT_STS_TSFL_) {
-                        DBG(SMC_DEBUG_TX, "%s: TX status FIFO limit (%d) irq \n", dev->name, );
+                        DBG(SMC_DEBUG_TX, "%s: TX status FIFO limit (%d) irq\n", dev->name, );
                         smc911x_tx(dev);
                         SMC_ACK_INT(lp, INT_STS_TSFL_);
                 }
@@ -1275,7 +1275,7 @@ static void smc911x_timeout(struct net_device *dev)
         status = SMC_GET_INT(lp);
         mask = SMC_GET_INT_EN(lp);
         spin_unlock_irqrestore(&lp->lock, flags);
-        DBG(SMC_DEBUG_MISC, "%s: INT 0x%02x MASK 0x%02x \n",
+        DBG(SMC_DEBUG_MISC, "%s: INT 0x%02x MASK 0x%02x\n",
                 dev->name, status, mask);
 
         /* Dump the current TX FIFO contents and restart */
@@ -1341,7 +1341,7 @@ static void smc911x_set_multicast_list(struct net_device *dev)
          * within that register.
          */
         else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *cur_addr;
+                struct netdev_hw_addr *ha;
 
                 /* Set the Hash perfec mode */
                 mcr |= MAC_CR_HPFILT_;
@@ -1349,19 +1349,16 @@ static void smc911x_set_multicast_list(struct net_device *dev)
                 /* start with a table of all zeros: reject all */
                 memset(multicast_table, 0, sizeof(multicast_table));
 
-                netdev_for_each_mc_addr(cur_addr, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         u32 position;
 
-                        /* do we have a pointer here? */
-                        if (!cur_addr)
-                                break;
                         /* make sure this is a multicast address -
                                 shouldn't this be a given if we have it here ? */
-                        if (!(*cur_addr->dmi_addr & 1))
-                                 continue;
+                        if (!(*ha->addr & 1))
+                                continue;
 
                         /* upper 6 bits are used as hash index */
-                        position = ether_crc(ETH_ALEN, cur_addr->dmi_addr)>>26;
+                        position = ether_crc(ETH_ALEN, ha->addr)>>26;
 
                         multicast_table[position>>5] |= 1 << (position&0x1f);
                 }
diff --git a/drivers/net/smc9194.c b/drivers/net/smc9194.c
index f9a960e7fc1f..9e5e9e792e86 100644
--- a/drivers/net/smc9194.c
+++ b/drivers/net/smc9194.c
@@ -417,7 +417,7 @@ static void smc_shutdown( int ioaddr )
 
 
 /*
- . Function: smc_setmulticast( int ioaddr, int count, dev_mc_list * adds )
+ . Function: smc_setmulticast( int ioaddr, struct net_device *dev )
  . Purpose:
  .    This sets the internal hardware table to filter out unwanted multicast
  .    packets before they take up memory.
@@ -438,26 +438,23 @@ static void smc_setmulticast(int ioaddr, struct net_device *dev)
 {
         int                     i;
         unsigned char           multicast_table[ 8 ];
-        struct dev_mc_list *cur_addr;
+        struct netdev_hw_addr *ha;
         /* table for flipping the order of 3 bits */
         unsigned char invert3[] = { 0, 4, 2, 6, 1, 5, 3, 7 };
 
         /* start with a table of all zeros: reject all */
         memset( multicast_table, 0, sizeof( multicast_table ) );
 
-        netdev_for_each_mc_addr(cur_addr, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 int position;
 
-                /* do we have a pointer here? */
-                if ( !cur_addr )
-                        break;
                 /* make sure this is a multicast address - shouldn't this
                    be a given if we have it here ? */
-                if ( !( *cur_addr->dmi_addr & 1 ) )
+                if (!(*ha->addr & 1))
                         continue;
 
                 /* only use the low order bits */
-                position = ether_crc_le(6, cur_addr->dmi_addr) & 0x3f;
+                position = ether_crc_le(6, ha->addr) & 0x3f;
 
                 /* do some messy swapping to put the bit in the right spot */
                 multicast_table[invert3[position&7]] |=
@@ -529,7 +526,7 @@ static netdev_tx_t smc_wait_to_send_packet(struct sk_buff *skb,
         numPages =  ((length & 0xfffe) + 6) / 256;
 
         if (numPages > 7 ) {
-                printk(CARDNAME": Far too big packet error. \n");
+                printk(CARDNAME": Far too big packet error.\n");
                 /* freeing the packet is a good thing here... but should
                  . any packets of this size get down here?   */
                 dev_kfree_skb (skb);
@@ -571,9 +568,9 @@ static netdev_tx_t smc_wait_to_send_packet(struct sk_buff *skb,
         if ( !time_out ) {
                 /* oh well, wait until the chip finds memory later */
                 SMC_ENABLE_INT( IM_ALLOC_INT );
-                PRINTK2((CARDNAME": memory allocation deferred. \n"));
+                PRINTK2((CARDNAME": memory allocation deferred.\n"));
                 /* it's deferred, but I'll handle it later */
-                return NETDEV_TX_OK;
+                return NETDEV_TX_OK;
         }
         /* or YES! I can send the packet now.. */
         smc_hardware_send_packet(dev);
@@ -611,7 +608,7 @@ static void smc_hardware_send_packet( struct net_device * dev )
         ioaddr = dev->base_addr;
 
         if ( !skb ) {
-                PRINTK((CARDNAME": In XMIT with no packet to send \n"));
+                PRINTK((CARDNAME": In XMIT with no packet to send\n"));
                 return;
         }
         length = ETH_ZLEN < skb->len ? skb->len : ETH_ZLEN;
@@ -621,7 +618,7 @@ static void smc_hardware_send_packet( struct net_device * dev )
         packet_no = inb( ioaddr + PNR_ARR + 1 );
         if ( packet_no & 0x80 ) {
                 /* or isn't there?  BAD CHIP! */
-                printk(KERN_DEBUG CARDNAME": Memory allocation failed. \n");
+                printk(KERN_DEBUG CARDNAME": Memory allocation failed.\n");
                 dev_kfree_skb_any(skb);
                 lp->saved_skb = NULL;
                 netif_wake_queue(dev);
@@ -686,7 +683,7 @@ static void smc_hardware_send_packet( struct net_device * dev )
         /* and let the chipset deal with it */
         outw( MC_ENQUEUE , ioaddr + MMU_CMD );
 
-        PRINTK2((CARDNAME": Sent packet of length %d \n",length));
+        PRINTK2((CARDNAME": Sent packet of length %d\n", length));
 
         lp->saved_skb = NULL;
         dev_kfree_skb_any (skb);
@@ -938,7 +935,7 @@ static int __init smc_probe(struct net_device *dev, int ioaddr)
         if ( !chip_ids[ ( revision_register  >> 4 ) & 0xF  ] ) {
                 /* I don't recognize this chip, so... */
                 printk(CARDNAME ": IO %x: Unrecognized revision register:"
-                        " %x, Contact author. \n", ioaddr, revision_register );
+                        " %x, Contact author.\n", ioaddr, revision_register);
 
                 retval = -ENODEV;
                 goto err_out;
@@ -1075,7 +1072,7 @@ static void print_packet( byte * buf, int length )
         int remainder;
         int lines;
 
-        printk("Packet of length %d \n", length );
+        printk("Packet of length %d\n", length);
         lines = length / 16;
         remainder = length % 16;
 
@@ -1202,7 +1199,7 @@ static void smc_rcv(struct net_device *dev)
 
         if ( packet_number & FP_RXEMPTY ) {
                 /* we got called , but nothing was on the FIFO */
-                PRINTK((CARDNAME ": WARNING: smc_rcv with nothing on FIFO. \n"));
+                PRINTK((CARDNAME ": WARNING: smc_rcv with nothing on FIFO.\n"));
                 /* don't need to restore anything */
                 return;
         }
@@ -1258,14 +1255,14 @@ static void smc_rcv(struct net_device *dev)
                    to send the DWORDs or the bytes first, or some
                    mixture.  A mixture might improve already slow PIO
                    performance  */
-                PRINTK3((" Reading %d dwords (and %d bytes) \n",
+                PRINTK3((" Reading %d dwords (and %d bytes)\n",
                         packet_length >> 2, packet_length & 3 ));
                 insl(ioaddr + DATA_1 , data, packet_length >> 2 );
                 /* read the left over bytes */
                 insb( ioaddr + DATA_1, data + (packet_length & 0xFFFFFC),
                         packet_length & 0x3  );
 #else
-                PRINTK3((" Reading %d words and %d byte(s) \n",
+                PRINTK3((" Reading %d words and %d byte(s)\n",
                         (packet_length >> 1 ), packet_length & 1 ));
                 insw(ioaddr + DATA_1 , data, packet_length >> 1);
                 if ( packet_length & 1 ) {
@@ -1334,7 +1331,7 @@ static void smc_tx( struct net_device * dev )
         outw( PTR_AUTOINC | PTR_READ, ioaddr + POINTER );
 
         tx_status = inw( ioaddr + DATA_1 );
-        PRINTK3((CARDNAME": TX DONE STATUS: %4x \n", tx_status ));
+        PRINTK3((CARDNAME": TX DONE STATUS: %4x\n", tx_status));
 
         dev->stats.tx_errors++;
         if ( tx_status & TS_LOSTCAR ) dev->stats.tx_carrier_errors++;
@@ -1348,7 +1345,7 @@ static void smc_tx( struct net_device * dev )
 #endif
 
         if ( tx_status & TS_SUCCESS ) {
-                printk(CARDNAME": Successful packet caused interrupt \n");
+                printk(CARDNAME": Successful packet caused interrupt\n");
         }
         /* re-enable transmit */
         SMC_SELECT_BANK( 0 );
@@ -1394,7 +1391,7 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
         int handled = 0;
 
 
-        PRINTK3((CARDNAME": SMC interrupt started \n"));
+        PRINTK3((CARDNAME": SMC interrupt started\n"));
 
         saved_bank = inw( ioaddr + BANK_SELECT );
 
@@ -1409,7 +1406,7 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
         /* set a timeout value, so I don't stay here forever */
         timeout = 4;
 
-        PRINTK2((KERN_WARNING CARDNAME ": MASK IS %x \n", mask ));
+        PRINTK2((KERN_WARNING CARDNAME ": MASK IS %x\n", mask));
         do {
                 /* read the status flag, and mask it */
                 status = inb( ioaddr + INTERRUPT ) & mask;
@@ -1419,7 +1416,7 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
                 handled = 1;
 
                 PRINTK3((KERN_WARNING CARDNAME
-                        ": Handling interrupt status %x \n", status ));
+                        ": Handling interrupt status %x\n", status));
 
                 if (status & IM_RCV_INT) {
                         /* Got a packet(s). */
@@ -1453,7 +1450,7 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
 
                 } else if (status & IM_ALLOC_INT ) {
                         PRINTK2((KERN_DEBUG CARDNAME
-                                ": Allocation interrupt \n"));
+                                ": Allocation interrupt\n"));
                         /* clear this interrupt so it doesn't happen again */
                         mask &= ~IM_ALLOC_INT;
 
@@ -1471,9 +1468,9 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
                         dev->stats.rx_fifo_errors++;
                         outb( IM_RX_OVRN_INT, ioaddr + INTERRUPT );
                 } else if (status & IM_EPH_INT ) {
-                        PRINTK((CARDNAME ": UNSUPPORTED: EPH INTERRUPT \n"));
+                        PRINTK((CARDNAME ": UNSUPPORTED: EPH INTERRUPT\n"));
                 } else if (status & IM_ERCV_INT ) {
-                        PRINTK((CARDNAME ": UNSUPPORTED: ERCV INTERRUPT \n"));
+                        PRINTK((CARDNAME ": UNSUPPORTED: ERCV INTERRUPT\n"));
                         outb( IM_ERCV_INT, ioaddr + INTERRUPT );
                 }
         } while ( timeout -- );
@@ -1483,7 +1480,7 @@ static irqreturn_t smc_interrupt(int irq, void * dev_id)
         SMC_SELECT_BANK( 2 );
         outb( mask, ioaddr + INT_MASK );
 
-        PRINTK3(( KERN_WARNING CARDNAME ": MASK is now %x \n", mask ));
+        PRINTK3((KERN_WARNING CARDNAME ": MASK is now %x\n", mask));
         outw( saved_pointer, ioaddr + POINTER );
 
         SMC_SELECT_BANK( saved_bank );
diff --git a/drivers/net/smc91x.c b/drivers/net/smc91x.c
index fc1b5a1a3583..20c756577631 100644
--- a/drivers/net/smc91x.c
+++ b/drivers/net/smc91x.c
@@ -1286,7 +1286,7 @@ static irqreturn_t smc_interrupt(int irq, void *dev_id)
                         smc_phy_interrupt(dev);
                 } else if (status & IM_ERCV_INT) {
                         SMC_ACK_INT(lp, IM_ERCV_INT);
-                        PRINTK("%s: UNSUPPORTED: ERCV INTERRUPT \n", dev->name);
+                        PRINTK("%s: UNSUPPORTED: ERCV INTERRUPT\n", dev->name);
                 }
         } while (--timeout);
 
@@ -1413,7 +1413,7 @@ static void smc_set_multicast_list(struct net_device *dev)
          * within that register.
          */
         else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *cur_addr;
+                struct netdev_hw_addr *ha;
 
                 /* table for flipping the order of 3 bits */
                 static const unsigned char invert3[] = {0, 4, 2, 6, 1, 5, 3, 7};
@@ -1421,16 +1421,16 @@ static void smc_set_multicast_list(struct net_device *dev)
                 /* start with a table of all zeros: reject all */
                 memset(multicast_table, 0, sizeof(multicast_table));
 
-                netdev_for_each_mc_addr(cur_addr, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         int position;
 
                         /* make sure this is a multicast address -
                            shouldn't this be a given if we have it here ? */
-                        if (!(*cur_addr->dmi_addr & 1))
+                        if (!(*ha->addr & 1))
                                 continue;
 
                         /* only use the low order bits */
-                        position = crc32_le(~0, cur_addr->dmi_addr, 6) & 0x3f;
+                        position = crc32_le(~0, ha->addr, 6) & 0x3f;
 
                         /* do some messy swapping to put the bit in the right spot */
                         multicast_table[invert3[position&7]] |=
diff --git a/drivers/net/smsc911x.c b/drivers/net/smsc911x.c
index 4fd1d8b38788..d6e3a12d65d3 100644
--- a/drivers/net/smsc911x.c
+++ b/drivers/net/smsc911x.c
@@ -1383,13 +1383,13 @@ static void smsc911x_set_multicast_list(struct net_device *dev)
                 /* Enabling specific multicast addresses */
                 unsigned int hash_high = 0;
                 unsigned int hash_low = 0;
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
 
                 pdata->set_bits_mask = MAC_CR_HPFILT_;
                 pdata->clear_bits_mask = (MAC_CR_PRMS_ | MAC_CR_MCPAS_);
 
-                netdev_for_each_mc_addr(mc_list, dev) {
-                        unsigned int bitnum = smsc911x_hash(mc_list->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        unsigned int bitnum = smsc911x_hash(ha->addr);
                         unsigned int mask = 0x01 << (bitnum & 0x1F);
 
                         if (bitnum & 0x20)
diff --git a/drivers/net/smsc9420.c b/drivers/net/smsc9420.c
index 34fa10d8ad40..5409ec1a5fd7 100644
--- a/drivers/net/smsc9420.c
+++ b/drivers/net/smsc9420.c
@@ -1063,12 +1063,12 @@ static void smsc9420_set_multicast_list(struct net_device *dev)
                 mac_cr |= MAC_CR_MCPAS_;
                 mac_cr &= (~MAC_CR_HPFILT_);
         } else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
                 u32 hash_lo = 0, hash_hi = 0;
 
                 smsc_dbg(HW, "Multicast filter enabled");
-                netdev_for_each_mc_addr(mc_list, dev) {
-                        u32 bit_num = smsc9420_hash(mc_list->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        u32 bit_num = smsc9420_hash(ha->addr);
                         u32 mask = 1 << (bit_num & 0x1F);
 
                         if (bit_num & 0x20)
diff --git a/drivers/net/sonic.c b/drivers/net/sonic.c
index 287c251075e5..e5d67327d707 100644
--- a/drivers/net/sonic.c
+++ b/drivers/net/sonic.c
@@ -531,7 +531,7 @@ static void sonic_multicast_list(struct net_device *dev)
 {
         struct sonic_local *lp = netdev_priv(dev);
         unsigned int rcr;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned char *addr;
         int i;
 
@@ -550,8 +550,8 @@ static void sonic_multicast_list(struct net_device *dev)
                                        netdev_mc_count(dev));
                         sonic_set_cam_enable(dev, 1);  /* always enable our own address */
                         i = 1;
-                        netdev_for_each_mc_addr(dmi, dev) {
-                                addr = dmi->dmi_addr;
+                        netdev_for_each_mc_addr(ha, dev) {
+                                addr = ha->addr;
                                 sonic_cda_put(dev, i, SONIC_CD_CAP0, addr[1] << 8 | addr[0]);
                                 sonic_cda_put(dev, i, SONIC_CD_CAP1, addr[3] << 8 | addr[2]);
                                 sonic_cda_put(dev, i, SONIC_CD_CAP2, addr[5] << 8 | addr[4]);
diff --git a/drivers/net/spider_net.c b/drivers/net/spider_net.c
index 5ba9d989f8fc..c04c8f9a2d96 100644
--- a/drivers/net/spider_net.c
+++ b/drivers/net/spider_net.c
@@ -625,7 +625,7 @@ spider_net_get_multicast_hash(struct net_device *netdev, __u8 *addr)
 static void
 spider_net_set_multi(struct net_device *netdev)
 {
-        struct dev_mc_list *mc;
+        struct netdev_hw_addr *ha;
         u8 hash;
         int i;
         u32 reg;
@@ -646,8 +646,8 @@ spider_net_set_multi(struct net_device *netdev)
         hash = spider_net_get_multicast_hash(netdev, netdev->broadcast); */
         set_bit(0xfd, bitmask);
 
-        netdev_for_each_mc_addr(mc, netdev) {
-                hash = spider_net_get_multicast_hash(netdev, mc->dmi_addr);
+        netdev_for_each_mc_addr(ha, netdev) {
+                hash = spider_net_get_multicast_hash(netdev, ha->addr);
                 set_bit(hash, bitmask);
         }
 
diff --git a/drivers/net/starfire.c b/drivers/net/starfire.c
index 6dfa69899019..8a6d27cdc0bd 100644
--- a/drivers/net/starfire.c
+++ b/drivers/net/starfire.c
@@ -1766,7 +1766,7 @@ static void set_rx_mode(struct net_device *dev)
         struct netdev_private *np = netdev_priv(dev);
         void __iomem *ioaddr = np->base;
         u32 rx_mode = MinVLANPrio;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         int i;
 #ifdef VLAN_SUPPORT
 
@@ -1804,8 +1804,8 @@ static void set_rx_mode(struct net_device *dev)
                 /* Use the 16 element perfect filter, skip first two entries. */
                 void __iomem *filter_addr = ioaddr + PerfFilterTable + 2 * 16;
                 __be16 *eaddrs;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        eaddrs = (__be16 *)mclist->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        eaddrs = (__be16 *) ha->addr;
                         writew(be16_to_cpu(eaddrs[2]), filter_addr); filter_addr += 4;
                         writew(be16_to_cpu(eaddrs[1]), filter_addr); filter_addr += 4;
                         writew(be16_to_cpu(eaddrs[0]), filter_addr); filter_addr += 8;
@@ -1825,10 +1825,10 @@ static void set_rx_mode(struct net_device *dev)
                 __le16 mc_filter[32] __attribute__ ((aligned(sizeof(long))));   /* Multicast hash filter */
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         /* The chip uses the upper 9 CRC bits
                            as index into the hash table */
-                        int bit_nr = ether_crc_le(ETH_ALEN, mclist->dmi_addr) >> 23;
+                        int bit_nr = ether_crc_le(ETH_ALEN, ha->addr) >> 23;
                         __le32 *fptr = (__le32 *) &mc_filter[(bit_nr >> 4) & ~1];
 
                         *fptr |= cpu_to_le32(1 << (bit_nr & 31));
diff --git a/drivers/net/stmmac/dwmac100.c b/drivers/net/stmmac/dwmac100.c
index 803b0373d843..c0a1c9df3ac7 100644
--- a/drivers/net/stmmac/dwmac100.c
+++ b/drivers/net/stmmac/dwmac100.c
@@ -138,7 +138,7 @@ static void dwmac100_dump_dma_regs(unsigned long ioaddr)
 {
         int i;
 
-        DBG(KERN_DEBUG "DWMAC 100 DMA CSR \n");
+        DBG(KERN_DEBUG "DWMAC 100 DMA CSR\n");
         for (i = 0; i < 9; i++)
                 pr_debug("\t CSR%d (offset 0x%x): 0x%08x\n", i,
                        (DMA_BUS_MODE + i * 4),
@@ -316,7 +316,7 @@ static void dwmac100_set_filter(struct net_device *dev)
                            MAC_CONTROL_HO | MAC_CONTROL_HP);
         } else {
                 u32 mc_filter[2];
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 /* Perfect filter mode for physical address and Hash
                    filter for multicast */
@@ -325,11 +325,11 @@ static void dwmac100_set_filter(struct net_device *dev)
                            MAC_CONTROL_IF | MAC_CONTROL_HO);
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         /* The upper 6 bits of the calculated CRC are used to
                          * index the contens of the hash table */
                         int bit_nr =
-                            ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                            ether_crc(ETH_ALEN, ha->addr) >> 26;
                         /* The most significant bit determines the register to
                          * use (H/L) while the other 5 bits determine the bit
                          * within the register. */
diff --git a/drivers/net/stmmac/dwmac1000_core.c b/drivers/net/stmmac/dwmac1000_core.c
index a6538ae4694c..bf73fda6adfb 100644
--- a/drivers/net/stmmac/dwmac1000_core.c
+++ b/drivers/net/stmmac/dwmac1000_core.c
@@ -94,17 +94,17 @@ static void dwmac1000_set_filter(struct net_device *dev)
                 writel(0xffffffff, ioaddr + GMAC_HASH_LOW);
         } else if (!netdev_mc_empty(dev)) {
                 u32 mc_filter[2];
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 /* Hash filter for multicast */
                 value = GMAC_FRAME_FILTER_HMC;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         /* The upper 6 bits of the calculated CRC are used to
                            index the contens of the hash table */
                         int bit_nr =
-                            bitrev32(~crc32_le(~0, mclist->dmi_addr, 6)) >> 26;
+                            bitrev32(~crc32_le(~0, ha->addr, 6)) >> 26;
                         /* The most significant bit determines the register to
                          * use (H/L) while the other 5 bits determine the bit
                          * within the register. */
diff --git a/drivers/net/stmmac/stmmac_main.c b/drivers/net/stmmac/stmmac_main.c
index a6733612d64a..963f591f1e0e 100644
--- a/drivers/net/stmmac/stmmac_main.c
+++ b/drivers/net/stmmac/stmmac_main.c
@@ -836,7 +836,7 @@ static int stmmac_open(struct net_device *dev)
 #ifdef CONFIG_STMMAC_TIMER
         priv->tm = kzalloc(sizeof(struct stmmac_timer *), GFP_KERNEL);
         if (unlikely(priv->tm == NULL)) {
-                pr_err("%s: ERROR: timer memory alloc failed \n", __func__);
+                pr_err("%s: ERROR: timer memory alloc failed\n", __func__);
                 return -ENOMEM;
         }
         priv->tm->freq = tmrate;
@@ -1685,8 +1685,7 @@ static int stmmac_dvr_probe(struct platform_device *pdev)
         }
         pr_info("done!\n");
 
-        if (!request_mem_region(res->start, (res->end - res->start),
-                                pdev->name)) {
+        if (!request_mem_region(res->start, resource_size(res), pdev->name)) {
                 pr_err("%s: ERROR: memory allocation failed"
                        "cannot get the I/O addr 0x%x\n",
                        __func__, (unsigned int)res->start);
@@ -1694,9 +1693,9 @@ static int stmmac_dvr_probe(struct platform_device *pdev)
                 goto out;
         }
 
-        addr = ioremap(res->start, (res->end - res->start));
+        addr = ioremap(res->start, resource_size(res));
         if (!addr) {
-                pr_err("%s: ERROR: memory mapping failed \n", __func__);
+                pr_err("%s: ERROR: memory mapping failed\n", __func__);
                 ret = -ENOMEM;
                 goto out;
         }
@@ -1774,7 +1773,7 @@ static int stmmac_dvr_probe(struct platform_device *pdev)
 out:
         if (ret < 0) {
                 platform_set_drvdata(pdev, NULL);
-                release_mem_region(res->start, (res->end - res->start));
+                release_mem_region(res->start, resource_size(res));
                 if (addr != NULL)
                         iounmap(addr);
         }
@@ -1812,7 +1811,7 @@ static int stmmac_dvr_remove(struct platform_device *pdev)
 
         iounmap((void *)ndev->base_addr);
         res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
-        release_mem_region(res->start, (res->end - res->start));
+        release_mem_region(res->start, resource_size(res));
 
         free_netdev(ndev);
 
diff --git a/drivers/net/sun3_82586.c b/drivers/net/sun3_82586.c
index 2f6a760e5f21..2cfa065c39c0 100644
--- a/drivers/net/sun3_82586.c
+++ b/drivers/net/sun3_82586.c
@@ -413,7 +413,7 @@ static int init586(struct net_device *dev)
         volatile struct iasetup_cmd_struct *ias_cmd;
         volatile struct tdr_cmd_struct *tdr_cmd;
         volatile struct mcsetup_cmd_struct *mc_cmd;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         int num_addrs=netdev_mc_count(dev);
 
         ptr = (void *) ((char *)p->scb + sizeof(struct scb_struct));
@@ -537,9 +537,9 @@ static int init586(struct net_device *dev)
                 mc_cmd->mc_cnt = swab16(num_addrs * 6);
 
                 i = 0;
-                netdev_for_each_mc_addr(dmi, dev)
+                netdev_for_each_mc_addr(ha, dev)
                         memcpy((char *) mc_cmd->mc_list[i++],
-                               dmi->dmi_addr, ETH_ALEN);
+                               ha->addr, ETH_ALEN);
 
                 p->scb->cbl_offset = make16(mc_cmd);
                 p->scb->cmd_cuc = CUC_START;
diff --git a/drivers/net/sunbmac.c b/drivers/net/sunbmac.c
index a0bd361d5eca..4dd159b4116b 100644
--- a/drivers/net/sunbmac.c
+++ b/drivers/net/sunbmac.c
@@ -999,7 +999,7 @@ static void bigmac_set_multicast(struct net_device *dev)
 {
         struct bigmac *bp = netdev_priv(dev);
         void __iomem *bregs = bp->bregs;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         int i;
         u32 tmp, crc;
@@ -1028,8 +1028,8 @@ static void bigmac_set_multicast(struct net_device *dev)
                 for (i = 0; i < 4; i++)
                         hash_table[i] = 0;
 
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
diff --git a/drivers/net/sundance.c b/drivers/net/sundance.c
index a855934dfc3b..47e8cce10d1e 100644
--- a/drivers/net/sundance.c
+++ b/drivers/net/sundance.c
@@ -1523,13 +1523,13 @@ static void set_rx_mode(struct net_device *dev)
                 memset(mc_filter, 0xff, sizeof(mc_filter));
                 rx_mode = AcceptBroadcast | AcceptMulticast | AcceptMyPhys;
         } else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 int bit;
                 int index;
                 int crc;
                 memset (mc_filter, 0, sizeof (mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        crc = ether_crc_le (ETH_ALEN, mclist->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        crc = ether_crc_le(ETH_ALEN, ha->addr);
                         for (index=0, bit=0; bit < 6; bit++, crc <<= 1)
                                 if (crc & 0x80000000) index |= 1 << bit;
                         mc_filter[index/16] |= (1 << (index % 16));
diff --git a/drivers/net/sungem.c b/drivers/net/sungem.c
index 70196bc5fe61..58a27541ae39 100644
--- a/drivers/net/sungem.c
+++ b/drivers/net/sungem.c
@@ -1846,12 +1846,12 @@ static u32 gem_setup_multicast(struct gem *gp)
         } else {
                 u16 hash_table[16];
                 u32 crc;
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 int i;
 
                 memset(hash_table, 0, sizeof(hash_table));
-                netdev_for_each_mc_addr(dmi, gp->dev) {
-                        char *addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, gp->dev) {
+                        char *addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
diff --git a/drivers/net/sunhme.c b/drivers/net/sunhme.c
index b17dbb11bd67..20deb14e98ff 100644
--- a/drivers/net/sunhme.c
+++ b/drivers/net/sunhme.c
@@ -1523,13 +1523,13 @@ static int happy_meal_init(struct happy_meal *hp)
                 hme_write32(hp, bregs + BMAC_HTABLE3, 0xffff);
         } else if ((hp->dev->flags & IFF_PROMISC) == 0) {
                 u16 hash_table[4];
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 char *addrs;
                 u32 crc;
 
                 memset(hash_table, 0, sizeof(hash_table));
-                netdev_for_each_mc_addr(dmi, hp->dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, hp->dev) {
+                        addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
@@ -2362,7 +2362,7 @@ static void happy_meal_set_multicast(struct net_device *dev)
 {
         struct happy_meal *hp = netdev_priv(dev);
         void __iomem *bregs = hp->bigmacregs;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
 
@@ -2380,8 +2380,8 @@ static void happy_meal_set_multicast(struct net_device *dev)
                 u16 hash_table[4];
 
                 memset(hash_table, 0, sizeof(hash_table));
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
diff --git a/drivers/net/sunlance.c b/drivers/net/sunlance.c
index d7c73f478ef5..674570584bd5 100644
--- a/drivers/net/sunlance.c
+++ b/drivers/net/sunlance.c
@@ -1170,7 +1170,7 @@ static int lance_start_xmit(struct sk_buff *skb, struct net_device *dev)
 static void lance_load_multicast(struct net_device *dev)
 {
         struct lance_private *lp = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         char *addrs;
         u32 crc;
         u32 val;
@@ -1195,8 +1195,8 @@ static void lance_load_multicast(struct net_device *dev)
                 return;
 
         /* Add addresses */
-        netdev_for_each_mc_addr(dmi, dev) {
-                addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrs = ha->addr;
 
                 /* multicast address? */
                 if (!(*addrs & 1))
diff --git a/drivers/net/sunqe.c b/drivers/net/sunqe.c
index be637dce944c..239f09772191 100644
--- a/drivers/net/sunqe.c
+++ b/drivers/net/sunqe.c
@@ -627,7 +627,7 @@ static int qe_start_xmit(struct sk_buff *skb, struct net_device *dev)
 static void qe_set_multicast(struct net_device *dev)
 {
         struct sunqe *qep = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         u8 new_mconfig = qep->mconfig;
         char *addrs;
         int i;
@@ -651,8 +651,8 @@ static void qe_set_multicast(struct net_device *dev)
                 u8 *hbytes = (unsigned char *) &hash_table[0];
 
                 memset(hash_table, 0, sizeof(hash_table));
-                netdev_for_each_mc_addr(dmi, dev) {
-                        addrs = dmi->dmi_addr;
+                netdev_for_each_mc_addr(ha, dev) {
+                        addrs = ha->addr;
 
                         if (!(*addrs & 1))
                                 continue;
diff --git a/drivers/net/sunvnet.c b/drivers/net/sunvnet.c
index 6b1b7cea7f6b..6cf8b06be5cd 100644
--- a/drivers/net/sunvnet.c
+++ b/drivers/net/sunvnet.c
@@ -763,12 +763,12 @@ static struct vnet_mcast_entry *__vnet_mc_find(struct vnet *vp, u8 *addr)
 
 static void __update_mc_list(struct vnet *vp, struct net_device *dev)
 {
-        struct dev_addr_list *p;
+        struct netdev_hw_addr *ha;
 
-        netdev_for_each_mc_addr(p, dev) {
+        netdev_for_each_mc_addr(ha, dev) {
                 struct vnet_mcast_entry *m;
 
-                m = __vnet_mc_find(vp, p->dmi_addr);
+                m = __vnet_mc_find(vp, ha->addr);
                 if (m) {
                         m->hit = 1;
                         continue;
@@ -778,7 +778,7 @@ static void __update_mc_list(struct vnet *vp, struct net_device *dev)
                         m = kzalloc(sizeof(*m), GFP_ATOMIC);
                         if (!m)
                                 continue;
-                        memcpy(m->addr, p->dmi_addr, ETH_ALEN);
+                        memcpy(m->addr, ha->addr, ETH_ALEN);
                         m->hit = 1;
 
                         m->next = vp->mcast_list;
diff --git a/drivers/net/tc35815.c b/drivers/net/tc35815.c
index 49bd84c0d583..36149ddace46 100644
--- a/drivers/net/tc35815.c
+++ b/drivers/net/tc35815.c
@@ -1954,16 +1954,16 @@ tc35815_set_multicast_list(struct net_device *dev)
                 /* Disable promiscuous mode, use normal mode. */
                 tc_writel(CAM_CompEn | CAM_BroadAcc | CAM_GroupAcc, &tr->CAM_Ctl);
         } else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *cur_addr;
+                struct netdev_hw_addr *ha;
                 int i;
                 int ena_bits = CAM_Ena_Bit(CAM_ENTRY_SOURCE);
 
                 tc_writel(0, &tr->CAM_Ctl);
                 /* Walk the address list, and load the filter */
                 i = 0;
-                netdev_for_each_mc_addr(cur_addr, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         /* entry 0,1 is reserved. */
-                        tc35815_set_cam_entry(dev, i + 2, cur_addr->dmi_addr);
+                        tc35815_set_cam_entry(dev, i + 2, ha->addr);
                         ena_bits |= CAM_Ena_Bit(i + 2);
                         i++;
                 }
diff --git a/drivers/net/tehuti.c b/drivers/net/tehuti.c
index f5493092521a..a38aede5c8d6 100644
--- a/drivers/net/tehuti.c
+++ b/drivers/net/tehuti.c
@@ -808,7 +808,7 @@ static void bdx_setmulti(struct net_device *ndev)
                         WRITE_REG(priv, regRX_MCST_HASH0 + i * 4, ~0);
         } else if (!netdev_mc_empty(ndev)) {
                 u8 hash;
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 u32 reg, val;
 
                 /* set IMF to deny all multicast frames */
@@ -825,10 +825,10 @@ static void bdx_setmulti(struct net_device *ndev)
                  * into RX_MAC_MCST regs. we skip this phase now and accept ALL
                  * multicast frames throu IMF */
                 /* accept the rest of addresses throu IMF */
-                netdev_for_each_mc_addr(mclist, ndev) {
+                netdev_for_each_mc_addr(ha, ndev) {
                         hash = 0;
                         for (i = 0; i < ETH_ALEN; i++)
-                                hash ^= mclist->dmi_addr[i];
+                                hash ^= ha->addr[i];
                         reg = regRX_MCST_HASH0 + ((hash >> 5) << 2);
                         val = READ_REG(priv, reg);
                         val |= (1 << (hash % 32));
@@ -1303,7 +1303,6 @@ static int bdx_rx_receive(struct bdx_priv *priv, struct rxd_fifo *f, int budget)
                 priv->net_stats.rx_bytes += len;
 
                 skb_put(skb, len);
-                skb->dev = priv->ndev;
                 skb->ip_summed = CHECKSUM_UNNECESSARY;
                 skb->protocol = eth_type_trans(skb, priv->ndev);
 
diff --git a/drivers/net/tg3.c b/drivers/net/tg3.c
index 22cf1c446de3..460a0c22b318 100644
--- a/drivers/net/tg3.c
+++ b/drivers/net/tg3.c
@@ -67,8 +67,8 @@
 #include "tg3.h"
 
 #define DRV_MODULE_NAME         "tg3"
-#define DRV_MODULE_VERSION      "3.108"
-#define DRV_MODULE_RELDATE      "February 17, 2010"
+#define DRV_MODULE_VERSION      "3.109"
+#define DRV_MODULE_RELDATE      "April 2, 2010"
 
 #define TG3_DEF_MAC_MODE        0
 #define TG3_DEF_RX_MODE         0
@@ -101,7 +101,7 @@
 #define TG3_DEF_RX_RING_PENDING         200
 #define TG3_RX_JUMBO_RING_SIZE          256
 #define TG3_DEF_RX_JUMBO_RING_PENDING   100
-#define TG3_RSS_INDIR_TBL_SIZE 128
+#define TG3_RSS_INDIR_TBL_SIZE          128
 
 /* Do not place this n-ring entries value into the tp struct itself,
  * we really want to expose these constants to GCC so that modulo et
@@ -142,6 +142,8 @@
 #define TG3_RX_JMB_BUFF_RING_SIZE \
         (sizeof(struct ring_info) * TG3_RX_JUMBO_RING_SIZE)
 
+#define TG3_RSS_MIN_NUM_MSIX_VECS       2
+
 /* minimum number of free TX descriptors required to wake up TX process */
 #define TG3_TX_WAKEUP_THRESH(tnapi)             ((tnapi)->tx_pending / 4)
 
@@ -152,6 +154,8 @@
 
 #define TG3_NUM_TEST            6
 
+#define TG3_FW_UPDATE_TIMEOUT_SEC       5
+
 #define FIRMWARE_TG3            "tigon/tg3.bin"
 #define FIRMWARE_TG3TSO         "tigon/tg3_tso.bin"
 #define FIRMWARE_TG3TSO5        "tigon/tg3_tso5.bin"
@@ -167,8 +171,6 @@ MODULE_FIRMWARE(FIRMWARE_TG3);
 MODULE_FIRMWARE(FIRMWARE_TG3TSO);
 MODULE_FIRMWARE(FIRMWARE_TG3TSO5);
 
-#define TG3_RSS_MIN_NUM_MSIX_VECS       2
-
 static int tg3_debug = -1;      /* -1 == use TG3_DEF_MSG_ENABLE as value */
 module_param(tg3_debug, int, 0);
 MODULE_PARM_DESC(tg3_debug, "Tigon3 bitmapped debugging message enable value");
@@ -496,16 +498,16 @@ static void tg3_write32_mbox_5906(struct tg3 *tp, u32 off, u32 val)
         writel(val, tp->regs + off + GRCMBOX_BASE);
 }
 
-#define tw32_mailbox(reg, val)  tp->write32_mbox(tp, reg, val)
+#define tw32_mailbox(reg, val)          tp->write32_mbox(tp, reg, val)
 #define tw32_mailbox_f(reg, val)        tw32_mailbox_flush(tp, (reg), (val))
-#define tw32_rx_mbox(reg, val)  tp->write32_rx_mbox(tp, reg, val)
-#define tw32_tx_mbox(reg, val)  tp->write32_tx_mbox(tp, reg, val)
-#define tr32_mailbox(reg)       tp->read32_mbox(tp, reg)
+#define tw32_rx_mbox(reg, val)          tp->write32_rx_mbox(tp, reg, val)
+#define tw32_tx_mbox(reg, val)          tp->write32_tx_mbox(tp, reg, val)
+#define tr32_mailbox(reg)               tp->read32_mbox(tp, reg)
 
-#define tw32(reg,val)           tp->write32(tp, reg, val)
-#define tw32_f(reg,val)         _tw32_flush(tp,(reg),(val), 0)
-#define tw32_wait_f(reg,val,us) _tw32_flush(tp,(reg),(val), (us))
-#define tr32(reg)               tp->read32(tp, reg)
+#define tw32(reg, val)                  tp->write32(tp, reg, val)
+#define tw32_f(reg, val)                _tw32_flush(tp, (reg), (val), 0)
+#define tw32_wait_f(reg, val, us)       _tw32_flush(tp, (reg), (val), (us))
+#define tr32(reg)                       tp->read32(tp, reg)
 
 static void tg3_write_mem(struct tg3 *tp, u32 off, u32 val)
 {
@@ -579,11 +581,11 @@ static int tg3_ape_lock(struct tg3 *tp, int locknum)
                 return 0;
 
         switch (locknum) {
-                case TG3_APE_LOCK_GRC:
-                case TG3_APE_LOCK_MEM:
-                        break;
-                default:
-                        return -EINVAL;
+        case TG3_APE_LOCK_GRC:
+        case TG3_APE_LOCK_MEM:
+                break;
+        default:
+                return -EINVAL;
         }
 
         off = 4 * locknum;
@@ -617,11 +619,11 @@ static void tg3_ape_unlock(struct tg3 *tp, int locknum)
                 return;
 
         switch (locknum) {
-                case TG3_APE_LOCK_GRC:
-                case TG3_APE_LOCK_MEM:
-                        break;
-                default:
-                        return;
+        case TG3_APE_LOCK_GRC:
+        case TG3_APE_LOCK_MEM:
+                break;
+        default:
+                return;
         }
 
         off = 4 * locknum;
@@ -651,6 +653,7 @@ static void tg3_enable_ints(struct tg3 *tp)
         tp->coal_now = tp->coalesce_mode | HOSTCC_MODE_ENABLE;
         for (i = 0; i < tp->irq_cnt; i++) {
                 struct tg3_napi *tnapi = &tp->napi[i];
+
                 tw32_mailbox_f(tnapi->int_mbox, tnapi->last_tag << 24);
                 if (tp->tg3_flags2 & TG3_FLG2_1SHOT_MSI)
                         tw32_mailbox_f(tnapi->int_mbox, tnapi->last_tag << 24);
@@ -1098,7 +1101,7 @@ static int tg3_mdio_init(struct tg3 *tp)
 
         i = mdiobus_register(tp->mdio_bus);
         if (i) {
-                netdev_warn(tp->dev, "mdiobus_reg failed (0x%x)\n", i);
+                dev_warn(&tp->pdev->dev, "mdiobus_reg failed (0x%x)\n", i);
                 mdiobus_free(tp->mdio_bus);
                 return i;
         }
@@ -1106,7 +1109,7 @@ static int tg3_mdio_init(struct tg3 *tp)
         phydev = tp->mdio_bus->phy_map[TG3_PHY_MII_ADDR];
 
         if (!phydev || !phydev->drv) {
-                netdev_warn(tp->dev, "No PHY devices\n");
+                dev_warn(&tp->pdev->dev, "No PHY devices\n");
                 mdiobus_unregister(tp->mdio_bus);
                 mdiobus_free(tp->mdio_bus);
                 return -ENODEV;
@@ -1437,7 +1440,7 @@ static void tg3_adjust_link(struct net_device *dev)
             phydev->speed != tp->link_config.active_speed ||
             phydev->duplex != tp->link_config.active_duplex ||
             oldflowctrl != tp->link_config.active_flowctrl)
-            linkmesg = 1;
+                linkmesg = 1;
 
         tp->link_config.active_speed = phydev->speed;
         tp->link_config.active_duplex = phydev->duplex;
@@ -1464,7 +1467,7 @@ static int tg3_phy_init(struct tg3 *tp)
         phydev = phy_connect(tp->dev, dev_name(&phydev->dev), tg3_adjust_link,
                              phydev->dev_flags, phydev->interface);
         if (IS_ERR(phydev)) {
-                netdev_err(tp->dev, "Could not attach to PHY\n");
+                dev_err(&tp->pdev->dev, "Could not attach to PHY\n");
                 return PTR_ERR(phydev);
         }
 
@@ -1855,8 +1858,7 @@ static int tg3_phy_reset_5703_4_5(struct tg3 *tp)
             GET_ASIC_REV(tp->pci_chip_rev_id) == ASIC_REV_5704) {
                 /* Set Extended packet length bit for jumbo frames */
                 tg3_writephy(tp, MII_TG3_AUX_CTRL, 0x4400);
-        }
-        else {
+        } else {
                 tg3_writephy(tp, MII_TG3_AUX_CTRL, 0x0400);
         }
 
@@ -1974,8 +1976,7 @@ out:
                 tg3_writephy(tp, MII_TG3_DSP_ADDRESS, 0x401f);
                 tg3_writephy(tp, MII_TG3_DSP_RW_PORT, 0x14e2);
                 tg3_writephy(tp, MII_TG3_AUX_CTRL, 0x0400);
-        }
-        else if (tp->tg3_flags2 & TG3_FLG2_PHY_JITTER_BUG) {
+        } else if (tp->tg3_flags2 & TG3_FLG2_PHY_JITTER_BUG) {
                 tg3_writephy(tp, MII_TG3_AUX_CTRL, 0x0c00);
                 tg3_writephy(tp, MII_TG3_DSP_ADDRESS, 0x000a);
                 if (tp->tg3_flags2 & TG3_FLG2_PHY_ADJUST_TRIM) {
@@ -2007,8 +2008,8 @@ out:
                 u32 phy_reg;
 
                 if (!tg3_readphy(tp, MII_TG3_EXT_CTRL, &phy_reg))
-                    tg3_writephy(tp, MII_TG3_EXT_CTRL,
-                                 phy_reg | MII_TG3_EXT_CTRL_FIFO_ELASTIC);
+                        tg3_writephy(tp, MII_TG3_EXT_CTRL,
+                                     phy_reg | MII_TG3_EXT_CTRL_FIFO_ELASTIC);
         }
 
         if (GET_ASIC_REV(tp->pci_chip_rev_id) == ASIC_REV_5906) {
@@ -3425,7 +3426,7 @@ static int tg3_fiber_aneg_smachine(struct tg3 *tp,
         ap->rxconfig = rx_cfg_reg;
         ret = ANEG_OK;
 
-        switch(ap->state) {
+        switch (ap->state) {
         case ANEG_STATE_UNKNOWN:
                 if (ap->flags & (MR_AN_ENABLE | MR_RESTART_AN))
                         ap->state = ANEG_STATE_AN_ENABLE;
@@ -3463,11 +3464,10 @@ static int tg3_fiber_aneg_smachine(struct tg3 *tp,
                 /* fallthru */
         case ANEG_STATE_RESTART:
                 delta = ap->cur_time - ap->link_time;
-                if (delta > ANEG_STATE_SETTLE_TIME) {
+                if (delta > ANEG_STATE_SETTLE_TIME)
                         ap->state = ANEG_STATE_ABILITY_DETECT_INIT;
-                } else {
+                else
                         ret = ANEG_TIMER_ENAB;
-                }
                 break;
 
         case ANEG_STATE_DISABLE_LINK_OK:
@@ -3491,9 +3491,8 @@ static int tg3_fiber_aneg_smachine(struct tg3 *tp,
                 break;
 
         case ANEG_STATE_ABILITY_DETECT:
-                if (ap->ability_match != 0 && ap->rxconfig != 0) {
+                if (ap->ability_match != 0 && ap->rxconfig != 0)
                         ap->state = ANEG_STATE_ACK_DETECT_INIT;
-                }
                 break;
 
         case ANEG_STATE_ACK_DETECT_INIT:
@@ -4171,9 +4170,9 @@ static int tg3_setup_fiber_mii_phy(struct tg3 *tp, int force_reset)
                                         current_duplex = DUPLEX_FULL;
                                 else
                                         current_duplex = DUPLEX_HALF;
-                        }
-                        else
+                        } else {
                                 current_link_up = 0;
+                        }
                 }
         }
 
@@ -4211,6 +4210,7 @@ static void tg3_serdes_parallel_detect(struct tg3 *tp)
                 tp->serdes_counter--;
                 return;
         }
+
         if (!netif_carrier_ok(tp->dev) &&
             (tp->link_config.autoneg == AUTONEG_ENABLE)) {
                 u32 bmcr;
@@ -4240,10 +4240,9 @@ static void tg3_serdes_parallel_detect(struct tg3 *tp)
                                 tp->tg3_flags2 |= TG3_FLG2_PARALLEL_DETECT;
                         }
                 }
-        }
-        else if (netif_carrier_ok(tp->dev) &&
-                 (tp->link_config.autoneg == AUTONEG_ENABLE) &&
-                 (tp->tg3_flags2 & TG3_FLG2_PARALLEL_DETECT)) {
+        } else if (netif_carrier_ok(tp->dev) &&
+                   (tp->link_config.autoneg == AUTONEG_ENABLE) &&
+                   (tp->tg3_flags2 & TG3_FLG2_PARALLEL_DETECT)) {
                 u32 phy2;
 
                 /* Select expansion interrupt status register */
@@ -4266,13 +4265,12 @@ static int tg3_setup_phy(struct tg3 *tp, int force_reset)
 {
         int err;
 
-        if (tp->tg3_flags2 & TG3_FLG2_PHY_SERDES) {
+        if (tp->tg3_flags2 & TG3_FLG2_PHY_SERDES)
                 err = tg3_setup_fiber_phy(tp, force_reset);
-        } else if (tp->tg3_flags2 & TG3_FLG2_MII_SERDES) {
+        else if (tp->tg3_flags2 & TG3_FLG2_MII_SERDES)
                 err = tg3_setup_fiber_mii_phy(tp, force_reset);
-        } else {
+        else
                 err = tg3_setup_copper_phy(tp, force_reset);
-        }
 
         if (GET_CHIP_REV(tp->pci_chip_rev_id) == CHIPREV_5784_AX) {
                 u32 val, scale;
@@ -4335,8 +4333,11 @@ static void tg3_tx_recover(struct tg3 *tp)
         BUG_ON((tp->tg3_flags & TG3_FLAG_MBOX_WRITE_REORDER) ||
                tp->write32_tx_mbox == tg3_write_indirect_mbox);
 
-        netdev_warn(tp->dev, "The system may be re-ordering memory-mapped I/O cycles to the network device, attempting to recover\n"
-                    "Please report the problem to the driver maintainer and include system chipset information.\n");
+        netdev_warn(tp->dev,
+                    "The system may be re-ordering memory-mapped I/O "
+                    "cycles to the network device, attempting to recover. "
+                    "Please report the problem to the driver maintainer "
+                    "and include system chipset information.\n");
 
         spin_lock(&tp->lock);
         tp->tg3_flags |= TG3_FLAG_TX_RECOVERY_PENDING;
@@ -4516,8 +4517,8 @@ static void tg3_recycle_rx(struct tg3_napi *tnapi,
         struct tg3 *tp = tnapi->tp;
         struct tg3_rx_buffer_desc *src_desc, *dest_desc;
         struct ring_info *src_map, *dest_map;
-        int dest_idx;
         struct tg3_rx_prodring_set *spr = &tp->prodring[0];
+        int dest_idx;
 
         switch (opaque_key) {
         case RXD_OPAQUE_RING_STD:
@@ -4978,7 +4979,7 @@ static int tg3_poll_msix(struct napi_struct *napi, int budget)
                 if (unlikely(work_done >= budget))
                         break;
 
-                /* tp->last_tag is used in tg3_restart_ints() below
+                /* tp->last_tag is used in tg3_int_reenable() below
                  * to tell the hw how much work has been processed,
                  * so we must read it before checking for more work.
                  */
@@ -4987,8 +4988,8 @@ static int tg3_poll_msix(struct napi_struct *napi, int budget)
                 rmb();
 
                 /* check for RX/TX work to do */
-                if (sblk->idx[0].tx_consumer == tnapi->tx_cons &&
-                    *(tnapi->rx_rcb_prod_idx) == tnapi->rx_rcb_ptr) {
+                if (likely(sblk->idx[0].tx_consumer == tnapi->tx_cons &&
+                           *(tnapi->rx_rcb_prod_idx) == tnapi->rx_rcb_ptr)) {
                         napi_complete(napi);
                         /* Reenable interrupts. */
                         tw32_mailbox(tnapi->int_mbox, tnapi->last_tag << 24);
@@ -5260,7 +5261,8 @@ static int tg3_restart_hw(struct tg3 *tp, int reset_phy)
 
         err = tg3_init_hw(tp, reset_phy);
         if (err) {
-                netdev_err(tp->dev, "Failed to re-initialize device, aborting\n");
+                netdev_err(tp->dev,
+                           "Failed to re-initialize device, aborting\n");
                 tg3_halt(tp, RESET_KIND_SHUTDOWN, 1);
                 tg3_full_unlock(tp);
                 del_timer_sync(&tp->timer);
@@ -5492,7 +5494,6 @@ static netdev_tx_t tg3_start_xmit(struct sk_buff *skb,
         struct netdev_queue *txq;
         unsigned int i, last;
 
-
         txq = netdev_get_tx_queue(dev, skb_get_queue_mapping(skb));
         tnapi = &tp->napi[skb_get_queue_mapping(skb)];
         if (tp->tg3_flags3 & TG3_FLG3_ENABLE_TSS)
@@ -5508,7 +5509,8 @@ static netdev_tx_t tg3_start_xmit(struct sk_buff *skb,
                         netif_tx_stop_queue(txq);
 
                         /* This is a hard error, log it. */
-                        netdev_err(dev, "BUG! Tx Ring full when queue awake!\n");
+                        netdev_err(dev,
+                                   "BUG! Tx Ring full when queue awake!\n");
                 }
                 return NETDEV_TX_BUSY;
         }
@@ -5552,9 +5554,10 @@ static netdev_tx_t tg3_start_xmit(struct sk_buff *skb,
 
                 tcp_hdr(skb)->check = 0;
 
-        }
-        else if (skb->ip_summed == CHECKSUM_PARTIAL)
+        } else if (skb->ip_summed == CHECKSUM_PARTIAL) {
                 base_flags |= TXD_FLAG_TCPUDP_CSUM;
+        }
+
 #if TG3_VLAN_TAG_USED
         if (tp->vlgrp != NULL && vlan_tx_tag_present(skb))
                 base_flags |= (TXD_FLAG_VLAN |
@@ -5695,7 +5698,6 @@ static netdev_tx_t tg3_start_xmit_dma_bug(struct sk_buff *skb,
         struct netdev_queue *txq;
         unsigned int i, last;
 
-
         txq = netdev_get_tx_queue(dev, skb_get_queue_mapping(skb));
         tnapi = &tp->napi[skb_get_queue_mapping(skb)];
         if (tp->tg3_flags3 & TG3_FLG3_ENABLE_TSS)
@@ -5711,7 +5713,8 @@ static netdev_tx_t tg3_start_xmit_dma_bug(struct sk_buff *skb,
                         netif_tx_stop_queue(txq);
 
                         /* This is a hard error, log it. */
-                        netdev_err(dev, "BUG! Tx Ring full when queue awake!\n");
+                        netdev_err(dev,
+                                   "BUG! Tx Ring full when queue awake!\n");
                 }
                 return NETDEV_TX_BUSY;
         }
@@ -5924,9 +5927,9 @@ static inline void tg3_set_mtu(struct net_device *dev, struct tg3 *tp,
                 if (tp->tg3_flags2 & TG3_FLG2_5780_CLASS) {
                         tp->tg3_flags2 &= ~TG3_FLG2_TSO_CAPABLE;
                         ethtool_op_set_tso(dev, 0);
-                }
-                else
+                } else {
                         tp->tg3_flags |= TG3_FLAG_JUMBO_RING_ENABLE;
+                }
         } else {
                 if (tp->tg3_flags2 & TG3_FLG2_5780_CLASS)
                         tp->tg3_flags2 |= TG3_FLG2_TSO_CAPABLE;
@@ -6007,7 +6010,7 @@ static void tg3_rx_prodring_free(struct tg3 *tp,
         }
 }
 
-/* Initialize tx/rx rings for packet processing.
+/* Initialize rx rings for packet processing.
  *
  * The chip has been shut down and the driver detached from
  * the networking, so no interrupts or new tx packets will
@@ -6058,8 +6061,10 @@ static int tg3_rx_prodring_alloc(struct tg3 *tp,
         /* Now allocate fresh SKBs for each rx ring. */
         for (i = 0; i < tp->rx_pending; i++) {
                 if (tg3_alloc_rx_skb(tp, tpr, RXD_OPAQUE_RING_STD, i) < 0) {
-                        netdev_warn(tp->dev, "Using a smaller RX standard ring, only %d out of %d buffers were allocated successfully\n",
-                                    i, tp->rx_pending);
+                        netdev_warn(tp->dev,
+                                    "Using a smaller RX standard ring. Only "
+                                    "%d out of %d buffers were allocated "
+                                    "successfully\n", i, tp->rx_pending);
                         if (i == 0)
                                 goto initfail;
                         tp->rx_pending = i;
@@ -6088,8 +6093,10 @@ static int tg3_rx_prodring_alloc(struct tg3 *tp,
 
         for (i = 0; i < tp->rx_jumbo_pending; i++) {
                 if (tg3_alloc_rx_skb(tp, tpr, RXD_OPAQUE_RING_JUMBO, i) < 0) {
-                        netdev_warn(tp->dev, "Using a smaller RX jumbo ring, only %d out of %d buffers were allocated successfully\n",
-                                    i, tp->rx_jumbo_pending);
+                        netdev_warn(tp->dev,
+                                    "Using a smaller RX jumbo ring. Only %d "
+                                    "out of %d buffers were allocated "
+                                    "successfully\n", i, tp->rx_jumbo_pending);
                         if (i == 0)
                                 goto initfail;
                         tp->rx_jumbo_pending = i;
@@ -6433,8 +6440,9 @@ static int tg3_stop_block(struct tg3 *tp, unsigned long ofs, u32 enable_bit, int
         }
 
         if (i == MAX_WAIT_CNT && !silent) {
-                pr_err("tg3_stop_block timed out, ofs=%lx enable_bit=%x\n",
-                       ofs, enable_bit);
+                dev_err(&tp->pdev->dev,
+                        "tg3_stop_block timed out, ofs=%lx enable_bit=%x\n",
+                        ofs, enable_bit);
                 return -ENODEV;
         }
 
@@ -6480,8 +6488,9 @@ static int tg3_abort_hw(struct tg3 *tp, int silent)
                         break;
         }
         if (i >= MAX_WAIT_CNT) {
-                netdev_err(tp->dev, "%s timed out, TX_MODE_ENABLE will not clear MAC_TX_MODE=%08x\n",
-                           __func__, tr32(MAC_TX_MODE));
+                dev_err(&tp->pdev->dev,
+                        "%s timed out, TX_MODE_ENABLE will not clear "
+                        "MAC_TX_MODE=%08x\n", __func__, tr32(MAC_TX_MODE));
                 err |= -ENODEV;
         }
 
@@ -6551,35 +6560,35 @@ static void tg3_ape_driver_state_change(struct tg3 *tp, int kind)
                 return;
 
         switch (kind) {
-                case RESET_KIND_INIT:
-                        tg3_ape_write32(tp, TG3_APE_HOST_SEG_SIG,
-                                        APE_HOST_SEG_SIG_MAGIC);
-                        tg3_ape_write32(tp, TG3_APE_HOST_SEG_LEN,
-                                        APE_HOST_SEG_LEN_MAGIC);
-                        apedata = tg3_ape_read32(tp, TG3_APE_HOST_INIT_COUNT);
-                        tg3_ape_write32(tp, TG3_APE_HOST_INIT_COUNT, ++apedata);
-                        tg3_ape_write32(tp, TG3_APE_HOST_DRIVER_ID,
-                                        APE_HOST_DRIVER_ID_MAGIC);
-                        tg3_ape_write32(tp, TG3_APE_HOST_BEHAVIOR,
-                                        APE_HOST_BEHAV_NO_PHYLOCK);
-
-                        event = APE_EVENT_STATUS_STATE_START;
-                        break;
-                case RESET_KIND_SHUTDOWN:
-                        /* With the interface we are currently using,
-                         * APE does not track driver state.  Wiping
-                         * out the HOST SEGMENT SIGNATURE forces
-                         * the APE to assume OS absent status.
-                         */
-                        tg3_ape_write32(tp, TG3_APE_HOST_SEG_SIG, 0x0);
+        case RESET_KIND_INIT:
+                tg3_ape_write32(tp, TG3_APE_HOST_SEG_SIG,
+                                APE_HOST_SEG_SIG_MAGIC);
+                tg3_ape_write32(tp, TG3_APE_HOST_SEG_LEN,
+                                APE_HOST_SEG_LEN_MAGIC);
+                apedata = tg3_ape_read32(tp, TG3_APE_HOST_INIT_COUNT);
+                tg3_ape_write32(tp, TG3_APE_HOST_INIT_COUNT, ++apedata);
+                tg3_ape_write32(tp, TG3_APE_HOST_DRIVER_ID,
+                                APE_HOST_DRIVER_ID_MAGIC);
+                tg3_ape_write32(tp, TG3_APE_HOST_BEHAVIOR,
+                                APE_HOST_BEHAV_NO_PHYLOCK);
+
+                event = APE_EVENT_STATUS_STATE_START;
+                break;
+        case RESET_KIND_SHUTDOWN:
+                /* With the interface we are currently using,
+                 * APE does not track driver state.  Wiping
+                 * out the HOST SEGMENT SIGNATURE forces
+                 * the APE to assume OS absent status.
+                 */
+                tg3_ape_write32(tp, TG3_APE_HOST_SEG_SIG, 0x0);
 
-                        event = APE_EVENT_STATUS_STATE_UNLOAD;
-                        break;
-                case RESET_KIND_SUSPEND:
-                        event = APE_EVENT_STATUS_STATE_SUSPEND;
-                        break;
-                default:
-                        return;
+                event = APE_EVENT_STATUS_STATE_UNLOAD;
+                break;
+        case RESET_KIND_SUSPEND:
+                event = APE_EVENT_STATUS_STATE_SUSPEND;
+                break;
+        default:
+                return;
         }
 
         event |= APE_EVENT_STATUS_DRIVER_EVNT | APE_EVENT_STATUS_STATE_CHNGE;
@@ -7156,7 +7165,8 @@ static int tg3_load_firmware_cpu(struct tg3 *tp, u32 cpu_base, u32 cpu_scratch_b
 
         if (cpu_base == TX_CPU_BASE &&
             (tp->tg3_flags2 & TG3_FLG2_5705_PLUS)) {
-                netdev_err(tp->dev, "%s: Trying to load TX cpu firmware which is 5705\n",
+                netdev_err(tp->dev,
+                           "%s: Trying to load TX cpu firmware which is 5705\n",
                            __func__);
                 return -EINVAL;
         }
@@ -7236,7 +7246,8 @@ static int tg3_load_5701_a0_firmware_fix(struct tg3 *tp)
                 udelay(1000);
         }
         if (i >= 5) {
-                netdev_err(tp->dev, "tg3_load_firmware fails to set RX CPU PC, is %08x should be %08x\n",
+                netdev_err(tp->dev, "%s fails to set RX CPU PC, is %08x "
+                           "should be %08x\n", __func__,
                            tr32(RX_CPU_BASE + CPU_PC), info.fw_base);
                 return -ENODEV;
         }
@@ -7300,7 +7311,8 @@ static int tg3_load_tso_firmware(struct tg3 *tp)
                 udelay(1000);
         }
         if (i >= 5) {
-                netdev_err(tp->dev, "%s fails to set CPU PC, is %08x should be %08x\n",
+                netdev_err(tp->dev,
+                           "%s fails to set CPU PC, is %08x should be %08x\n",
                            __func__, tr32(cpu_base + CPU_PC), info.fw_base);
                 return -ENODEV;
         }
@@ -7568,9 +7580,8 @@ static int tg3_reset_hw(struct tg3 *tp, int reset_phy)
 
         tg3_write_sig_pre_reset(tp, RESET_KIND_INIT);
 
-        if (tp->tg3_flags & TG3_FLAG_INIT_COMPLETE) {
+        if (tp->tg3_flags & TG3_FLAG_INIT_COMPLETE)
                 tg3_abort_hw(tp, 1);
-        }
 
         if (reset_phy)
                 tg3_phy_reset(tp);
@@ -7723,8 +7734,7 @@ static int tg3_reset_hw(struct tg3 *tp, int reset_phy)
                         tw32(BUFMGR_MB_POOL_SIZE, NIC_SRAM_MBUF_POOL_SIZE96);
                 tw32(BUFMGR_DMA_DESC_POOL_ADDR, NIC_SRAM_DMA_DESC_POOL_BASE);
                 tw32(BUFMGR_DMA_DESC_POOL_SIZE, NIC_SRAM_DMA_DESC_POOL_SIZE);
-        }
-        else if (tp->tg3_flags2 & TG3_FLG2_TSO_CAPABLE) {
+        } else if (tp->tg3_flags2 & TG3_FLG2_TSO_CAPABLE) {
                 int fw_len;
 
                 fw_len = tp->fw_len;
@@ -8476,8 +8486,8 @@ static void tg3_timer(unsigned long __opaque)
                         tg3_write_mem(tp, NIC_SRAM_FW_CMD_MBOX,
                                       FWCMD_NICDRV_ALIVE3);
                         tg3_write_mem(tp, NIC_SRAM_FW_CMD_LEN_MBOX, 4);
-                        /* 5 seconds timeout */
-                        tg3_write_mem(tp, NIC_SRAM_FW_CMD_DATA_MBOX, 5);
+                        tg3_write_mem(tp, NIC_SRAM_FW_CMD_DATA_MBOX,
+                                      TG3_FW_UPDATE_TIMEOUT_SEC);
 
                         tg3_generate_fw_event(tp);
                 }
@@ -8625,8 +8635,9 @@ static int tg3_test_msi(struct tg3 *tp)
                 return err;
 
         /* MSI test failed, go back to INTx mode */
-        netdev_warn(tp->dev, "No interrupt was generated using MSI, switching to INTx mode\n"
-                    "Please report this failure to the PCI maintainer and include system chipset information\n");
+        netdev_warn(tp->dev, "No interrupt was generated using MSI. Switching "
+                    "to INTx mode. Please report this failure to the PCI "
+                    "maintainer and include system chipset information\n");
 
         free_irq(tp->napi[0].irq_vec, &tp->napi[0]);
 
@@ -8738,7 +8749,8 @@ static void tg3_ints_init(struct tg3 *tp)
                 /* All MSI supporting chips should support tagged
                  * status.  Assert that this is the case.
                  */
-                netdev_warn(tp->dev, "MSI without TAGGED? Not using MSI\n");
+                netdev_warn(tp->dev,
+                            "MSI without TAGGED_STATUS? Not using MSI\n");
                 goto defcfg;
         }
 
@@ -8913,236 +8925,6 @@ err_out1:
         return err;
 }
 
-#if 0
-/*static*/ void tg3_dump_state(struct tg3 *tp)
-{
-        u32 val32, val32_2, val32_3, val32_4, val32_5;
-        u16 val16;
-        int i;
-        struct tg3_hw_status *sblk = tp->napi[0]->hw_status;
-
-        pci_read_config_word(tp->pdev, PCI_STATUS, &val16);
-        pci_read_config_dword(tp->pdev, TG3PCI_PCISTATE, &val32);
-        printk("DEBUG: PCI status [%04x] TG3PCI state[%08x]\n",
-               val16, val32);
-
-        /* MAC block */
-        printk("DEBUG: MAC_MODE[%08x] MAC_STATUS[%08x]\n",
-               tr32(MAC_MODE), tr32(MAC_STATUS));
-        printk("       MAC_EVENT[%08x] MAC_LED_CTRL[%08x]\n",
-               tr32(MAC_EVENT), tr32(MAC_LED_CTRL));
-        printk("DEBUG: MAC_TX_MODE[%08x] MAC_TX_STATUS[%08x]\n",
-               tr32(MAC_TX_MODE), tr32(MAC_TX_STATUS));
-        printk("       MAC_RX_MODE[%08x] MAC_RX_STATUS[%08x]\n",
-               tr32(MAC_RX_MODE), tr32(MAC_RX_STATUS));
-
-        /* Send data initiator control block */
-        printk("DEBUG: SNDDATAI_MODE[%08x] SNDDATAI_STATUS[%08x]\n",
-               tr32(SNDDATAI_MODE), tr32(SNDDATAI_STATUS));
-        printk("       SNDDATAI_STATSCTRL[%08x]\n",
-               tr32(SNDDATAI_STATSCTRL));
-
-        /* Send data completion control block */
-        printk("DEBUG: SNDDATAC_MODE[%08x]\n", tr32(SNDDATAC_MODE));
-
-        /* Send BD ring selector block */
-        printk("DEBUG: SNDBDS_MODE[%08x] SNDBDS_STATUS[%08x]\n",
-               tr32(SNDBDS_MODE), tr32(SNDBDS_STATUS));
-
-        /* Send BD initiator control block */
-        printk("DEBUG: SNDBDI_MODE[%08x] SNDBDI_STATUS[%08x]\n",
-               tr32(SNDBDI_MODE), tr32(SNDBDI_STATUS));
-
-        /* Send BD completion control block */
-        printk("DEBUG: SNDBDC_MODE[%08x]\n", tr32(SNDBDC_MODE));
-
-        /* Receive list placement control block */
-        printk("DEBUG: RCVLPC_MODE[%08x] RCVLPC_STATUS[%08x]\n",
-               tr32(RCVLPC_MODE), tr32(RCVLPC_STATUS));
-        printk("       RCVLPC_STATSCTRL[%08x]\n",
-               tr32(RCVLPC_STATSCTRL));
-
-        /* Receive data and receive BD initiator control block */
-        printk("DEBUG: RCVDBDI_MODE[%08x] RCVDBDI_STATUS[%08x]\n",
-               tr32(RCVDBDI_MODE), tr32(RCVDBDI_STATUS));
-
-        /* Receive data completion control block */
-        printk("DEBUG: RCVDCC_MODE[%08x]\n",
-               tr32(RCVDCC_MODE));
-
-        /* Receive BD initiator control block */
-        printk("DEBUG: RCVBDI_MODE[%08x] RCVBDI_STATUS[%08x]\n",
-               tr32(RCVBDI_MODE), tr32(RCVBDI_STATUS));
-
-        /* Receive BD completion control block */
-        printk("DEBUG: RCVCC_MODE[%08x] RCVCC_STATUS[%08x]\n",
-               tr32(RCVCC_MODE), tr32(RCVCC_STATUS));
-
-        /* Receive list selector control block */
-        printk("DEBUG: RCVLSC_MODE[%08x] RCVLSC_STATUS[%08x]\n",
-               tr32(RCVLSC_MODE), tr32(RCVLSC_STATUS));
-
-        /* Mbuf cluster free block */
-        printk("DEBUG: MBFREE_MODE[%08x] MBFREE_STATUS[%08x]\n",
-               tr32(MBFREE_MODE), tr32(MBFREE_STATUS));
-
-        /* Host coalescing control block */
-        printk("DEBUG: HOSTCC_MODE[%08x] HOSTCC_STATUS[%08x]\n",
-               tr32(HOSTCC_MODE), tr32(HOSTCC_STATUS));
-        printk("DEBUG: HOSTCC_STATS_BLK_HOST_ADDR[%08x%08x]\n",
-               tr32(HOSTCC_STATS_BLK_HOST_ADDR + TG3_64BIT_REG_HIGH),
-               tr32(HOSTCC_STATS_BLK_HOST_ADDR + TG3_64BIT_REG_LOW));
-        printk("DEBUG: HOSTCC_STATUS_BLK_HOST_ADDR[%08x%08x]\n",
-               tr32(HOSTCC_STATUS_BLK_HOST_ADDR + TG3_64BIT_REG_HIGH),
-               tr32(HOSTCC_STATUS_BLK_HOST_ADDR + TG3_64BIT_REG_LOW));
-        printk("DEBUG: HOSTCC_STATS_BLK_NIC_ADDR[%08x]\n",
-               tr32(HOSTCC_STATS_BLK_NIC_ADDR));
-        printk("DEBUG: HOSTCC_STATUS_BLK_NIC_ADDR[%08x]\n",
-               tr32(HOSTCC_STATUS_BLK_NIC_ADDR));
-
-        /* Memory arbiter control block */
-        printk("DEBUG: MEMARB_MODE[%08x] MEMARB_STATUS[%08x]\n",
-               tr32(MEMARB_MODE), tr32(MEMARB_STATUS));
-
-        /* Buffer manager control block */
-        printk("DEBUG: BUFMGR_MODE[%08x] BUFMGR_STATUS[%08x]\n",
-               tr32(BUFMGR_MODE), tr32(BUFMGR_STATUS));
-        printk("DEBUG: BUFMGR_MB_POOL_ADDR[%08x] BUFMGR_MB_POOL_SIZE[%08x]\n",
-               tr32(BUFMGR_MB_POOL_ADDR), tr32(BUFMGR_MB_POOL_SIZE));
-        printk("DEBUG: BUFMGR_DMA_DESC_POOL_ADDR[%08x] "
-               "BUFMGR_DMA_DESC_POOL_SIZE[%08x]\n",
-               tr32(BUFMGR_DMA_DESC_POOL_ADDR),
-               tr32(BUFMGR_DMA_DESC_POOL_SIZE));
-
-        /* Read DMA control block */
-        printk("DEBUG: RDMAC_MODE[%08x] RDMAC_STATUS[%08x]\n",
-               tr32(RDMAC_MODE), tr32(RDMAC_STATUS));
-
-        /* Write DMA control block */
-        printk("DEBUG: WDMAC_MODE[%08x] WDMAC_STATUS[%08x]\n",
-               tr32(WDMAC_MODE), tr32(WDMAC_STATUS));
-
-        /* DMA completion block */
-        printk("DEBUG: DMAC_MODE[%08x]\n",
-               tr32(DMAC_MODE));
-
-        /* GRC block */
-        printk("DEBUG: GRC_MODE[%08x] GRC_MISC_CFG[%08x]\n",
-               tr32(GRC_MODE), tr32(GRC_MISC_CFG));
-        printk("DEBUG: GRC_LOCAL_CTRL[%08x]\n",
-               tr32(GRC_LOCAL_CTRL));
-
-        /* TG3_BDINFOs */
-        printk("DEBUG: RCVDBDI_JUMBO_BD[%08x%08x:%08x:%08x]\n",
-               tr32(RCVDBDI_JUMBO_BD + 0x0),
-               tr32(RCVDBDI_JUMBO_BD + 0x4),
-               tr32(RCVDBDI_JUMBO_BD + 0x8),
-               tr32(RCVDBDI_JUMBO_BD + 0xc));
-        printk("DEBUG: RCVDBDI_STD_BD[%08x%08x:%08x:%08x]\n",
-               tr32(RCVDBDI_STD_BD + 0x0),
-               tr32(RCVDBDI_STD_BD + 0x4),
-               tr32(RCVDBDI_STD_BD + 0x8),
-               tr32(RCVDBDI_STD_BD + 0xc));
-        printk("DEBUG: RCVDBDI_MINI_BD[%08x%08x:%08x:%08x]\n",
-               tr32(RCVDBDI_MINI_BD + 0x0),
-               tr32(RCVDBDI_MINI_BD + 0x4),
-               tr32(RCVDBDI_MINI_BD + 0x8),
-               tr32(RCVDBDI_MINI_BD + 0xc));
-
-        tg3_read_mem(tp, NIC_SRAM_SEND_RCB + 0x0, &val32);
-        tg3_read_mem(tp, NIC_SRAM_SEND_RCB + 0x4, &val32_2);
-        tg3_read_mem(tp, NIC_SRAM_SEND_RCB + 0x8, &val32_3);
-        tg3_read_mem(tp, NIC_SRAM_SEND_RCB + 0xc, &val32_4);
-        printk("DEBUG: SRAM_SEND_RCB_0[%08x%08x:%08x:%08x]\n",
-               val32, val32_2, val32_3, val32_4);
-
-        tg3_read_mem(tp, NIC_SRAM_RCV_RET_RCB + 0x0, &val32);
-        tg3_read_mem(tp, NIC_SRAM_RCV_RET_RCB + 0x4, &val32_2);
-        tg3_read_mem(tp, NIC_SRAM_RCV_RET_RCB + 0x8, &val32_3);
-        tg3_read_mem(tp, NIC_SRAM_RCV_RET_RCB + 0xc, &val32_4);
-        printk("DEBUG: SRAM_RCV_RET_RCB_0[%08x%08x:%08x:%08x]\n",
-               val32, val32_2, val32_3, val32_4);
-
-        tg3_read_mem(tp, NIC_SRAM_STATUS_BLK + 0x0, &val32);
-        tg3_read_mem(tp, NIC_SRAM_STATUS_BLK + 0x4, &val32_2);
-        tg3_read_mem(tp, NIC_SRAM_STATUS_BLK + 0x8, &val32_3);
-        tg3_read_mem(tp, NIC_SRAM_STATUS_BLK + 0xc, &val32_4);
-        tg3_read_mem(tp, NIC_SRAM_STATUS_BLK + 0x10, &val32_5);
-        printk("DEBUG: SRAM_STATUS_BLK[%08x:%08x:%08x:%08x:%08x]\n",
-               val32, val32_2, val32_3, val32_4, val32_5);
-
-        /* SW status block */
-        printk(KERN_DEBUG
-         "Host status block [%08x:%08x:(%04x:%04x:%04x):(%04x:%04x)]\n",
-               sblk->status,
-               sblk->status_tag,
-               sblk->rx_jumbo_consumer,
-               sblk->rx_consumer,
-               sblk->rx_mini_consumer,
-               sblk->idx[0].rx_producer,
-               sblk->idx[0].tx_consumer);
-
-        /* SW statistics block */
-        printk("DEBUG: Host statistics block [%08x:%08x:%08x:%08x]\n",
-               ((u32 *)tp->hw_stats)[0],
-               ((u32 *)tp->hw_stats)[1],
-               ((u32 *)tp->hw_stats)[2],
-               ((u32 *)tp->hw_stats)[3]);
-
-        /* Mailboxes */
-        printk("DEBUG: SNDHOST_PROD[%08x%08x] SNDNIC_PROD[%08x%08x]\n",
-               tr32_mailbox(MAILBOX_SNDHOST_PROD_IDX_0 + 0x0),
-               tr32_mailbox(MAILBOX_SNDHOST_PROD_IDX_0 + 0x4),
-               tr32_mailbox(MAILBOX_SNDNIC_PROD_IDX_0 + 0x0),
-               tr32_mailbox(MAILBOX_SNDNIC_PROD_IDX_0 + 0x4));
-
-        /* NIC side send descriptors. */
-        for (i = 0; i < 6; i++) {
-                unsigned long txd;
-
-                txd = tp->regs + NIC_SRAM_WIN_BASE + NIC_SRAM_TX_BUFFER_DESC
-                        + (i * sizeof(struct tg3_tx_buffer_desc));
-                printk("DEBUG: NIC TXD(%d)[%08x:%08x:%08x:%08x]\n",
-                       i,
-                       readl(txd + 0x0), readl(txd + 0x4),
-                       readl(txd + 0x8), readl(txd + 0xc));
-        }
-
-        /* NIC side RX descriptors. */
-        for (i = 0; i < 6; i++) {
-                unsigned long rxd;
-
-                rxd = tp->regs + NIC_SRAM_WIN_BASE + NIC_SRAM_RX_BUFFER_DESC
-                        + (i * sizeof(struct tg3_rx_buffer_desc));
-                printk("DEBUG: NIC RXD_STD(%d)[0][%08x:%08x:%08x:%08x]\n",
-                       i,
-                       readl(rxd + 0x0), readl(rxd + 0x4),
-                       readl(rxd + 0x8), readl(rxd + 0xc));
-                rxd += (4 * sizeof(u32));
-                printk("DEBUG: NIC RXD_STD(%d)[1][%08x:%08x:%08x:%08x]\n",
-                       i,
-                       readl(rxd + 0x0), readl(rxd + 0x4),
-                       readl(rxd + 0x8), readl(rxd + 0xc));
-        }
-
-        for (i = 0; i < 6; i++) {
-                unsigned long rxd;
-
-                rxd = tp->regs + NIC_SRAM_WIN_BASE + NIC_SRAM_RX_JUMBO_BUFFER_DESC
-                        + (i * sizeof(struct tg3_rx_buffer_desc));
-                printk("DEBUG: NIC RXD_JUMBO(%d)[0][%08x:%08x:%08x:%08x]\n",
-                       i,
-                       readl(rxd + 0x0), readl(rxd + 0x4),
-                       readl(rxd + 0x8), readl(rxd + 0xc));
-                rxd += (4 * sizeof(u32));
-                printk("DEBUG: NIC RXD_JUMBO(%d)[1][%08x:%08x:%08x:%08x]\n",
-                       i,
-                       readl(rxd + 0x0), readl(rxd + 0x4),
-                       readl(rxd + 0x8), readl(rxd + 0xc));
-        }
-}
-#endif
-
 static struct net_device_stats *tg3_get_stats(struct net_device *);
 static struct tg3_ethtool_stats *tg3_get_estats(struct tg3 *);
 
@@ -9161,9 +8943,6 @@ static int tg3_close(struct net_device *dev)
         tg3_phy_stop(tp);
 
         tg3_full_lock(tp, 1);
-#if 0
-        tg3_dump_state(tp);
-#endif
 
         tg3_disable_ints(tp);
 
@@ -9405,9 +9184,8 @@ static inline u32 calc_crc(unsigned char *buf, int len)
 
                         reg >>= 1;
 
-                        if (tmp) {
+                        if (tmp)
                                 reg ^= 0xedb88320;
-                        }
                 }
         }
 
@@ -9457,14 +9235,14 @@ static void __tg3_set_rx_mode(struct net_device *dev)
                 tg3_set_multi (tp, 0);
         } else {
                 /* Accept one or more multicast(s). */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 u32 mc_filter[4] = { 0, };
                 u32 regidx;
                 u32 bit;
                 u32 crc;
 
-                netdev_for_each_mc_addr(mclist, dev) {
-                        crc = calc_crc (mclist->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, dev) {
+                        crc = calc_crc(ha->addr, ETH_ALEN);
                         bit = ~crc & 0x7f;
                         regidx = (bit & 0x60) >> 5;
                         bit &= 0x1f;
@@ -9617,7 +9395,7 @@ static int tg3_get_eeprom(struct net_device *dev, struct ethtool_eeprom *eeprom,
                 memcpy(data, ((char*)&val) + b_offset, b_count);
                 len -= b_count;
                 offset += b_count;
-                eeprom->len += b_count;
+                eeprom->len += b_count;
         }
 
         /* read bytes upto the last 4 byte boundary */
@@ -10165,8 +9943,8 @@ static int tg3_set_rx_csum(struct net_device *dev, u32 data)
         if (tp->tg3_flags & TG3_FLAG_BROKEN_CHECKSUMS) {
                 if (data != 0)
                         return -EINVAL;
-                return 0;
-        }
+                return 0;
+        }
 
         spin_lock_bh(&tp->lock);
         if (data)
@@ -10185,8 +9963,8 @@ static int tg3_set_tx_csum(struct net_device *dev, u32 data)
         if (tp->tg3_flags & TG3_FLAG_BROKEN_CHECKSUMS) {
                 if (data != 0)
                         return -EINVAL;
-                return 0;
-        }
+                return 0;
+        }
 
         if (tp->tg3_flags3 & TG3_FLG3_5755_PLUS)
                 ethtool_op_set_tx_ipv6_csum(dev, data);
@@ -10361,8 +10139,7 @@ static int tg3_test_nvram(struct tg3 *tp)
                                 for (l = 0, msk = 0x80; l < 7; l++, msk >>= 1)
                                         parity[k++] = buf8[i] & msk;
                                 i++;
-                        }
-                        else if (i == 16) {
+                        } else if (i == 16) {
                                 int l;
                                 u8 msk;
 
@@ -10460,7 +10237,7 @@ static int tg3_test_registers(struct tg3 *tp)
                 { MAC_ADDR_0_HIGH, 0x0000,
                         0x00000000, 0x0000ffff },
                 { MAC_ADDR_0_LOW, 0x0000,
-                        0x00000000, 0xffffffff },
+                        0x00000000, 0xffffffff },
                 { MAC_RX_MTU_SIZE, 0x0000,
                         0x00000000, 0x0000ffff },
                 { MAC_TX_MODE, 0x0000,
@@ -10648,7 +10425,8 @@ static int tg3_test_registers(struct tg3 *tp)
 
 out:
         if (netif_msg_hw(tp))
-                pr_err("Register test failed at offset %x\n", offset);
+                netdev_err(tp->dev,
+                           "Register test failed at offset %x\n", offset);
         tw32(offset, save_val);
         return -EIO;
 }
@@ -10824,9 +10602,9 @@ static int tg3_run_loopback(struct tg3 *tp, int loopback_mode)
                                      MII_TG3_EXT_CTRL_LNK3_LED_MODE);
                 }
                 tw32(MAC_MODE, mac_mode);
-        }
-        else
+        } else {
                 return -EINVAL;
+        }
 
         err = -EIO;
 
@@ -11082,7 +10860,7 @@ static int tg3_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
                 return phy_mii_ioctl(phydev, data, cmd);
         }
 
-        switch(cmd) {
+        switch (cmd) {
         case SIOCGMIIPHY:
                 data->phy_id = tp->phy_addr;
 
@@ -11775,7 +11553,8 @@ static void __devinit tg3_nvram_init(struct tg3 *tp)
                 tp->tg3_flags |= TG3_FLAG_NVRAM;
 
                 if (tg3_nvram_lock(tp)) {
-                        netdev_warn(tp->dev, "Cannot get nvram lock, %s failed\n",
+                        netdev_warn(tp->dev,
+                                    "Cannot get nvram lock, %s failed\n",
                                     __func__);
                         return;
                 }
@@ -11894,7 +11673,7 @@ static int tg3_nvram_write_block_unbuffered(struct tg3 *tp, u32 offset, u32 len,
                 if (ret)
                         break;
 
-                page_off = offset & pagemask;
+                page_off = offset & pagemask;
                 size = pagesize;
                 if (len < size)
                         size = len;
@@ -11922,7 +11701,7 @@ static int tg3_nvram_write_block_unbuffered(struct tg3 *tp, u32 offset, u32 len,
                 nvram_cmd = NVRAM_CMD_GO | NVRAM_CMD_DONE | NVRAM_CMD_WR |
                         NVRAM_CMD_FIRST | NVRAM_CMD_LAST | NVRAM_CMD_ERASE;
 
-                if (tg3_nvram_exec_cmd(tp, nvram_cmd))
+                if (tg3_nvram_exec_cmd(tp, nvram_cmd))
                         break;
 
                 /* Issue another write enable to start the write. */
@@ -11976,7 +11755,7 @@ static int tg3_nvram_write_block_buffered(struct tg3 *tp, u32 offset, u32 len,
                 memcpy(&data, buf + i, 4);
                 tw32(NVRAM_WRDATA, be32_to_cpu(data));
 
-                page_off = offset % tp->nvram_pagesize;
+                page_off = offset % tp->nvram_pagesize;
 
                 phy_addr = tg3_nvram_phys_addr(tp, offset);
 
@@ -11984,7 +11763,7 @@ static int tg3_nvram_write_block_buffered(struct tg3 *tp, u32 offset, u32 len,
 
                 nvram_cmd = NVRAM_CMD_GO | NVRAM_CMD_DONE | NVRAM_CMD_WR;
 
-                if ((page_off == 0) || (i == 0))
+                if (page_off == 0 || i == 0)
                         nvram_cmd |= NVRAM_CMD_FIRST;
                 if (page_off == (tp->nvram_pagesize - 4))
                         nvram_cmd |= NVRAM_CMD_LAST;
@@ -12027,8 +11806,7 @@ static int tg3_nvram_write_block(struct tg3 *tp, u32 offset, u32 len, u8 *buf)
 
         if (!(tp->tg3_flags & TG3_FLAG_NVRAM)) {
                 ret = tg3_nvram_write_block_using_eeprom(tp, offset, len, buf);
-        }
-        else {
+        } else {
                 u32 grc_mode;
 
                 ret = tg3_nvram_lock(tp);
@@ -12048,8 +11826,7 @@ static int tg3_nvram_write_block(struct tg3 *tp, u32 offset, u32 len, u8 *buf)
 
                         ret = tg3_nvram_write_block_buffered(tp, offset, len,
                                 buf);
-                }
-                else {
+                } else {
                         ret = tg3_nvram_write_block_unbuffered(tp, offset, len,
                                 buf);
                 }
@@ -12544,11 +12321,11 @@ skip_phy_reset:
         return err;
 }
 
-static void __devinit tg3_read_partno(struct tg3 *tp)
+static void __devinit tg3_read_vpd(struct tg3 *tp)
 {
-        unsigned char vpd_data[TG3_NVM_VPD_LEN];   /* in little-endian format */
+        u8 vpd_data[TG3_NVM_VPD_LEN];
         unsigned int block_end, rosize, len;
-        int i = 0;
+        int j, i = 0;
         u32 magic;
 
         if ((tp->tg3_flags3 & TG3_FLG3_NO_NVRAM) ||
@@ -12597,6 +12374,32 @@ static void __devinit tg3_read_partno(struct tg3 *tp)
         if (block_end > TG3_NVM_VPD_LEN)
                 goto out_not_found;
 
+        j = pci_vpd_find_info_keyword(vpd_data, i, rosize,
+                                      PCI_VPD_RO_KEYWORD_MFR_ID);
+        if (j > 0) {
+                len = pci_vpd_info_field_size(&vpd_data[j]);
+
+                j += PCI_VPD_INFO_FLD_HDR_SIZE;
+                if (j + len > block_end || len != 4 ||
+                    memcmp(&vpd_data[j], "1028", 4))
+                        goto partno;
+
+                j = pci_vpd_find_info_keyword(vpd_data, i, rosize,
+                                              PCI_VPD_RO_KEYWORD_VENDOR0);
+                if (j < 0)
+                        goto partno;
+
+                len = pci_vpd_info_field_size(&vpd_data[j]);
+
+                j += PCI_VPD_INFO_FLD_HDR_SIZE;
+                if (j + len > block_end)
+                        goto partno;
+
+                memcpy(tp->fw_ver, &vpd_data[j], len);
+                strncat(tp->fw_ver, " bc ", TG3_NVM_VPD_LEN - len - 1);
+        }
+
+partno:
         i = pci_vpd_find_info_keyword(vpd_data, i, rosize,
                                       PCI_VPD_RO_KEYWORD_PARTNO);
         if (i < 0)
@@ -12666,7 +12469,7 @@ static int __devinit tg3_fw_img_is_valid(struct tg3 *tp, u32 offset)
 static void __devinit tg3_read_bc_ver(struct tg3 *tp)
 {
         u32 val, offset, start, ver_offset;
-        int i;
+        int i, dst_off;
         bool newver = false;
 
         if (tg3_nvram_read(tp, 0xc, &offset) ||
@@ -12686,8 +12489,11 @@ static void __devinit tg3_read_bc_ver(struct tg3 *tp)
                         newver = true;
         }
 
+        dst_off = strlen(tp->fw_ver);
+
         if (newver) {
-                if (tg3_nvram_read(tp, offset + 8, &ver_offset))
+                if (TG3_VER_SIZE - dst_off < 16 ||
+                    tg3_nvram_read(tp, offset + 8, &ver_offset))
                         return;
 
                 offset = offset + ver_offset - start;
@@ -12696,7 +12502,7 @@ static void __devinit tg3_read_bc_ver(struct tg3 *tp)
                         if (tg3_nvram_read_be32(tp, offset + i, &v))
                                 return;
 
-                        memcpy(tp->fw_ver + i, &v, sizeof(v));
+                        memcpy(tp->fw_ver + dst_off + i, &v, sizeof(v));
                 }
         } else {
                 u32 major, minor;
@@ -12707,7 +12513,8 @@ static void __devinit tg3_read_bc_ver(struct tg3 *tp)
                 major = (ver_offset & TG3_NVM_BCVER_MAJMSK) >>
                         TG3_NVM_BCVER_MAJSFT;
                 minor = ver_offset & TG3_NVM_BCVER_MINMSK;
-                snprintf(&tp->fw_ver[0], 32, "v%d.%02d", major, minor);
+                snprintf(&tp->fw_ver[dst_off], TG3_VER_SIZE - dst_off,
+                         "v%d.%02d", major, minor);
         }
 }
 
@@ -12731,9 +12538,7 @@ static void __devinit tg3_read_sb_ver(struct tg3 *tp, u32 val)
 {
         u32 offset, major, minor, build;
 
-        tp->fw_ver[0] = 's';
-        tp->fw_ver[1] = 'b';
-        tp->fw_ver[2] = '\0';
+        strncat(tp->fw_ver, "sb", TG3_VER_SIZE - strlen(tp->fw_ver) - 1);
 
         if ((val & TG3_EEPROM_SB_FORMAT_MASK) != TG3_EEPROM_SB_FORMAT_1)
                 return;
@@ -12770,11 +12575,14 @@ static void __devinit tg3_read_sb_ver(struct tg3 *tp, u32 val)
         if (minor > 99 || build > 26)
                 return;
 
-        snprintf(&tp->fw_ver[2], 30, " v%d.%02d", major, minor);
+        offset = strlen(tp->fw_ver);
+        snprintf(&tp->fw_ver[offset], TG3_VER_SIZE - offset,
+                 " v%d.%02d", major, minor);
 
         if (build > 0) {
-                tp->fw_ver[8] = 'a' + build - 1;
-                tp->fw_ver[9] = '\0';
+                offset = strlen(tp->fw_ver);
+                if (offset < TG3_VER_SIZE - 1)
+                        tp->fw_ver[offset] = 'a' + build - 1;
         }
 }
 
@@ -12861,12 +12669,13 @@ static void __devinit tg3_read_dash_ver(struct tg3 *tp)
 static void __devinit tg3_read_fw_ver(struct tg3 *tp)
 {
         u32 val;
+        bool vpd_vers = false;
 
-        if (tp->tg3_flags3 & TG3_FLG3_NO_NVRAM) {
-                tp->fw_ver[0] = 's';
-                tp->fw_ver[1] = 'b';
-                tp->fw_ver[2] = '\0';
+        if (tp->fw_ver[0] != 0)
+                vpd_vers = true;
 
+        if (tp->tg3_flags3 & TG3_FLG3_NO_NVRAM) {
+                strcat(tp->fw_ver, "sb");
                 return;
         }
 
@@ -12883,11 +12692,12 @@ static void __devinit tg3_read_fw_ver(struct tg3 *tp)
                 return;
 
         if (!(tp->tg3_flags & TG3_FLAG_ENABLE_ASF) ||
-             (tp->tg3_flags3 & TG3_FLG3_ENABLE_APE))
-                return;
+             (tp->tg3_flags3 & TG3_FLG3_ENABLE_APE) || vpd_vers)
+                goto done;
 
         tg3_read_mgmtfw_ver(tp);
 
+done:
         tp->fw_ver[TG3_VER_SIZE - 1] = 0;
 }
 
@@ -12897,9 +12707,9 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
 {
         static struct pci_device_id write_reorder_chipsets[] = {
                 { PCI_DEVICE(PCI_VENDOR_ID_AMD,
-                             PCI_DEVICE_ID_AMD_FE_GATE_700C) },
+                             PCI_DEVICE_ID_AMD_FE_GATE_700C) },
                 { PCI_DEVICE(PCI_VENDOR_ID_AMD,
-                             PCI_DEVICE_ID_AMD_8131_BRIDGE) },
+                             PCI_DEVICE_ID_AMD_8131_BRIDGE) },
                 { PCI_DEVICE(PCI_VENDOR_ID_VIA,
                              PCI_DEVICE_ID_VIA_8385_0) },
                 { },
@@ -13065,8 +12875,7 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
                 tp->tg3_flags2 |= TG3_FLG2_5780_CLASS;
                 tp->tg3_flags |= TG3_FLAG_40BIT_DMA_BUG;
                 tp->msi_cap = pci_find_capability(tp->pdev, PCI_CAP_ID_MSI);
-        }
-        else {
+        } else {
                 struct pci_dev *bridge = NULL;
 
                 do {
@@ -13188,8 +12997,8 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
                 tp->tg3_flags3 |= TG3_FLG3_USE_JUMBO_BDFLAG;
 
         if (!(tp->tg3_flags2 & TG3_FLG2_5705_PLUS) ||
-             (tp->tg3_flags2 & TG3_FLG2_5780_CLASS) ||
-                 (tp->tg3_flags3 & TG3_FLG3_USE_JUMBO_BDFLAG))
+            (tp->tg3_flags2 & TG3_FLG2_5780_CLASS) ||
+            (tp->tg3_flags3 & TG3_FLG3_USE_JUMBO_BDFLAG))
                 tp->tg3_flags |= TG3_FLAG_JUMBO_CAPABLE;
 
         pci_read_config_dword(tp->pdev, TG3PCI_PCISTATE,
@@ -13223,7 +13032,8 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
                    (tp->tg3_flags2 & TG3_FLG2_5780_CLASS)) {
                 tp->pcix_cap = pci_find_capability(tp->pdev, PCI_CAP_ID_PCIX);
                 if (!tp->pcix_cap) {
-                        pr_err("Cannot find PCI-X capability, aborting\n");
+                        dev_err(&tp->pdev->dev,
+                                "Cannot find PCI-X capability, aborting\n");
                         return -EIO;
                 }
 
@@ -13420,7 +13230,7 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
         /* Force the chip into D0. */
         err = tg3_set_power_state(tp, PCI_D0);
         if (err) {
-                pr_err("(%s) transition to D0 failed\n", pci_name(tp->pdev));
+                dev_err(&tp->pdev->dev, "Transition to D0 failed\n");
                 return err;
         }
 
@@ -13594,13 +13404,12 @@ static int __devinit tg3_get_invariants(struct tg3 *tp)
 
         err = tg3_phy_probe(tp);
         if (err) {
-                pr_err("(%s) phy probe failed, err %d\n",
-                       pci_name(tp->pdev), err);
+                dev_err(&tp->pdev->dev, "phy probe failed, err %d\n", err);
                 /* ... but do not return immediately ... */
                 tg3_mdio_fini(tp);
         }
 
-        tg3_read_partno(tp);
+        tg3_read_vpd(tp);
         tg3_read_fw_ver(tp);
 
         if (tp->tg3_flags2 & TG3_FLG2_PHY_SERDES) {
@@ -13964,11 +13773,10 @@ static int __devinit tg3_do_test_dma(struct tg3 *tp, u32 *buf, dma_addr_t buf_dm
         }
         pci_write_config_dword(tp->pdev, TG3PCI_MEM_WIN_BASE_ADDR, 0);
 
-        if (to_device) {
+        if (to_device)
                 tw32(FTQ_DMA_HIGH_READ_FIFO_ENQDEQ, sram_dma_descs);
-        } else {
+        else
                 tw32(FTQ_DMA_HIGH_WRITE_FIFO_ENQDEQ, sram_dma_descs);
-        }
 
         ret = -ENODEV;
         for (i = 0; i < 40; i++) {
@@ -14104,8 +13912,9 @@ static int __devinit tg3_test_dma(struct tg3 *tp)
                 /* Send the buffer to the chip. */
                 ret = tg3_do_test_dma(tp, buf, buf_dma, TEST_BUFFER_SIZE, 1);
                 if (ret) {
-                        pr_err("tg3_test_dma() Write the buffer failed %d\n",
-                               ret);
+                        dev_err(&tp->pdev->dev,
+                                "%s: Buffer write failed. err = %d\n",
+                                __func__, ret);
                         break;
                 }
 
@@ -14115,8 +13924,9 @@ static int __devinit tg3_test_dma(struct tg3 *tp)
                         u32 val;
                         tg3_read_mem(tp, 0x2100 + (i*4), &val);
                         if (le32_to_cpu(val) != p[i]) {
-                                pr_err("  tg3_test_dma()  Card buffer corrupted on write! (%d != %d)\n",
-                                       val, i);
+                                dev_err(&tp->pdev->dev,
+                                        "%s: Buffer corrupted on device! "
+                                        "(%d != %d)\n", __func__, val, i);
                                 /* ret = -ENODEV here? */
                         }
                         p[i] = 0;
@@ -14125,9 +13935,8 @@ static int __devinit tg3_test_dma(struct tg3 *tp)
                 /* Now read it back. */
                 ret = tg3_do_test_dma(tp, buf, buf_dma, TEST_BUFFER_SIZE, 0);
                 if (ret) {
-                        pr_err("tg3_test_dma() Read the buffer failed %d\n",
-                               ret);
-
+                        dev_err(&tp->pdev->dev, "%s: Buffer read failed. "
+                                "err = %d\n", __func__, ret);
                         break;
                 }
 
@@ -14143,8 +13952,9 @@ static int __devinit tg3_test_dma(struct tg3 *tp)
                                 tw32(TG3PCI_DMA_RW_CTRL, tp->dma_rwctrl);
                                 break;
                         } else {
-                                pr_err("tg3_test_dma() buffer corrupted on read back! (%d != %d)\n",
-                                       p[i], i);
+                                dev_err(&tp->pdev->dev,
+                                        "%s: Buffer corrupted on read back! "
+                                        "(%d != %d)\n", __func__, p[i], i);
                                 ret = -ENODEV;
                                 goto out;
                         }
@@ -14171,10 +13981,10 @@ static int __devinit tg3_test_dma(struct tg3 *tp)
                 if (pci_dev_present(dma_wait_state_chipsets)) {
                         tp->dma_rwctrl &= ~DMA_RWCTRL_WRITE_BNDRY_MASK;
                         tp->dma_rwctrl |= DMA_RWCTRL_WRITE_BNDRY_16;
-                }
-                else
+                } else {
                         /* Safe to use the calculated DMA boundary. */
                         tp->dma_rwctrl = saved_dma_rwctrl;
+                }
 
                 tw32(TG3PCI_DMA_RW_CTRL, tp->dma_rwctrl);
         }
@@ -14436,13 +14246,13 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         err = pci_enable_device(pdev);
         if (err) {
-                pr_err("Cannot enable PCI device, aborting\n");
+                dev_err(&pdev->dev, "Cannot enable PCI device, aborting\n");
                 return err;
         }
 
         err = pci_request_regions(pdev, DRV_MODULE_NAME);
         if (err) {
-                pr_err("Cannot obtain PCI resources, aborting\n");
+                dev_err(&pdev->dev, "Cannot obtain PCI resources, aborting\n");
                 goto err_out_disable_pdev;
         }
 
@@ -14451,14 +14261,15 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
         /* Find power-management capability. */
         pm_cap = pci_find_capability(pdev, PCI_CAP_ID_PM);
         if (pm_cap == 0) {
-                pr_err("Cannot find PowerManagement capability, aborting\n");
+                dev_err(&pdev->dev,
+                        "Cannot find Power Management capability, aborting\n");
                 err = -EIO;
                 goto err_out_free_res;
         }
 
         dev = alloc_etherdev_mq(sizeof(*tp), TG3_IRQ_MAX_VECS);
         if (!dev) {
-                pr_err("Etherdev alloc failed, aborting\n");
+                dev_err(&pdev->dev, "Etherdev alloc failed, aborting\n");
                 err = -ENOMEM;
                 goto err_out_free_res;
         }
@@ -14508,7 +14319,7 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         tp->regs = pci_ioremap_bar(pdev, BAR_0);
         if (!tp->regs) {
-                netdev_err(dev, "Cannot map device registers, aborting\n");
+                dev_err(&pdev->dev, "Cannot map device registers, aborting\n");
                 err = -ENOMEM;
                 goto err_out_free_dev;
         }
@@ -14524,7 +14335,8 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         err = tg3_get_invariants(tp);
         if (err) {
-                netdev_err(dev, "Problem fetching invariants of chip, aborting\n");
+                dev_err(&pdev->dev,
+                        "Problem fetching invariants of chip, aborting\n");
                 goto err_out_iounmap;
         }
 
@@ -14559,7 +14371,8 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
                         err = pci_set_consistent_dma_mask(pdev,
                                                           persist_dma_mask);
                         if (err < 0) {
-                                netdev_err(dev, "Unable to obtain 64 bit DMA for consistent allocations\n");
+                                dev_err(&pdev->dev, "Unable to obtain 64 bit "
+                                        "DMA for consistent allocations\n");
                                 goto err_out_iounmap;
                         }
                 }
@@ -14567,7 +14380,8 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
         if (err || dma_mask == DMA_BIT_MASK(32)) {
                 err = pci_set_dma_mask(pdev, DMA_BIT_MASK(32));
                 if (err) {
-                        netdev_err(dev, "No usable DMA configuration, aborting\n");
+                        dev_err(&pdev->dev,
+                                "No usable DMA configuration, aborting\n");
                         goto err_out_iounmap;
                 }
         }
@@ -14616,14 +14430,16 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         err = tg3_get_device_address(tp);
         if (err) {
-                netdev_err(dev, "Could not obtain valid ethernet address, aborting\n");
+                dev_err(&pdev->dev,
+                        "Could not obtain valid ethernet address, aborting\n");
                 goto err_out_iounmap;
         }
 
         if (tp->tg3_flags3 & TG3_FLG3_ENABLE_APE) {
                 tp->aperegs = pci_ioremap_bar(pdev, BAR_2);
                 if (!tp->aperegs) {
-                        netdev_err(dev, "Cannot map APE registers, aborting\n");
+                        dev_err(&pdev->dev,
+                                "Cannot map APE registers, aborting\n");
                         err = -ENOMEM;
                         goto err_out_iounmap;
                 }
@@ -14647,7 +14463,7 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         err = tg3_test_dma(tp);
         if (err) {
-                netdev_err(dev, "DMA engine test failed, aborting\n");
+                dev_err(&pdev->dev, "DMA engine test failed, aborting\n");
                 goto err_out_apeunmap;
         }
 
@@ -14708,7 +14524,7 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
 
         err = register_netdev(dev);
         if (err) {
-                netdev_err(dev, "Cannot register net device, aborting\n");
+                dev_err(&pdev->dev, "Cannot register net device, aborting\n");
                 goto err_out_apeunmap;
         }
 
@@ -14721,11 +14537,12 @@ static int __devinit tg3_init_one(struct pci_dev *pdev,
         if (tp->tg3_flags3 & TG3_FLG3_PHY_CONNECTED) {
                 struct phy_device *phydev;
                 phydev = tp->mdio_bus->phy_map[TG3_PHY_MII_ADDR];
-                netdev_info(dev, "attached PHY driver [%s] (mii_bus:phy_addr=%s)\n",
+                netdev_info(dev,
+                            "attached PHY driver [%s] (mii_bus:phy_addr=%s)\n",
                             phydev->drv->name, dev_name(&phydev->dev));
         } else
-                netdev_info(dev, "attached PHY is %s (%s Ethernet) (WireSpeed[%d])\n",
-                            tg3_phy_string(tp),
+                netdev_info(dev, "attached PHY is %s (%s Ethernet) "
+                            "(WireSpeed[%d])\n", tg3_phy_string(tp),
                             ((tp->tg3_flags & TG3_FLAG_10_100_ONLY) ? "10/100Base-TX" :
                              ((tp->tg3_flags2 & TG3_FLG2_ANY_SERDES) ? "1000Base-SX" :
                               "10/100/1000Base-T")),
diff --git a/drivers/net/tg3.h b/drivers/net/tg3.h
index 574a1cc4d353..5d7f72a2ea01 100644
--- a/drivers/net/tg3.h
+++ b/drivers/net/tg3.h
@@ -23,7 +23,7 @@
 #define TG3_BDINFO_NIC_ADDR             0xcUL /* 32-bit */
 #define TG3_BDINFO_SIZE                 0x10UL
 
-#define RX_COPY_THRESHOLD               256
+#define RX_COPY_THRESHOLD               256
 
 #define TG3_RX_INTERNAL_RING_SZ_5906    32
 
@@ -252,7 +252,7 @@
 /* 0x94 --> 0x98 unused */
 #define TG3PCI_STD_RING_PROD_IDX        0x00000098 /* 64-bit */
 #define TG3PCI_RCV_RET_RING_CON_IDX     0x000000a0 /* 64-bit */
-/* 0xa0 --> 0xb8 unused */
+/* 0xa8 --> 0xb8 unused */
 #define TG3PCI_DUAL_MAC_CTRL            0x000000b8
 #define  DUAL_MAC_CTRL_CH_MASK           0x00000003
 #define  DUAL_MAC_CTRL_ID                0x00000004
@@ -2082,7 +2082,7 @@
 #define MII_TG3_DSP_AADJ1CH0            0x001f
 #define MII_TG3_DSP_AADJ1CH3            0x601f
 #define  MII_TG3_DSP_AADJ1CH3_ADCCKADJ  0x0002
-#define MII_TG3_DSP_EXP8                0x0708
+#define MII_TG3_DSP_EXP8                0x0f08
 #define  MII_TG3_DSP_EXP8_REJ2MHz       0x0001
 #define  MII_TG3_DSP_EXP8_AEDW          0x0200
 #define MII_TG3_DSP_EXP75               0x0f75
@@ -2561,7 +2561,7 @@ struct tg3_bufmgr_config {
 
 struct tg3_ethtool_stats {
         /* Statistics maintained by Receive MAC. */
-        u64             rx_octets;
+        u64             rx_octets;
         u64             rx_fragments;
         u64             rx_ucast_packets;
         u64             rx_mcast_packets;
diff --git a/drivers/net/tlan.c b/drivers/net/tlan.c
index 390540c101c7..8ffec22b74bf 100644
--- a/drivers/net/tlan.c
+++ b/drivers/net/tlan.c
@@ -1314,7 +1314,7 @@ static struct net_device_stats *TLan_GetStats( struct net_device *dev )
 
 static void TLan_SetMulticastList( struct net_device *dev )
 {
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         u32                     hash1 = 0;
         u32                     hash2 = 0;
         int                     i;
@@ -1336,12 +1336,12 @@ static void TLan_SetMulticastList( struct net_device *dev )
                         TLan_DioWrite32( dev->base_addr, TLAN_HASH_2, 0xFFFFFFFF );
                 } else {
                         i = 0;
-                        netdev_for_each_mc_addr(dmi, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 if ( i < 3 ) {
                                         TLan_SetMac( dev, i + 1,
-                                                     (char *) &dmi->dmi_addr );
+                                                     (char *) &ha->addr);
                                 } else {
-                                        offset = TLan_HashFunc( (u8 *) &dmi->dmi_addr );
+                                        offset = TLan_HashFunc((u8 *)&ha->addr);
                                         if ( offset < 32 )
                                                 hash1 |= ( 1 << offset );
                                         else
@@ -2464,7 +2464,7 @@ static void TLan_PhyPrint( struct net_device *dev )
                 printk( "TLAN:   Device %s, Unmanaged PHY.\n", dev->name );
         } else if ( phy <= TLAN_PHY_MAX_ADDR ) {
                 printk( "TLAN:   Device %s, PHY 0x%02x.\n", dev->name, phy );
-                printk( "TLAN:      Off.  +0     +1     +2     +3 \n" );
+                printk( "TLAN:      Off.  +0     +1     +2     +3\n" );
                 for ( i = 0; i < 0x20; i+= 4 ) {
                         printk( "TLAN:      0x%02x", i );
                         TLan_MiiReadReg( dev, phy, i, &data0 );
diff --git a/drivers/net/tokenring/3c359.c b/drivers/net/tokenring/3c359.c
index 0fb930feea45..4673e38c52a9 100644
--- a/drivers/net/tokenring/3c359.c
+++ b/drivers/net/tokenring/3c359.c
@@ -76,7 +76,7 @@ static char version[] __devinitdata  =
 
 #define FW_NAME         "3com/3C359.bin"
 MODULE_AUTHOR("Mike Phillips <mikep@linuxtr.net>") ; 
-MODULE_DESCRIPTION("3Com 3C359 Velocity XL Token Ring Adapter Driver \n") ;
+MODULE_DESCRIPTION("3Com 3C359 Velocity XL Token Ring Adapter Driver\n") ;
 MODULE_FIRMWARE(FW_NAME);
 
 /* Module parameters */
@@ -162,19 +162,19 @@ static void print_tx_state(struct net_device *dev)
         u8 __iomem *xl_mmio = xl_priv->xl_mmio ; 
         int i ; 
 
-        printk("tx_ring_head: %d, tx_ring_tail: %d, free_ent: %d \n",xl_priv->tx_ring_head, 
+        printk("tx_ring_head: %d, tx_ring_tail: %d, free_ent: %d\n",xl_priv->tx_ring_head,
                 xl_priv->tx_ring_tail, xl_priv->free_ring_entries) ; 
-        printk("Ring    , Address ,   FSH  , DnNextPtr, Buffer, Buffer_Len \n"); 
+        printk("Ring    , Address ,   FSH  , DnNextPtr, Buffer, Buffer_Len\n");
         for (i = 0; i < 16; i++) {
                 txd = &(xl_priv->xl_tx_ring[i]) ; 
-                printk("%d, %08lx, %08x, %08x, %08x, %08x \n", i, virt_to_bus(txd), 
+                printk("%d, %08lx, %08x, %08x, %08x, %08x\n", i, virt_to_bus(txd),
                         txd->framestartheader, txd->dnnextptr, txd->buffer, txd->buffer_length ) ; 
         }
 
-        printk("DNLISTPTR = %04x \n", readl(xl_mmio + MMIO_DNLISTPTR) ); 
+        printk("DNLISTPTR = %04x\n", readl(xl_mmio + MMIO_DNLISTPTR) );
         
-        printk("DmaCtl = %04x \n", readl(xl_mmio + MMIO_DMA_CTRL) ); 
-        printk("Queue status = %0x \n",netif_running(dev) ) ; 
+        printk("DmaCtl = %04x\n", readl(xl_mmio + MMIO_DMA_CTRL) );
+        printk("Queue status = %0x\n",netif_running(dev) ) ;
 }
 
 static void print_rx_state(struct net_device *dev)
@@ -185,19 +185,19 @@ static void print_rx_state(struct net_device *dev)
         u8 __iomem *xl_mmio = xl_priv->xl_mmio ; 
         int i ; 
 
-        printk("rx_ring_tail: %d \n", xl_priv->rx_ring_tail) ; 
-        printk("Ring    , Address ,   FrameState  , UPNextPtr, FragAddr, Frag_Len \n"); 
+        printk("rx_ring_tail: %d\n", xl_priv->rx_ring_tail);
+        printk("Ring    , Address ,   FrameState  , UPNextPtr, FragAddr, Frag_Len\n");
         for (i = 0; i < 16; i++) { 
                 /* rxd = (struct xl_rx_desc *)xl_priv->rx_ring_dma_addr + (i * sizeof(struct xl_rx_desc)) ; */
                 rxd = &(xl_priv->xl_rx_ring[i]) ; 
-                printk("%d, %08lx, %08x, %08x, %08x, %08x \n", i, virt_to_bus(rxd), 
+                printk("%d, %08lx, %08x, %08x, %08x, %08x\n", i, virt_to_bus(rxd),
                         rxd->framestatus, rxd->upnextptr, rxd->upfragaddr, rxd->upfraglen ) ; 
         }
 
-        printk("UPLISTPTR = %04x \n", readl(xl_mmio + MMIO_UPLISTPTR) ); 
+        printk("UPLISTPTR = %04x\n", readl(xl_mmio + MMIO_UPLISTPTR));
         
-        printk("DmaCtl = %04x \n", readl(xl_mmio + MMIO_DMA_CTRL) ); 
-        printk("Queue status = %0x \n",netif_running(dev) ) ;
+        printk("DmaCtl = %04x\n", readl(xl_mmio + MMIO_DMA_CTRL));
+        printk("Queue status = %0x\n",netif_running(dev));
 } 
 #endif
 
@@ -390,7 +390,7 @@ static int __devinit xl_init(struct net_device *dev)
         struct xl_private *xl_priv = netdev_priv(dev);
         int err;
 
-        printk(KERN_INFO "%s \n", version);
+        printk(KERN_INFO "%s\n", version);
         printk(KERN_INFO "%s: I/O at %hx, MMIO at %p, using irq %d\n",
                 xl_priv->xl_card_name, (unsigned int)dev->base_addr ,xl_priv->xl_mmio, dev->irq);
 
@@ -462,7 +462,7 @@ static int xl_hw_reset(struct net_device *dev)
         writel( (IO_WORD_READ | PMBAR),xl_mmio + MMIO_MAC_ACCESS_CMD);  
 
 #if XL_DEBUG
-        printk(KERN_INFO "Read from PMBAR = %04x \n", readw(xl_mmio + MMIO_MACDATA)) ; 
+        printk(KERN_INFO "Read from PMBAR = %04x\n", readw(xl_mmio + MMIO_MACDATA));
 #endif
 
         if ( readw( (xl_mmio + MMIO_MACDATA))  & PMB_CPHOLD ) { 
@@ -590,9 +590,9 @@ static int xl_hw_reset(struct net_device *dev)
 #if XL_DEBUG
         writel(IO_WORD_READ | SWITCHSETTINGS, xl_mmio + MMIO_MAC_ACCESS_CMD) ; 
         if ( readw(xl_mmio + MMIO_MACDATA) & 2) { 
-                printk(KERN_INFO "Default ring speed 4 mbps \n") ;
+                printk(KERN_INFO "Default ring speed 4 mbps\n");
         } else {
-                printk(KERN_INFO "Default ring speed 16 mbps \n") ; 
+                printk(KERN_INFO "Default ring speed 16 mbps\n");
         } 
         printk(KERN_INFO "%s: xl_priv->srb = %04x\n",xl_priv->xl_card_name, xl_priv->srb);
 #endif
@@ -650,7 +650,7 @@ static int xl_open(struct net_device *dev)
 
         if (open_err != 0) { /* Something went wrong with the open command */
                 if (open_err & 0x07) { /* Wrong speed, retry at different speed */
-                        printk(KERN_WARNING "%s: Open Error, retrying at different ringspeed \n", dev->name) ; 
+                        printk(KERN_WARNING "%s: Open Error, retrying at different ringspeed\n", dev->name);
                         switchsettings = switchsettings ^ 2 ; 
                         xl_ee_write(dev,0x08,switchsettings) ; 
                         xl_hw_reset(dev) ; 
@@ -702,7 +702,7 @@ static int xl_open(struct net_device *dev)
         }
 
         if (i==0) { 
-                printk(KERN_WARNING "%s: Not enough memory to allocate rx buffers. Adapter disabled \n",dev->name) ; 
+                printk(KERN_WARNING "%s: Not enough memory to allocate rx buffers. Adapter disabled\n",dev->name);
                 free_irq(dev->irq,dev) ; 
                 kfree(xl_priv->xl_tx_ring);
                 kfree(xl_priv->xl_rx_ring);
@@ -852,7 +852,7 @@ static int xl_open_hw(struct net_device *dev)
  
                 writel( (MEM_WORD_READ | 0xD0000 | xl_priv->srb) + 12, xl_mmio + MMIO_MAC_ACCESS_CMD) ; 
                 xl_priv->arb = swab16(readw(xl_mmio + MMIO_MACDATA)) ;
-                printk(", ARB: %04x \n",xl_priv->arb ) ; 
+                printk(", ARB: %04x\n",xl_priv->arb );
                 writel( (MEM_WORD_READ | 0xD0000 | xl_priv->srb) + 14, xl_mmio + MMIO_MAC_ACCESS_CMD) ; 
                 vsoff = swab16(readw(xl_mmio + MMIO_MACDATA)) ;
 
@@ -866,7 +866,7 @@ static int xl_open_hw(struct net_device *dev)
                         ver_str[i] = readb(xl_mmio + MMIO_MACDATA) ; 
                 }
                 ver_str[i] = '\0' ; 
-                printk(KERN_INFO "%s: Microcode version String: %s \n",dev->name,ver_str); 
+                printk(KERN_INFO "%s: Microcode version String: %s\n",dev->name,ver_str);
         }       
         
         /*
@@ -990,7 +990,7 @@ static void xl_rx(struct net_device *dev)
                         skb = dev_alloc_skb(xl_priv->pkt_buf_sz) ; 
 
                         if (skb==NULL) { /* Still need to fix the rx ring */
-                                printk(KERN_WARNING "%s: dev_alloc_skb failed in rx, single buffer \n",dev->name) ; 
+                                printk(KERN_WARNING "%s: dev_alloc_skb failed in rx, single buffer\n",dev->name);
                                 adv_rx_ring(dev) ; 
                                 dev->stats.rx_dropped++ ; 
                                 writel(ACK_INTERRUPT | UPCOMPACK | LATCH_ACK , xl_mmio + MMIO_COMMAND) ; 
@@ -1091,7 +1091,7 @@ static irqreturn_t xl_interrupt(int irq, void *dev_id)
          */
         if (intstatus == 0x0001) {  
                 writel(ACK_INTERRUPT | LATCH_ACK, xl_mmio + MMIO_COMMAND) ;
-                printk(KERN_INFO "%s: 00001 int received \n",dev->name) ;  
+                printk(KERN_INFO "%s: 00001 int received\n",dev->name);
         } else {  
                 if (intstatus & (HOSTERRINT | SRBRINT | ARBCINT | UPCOMPINT | DNCOMPINT | HARDERRINT | (1<<8) | TXUNDERRUN | ASBFINT)) { 
                         
@@ -1102,9 +1102,9 @@ static irqreturn_t xl_interrupt(int irq, void *dev_id)
                          */
 
                         if (intstatus & HOSTERRINT) {
-                                printk(KERN_WARNING "%s: Host Error, performing global reset, intstatus = %04x \n",dev->name,intstatus) ; 
+                                printk(KERN_WARNING "%s: Host Error, performing global reset, intstatus = %04x\n",dev->name,intstatus);
                                 writew( GLOBAL_RESET, xl_mmio + MMIO_COMMAND ) ;
-                                printk(KERN_WARNING "%s: Resetting hardware: \n", dev->name); 
+                                printk(KERN_WARNING "%s: Resetting hardware:\n", dev->name);
                                 netif_stop_queue(dev) ;
                                 xl_freemem(dev) ; 
                                 free_irq(dev->irq,dev);         
@@ -1127,7 +1127,7 @@ static irqreturn_t xl_interrupt(int irq, void *dev_id)
                                         Must put a timeout check here ! */
                                         /* Empty Loop */
                                 } 
-                                printk(KERN_WARNING "%s: TX Underrun received \n",dev->name) ;
+                                printk(KERN_WARNING "%s: TX Underrun received\n",dev->name);
                                 writel(ACK_INTERRUPT | LATCH_ACK, xl_mmio + MMIO_COMMAND) ; 
                         } /* TxUnderRun */
         
@@ -1156,13 +1156,13 @@ static irqreturn_t xl_interrupt(int irq, void *dev_id)
                                 macstatus = readw(xl_mmio + MMIO_MACDATA) ; 
                                 printk(KERN_WARNING "%s: MacStatusError, details: ", dev->name);
                                 if (macstatus & (1<<14)) 
-                                        printk(KERN_WARNING "tchk error: Unrecoverable error \n") ; 
+                                        printk(KERN_WARNING "tchk error: Unrecoverable error\n");
                                 if (macstatus & (1<<3))
-                                        printk(KERN_WARNING "eint error: Internal watchdog timer expired \n") ;
+                                        printk(KERN_WARNING "eint error: Internal watchdog timer expired\n");
                                 if (macstatus & (1<<2))
-                                        printk(KERN_WARNING "aint error: Host tried to perform invalid operation \n") ; 
+                                        printk(KERN_WARNING "aint error: Host tried to perform invalid operation\n");
                                 printk(KERN_WARNING "Instatus = %02x, macstatus = %02x\n",intstatus,macstatus) ; 
-                                printk(KERN_WARNING "%s: Resetting hardware: \n", dev->name); 
+                                printk(KERN_WARNING "%s: Resetting hardware:\n", dev->name);
                                 netif_stop_queue(dev) ;
                                 xl_freemem(dev) ; 
                                 free_irq(dev->irq,dev); 
@@ -1174,7 +1174,7 @@ static irqreturn_t xl_interrupt(int irq, void *dev_id)
                                 return IRQ_HANDLED;
                         }
                 } else { 
-                        printk(KERN_WARNING "%s: Received Unknown interrupt : %04x \n", dev->name, intstatus) ;
+                        printk(KERN_WARNING "%s: Received Unknown interrupt : %04x\n", dev->name, intstatus);
                         writel(ACK_INTERRUPT | LATCH_ACK, xl_mmio + MMIO_COMMAND) ;     
                 }
         } 
@@ -1349,11 +1349,11 @@ static int xl_close(struct net_device *dev)
 
         writel(MEM_BYTE_READ | 0xd0000 | xl_priv->srb, xl_mmio + MMIO_MAC_ACCESS_CMD);
         if (readb(xl_mmio + MMIO_MACDATA) != CLOSE_NIC) { 
-                printk(KERN_INFO "%s: CLOSE_NIC did not get a CLOSE_NIC response \n",dev->name) ; 
+                printk(KERN_INFO "%s: CLOSE_NIC did not get a CLOSE_NIC response\n",dev->name);
         } else { 
                 writel((MEM_BYTE_READ | 0xd0000 | xl_priv->srb) +2, xl_mmio + MMIO_MAC_ACCESS_CMD) ;
                 if (readb(xl_mmio + MMIO_MACDATA)==0) { 
-                        printk(KERN_INFO "%s: Adapter has been closed \n",dev->name) ;
+                        printk(KERN_INFO "%s: Adapter has been closed\n",dev->name);
                         writew(ACK_INTERRUPT | SRBRACK | LATCH_ACK, xl_mmio + MMIO_COMMAND) ; 
 
                         xl_freemem(dev) ; 
@@ -1390,7 +1390,7 @@ static int xl_close(struct net_device *dev)
 static void xl_set_rx_mode(struct net_device *dev) 
 {
         struct xl_private *xl_priv = netdev_priv(dev);
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned char dev_mc_address[4] ; 
         u16 options ; 
 
@@ -1407,11 +1407,11 @@ static void xl_set_rx_mode(struct net_device *dev)
 
         dev_mc_address[0] = dev_mc_address[1] = dev_mc_address[2] = dev_mc_address[3] = 0 ;
 
-        netdev_for_each_mc_addr(dmi, dev) {
-                dev_mc_address[0] |= dmi->dmi_addr[2] ;
-                dev_mc_address[1] |= dmi->dmi_addr[3] ;
-                dev_mc_address[2] |= dmi->dmi_addr[4] ;
-                dev_mc_address[3] |= dmi->dmi_addr[5] ;
+        netdev_for_each_mc_addr(ha, dev) {
+                dev_mc_address[0] |= ha->addr[2];
+                dev_mc_address[1] |= ha->addr[3];
+                dev_mc_address[2] |= ha->addr[4];
+                dev_mc_address[3] |= ha->addr[5];
         }
 
         if (memcmp(xl_priv->xl_functional_addr,dev_mc_address,4) != 0) { /* Options have changed, run the command */
@@ -1446,11 +1446,11 @@ static void xl_srb_bh(struct net_device *dev)
                 printk(KERN_INFO "%s: Command: %d - Invalid Command code\n",dev->name,srb_cmd) ; 
                 break ; 
         case 4:
-                printk(KERN_INFO "%s: Command: %d - Adapter is closed, must be open for this command \n",dev->name,srb_cmd) ; 
+                printk(KERN_INFO "%s: Command: %d - Adapter is closed, must be open for this command\n",dev->name,srb_cmd);
                 break ;
         
         case 6:
-                printk(KERN_INFO "%s: Command: %d - Options Invalid for command \n",dev->name,srb_cmd) ;
+                printk(KERN_INFO "%s: Command: %d - Options Invalid for command\n",dev->name,srb_cmd);
                 break ;
 
         case 0: /* Successful command execution */ 
@@ -1471,11 +1471,11 @@ static void xl_srb_bh(struct net_device *dev)
                         break ; 
                 case SET_FUNC_ADDRESS:
                         if(xl_priv->xl_message_level) 
-                                printk(KERN_INFO "%s: Functional Address Set \n",dev->name) ;  
+                                printk(KERN_INFO "%s: Functional Address Set\n",dev->name);
                         break ; 
                 case CLOSE_NIC:
                         if(xl_priv->xl_message_level)
-                                printk(KERN_INFO "%s: Received CLOSE_NIC interrupt in interrupt handler \n",dev->name) ;        
+                                printk(KERN_INFO "%s: Received CLOSE_NIC interrupt in interrupt handler\n",dev->name);
                         break ; 
                 case SET_MULTICAST_MODE:
                         if(xl_priv->xl_message_level)
@@ -1484,9 +1484,9 @@ static void xl_srb_bh(struct net_device *dev)
                 case SET_RECEIVE_MODE:
                         if(xl_priv->xl_message_level) {  
                                 if (xl_priv->xl_copy_all_options == 0x0004) 
-                                        printk(KERN_INFO "%s: Entering promiscuous mode \n", dev->name) ; 
+                                        printk(KERN_INFO "%s: Entering promiscuous mode\n", dev->name);
                                 else
-                                        printk(KERN_INFO "%s: Entering normal receive mode \n",dev->name) ; 
+                                        printk(KERN_INFO "%s: Entering normal receive mode\n",dev->name);
                         }
                         break ; 
  
@@ -1556,20 +1556,20 @@ static void xl_arb_cmd(struct net_device *dev)
                         xl_freemem(dev) ; 
                         free_irq(dev->irq,dev);
                         
-                        printk(KERN_WARNING "%s: Adapter has been closed \n", dev->name) ; 
+                        printk(KERN_WARNING "%s: Adapter has been closed\n", dev->name);
                 } /* If serious error */
                 
                 if (xl_priv->xl_message_level) { 
                         if (lan_status_diff & LSC_SIG_LOSS) 
-                                        printk(KERN_WARNING "%s: No receive signal detected \n", dev->name) ; 
+                                        printk(KERN_WARNING "%s: No receive signal detected\n", dev->name);
                         if (lan_status_diff & LSC_HARD_ERR)
-                                        printk(KERN_INFO "%s: Beaconing \n",dev->name);
+                                        printk(KERN_INFO "%s: Beaconing\n",dev->name);
                         if (lan_status_diff & LSC_SOFT_ERR)
-                                        printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame \n",dev->name);
+                                        printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame\n",dev->name);
                         if (lan_status_diff & LSC_TRAN_BCN) 
                                         printk(KERN_INFO "%s: We are tranmitting the beacon, aaah\n",dev->name);
                         if (lan_status_diff & LSC_SS) 
-                                        printk(KERN_INFO "%s: Single Station on the ring \n", dev->name);
+                                        printk(KERN_INFO "%s: Single Station on the ring\n", dev->name);
                         if (lan_status_diff & LSC_RING_REC)
                                         printk(KERN_INFO "%s: Ring recovery ongoing\n",dev->name);
                         if (lan_status_diff & LSC_FDX_MODE)
@@ -1578,7 +1578,7 @@ static void xl_arb_cmd(struct net_device *dev)
                 
                 if (lan_status_diff & LSC_CO) { 
                                 if (xl_priv->xl_message_level) 
-                                        printk(KERN_INFO "%s: Counter Overflow \n", dev->name);
+                                        printk(KERN_INFO "%s: Counter Overflow\n", dev->name);
                                 /* Issue READ.LOG command */
                                 xl_srb_cmd(dev, READ_LOG) ;     
                 }
@@ -1594,7 +1594,7 @@ static void xl_arb_cmd(struct net_device *dev)
         }  /* Lan.change.status */
         else if ( arb_cmd == RECEIVE_DATA) { /* Received.Data */
 #if XL_DEBUG
-                printk(KERN_INFO "Received.Data \n") ; 
+                printk(KERN_INFO "Received.Data\n");
 #endif          
                 writel( ((MEM_WORD_READ | 0xD0000 | xl_priv->arb) + 6), xl_mmio + MMIO_MAC_ACCESS_CMD) ;
                 xl_priv->mac_buffer = swab16(readw(xl_mmio + MMIO_MACDATA)) ;
@@ -1629,7 +1629,7 @@ static void xl_arb_cmd(struct net_device *dev)
                 xl_asb_cmd(dev) ; 
                 
         } else {
-                printk(KERN_WARNING "%s: Received unknown arb (xl_priv) command: %02x \n",dev->name,arb_cmd) ; 
+                printk(KERN_WARNING "%s: Received unknown arb (xl_priv) command: %02x\n",dev->name,arb_cmd);
         }
 
         /* Acknowledge the arb interrupt */
@@ -1686,13 +1686,13 @@ static void xl_asb_bh(struct net_device *dev)
         ret_code = readb(xl_mmio + MMIO_MACDATA) ; 
         switch (ret_code) { 
                 case 0x01:
-                        printk(KERN_INFO "%s: ASB Command, unrecognized command code \n",dev->name) ;
+                        printk(KERN_INFO "%s: ASB Command, unrecognized command code\n",dev->name);
                         break ;
                 case 0x26:
-                        printk(KERN_INFO "%s: ASB Command, unexpected receive buffer \n", dev->name) ; 
+                        printk(KERN_INFO "%s: ASB Command, unexpected receive buffer\n", dev->name);
                         break ; 
                 case 0x40:
-                        printk(KERN_INFO "%s: ASB Command, Invalid Station ID \n", dev->name) ; 
+                        printk(KERN_INFO "%s: ASB Command, Invalid Station ID\n", dev->name);
                         break ;  
         }
         xl_priv->asb_queued = 0 ; 
diff --git a/drivers/net/tokenring/ibmtr.c b/drivers/net/tokenring/ibmtr.c
index 1a0967246e2f..eebdaae24328 100644
--- a/drivers/net/tokenring/ibmtr.c
+++ b/drivers/net/tokenring/ibmtr.c
@@ -986,7 +986,7 @@ static void open_sap(unsigned char type, struct net_device *dev)
 static void tok_set_multicast_list(struct net_device *dev)
 {
         struct tok_info *ti = netdev_priv(dev);
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         unsigned char address[4];
 
         int i;
@@ -995,11 +995,11 @@ static void tok_set_multicast_list(struct net_device *dev)
         /*BMS ifconfig tr down or hot unplug a PCMCIA card ??hownowbrowncow*/
         if (/*BMSHELPdev->start == 0 ||*/ ti->open_status != OPEN) return;
         address[0] = address[1] = address[2] = address[3] = 0;
-        netdev_for_each_mc_addr(mclist, dev) {
-                address[0] |= mclist->dmi_addr[2];
-                address[1] |= mclist->dmi_addr[3];
-                address[2] |= mclist->dmi_addr[4];
-                address[3] |= mclist->dmi_addr[5];
+        netdev_for_each_mc_addr(ha, dev) {
+                address[0] |= ha->addr[2];
+                address[1] |= ha->addr[3];
+                address[2] |= ha->addr[4];
+                address[3] |= ha->addr[5];
         }
         SET_PAGE(ti->srb_page);
         for (i = 0; i < sizeof(struct srb_set_funct_addr); i++)
diff --git a/drivers/net/tokenring/lanstreamer.c b/drivers/net/tokenring/lanstreamer.c
index dd028fee9dc2..88c893100c2b 100644
--- a/drivers/net/tokenring/lanstreamer.c
+++ b/drivers/net/tokenring/lanstreamer.c
@@ -357,7 +357,7 @@ static int __devinit streamer_init_one(struct pci_dev *pdev,
         pcr |= PCI_COMMAND_SERR;
         pci_write_config_word (pdev, PCI_COMMAND, pcr);
 
-        printk("%s \n", version);
+        printk("%s\n", version);
         printk("%s: %s. I/O at %hx, MMIO at %p, using irq %d\n",dev->name,
                 streamer_priv->streamer_card_name,
                 (unsigned int) dev->base_addr,
@@ -650,7 +650,7 @@ static int streamer_open(struct net_device *dev)
 #if STREAMER_DEBUG
                 writew(readw(streamer_mmio + LAPWWO),
                        streamer_mmio + LAPA);
-                printk("srb open request: \n");
+                printk("srb open request:\n");
                 for (i = 0; i < 16; i++) {
                         printk("%x:", ntohs(readw(streamer_mmio + LAPDINC)));
                 }
@@ -700,7 +700,7 @@ static int streamer_open(struct net_device *dev)
                 if (srb_word != 0) {
                         if (srb_word == 0x07) {
                                 if (!streamer_priv->streamer_ring_speed && open_finished) {     /* Autosense , first time around */
-                                        printk(KERN_WARNING "%s: Retrying at different ring speed \n",
+                                        printk(KERN_WARNING "%s: Retrying at different ring speed\n",
                                                dev->name);
                                         open_finished = 0;
                                 } else {
@@ -716,7 +716,7 @@ static int streamer_open(struct net_device *dev)
                                             ((error_code & 0x0f) == 0x0d))
                                         {
                                                 printk(KERN_WARNING "%s: Tried to autosense ring speed with no monitors present\n", dev->name);
-                                                printk(KERN_WARNING "%s: Please try again with a specified ring speed \n", dev->name);
+                                                printk(KERN_WARNING "%s: Please try again with a specified ring speed\n", dev->name);
                                                 free_irq(dev->irq, dev);
                                                 return -EIO;
                                         }
@@ -922,7 +922,7 @@ static void streamer_rx(struct net_device *dev)
 
                 if (rx_desc->status & 0x7E830000) {     /* errors */
                         if (streamer_priv->streamer_message_level) {
-                                printk(KERN_WARNING "%s: Rx Error %x \n",
+                                printk(KERN_WARNING "%s: Rx Error %x\n",
                                        dev->name, rx_desc->status);
                         }
                 } else {        /* received without errors */
@@ -935,7 +935,7 @@ static void streamer_rx(struct net_device *dev)
 
                         if (skb == NULL) 
                         {
-                                printk(KERN_WARNING "%s: Not enough memory to copy packet to upper layers. \n", dev->name);
+                                printk(KERN_WARNING "%s: Not enough memory to copy packet to upper layers.\n",  dev->name);
                                 dev->stats.rx_dropped++;
                         } else {        /* we allocated an skb OK */
                                 if (buffer_cnt == 1) {
@@ -1266,7 +1266,7 @@ static void streamer_set_rx_mode(struct net_device *dev)
             netdev_priv(dev);
         __u8 __iomem *streamer_mmio = streamer_priv->streamer_mmio;
         __u8 options = 0;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned char dev_mc_address[5];
 
         writel(streamer_priv->srb, streamer_mmio + LAPA);
@@ -1302,11 +1302,11 @@ static void streamer_set_rx_mode(struct net_device *dev)
         writel(streamer_priv->srb,streamer_mmio+LAPA);
         dev_mc_address[0] = dev_mc_address[1] = dev_mc_address[2] = dev_mc_address[3] = 0 ; 
   
-        netdev_for_each_mc_addr(dmi, dev) {
-                dev_mc_address[0] |= dmi->dmi_addr[2] ; 
-                dev_mc_address[1] |= dmi->dmi_addr[3] ; 
-                dev_mc_address[2] |= dmi->dmi_addr[4] ; 
-                dev_mc_address[3] |= dmi->dmi_addr[5] ; 
+        netdev_for_each_mc_addr(ha, dev) {
+                dev_mc_address[0] |= ha->addr[2];
+                dev_mc_address[1] |= ha->addr[3];
+                dev_mc_address[2] |= ha->addr[4];
+                dev_mc_address[3] |= ha->addr[5];
         }
   
         writew(htons(SRB_SET_FUNC_ADDRESS << 8),streamer_mmio+LAPDINC);
@@ -1363,7 +1363,7 @@ static void streamer_srb_bh(struct net_device *dev)
                 case 0x00:
                         break;
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                         break;
                 case 0x04:
                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n", dev->name);
@@ -1391,13 +1391,13 @@ static void streamer_srb_bh(struct net_device *dev)
                 case 0x00:
                         break;
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized srb command \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized srb command\n", dev->name);
                         break;
                 case 0x04:
                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n", dev->name);
                         break;
                 case 0x39:      /* Must deal with this if individual multicast addresses used */
-                        printk(KERN_INFO "%s: Group address not found \n", dev->name);
+                        printk(KERN_INFO "%s: Group address not found\n", dev->name);
                         break;
                 default:
                         break;
@@ -1413,10 +1413,10 @@ static void streamer_srb_bh(struct net_device *dev)
                 switch (srb_word) {
                 case 0x00:
                         if (streamer_priv->streamer_message_level)
-                                printk(KERN_INFO "%s: Functional Address Mask Set \n", dev->name);
+                                printk(KERN_INFO "%s: Functional Address Mask Set\n", dev->name);
                         break;
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized srb command \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized srb command\n", dev->name);
                         break;
                 case 0x04:
                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n", dev->name);
@@ -1447,7 +1447,7 @@ static void streamer_srb_bh(struct net_device *dev)
                         }
                         break;
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized srb command \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized srb command\n", dev->name);
                         break;
                 case 0x04:
                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n", dev->name);
@@ -1466,7 +1466,7 @@ static void streamer_srb_bh(struct net_device *dev)
                                 printk(KERN_INFO "%s: Read Source Routing Counters issued\n", dev->name);
                         break;
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized srb command \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized srb command\n", dev->name);
                         break;
                 case 0x04:
                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n", dev->name);
@@ -1555,7 +1555,7 @@ static void streamer_arb_cmd(struct net_device *dev)
                                              (streamer_mmio + LAPDINC)));
                         }
 
-                        printk("next %04x, fs %02x, len %04x \n", next,
+                        printk("next %04x, fs %02x, len %04x\n", next,
                                status, len);
                 }
 #endif
@@ -1592,7 +1592,7 @@ static void streamer_arb_cmd(struct net_device *dev)
 
                 mac_frame->protocol = tr_type_trans(mac_frame, dev);
 #if STREAMER_NETWORK_MONITOR
-                printk(KERN_WARNING "%s: Received MAC Frame, details: \n",
+                printk(KERN_WARNING "%s: Received MAC Frame, details:\n",
                        dev->name);
                 mac_hdr = tr_hdr(mac_frame);
                 printk(KERN_WARNING
@@ -1668,15 +1668,15 @@ drop_frame:
                 /* If serious error */
                 if (streamer_priv->streamer_message_level) {
                         if (lan_status_diff & LSC_SIG_LOSS)
-                                printk(KERN_WARNING "%s: No receive signal detected \n", dev->name);
+                                printk(KERN_WARNING "%s: No receive signal detected\n", dev->name);
                         if (lan_status_diff & LSC_HARD_ERR) 
-                                printk(KERN_INFO "%s: Beaconing \n", dev->name);
+                                printk(KERN_INFO "%s: Beaconing\n", dev->name);
                         if (lan_status_diff & LSC_SOFT_ERR)
-                                printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame \n", dev->name);
+                                printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame\n", dev->name);
                         if (lan_status_diff & LSC_TRAN_BCN)
                                 printk(KERN_INFO "%s: We are tranmitting the beacon, aaah\n", dev->name);
                         if (lan_status_diff & LSC_SS)
-                                printk(KERN_INFO "%s: Single Station on the ring \n", dev->name);
+                                printk(KERN_INFO "%s: Single Station on the ring\n", dev->name);
                         if (lan_status_diff & LSC_RING_REC)
                                 printk(KERN_INFO "%s: Ring recovery ongoing\n", dev->name);
                         if (lan_status_diff & LSC_FDX_MODE)
@@ -1685,7 +1685,7 @@ drop_frame:
 
                 if (lan_status_diff & LSC_CO) {
                         if (streamer_priv->streamer_message_level)
-                                printk(KERN_INFO "%s: Counter Overflow \n", dev->name);
+                                printk(KERN_INFO "%s: Counter Overflow\n", dev->name);
 
                         /* Issue READ.LOG command */
 
@@ -1715,7 +1715,7 @@ drop_frame:
                 streamer_priv->streamer_lan_status = lan_status;
         } /* Lan.change.status */
         else
-                printk(KERN_WARNING "%s: Unknown arb command \n", dev->name);
+                printk(KERN_WARNING "%s: Unknown arb command\n", dev->name);
 }
 
 static void streamer_asb_bh(struct net_device *dev)
@@ -1746,10 +1746,10 @@ static void streamer_asb_bh(struct net_device *dev)
                 rc=ntohs(readw(streamer_mmio+LAPD)) >> 8;
                 switch (rc) {
                 case 0x01:
-                        printk(KERN_WARNING "%s: Unrecognized command code \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized command code\n", dev->name);
                         break;
                 case 0x26:
-                        printk(KERN_WARNING "%s: Unrecognized buffer address \n", dev->name);
+                        printk(KERN_WARNING "%s: Unrecognized buffer address\n", dev->name);
                         break;
                 case 0xFF:
                         /* Valid response, everything should be ok again */
diff --git a/drivers/net/tokenring/olympic.c b/drivers/net/tokenring/olympic.c
index 3a25e0434ae2..3d2fbe60b46e 100644
--- a/drivers/net/tokenring/olympic.c
+++ b/drivers/net/tokenring/olympic.c
@@ -302,7 +302,7 @@ static int olympic_init(struct net_device *dev)
         olympic_priv=netdev_priv(dev);
         olympic_mmio=olympic_priv->olympic_mmio;
 
-        printk("%s \n", version);
+        printk("%s\n", version);
         printk("%s. I/O at %hx, MMIO at %p, LAP at %p, using irq %d\n", olympic_priv->olympic_card_name, (unsigned int) dev->base_addr,olympic_priv->olympic_mmio, olympic_priv->olympic_lap, dev->irq);
 
         writel(readl(olympic_mmio+BCTL) | BCTL_SOFTRESET,olympic_mmio+BCTL);
@@ -468,7 +468,7 @@ static int olympic_open(struct net_device *dev)
 #if OLYMPIC_DEBUG
         printk("LAPWWO: %x, LAPA: %x\n",readw(olympic_mmio+LAPWWO), readl(olympic_mmio+LAPA));
         printk("SISR Mask = %04x\n", readl(olympic_mmio+SISR_MASK));
-        printk("Before the open command \n");
+        printk("Before the open command\n");
 #endif  
         do {
                 memset_io(init_srb,0,SRB_COMMAND_SIZE);
@@ -520,7 +520,7 @@ static int olympic_open(struct net_device *dev)
                                 break;
                         }
                         if (time_after(jiffies, t + 10*HZ)) {
-                                printk(KERN_WARNING "%s: SRB timed out. \n",dev->name) ; 
+                                printk(KERN_WARNING "%s: SRB timed out.\n",dev->name);
                                 olympic_priv->srb_queued=0;
                                 break ; 
                         } 
@@ -549,7 +549,7 @@ static int olympic_open(struct net_device *dev)
                         break;
                 case 0x07:
                         if (!olympic_priv->olympic_ring_speed && open_finished) { /* Autosense , first time around */
-                                printk(KERN_WARNING "%s: Retrying at different ring speed \n", dev->name); 
+                                printk(KERN_WARNING "%s: Retrying at different ring speed\n", dev->name);
                                 open_finished = 0 ;  
                                 continue;
                         }
@@ -558,7 +558,7 @@ static int olympic_open(struct net_device *dev)
 
                         if (!olympic_priv->olympic_ring_speed && ((err & 0x0f) == 0x0d)) { 
                                 printk(KERN_WARNING "%s: Tried to autosense ring speed with no monitors present\n",dev->name);
-                                printk(KERN_WARNING "%s: Please try again with a specified ring speed \n",dev->name);
+                                printk(KERN_WARNING "%s: Please try again with a specified ring speed\n",dev->name);
                         } else {
                                 printk(KERN_WARNING "%s: %s - %s\n", dev->name,
                                         open_maj_error[(err & 0xf0) >> 4],
@@ -759,7 +759,7 @@ static void olympic_rx(struct net_device *dev)
                 olympic_priv->rx_status_last_received++ ;
                 olympic_priv->rx_status_last_received &= (OLYMPIC_RX_RING_SIZE -1);
 #if OLYMPIC_DEBUG
-                printk("rx status: %x rx len: %x \n", le32_to_cpu(rx_status->status_buffercnt), le32_to_cpu(rx_status->fragmentcnt_framelen));
+                printk("rx status: %x rx len: %x\n", le32_to_cpu(rx_status->status_buffercnt), le32_to_cpu(rx_status->fragmentcnt_framelen));
 #endif
                 length = le32_to_cpu(rx_status->fragmentcnt_framelen) & 0xffff;
                 buffer_cnt = le32_to_cpu(rx_status->status_buffercnt) & 0xffff; 
@@ -774,15 +774,15 @@ static void olympic_rx(struct net_device *dev)
                         if (l_status_buffercnt & 0x3B000000) {
                                 if (olympic_priv->olympic_message_level) {
                                         if (l_status_buffercnt & (1<<29))  /* Rx Frame Truncated */
-                                                printk(KERN_WARNING "%s: Rx Frame Truncated \n",dev->name);
+                                                printk(KERN_WARNING "%s: Rx Frame Truncated\n",dev->name);
                                         if (l_status_buffercnt & (1<<28)) /*Rx receive overrun */
-                                                printk(KERN_WARNING "%s: Rx Frame Receive overrun \n",dev->name);
+                                                printk(KERN_WARNING "%s: Rx Frame Receive overrun\n",dev->name);
                                         if (l_status_buffercnt & (1<<27)) /* No receive buffers */
-                                                printk(KERN_WARNING "%s: No receive buffers \n",dev->name);
+                                                printk(KERN_WARNING "%s: No receive buffers\n",dev->name);
                                         if (l_status_buffercnt & (1<<25)) /* Receive frame error detect */
-                                                printk(KERN_WARNING "%s: Receive frame error detect \n",dev->name);
+                                                printk(KERN_WARNING "%s: Receive frame error detect\n",dev->name);
                                         if (l_status_buffercnt & (1<<24)) /* Received Error Detect */
-                                                printk(KERN_WARNING "%s: Received Error Detect \n",dev->name);
+                                                printk(KERN_WARNING "%s: Received Error Detect\n",dev->name);
                                 } 
                                 olympic_priv->rx_ring_last_received += i ; 
                                 olympic_priv->rx_ring_last_received &= (OLYMPIC_RX_RING_SIZE -1) ; 
@@ -796,7 +796,7 @@ static void olympic_rx(struct net_device *dev)
                                 }
 
                                 if (skb == NULL) {
-                                        printk(KERN_WARNING "%s: Not enough memory to copy packet to upper layers. \n",dev->name) ;
+                                        printk(KERN_WARNING "%s: Not enough memory to copy packet to upper layers.\n",dev->name) ;
                                         dev->stats.rx_dropped++;
                                         /* Update counters even though we don't transfer the frame */
                                         olympic_priv->rx_ring_last_received += i ; 
@@ -1101,7 +1101,7 @@ static int olympic_close(struct net_device *dev)
                 }
 
                 if (t == 0) { 
-                        printk(KERN_WARNING "%s: SRB timed out. May not be fatal. \n",dev->name) ; 
+                        printk(KERN_WARNING "%s: SRB timed out. May not be fatal.\n",dev->name);
                 } 
                 olympic_priv->srb_queued=0;
         }
@@ -1139,7 +1139,7 @@ static void olympic_set_rx_mode(struct net_device *dev)
         u8 __iomem *olympic_mmio = olympic_priv->olympic_mmio ; 
         u8 options = 0; 
         u8 __iomem *srb;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         unsigned char dev_mc_address[4] ; 
 
         writel(olympic_priv->srb,olympic_mmio+LAPA);
@@ -1177,11 +1177,11 @@ static void olympic_set_rx_mode(struct net_device *dev)
 
         dev_mc_address[0] = dev_mc_address[1] = dev_mc_address[2] = dev_mc_address[3] = 0 ; 
 
-        netdev_for_each_mc_addr(dmi, dev) {
-                dev_mc_address[0] |= dmi->dmi_addr[2] ; 
-                dev_mc_address[1] |= dmi->dmi_addr[3] ; 
-                dev_mc_address[2] |= dmi->dmi_addr[4] ; 
-                dev_mc_address[3] |= dmi->dmi_addr[5] ; 
+        netdev_for_each_mc_addr(ha, dev) {
+                dev_mc_address[0] |= ha->addr[2];
+                dev_mc_address[1] |= ha->addr[3];
+                dev_mc_address[2] |= ha->addr[4];
+                dev_mc_address[3] |= ha->addr[5];
         }
 
         writeb(SRB_SET_FUNC_ADDRESS,srb+0);
@@ -1239,7 +1239,7 @@ static void olympic_srb_bh(struct net_device *dev)
                                 case 0x00:
                                         break ; 
                                 case 0x01:
-                                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name) ; 
+                                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                                         break ;
                                 case 0x04:
                                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n",dev->name); 
@@ -1266,13 +1266,13 @@ static void olympic_srb_bh(struct net_device *dev)
                                 case 0x00:
                                         break ; 
                                 case 0x01:
-                                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name) ; 
+                                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                                         break ; 
                                 case 0x04:
                                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n",dev->name) ; 
                                         break ; 
                                 case 0x39: /* Must deal with this if individual multicast addresses used */
-                                        printk(KERN_INFO "%s: Group address not found \n",dev->name); 
+                                        printk(KERN_INFO "%s: Group address not found\n",dev->name);
                                         break ;
                                 default:
                                         break ; 
@@ -1287,10 +1287,10 @@ static void olympic_srb_bh(struct net_device *dev)
                         switch (readb(srb+2)) { 
                                 case 0x00:
                                         if (olympic_priv->olympic_message_level)
-                                                printk(KERN_INFO "%s: Functional Address Mask Set \n",dev->name) ; 
+                                                printk(KERN_INFO "%s: Functional Address Mask Set\n",dev->name);
                                         break ;
                                 case 0x01:
-                                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name) ; 
+                                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                                         break ; 
                                 case 0x04:
                                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n",dev->name) ; 
@@ -1310,7 +1310,7 @@ static void olympic_srb_bh(struct net_device *dev)
                                                 printk(KERN_INFO "%s: Read Log issued\n",dev->name) ; 
                                         break ; 
                                 case 0x01:
-                                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name) ; 
+                                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                                         break ; 
                                 case 0x04:
                                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n",dev->name) ; 
@@ -1328,7 +1328,7 @@ static void olympic_srb_bh(struct net_device *dev)
                                                 printk(KERN_INFO "%s: Read Source Routing Counters issued\n",dev->name) ; 
                                         break ; 
                                 case 0x01:
-                                        printk(KERN_WARNING "%s: Unrecognized srb command \n",dev->name) ; 
+                                        printk(KERN_WARNING "%s: Unrecognized srb command\n",dev->name);
                                         break ; 
                                 case 0x04:
                                         printk(KERN_WARNING "%s: Adapter must be open for this operation, doh!!\n",dev->name) ; 
@@ -1404,7 +1404,7 @@ static void olympic_arb_cmd(struct net_device *dev)
                         printk("Loc %d = %02x\n",i,readb(frame_data + i)); 
                 }
 
-                printk("next %04x, fs %02x, len %04x \n",readw(buf_ptr+offsetof(struct mac_receive_buffer,next)), readb(buf_ptr+offsetof(struct mac_receive_buffer,frame_status)), readw(buf_ptr+offsetof(struct mac_receive_buffer,buffer_length))); 
+                printk("next %04x, fs %02x, len %04x\n",readw(buf_ptr+offsetof(struct mac_receive_buffer,next)), readb(buf_ptr+offsetof(struct mac_receive_buffer,frame_status)), readw(buf_ptr+offsetof(struct mac_receive_buffer,buffer_length)));
 }
 #endif 
                 mac_frame = dev_alloc_skb(frame_len) ; 
@@ -1426,7 +1426,7 @@ static void olympic_arb_cmd(struct net_device *dev)
 
                 if (olympic_priv->olympic_network_monitor) { 
                         struct trh_hdr *mac_hdr;
-                        printk(KERN_WARNING "%s: Received MAC Frame, details: \n",dev->name);
+                        printk(KERN_WARNING "%s: Received MAC Frame, details:\n",dev->name);
                         mac_hdr = tr_hdr(mac_frame);
                         printk(KERN_WARNING "%s: MAC Frame Dest. Addr: %pM\n",
                                dev->name, mac_hdr->daddr);
@@ -1489,20 +1489,20 @@ drop_frame:
                         writel(readl(olympic_mmio+BCTL)&~(3<<13),olympic_mmio+BCTL);
                         netif_stop_queue(dev);
                         olympic_priv->srb = readw(olympic_priv->olympic_lap + LAPWWO) ; 
-                        printk(KERN_WARNING "%s: Adapter has been closed \n", dev->name) ; 
+                        printk(KERN_WARNING "%s: Adapter has been closed\n", dev->name);
                 } /* If serious error */
                 
                 if (olympic_priv->olympic_message_level) { 
                         if (lan_status_diff & LSC_SIG_LOSS) 
-                                        printk(KERN_WARNING "%s: No receive signal detected \n", dev->name) ; 
+                                        printk(KERN_WARNING "%s: No receive signal detected\n", dev->name);
                         if (lan_status_diff & LSC_HARD_ERR)
-                                        printk(KERN_INFO "%s: Beaconing \n",dev->name);
+                                        printk(KERN_INFO "%s: Beaconing\n",dev->name);
                         if (lan_status_diff & LSC_SOFT_ERR)
-                                        printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame \n",dev->name);
+                                        printk(KERN_WARNING "%s: Adapter transmitted Soft Error Report Mac Frame\n",dev->name);
                         if (lan_status_diff & LSC_TRAN_BCN) 
                                         printk(KERN_INFO "%s: We are tranmitting the beacon, aaah\n",dev->name);
                         if (lan_status_diff & LSC_SS) 
-                                        printk(KERN_INFO "%s: Single Station on the ring \n", dev->name);
+                                        printk(KERN_INFO "%s: Single Station on the ring\n", dev->name);
                         if (lan_status_diff & LSC_RING_REC)
                                         printk(KERN_INFO "%s: Ring recovery ongoing\n",dev->name);
                         if (lan_status_diff & LSC_FDX_MODE)
@@ -1512,7 +1512,7 @@ drop_frame:
                 if (lan_status_diff & LSC_CO) { 
                                         
                                 if (olympic_priv->olympic_message_level) 
-                                        printk(KERN_INFO "%s: Counter Overflow \n", dev->name);
+                                        printk(KERN_INFO "%s: Counter Overflow\n", dev->name);
                                         
                                 /* Issue READ.LOG command */
 
@@ -1551,7 +1551,7 @@ drop_frame:
         
         }  /* Lan.change.status */
         else
-                printk(KERN_WARNING "%s: Unknown arb command \n", dev->name);
+                printk(KERN_WARNING "%s: Unknown arb command\n", dev->name);
 }
 
 static void olympic_asb_bh(struct net_device *dev) 
@@ -1578,10 +1578,10 @@ static void olympic_asb_bh(struct net_device *dev)
         if (olympic_priv->asb_queued == 2) { 
                 switch (readb(asb_block+2)) {
                         case 0x01:
-                                printk(KERN_WARNING "%s: Unrecognized command code \n", dev->name);
+                                printk(KERN_WARNING "%s: Unrecognized command code\n", dev->name);
                                 break ;
                         case 0x26:
-                                printk(KERN_WARNING "%s: Unrecognized buffer address \n", dev->name);
+                                printk(KERN_WARNING "%s: Unrecognized buffer address\n", dev->name);
                                 break ;
                         case 0xFF:
                                 /* Valid response, everything should be ok again */
diff --git a/drivers/net/tokenring/tms380tr.c b/drivers/net/tokenring/tms380tr.c
index ee71bcfb3753..9fa2c36ff904 100644
--- a/drivers/net/tokenring/tms380tr.c
+++ b/drivers/net/tokenring/tms380tr.c
@@ -1212,17 +1212,17 @@ static void tms380tr_set_multicast_list(struct net_device *dev)
                 }
                 else
                 {
-                        struct dev_mc_list *mclist;
+                        struct netdev_hw_addr *ha;
 
-                        netdev_for_each_mc_addr(mclist, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 ((char *)(&tp->ocpl.FunctAddr))[0] |=
-                                        mclist->dmi_addr[2];
+                                        ha->addr[2];
                                 ((char *)(&tp->ocpl.FunctAddr))[1] |=
-                                        mclist->dmi_addr[3];
+                                        ha->addr[3];
                                 ((char *)(&tp->ocpl.FunctAddr))[2] |=
-                                        mclist->dmi_addr[4];
+                                        ha->addr[4];
                                 ((char *)(&tp->ocpl.FunctAddr))[3] |=
-                                        mclist->dmi_addr[5];
+                                        ha->addr[5];
                         }
                 }
                 tms380tr_exec_cmd(dev, OC_SET_FUNCT_ADDR);
@@ -1391,7 +1391,7 @@ static int tms380tr_bringup_diags(struct net_device *dev)
                         Status &= STS_MASK;
 
                         if(tms380tr_debug > 3)
-                                printk(KERN_DEBUG " %04X \n", Status);
+                                printk(KERN_DEBUG " %04X\n", Status);
                         /* BUD successfully completed */
                         if(Status == STS_INITIALIZE)
                                 return (1);
@@ -1847,7 +1847,7 @@ static void tms380tr_chk_irq(struct net_device *dev)
                         break;
 
                 case DMA_WRITE_ABORT:
-                        printk(KERN_INFO "%s: DMA write operation aborted: \n",
+                        printk(KERN_INFO "%s: DMA write operation aborted:\n",
                                 dev->name);
                         switch (AdapterCheckBlock[1])
                         {
diff --git a/drivers/net/tsi108_eth.c b/drivers/net/tsi108_eth.c
index 647cdd1d4e20..1366541c30a2 100644
--- a/drivers/net/tsi108_eth.c
+++ b/drivers/net/tsi108_eth.c
@@ -263,7 +263,7 @@ static inline void tsi108_write_tbi(struct tsi108_prv_data *data,
                         return;
                 udelay(10);
         }
-        printk(KERN_ERR "%s function time out \n", __func__);
+        printk(KERN_ERR "%s function time out\n", __func__);
 }
 
 static int mii_speed(struct mii_if_info *mii)
@@ -1056,7 +1056,7 @@ static void tsi108_stop_ethernet(struct net_device *dev)
                         return;
                 udelay(10);
         }
-        printk(KERN_ERR "%s function time out \n", __func__);
+        printk(KERN_ERR "%s function time out\n", __func__);
 }
 
 static void tsi108_reset_ether(struct tsi108_prv_data * data)
@@ -1186,15 +1186,15 @@ static void tsi108_set_rx_mode(struct net_device *dev)
 
         if (dev->flags & IFF_ALLMULTI || !netdev_mc_empty(dev)) {
                 int i;
-                struct dev_mc_list *mc;
+                struct netdev_hw_addr *ha;
                 rxcfg |= TSI108_EC_RXCFG_MFE | TSI108_EC_RXCFG_MC_HASH;
 
                 memset(data->mc_hash, 0, sizeof(data->mc_hash));
 
-                netdev_for_each_mc_addr(mc, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         u32 hash, crc;
 
-                        crc = ether_crc(6, mc->dmi_addr);
+                        crc = ether_crc(6, ha->addr);
                         hash = crc >> 23;
                         __set_bit(hash, &data->mc_hash[0]);
                 }
@@ -1233,7 +1233,7 @@ static void tsi108_init_phy(struct net_device *dev)
                 udelay(10);
         }
         if (i == 0)
-                printk(KERN_ERR "%s function time out \n", __func__);
+                printk(KERN_ERR "%s function time out\n", __func__);
 
         if (data->phy_type == TSI108_PHY_BCM54XX) {
                 tsi108_write_mii(data, 0x09, 0x0300);
diff --git a/drivers/net/tulip/de2104x.c b/drivers/net/tulip/de2104x.c
index cb429723b2c8..a68b91764627 100644
--- a/drivers/net/tulip/de2104x.c
+++ b/drivers/net/tulip/de2104x.c
@@ -670,15 +670,15 @@ static void build_setup_frame_hash(u16 *setup_frm, struct net_device *dev)
 {
         struct de_private *de = netdev_priv(dev);
         u16 hash_table[32];
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         int i;
         u16 *eaddrs;
 
         memset(hash_table, 0, sizeof(hash_table));
         set_bit_le(255, hash_table);                    /* Broadcast entry */
         /* This should work on big-endian machines as well. */
-        netdev_for_each_mc_addr(mclist, dev) {
-                int index = ether_crc_le(ETH_ALEN, mclist->dmi_addr) & 0x1ff;
+        netdev_for_each_mc_addr(ha, dev) {
+                int index = ether_crc_le(ETH_ALEN, ha->addr) & 0x1ff;
 
                 set_bit_le(index, hash_table);
         }
@@ -699,13 +699,13 @@ static void build_setup_frame_hash(u16 *setup_frm, struct net_device *dev)
 static void build_setup_frame_perfect(u16 *setup_frm, struct net_device *dev)
 {
         struct de_private *de = netdev_priv(dev);
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         u16 *eaddrs;
 
         /* We have <= 14 addresses so we can use the wonderful
            16 address perfect filtering of the Tulip. */
-        netdev_for_each_mc_addr(mclist, dev) {
-                eaddrs = (u16 *)mclist->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                eaddrs = (u16 *) ha->addr;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
diff --git a/drivers/net/tulip/de4x5.c b/drivers/net/tulip/de4x5.c
index c4ecb9a95409..cac4bcc83187 100644
--- a/drivers/net/tulip/de4x5.c
+++ b/drivers/net/tulip/de4x5.c
@@ -1951,7 +1951,7 @@ static void
 SetMulticastFilter(struct net_device *dev)
 {
     struct de4x5_private *lp = netdev_priv(dev);
-    struct dev_mc_list *dmi;
+    struct netdev_hw_addr *ha;
     u_long iobase = dev->base_addr;
     int i, bit, byte;
     u16 hashcode;
@@ -1966,8 +1966,8 @@ SetMulticastFilter(struct net_device *dev)
     if ((dev->flags & IFF_ALLMULTI) || (netdev_mc_count(dev) > 14)) {
         omr |= OMR_PM;                       /* Pass all multicasts */
     } else if (lp->setup_f == HASH_PERF) {   /* Hash Filtering */
-        netdev_for_each_mc_addr(dmi, dev) {
-            addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+            addrs = ha->addr;
             if ((*addrs & 0x01) == 1) {      /* multicast address? */
                 crc = ether_crc_le(ETH_ALEN, addrs);
                 hashcode = crc & HASH_BITS;  /* hashcode is 9 LSb of CRC */
@@ -1983,8 +1983,8 @@ SetMulticastFilter(struct net_device *dev)
             }
         }
     } else {                                 /* Perfect filtering */
-        netdev_for_each_mc_addr(dmi, dev) {
-            addrs = dmi->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+            addrs = ha->addr;
             for (i=0; i<ETH_ALEN; i++) {
                 *(pa + (i&1)) = *addrs++;
                 if (i & 0x01) pa += 4;
@@ -5077,7 +5077,7 @@ mii_get_phy(struct net_device *dev)
             lp->phy[k].spd.value = GENERIC_VALUE;  /* TX & T4, H/F Duplex    */
             lp->mii_cnt++;
             lp->active++;
-            printk("%s: Using generic MII device control. If the board doesn't operate, \nplease mail the following dump to the author:\n", dev->name);
+            printk("%s: Using generic MII device control. If the board doesn't operate,\nplease mail the following dump to the author:\n", dev->name);
             j = de4x5_debug;
             de4x5_debug |= DEBUG_MII;
             de4x5_dbg_mii(dev, k);
@@ -5337,7 +5337,7 @@ de4x5_dbg_open(struct net_device *dev)
             }
         }
         printk("...0x%8.8x\n", le32_to_cpu(lp->tx_ring[i].buf));
-        printk("Ring size: \nRX: %d\nTX: %d\n",
+        printk("Ring size:\nRX: %d\nTX: %d\n",
                (short)lp->rxRingSize,
                (short)lp->txRingSize);
     }
diff --git a/drivers/net/tulip/dmfe.c b/drivers/net/tulip/dmfe.c
index 95b38d803e9b..a039c8ab98b2 100644
--- a/drivers/net/tulip/dmfe.c
+++ b/drivers/net/tulip/dmfe.c
@@ -1454,7 +1454,7 @@ static void update_cr6(u32 cr6_data, unsigned long ioaddr)
 
 static void dm9132_id_table(struct DEVICE *dev)
 {
-        struct dev_mc_list *mcptr;
+        struct netdev_hw_addr *ha;
         u16 * addrptr;
         unsigned long ioaddr = dev->base_addr+0xc0;             /* ID Table */
         u32 hash_val;
@@ -1478,8 +1478,8 @@ static void dm9132_id_table(struct DEVICE *dev)
         hash_table[3] = 0x8000;
 
         /* the multicast address in Hash Table : 64 bits */
-        netdev_for_each_mc_addr(mcptr, dev) {
-                hash_val = cal_CRC((char *) mcptr->dmi_addr, 6, 0) & 0x3f;
+        netdev_for_each_mc_addr(ha, dev) {
+                hash_val = cal_CRC((char *) ha->addr, 6, 0) & 0x3f;
                 hash_table[hash_val / 16] |= (u16) 1 << (hash_val % 16);
         }
 
@@ -1497,7 +1497,7 @@ static void dm9132_id_table(struct DEVICE *dev)
 static void send_filter_frame(struct DEVICE *dev)
 {
         struct dmfe_board_info *db = netdev_priv(dev);
-        struct dev_mc_list *mcptr;
+        struct netdev_hw_addr *ha;
         struct tx_desc *txptr;
         u16 * addrptr;
         u32 * suptr;
@@ -1520,8 +1520,8 @@ static void send_filter_frame(struct DEVICE *dev)
         *suptr++ = 0xffff;
 
         /* fit the multicast address */
-        netdev_for_each_mc_addr(mcptr, dev) {
-                addrptr = (u16 *) mcptr->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrptr = (u16 *) ha->addr;
                 *suptr++ = addrptr[0];
                 *suptr++ = addrptr[1];
                 *suptr++ = addrptr[2];
diff --git a/drivers/net/tulip/tulip_core.c b/drivers/net/tulip/tulip_core.c
index 7f544ef2f5fc..c4b7cd726b69 100644
--- a/drivers/net/tulip/tulip_core.c
+++ b/drivers/net/tulip/tulip_core.c
@@ -990,15 +990,15 @@ static void build_setup_frame_hash(u16 *setup_frm, struct net_device *dev)
 {
         struct tulip_private *tp = netdev_priv(dev);
         u16 hash_table[32];
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         int i;
         u16 *eaddrs;
 
         memset(hash_table, 0, sizeof(hash_table));
         set_bit_le(255, hash_table);                    /* Broadcast entry */
         /* This should work on big-endian machines as well. */
-        netdev_for_each_mc_addr(mclist, dev) {
-                int index = ether_crc_le(ETH_ALEN, mclist->dmi_addr) & 0x1ff;
+        netdev_for_each_mc_addr(ha, dev) {
+                int index = ether_crc_le(ETH_ALEN, ha->addr) & 0x1ff;
 
                 set_bit_le(index, hash_table);
         }
@@ -1018,13 +1018,13 @@ static void build_setup_frame_hash(u16 *setup_frm, struct net_device *dev)
 static void build_setup_frame_perfect(u16 *setup_frm, struct net_device *dev)
 {
         struct tulip_private *tp = netdev_priv(dev);
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         u16 *eaddrs;
 
         /* We have <= 14 addresses so we can use the wonderful
            16 address perfect filtering of the Tulip. */
-        netdev_for_each_mc_addr(mclist, dev) {
-                eaddrs = (u16 *)mclist->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                eaddrs = (u16 *) ha->addr;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
                 *setup_frm++ = *eaddrs; *setup_frm++ = *eaddrs++;
@@ -1061,7 +1061,7 @@ static void set_rx_mode(struct net_device *dev)
         } else  if (tp->flags & MC_HASH_ONLY) {
                 /* Some work-alikes have only a 64-entry hash filter table. */
                 /* Should verify correctness on big-endian/__powerpc__ */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 if (netdev_mc_count(dev) > 64) {
                         /* Arbitrary non-effective limit. */
                         tp->csr6 |= AcceptAllMulticast;
@@ -1069,18 +1069,21 @@ static void set_rx_mode(struct net_device *dev)
                 } else {
                         u32 mc_filter[2] = {0, 0};               /* Multicast hash filter */
                         int filterbit;
-                        netdev_for_each_mc_addr(mclist, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 if (tp->flags & COMET_MAC_ADDR)
-                                        filterbit = ether_crc_le(ETH_ALEN, mclist->dmi_addr);
+                                        filterbit = ether_crc_le(ETH_ALEN,
+                                                                 ha->addr);
                                 else
-                                        filterbit = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                                        filterbit = ether_crc(ETH_ALEN,
+                                                              ha->addr) >> 26;
                                 filterbit &= 0x3f;
                                 mc_filter[filterbit >> 5] |= 1 << (filterbit & 31);
                                 if (tulip_debug > 2)
                                         dev_info(&dev->dev,
                                                  "Added filter for %pM  %08x bit %d\n",
-                                                 mclist->dmi_addr,
-                                                 ether_crc(ETH_ALEN, mclist->dmi_addr), filterbit);
+                                                 ha->addr,
+                                                 ether_crc(ETH_ALEN, ha->addr),
+                                                 filterbit);
                         }
                         if (mc_filter[0] == tp->mc_filter[0]  &&
                                 mc_filter[1] == tp->mc_filter[1])
diff --git a/drivers/net/tulip/uli526x.c b/drivers/net/tulip/uli526x.c
index a4f09d490531..7063f56640c3 100644
--- a/drivers/net/tulip/uli526x.c
+++ b/drivers/net/tulip/uli526x.c
@@ -1394,7 +1394,7 @@ static void update_cr6(u32 cr6_data, unsigned long ioaddr)
 static void send_filter_frame(struct net_device *dev, int mc_cnt)
 {
         struct uli526x_board_info *db = netdev_priv(dev);
-        struct dev_mc_list *mcptr;
+        struct netdev_hw_addr *ha;
         struct tx_desc *txptr;
         u16 * addrptr;
         u32 * suptr;
@@ -1417,8 +1417,8 @@ static void send_filter_frame(struct net_device *dev, int mc_cnt)
         *suptr++ = 0xffff << FLT_SHIFT;
 
         /* fit the multicast address */
-        netdev_for_each_mc_addr(mcptr, dev) {
-                addrptr = (u16 *) mcptr->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addrptr = (u16 *) ha->addr;
                 *suptr++ = addrptr[0] << FLT_SHIFT;
                 *suptr++ = addrptr[1] << FLT_SHIFT;
                 *suptr++ = addrptr[2] << FLT_SHIFT;
diff --git a/drivers/net/tulip/winbond-840.c b/drivers/net/tulip/winbond-840.c
index 304f43866c44..3e3822c98a0d 100644
--- a/drivers/net/tulip/winbond-840.c
+++ b/drivers/net/tulip/winbond-840.c
@@ -1367,13 +1367,15 @@ static u32 __set_rx_mode(struct net_device *dev)
                 memset(mc_filter, 0xff, sizeof(mc_filter));
                 rx_mode = RxAcceptBroadcast | AcceptMulticast | AcceptMyPhys;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int filterbit = (ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26) ^ 0x3F;
-                        filterbit &= 0x3f;
-                        mc_filter[filterbit >> 5] |= 1 << (filterbit & 31);
+                netdev_for_each_mc_addr(ha, dev) {
+                        int filbit;
+
+                        filbit = (ether_crc(ETH_ALEN, ha->addr) >> 26) ^ 0x3F;
+                        filbit &= 0x3f;
+                        mc_filter[filbit >> 5] |= 1 << (filbit & 31);
                 }
                 rx_mode = RxAcceptBroadcast | AcceptMulticast | AcceptMyPhys;
         }
diff --git a/drivers/net/tulip/xircom_cb.c b/drivers/net/tulip/xircom_cb.c
index acfeeb980562..a439e93be22d 100644
--- a/drivers/net/tulip/xircom_cb.c
+++ b/drivers/net/tulip/xircom_cb.c
@@ -350,9 +350,9 @@ static irqreturn_t xircom_interrupt(int irq, void *dev_instance)
 
 #ifdef DEBUG
         print_binary(status);
-        printk("tx status 0x%08x 0x%08x \n",
+        printk("tx status 0x%08x 0x%08x\n",
                card->tx_buffer[0], card->tx_buffer[4]);
-        printk("rx status 0x%08x 0x%08x \n",
+        printk("rx status 0x%08x 0x%08x\n",
                card->rx_buffer[0], card->rx_buffer[4]);
 #endif
         /* Handle shared irq and hotplug */
@@ -462,7 +462,7 @@ static int xircom_open(struct net_device *dev)
         struct xircom_private *xp = netdev_priv(dev);
         int retval;
         enter("xircom_open");
-        pr_info("xircom cardbus adaptor found, registering as %s, using irq %i \n",
+        pr_info("xircom cardbus adaptor found, registering as %s, using irq %i\n",
                 dev->name, dev->irq);
         retval = request_irq(dev->irq, xircom_interrupt, IRQF_SHARED, dev->name, dev);
         if (retval) {
diff --git a/drivers/net/typhoon.c b/drivers/net/typhoon.c
index cd24e5f2b2a2..3053f85aa066 100644
--- a/drivers/net/typhoon.c
+++ b/drivers/net/typhoon.c
@@ -921,11 +921,11 @@ typhoon_set_rx_mode(struct net_device *dev)
                 /* Too many to match, or accept all multicasts. */
                 filter |= TYPHOON_RX_FILTER_ALL_MCAST;
         } else if (!netdev_mc_empty(dev)) {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit = ether_crc(ETH_ALEN, mclist->dmi_addr) & 0x3f;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit = ether_crc(ETH_ALEN, ha->addr) & 0x3f;
                         mc_filter[bit >> 5] |= 1 << (bit & 0x1f);
                 }
 
diff --git a/drivers/net/ucc_geth.c b/drivers/net/ucc_geth.c
index 1b0aef37e495..081f76bff341 100644
--- a/drivers/net/ucc_geth.c
+++ b/drivers/net/ucc_geth.c
@@ -1999,7 +1999,7 @@ static void ucc_geth_memclean(struct ucc_geth_private *ugeth)
 static void ucc_geth_set_multi(struct net_device *dev)
 {
         struct ucc_geth_private *ugeth;
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
         struct ucc_fast __iomem *uf_regs;
         struct ucc_geth_82xx_address_filtering_pram __iomem *p_82xx_addr_filt;
 
@@ -2028,16 +2028,16 @@ static void ucc_geth_set_multi(struct net_device *dev)
                         out_be32(&p_82xx_addr_filt->gaddr_h, 0x0);
                         out_be32(&p_82xx_addr_filt->gaddr_l, 0x0);
 
-                        netdev_for_each_mc_addr(dmi, dev) {
+                        netdev_for_each_mc_addr(ha, dev) {
                                 /* Only support group multicast for now.
                                  */
-                                if (!(dmi->dmi_addr[0] & 1))
+                                if (!(ha->addr[0] & 1))
                                         continue;
 
                                 /* Ask CPM to run CRC and set bit in
                                  * filter mask.
                                  */
-                                hw_add_addr_in_hash(ugeth, dmi->dmi_addr);
+                                hw_add_addr_in_hash(ugeth, ha->addr);
                         }
                 }
         }
@@ -3883,7 +3883,7 @@ static int ucc_geth_probe(struct of_device* ofdev, const struct of_device_id *ma
         }
 
         if (netif_msg_probe(&debug))
-                printk(KERN_INFO "ucc_geth: UCC%1d at 0x%8x (irq = %d) \n",
+                printk(KERN_INFO "ucc_geth: UCC%1d at 0x%8x (irq = %d)\n",
                         ug_info->uf_info.ucc_num + 1, ug_info->uf_info.regs,
                         ug_info->uf_info.irq);
 
diff --git a/drivers/net/usb/asix.c b/drivers/net/usb/asix.c
index 9e05639435f2..763364f0972e 100644
--- a/drivers/net/usb/asix.c
+++ b/drivers/net/usb/asix.c
@@ -557,16 +557,14 @@ static void asix_set_multicast(struct net_device *net)
                  * for our 8 byte filter buffer
                  * to avoid allocating memory that
                  * is tricky to free later */
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
                 u32 crc_bits;
 
                 memset(data->multi_filter, 0, AX_MCAST_FILTER_SIZE);
 
                 /* Build the multicast hash filter. */
-                netdev_for_each_mc_addr(mc_list, net) {
-                        crc_bits =
-                            ether_crc(ETH_ALEN,
-                                      mc_list->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, net) {
+                        crc_bits = ether_crc(ETH_ALEN, ha->addr) >> 26;
                         data->multi_filter[crc_bits >> 3] |=
                             1 << (crc_bits & 7);
                 }
@@ -793,16 +791,14 @@ static void ax88172_set_multicast(struct net_device *net)
                  * for our 8 byte filter buffer
                  * to avoid allocating memory that
                  * is tricky to free later */
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
                 u32 crc_bits;
 
                 memset(data->multi_filter, 0, AX_MCAST_FILTER_SIZE);
 
                 /* Build the multicast hash filter. */
-                netdev_for_each_mc_addr(mc_list, net) {
-                        crc_bits =
-                            ether_crc(ETH_ALEN,
-                                      mc_list->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, net) {
+                        crc_bits = ether_crc(ETH_ALEN, ha->addr) >> 26;
                         data->multi_filter[crc_bits >> 3] |=
                             1 << (crc_bits & 7);
                 }
diff --git a/drivers/net/usb/catc.c b/drivers/net/usb/catc.c
index 96f1ebe0d348..0c48ff97f47c 100644
--- a/drivers/net/usb/catc.c
+++ b/drivers/net/usb/catc.c
@@ -629,7 +629,7 @@ static void catc_multicast(unsigned char *addr, u8 *multicast)
 static void catc_set_multicast_list(struct net_device *netdev)
 {
         struct catc *catc = netdev_priv(netdev);
-        struct dev_mc_list *mc;
+        struct netdev_hw_addr *ha;
         u8 broadcast[6];
         u8 rx = RxEnable | RxPolarity | RxMultiCast;
 
@@ -647,8 +647,8 @@ static void catc_set_multicast_list(struct net_device *netdev)
         if (netdev->flags & IFF_ALLMULTI) {
                 memset(catc->multicast, 0xff, 64);
         } else {
-                netdev_for_each_mc_addr(mc, netdev) {
-                        u32 crc = ether_crc_le(6, mc->dmi_addr);
+                netdev_for_each_mc_addr(ha, netdev) {
+                        u32 crc = ether_crc_le(6, ha->addr);
                         if (!catc->is_f5u011) {
                                 catc->multicast[(crc >> 3) & 0x3f] |= 1 << (crc & 7);
                         } else {
diff --git a/drivers/net/usb/dm9601.c b/drivers/net/usb/dm9601.c
index 269339769f47..4eb1fb31ff0b 100644
--- a/drivers/net/usb/dm9601.c
+++ b/drivers/net/usb/dm9601.c
@@ -386,10 +386,10 @@ static void dm9601_set_multicast(struct net_device *net)
                    netdev_mc_count(net) > DM_MAX_MCAST) {
                 rx_ctl |= 0x04;
         } else if (!netdev_mc_empty(net)) {
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
 
-                netdev_for_each_mc_addr(mc_list, net) {
-                        u32 crc = ether_crc(ETH_ALEN, mc_list->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, net) {
+                        u32 crc = ether_crc(ETH_ALEN, ha->addr) >> 26;
                         hashes[crc >> 3] |= 1 << (crc & 0x7);
                 }
         }
diff --git a/drivers/net/usb/mcs7830.c b/drivers/net/usb/mcs7830.c
index 70978219e98a..0dc92c8ba4b2 100644
--- a/drivers/net/usb/mcs7830.c
+++ b/drivers/net/usb/mcs7830.c
@@ -452,12 +452,12 @@ static void mcs7830_data_set_multicast(struct net_device *net)
                  * for our 8 byte filter buffer
                  * to avoid allocating memory that
                  * is tricky to free later */
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
                 u32 crc_bits;
 
                 /* Build the multicast hash filter. */
-                netdev_for_each_mc_addr(mc_list, net) {
-                        crc_bits = ether_crc(ETH_ALEN, mc_list->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, net) {
+                        crc_bits = ether_crc(ETH_ALEN, ha->addr) >> 26;
                         data->multi_filter[crc_bits >> 3] |= 1 << (crc_bits & 7);
                 }
         }
diff --git a/drivers/net/usb/smsc75xx.c b/drivers/net/usb/smsc75xx.c
index 300e3e764fa2..b8b00d06ea79 100644
--- a/drivers/net/usb/smsc75xx.c
+++ b/drivers/net/usb/smsc75xx.c
@@ -444,14 +444,14 @@ static void smsc75xx_set_multicast(struct net_device *netdev)
                 netif_dbg(dev, drv, dev->net, "receive all multicast enabled");
                 pdata->rfe_ctl |= RFE_CTL_AM | RFE_CTL_DPF;
         } else if (!netdev_mc_empty(dev->net)) {
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
 
                 netif_dbg(dev, drv, dev->net, "receive multicast hash filter");
 
                 pdata->rfe_ctl |= RFE_CTL_MHF | RFE_CTL_DPF;
 
-                netdev_for_each_mc_addr(mc_list, netdev) {
-                        u32 bitnum = smsc75xx_hash(mc_list->dmi_addr);
+                netdev_for_each_mc_addr(ha, netdev) {
+                        u32 bitnum = smsc75xx_hash(ha->addr);
                         pdata->multicast_hash_table[bitnum / 32] |=
                                 (1 << (bitnum % 32));
                 }
diff --git a/drivers/net/usb/smsc95xx.c b/drivers/net/usb/smsc95xx.c
index 73f9a31cf94d..ccd55ca3a06a 100644
--- a/drivers/net/usb/smsc95xx.c
+++ b/drivers/net/usb/smsc95xx.c
@@ -384,13 +384,13 @@ static void smsc95xx_set_multicast(struct net_device *netdev)
                 pdata->mac_cr |= MAC_CR_MCPAS_;
                 pdata->mac_cr &= ~(MAC_CR_PRMS_ | MAC_CR_HPFILT_);
         } else if (!netdev_mc_empty(dev->net)) {
-                struct dev_mc_list *mc_list;
+                struct netdev_hw_addr *ha;
 
                 pdata->mac_cr |= MAC_CR_HPFILT_;
                 pdata->mac_cr &= ~(MAC_CR_PRMS_ | MAC_CR_MCPAS_);
 
-                netdev_for_each_mc_addr(mc_list, netdev) {
-                        u32 bitnum = smsc95xx_hash(mc_list->dmi_addr);
+                netdev_for_each_mc_addr(ha, netdev) {
+                        u32 bitnum = smsc95xx_hash(ha->addr);
                         u32 mask = 0x01 << (bitnum & 0x1F);
                         if (bitnum & 0x20)
                                 hash_hi |= mask;
diff --git a/drivers/net/usb/usbnet.c b/drivers/net/usb/usbnet.c
index 17b6a62d206e..c0f64392627c 100644
--- a/drivers/net/usb/usbnet.c
+++ b/drivers/net/usb/usbnet.c
@@ -1068,12 +1068,15 @@ netdev_tx_t usbnet_start_xmit (struct sk_buff *skb,
          * NOTE:  strictly conforming cdc-ether devices should expect
          * the ZLP here, but ignore the one-byte packet.
          */
-        if (!(info->flags & FLAG_SEND_ZLP) && (length % dev->maxpacket) == 0) {
-                urb->transfer_buffer_length++;
-                if (skb_tailroom(skb)) {
-                        skb->data[skb->len] = 0;
-                        __skb_put(skb, 1);
-                }
+        if (length % dev->maxpacket == 0) {
+                if (!(info->flags & FLAG_SEND_ZLP)) {
+                        urb->transfer_buffer_length++;
+                        if (skb_tailroom(skb)) {
+                                skb->data[skb->len] = 0;
+                                __skb_put(skb, 1);
+                        }
+                } else
+                        urb->transfer_flags |= URB_ZERO_PACKET;
         }
 
         spin_lock_irqsave(&dev->txq.lock, flags);
diff --git a/drivers/net/via-rhine.c b/drivers/net/via-rhine.c
index 50f881aa3939..d9133c62a2f5 100644
--- a/drivers/net/via-rhine.c
+++ b/drivers/net/via-rhine.c
@@ -1704,11 +1704,11 @@ static void rhine_set_rx_mode(struct net_device *dev)
                 iowrite32(0xffffffff, ioaddr + MulticastFilter1);
                 rx_mode = 0x0C;
         } else {
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
 
                 memset(mc_filter, 0, sizeof(mc_filter));
-                netdev_for_each_mc_addr(mclist, dev) {
-                        int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+                netdev_for_each_mc_addr(ha, dev) {
+                        int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
 
                         mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
                 }
diff --git a/drivers/net/via-velocity.c b/drivers/net/via-velocity.c
index bc278d4ee89d..616f8c92b745 100644
--- a/drivers/net/via-velocity.c
+++ b/drivers/net/via-velocity.c
@@ -719,30 +719,30 @@ static u32 mii_check_media_mode(struct mac_regs __iomem *regs)
         u32 status = 0;
         u16 ANAR;
 
-        if (!MII_REG_BITS_IS_ON(BMSR_LNK, MII_REG_BMSR, regs))
+        if (!MII_REG_BITS_IS_ON(BMSR_LSTATUS, MII_BMSR, regs))
                 status |= VELOCITY_LINK_FAIL;
 
-        if (MII_REG_BITS_IS_ON(G1000CR_1000FD, MII_REG_G1000CR, regs))
+        if (MII_REG_BITS_IS_ON(ADVERTISE_1000FULL, MII_CTRL1000, regs))
                 status |= VELOCITY_SPEED_1000 | VELOCITY_DUPLEX_FULL;
-        else if (MII_REG_BITS_IS_ON(G1000CR_1000, MII_REG_G1000CR, regs))
+        else if (MII_REG_BITS_IS_ON(ADVERTISE_1000HALF, MII_CTRL1000, regs))
                 status |= (VELOCITY_SPEED_1000);
         else {
-                velocity_mii_read(regs, MII_REG_ANAR, &ANAR);
-                if (ANAR & ANAR_TXFD)
+                velocity_mii_read(regs, MII_ADVERTISE, &ANAR);
+                if (ANAR & ADVERTISE_100FULL)
                         status |= (VELOCITY_SPEED_100 | VELOCITY_DUPLEX_FULL);
-                else if (ANAR & ANAR_TX)
+                else if (ANAR & ADVERTISE_100HALF)
                         status |= VELOCITY_SPEED_100;
-                else if (ANAR & ANAR_10FD)
+                else if (ANAR & ADVERTISE_10FULL)
                         status |= (VELOCITY_SPEED_10 | VELOCITY_DUPLEX_FULL);
                 else
                         status |= (VELOCITY_SPEED_10);
         }
 
-        if (MII_REG_BITS_IS_ON(BMCR_AUTO, MII_REG_BMCR, regs)) {
-                velocity_mii_read(regs, MII_REG_ANAR, &ANAR);
-                if ((ANAR & (ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10))
-                    == (ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10)) {
-                        if (MII_REG_BITS_IS_ON(G1000CR_1000 | G1000CR_1000FD, MII_REG_G1000CR, regs))
+        if (MII_REG_BITS_IS_ON(BMCR_ANENABLE, MII_BMCR, regs)) {
+                velocity_mii_read(regs, MII_ADVERTISE, &ANAR);
+                if ((ANAR & (ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF))
+                    == (ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF)) {
+                        if (MII_REG_BITS_IS_ON(ADVERTISE_1000HALF | ADVERTISE_1000FULL, MII_CTRL1000, regs))
                                 status |= VELOCITY_AUTONEG_ENABLE;
                 }
         }
@@ -801,23 +801,23 @@ static void set_mii_flow_control(struct velocity_info *vptr)
         /*Enable or Disable PAUSE in ANAR */
         switch (vptr->options.flow_cntl) {
         case FLOW_CNTL_TX:
-                MII_REG_BITS_OFF(ANAR_PAUSE, MII_REG_ANAR, vptr->mac_regs);
-                MII_REG_BITS_ON(ANAR_ASMDIR, MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_PAUSE_CAP, MII_ADVERTISE, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_PAUSE_ASYM, MII_ADVERTISE, vptr->mac_regs);
                 break;
 
         case FLOW_CNTL_RX:
-                MII_REG_BITS_ON(ANAR_PAUSE, MII_REG_ANAR, vptr->mac_regs);
-                MII_REG_BITS_ON(ANAR_ASMDIR, MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_PAUSE_CAP, MII_ADVERTISE, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_PAUSE_ASYM, MII_ADVERTISE, vptr->mac_regs);
                 break;
 
         case FLOW_CNTL_TX_RX:
-                MII_REG_BITS_ON(ANAR_PAUSE, MII_REG_ANAR, vptr->mac_regs);
-                MII_REG_BITS_OFF(ANAR_ASMDIR, MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_PAUSE_CAP, MII_ADVERTISE, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_PAUSE_ASYM, MII_ADVERTISE, vptr->mac_regs);
                 break;
 
         case FLOW_CNTL_DISABLE:
-                MII_REG_BITS_OFF(ANAR_PAUSE, MII_REG_ANAR, vptr->mac_regs);
-                MII_REG_BITS_OFF(ANAR_ASMDIR, MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_PAUSE_CAP, MII_ADVERTISE, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_PAUSE_ASYM, MII_ADVERTISE, vptr->mac_regs);
                 break;
         default:
                 break;
@@ -832,10 +832,10 @@ static void set_mii_flow_control(struct velocity_info *vptr)
  */
 static void mii_set_auto_on(struct velocity_info *vptr)
 {
-        if (MII_REG_BITS_IS_ON(BMCR_AUTO, MII_REG_BMCR, vptr->mac_regs))
-                MII_REG_BITS_ON(BMCR_REAUTO, MII_REG_BMCR, vptr->mac_regs);
+        if (MII_REG_BITS_IS_ON(BMCR_ANENABLE, MII_BMCR, vptr->mac_regs))
+                MII_REG_BITS_ON(BMCR_ANRESTART, MII_BMCR, vptr->mac_regs);
         else
-                MII_REG_BITS_ON(BMCR_AUTO, MII_REG_BMCR, vptr->mac_regs);
+                MII_REG_BITS_ON(BMCR_ANENABLE, MII_BMCR, vptr->mac_regs);
 }
 
 static u32 check_connection_type(struct mac_regs __iomem *regs)
@@ -860,11 +860,11 @@ static u32 check_connection_type(struct mac_regs __iomem *regs)
         else
                 status |= VELOCITY_SPEED_100;
 
-        if (MII_REG_BITS_IS_ON(BMCR_AUTO, MII_REG_BMCR, regs)) {
-                velocity_mii_read(regs, MII_REG_ANAR, &ANAR);
-                if ((ANAR & (ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10))
-                    == (ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10)) {
-                        if (MII_REG_BITS_IS_ON(G1000CR_1000 | G1000CR_1000FD, MII_REG_G1000CR, regs))
+        if (MII_REG_BITS_IS_ON(BMCR_ANENABLE, MII_BMCR, regs)) {
+                velocity_mii_read(regs, MII_ADVERTISE, &ANAR);
+                if ((ANAR & (ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF))
+                    == (ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF)) {
+                        if (MII_REG_BITS_IS_ON(ADVERTISE_1000HALF | ADVERTISE_1000FULL, MII_CTRL1000, regs))
                                 status |= VELOCITY_AUTONEG_ENABLE;
                 }
         }
@@ -905,7 +905,7 @@ static int velocity_set_media_mode(struct velocity_info *vptr, u32 mii_status)
          */
 
         if (PHYID_GET_PHY_ID(vptr->phy_id) == PHYID_CICADA_CS8201)
-                MII_REG_BITS_ON(AUXCR_MDPPS, MII_REG_AUXCR, vptr->mac_regs);
+                MII_REG_BITS_ON(AUXCR_MDPPS, MII_NCONFIG, vptr->mac_regs);
 
         /*
          *      If connection type is AUTO
@@ -915,9 +915,9 @@ static int velocity_set_media_mode(struct velocity_info *vptr, u32 mii_status)
                 /* clear force MAC mode bit */
                 BYTE_REG_BITS_OFF(CHIPGCR_FCMODE, &regs->CHIPGCR);
                 /* set duplex mode of MAC according to duplex mode of MII */
-                MII_REG_BITS_ON(ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10, MII_REG_ANAR, vptr->mac_regs);
-                MII_REG_BITS_ON(G1000CR_1000FD | G1000CR_1000, MII_REG_G1000CR, vptr->mac_regs);
-                MII_REG_BITS_ON(BMCR_SPEED1G, MII_REG_BMCR, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF, MII_ADVERTISE, vptr->mac_regs);
+                MII_REG_BITS_ON(ADVERTISE_1000FULL | ADVERTISE_1000HALF, MII_CTRL1000, vptr->mac_regs);
+                MII_REG_BITS_ON(BMCR_SPEED1000, MII_BMCR, vptr->mac_regs);
 
                 /* enable AUTO-NEGO mode */
                 mii_set_auto_on(vptr);
@@ -952,31 +952,31 @@ static int velocity_set_media_mode(struct velocity_info *vptr, u32 mii_status)
                                 BYTE_REG_BITS_ON(TCR_TB2BDIS, &regs->TCR);
                 }
 
-                MII_REG_BITS_OFF(G1000CR_1000FD | G1000CR_1000, MII_REG_G1000CR, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_1000FULL | ADVERTISE_1000HALF, MII_CTRL1000, vptr->mac_regs);
 
                 if (!(mii_status & VELOCITY_DUPLEX_FULL) && (mii_status & VELOCITY_SPEED_10))
                         BYTE_REG_BITS_OFF(TESTCFG_HBDIS, &regs->TESTCFG);
                 else
                         BYTE_REG_BITS_ON(TESTCFG_HBDIS, &regs->TESTCFG);
 
-                /* MII_REG_BITS_OFF(BMCR_SPEED1G, MII_REG_BMCR, vptr->mac_regs); */
-                velocity_mii_read(vptr->mac_regs, MII_REG_ANAR, &ANAR);
-                ANAR &= (~(ANAR_TXFD | ANAR_TX | ANAR_10FD | ANAR_10));
+                /* MII_REG_BITS_OFF(BMCR_SPEED1000, MII_BMCR, vptr->mac_regs); */
+                velocity_mii_read(vptr->mac_regs, MII_ADVERTISE, &ANAR);
+                ANAR &= (~(ADVERTISE_100FULL | ADVERTISE_100HALF | ADVERTISE_10FULL | ADVERTISE_10HALF));
                 if (mii_status & VELOCITY_SPEED_100) {
                         if (mii_status & VELOCITY_DUPLEX_FULL)
-                                ANAR |= ANAR_TXFD;
+                                ANAR |= ADVERTISE_100FULL;
                         else
-                                ANAR |= ANAR_TX;
+                                ANAR |= ADVERTISE_100HALF;
                 } else {
                         if (mii_status & VELOCITY_DUPLEX_FULL)
-                                ANAR |= ANAR_10FD;
+                                ANAR |= ADVERTISE_10FULL;
                         else
-                                ANAR |= ANAR_10;
+                                ANAR |= ADVERTISE_10HALF;
                 }
-                velocity_mii_write(vptr->mac_regs, MII_REG_ANAR, ANAR);
+                velocity_mii_write(vptr->mac_regs, MII_ADVERTISE, ANAR);
                 /* enable AUTO-NEGO mode */
                 mii_set_auto_on(vptr);
-                /* MII_REG_BITS_ON(BMCR_AUTO, MII_REG_BMCR, vptr->mac_regs); */
+                /* MII_REG_BITS_ON(BMCR_ANENABLE, MII_BMCR, vptr->mac_regs); */
         }
         /* vptr->mii_status=mii_check_media_mode(vptr->mac_regs); */
         /* vptr->mii_status=check_connection_type(vptr->mac_regs); */
@@ -1126,7 +1126,7 @@ static void velocity_set_multi(struct net_device *dev)
         struct mac_regs __iomem *regs = vptr->mac_regs;
         u8 rx_mode;
         int i;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
 
         if (dev->flags & IFF_PROMISC) { /* Set promiscuous. */
                 writel(0xffffffff, &regs->MARCAM[0]);
@@ -1142,8 +1142,8 @@ static void velocity_set_multi(struct net_device *dev)
                 mac_get_cam_mask(regs, vptr->mCAMmask);
 
                 i = 0;
-                netdev_for_each_mc_addr(mclist, dev) {
-                        mac_set_cam(regs, i + offset, mclist->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev) {
+                        mac_set_cam(regs, i + offset, ha->addr);
                         vptr->mCAMmask[(offset + i) / 8] |= 1 << ((offset + i) & 7);
                         i++;
                 }
@@ -1178,36 +1178,36 @@ static void mii_init(struct velocity_info *vptr, u32 mii_status)
                 /*
                  *      Reset to hardware default
                  */
-                MII_REG_BITS_OFF((ANAR_ASMDIR | ANAR_PAUSE), MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_OFF((ADVERTISE_PAUSE_ASYM | ADVERTISE_PAUSE_CAP), MII_ADVERTISE, vptr->mac_regs);
                 /*
                  *      Turn on ECHODIS bit in NWay-forced full mode and turn it
                  *      off it in NWay-forced half mode for NWay-forced v.s.
                  *      legacy-forced issue.
                  */
                 if (vptr->mii_status & VELOCITY_DUPLEX_FULL)
-                        MII_REG_BITS_ON(TCSR_ECHODIS, MII_REG_TCSR, vptr->mac_regs);
+                        MII_REG_BITS_ON(TCSR_ECHODIS, MII_SREVISION, vptr->mac_regs);
                 else
-                        MII_REG_BITS_OFF(TCSR_ECHODIS, MII_REG_TCSR, vptr->mac_regs);
+                        MII_REG_BITS_OFF(TCSR_ECHODIS, MII_SREVISION, vptr->mac_regs);
                 /*
                  *      Turn on Link/Activity LED enable bit for CIS8201
                  */
-                MII_REG_BITS_ON(PLED_LALBE, MII_REG_PLED, vptr->mac_regs);
+                MII_REG_BITS_ON(PLED_LALBE, MII_TPISTATUS, vptr->mac_regs);
                 break;
         case PHYID_VT3216_32BIT:
         case PHYID_VT3216_64BIT:
                 /*
                  *      Reset to hardware default
                  */
-                MII_REG_BITS_ON((ANAR_ASMDIR | ANAR_PAUSE), MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_ON((ADVERTISE_PAUSE_ASYM | ADVERTISE_PAUSE_CAP), MII_ADVERTISE, vptr->mac_regs);
                 /*
                  *      Turn on ECHODIS bit in NWay-forced full mode and turn it
                  *      off it in NWay-forced half mode for NWay-forced v.s.
                  *      legacy-forced issue
                  */
                 if (vptr->mii_status & VELOCITY_DUPLEX_FULL)
-                        MII_REG_BITS_ON(TCSR_ECHODIS, MII_REG_TCSR, vptr->mac_regs);
+                        MII_REG_BITS_ON(TCSR_ECHODIS, MII_SREVISION, vptr->mac_regs);
                 else
-                        MII_REG_BITS_OFF(TCSR_ECHODIS, MII_REG_TCSR, vptr->mac_regs);
+                        MII_REG_BITS_OFF(TCSR_ECHODIS, MII_SREVISION, vptr->mac_regs);
                 break;
 
         case PHYID_MARVELL_1000:
@@ -1219,15 +1219,15 @@ static void mii_init(struct velocity_info *vptr, u32 mii_status)
                 /*
                  *      Reset to hardware default
                  */
-                MII_REG_BITS_ON((ANAR_ASMDIR | ANAR_PAUSE), MII_REG_ANAR, vptr->mac_regs);
+                MII_REG_BITS_ON((ADVERTISE_PAUSE_ASYM | ADVERTISE_PAUSE_CAP), MII_ADVERTISE, vptr->mac_regs);
                 break;
         default:
                 ;
         }
-        velocity_mii_read(vptr->mac_regs, MII_REG_BMCR, &BMCR);
-        if (BMCR & BMCR_ISO) {
-                BMCR &= ~BMCR_ISO;
-                velocity_mii_write(vptr->mac_regs, MII_REG_BMCR, BMCR);
+        velocity_mii_read(vptr->mac_regs, MII_BMCR, &BMCR);
+        if (BMCR & BMCR_ISOLATE) {
+                BMCR &= ~BMCR_ISOLATE;
+                velocity_mii_write(vptr->mac_regs, MII_BMCR, BMCR);
         }
 }
 
@@ -2953,13 +2953,13 @@ static int velocity_set_wol(struct velocity_info *vptr)
 
         if (vptr->mii_status & VELOCITY_AUTONEG_ENABLE) {
                 if (PHYID_GET_PHY_ID(vptr->phy_id) == PHYID_CICADA_CS8201)
-                        MII_REG_BITS_ON(AUXCR_MDPPS, MII_REG_AUXCR, vptr->mac_regs);
+                        MII_REG_BITS_ON(AUXCR_MDPPS, MII_NCONFIG, vptr->mac_regs);
 
-                MII_REG_BITS_OFF(G1000CR_1000FD | G1000CR_1000, MII_REG_G1000CR, vptr->mac_regs);
+                MII_REG_BITS_OFF(ADVERTISE_1000FULL | ADVERTISE_1000HALF, MII_CTRL1000, vptr->mac_regs);
         }
 
         if (vptr->mii_status & VELOCITY_SPEED_1000)
-                MII_REG_BITS_ON(BMCR_REAUTO, MII_REG_BMCR, vptr->mac_regs);
+                MII_REG_BITS_ON(BMCR_ANRESTART, MII_BMCR, vptr->mac_regs);
 
         BYTE_REG_BITS_ON(CHIPGCR_FCMODE, &regs->CHIPGCR);
 
diff --git a/drivers/net/via-velocity.h b/drivers/net/via-velocity.h
index ef4a0f64ba16..c38191179fae 100644
--- a/drivers/net/via-velocity.h
+++ b/drivers/net/via-velocity.h
@@ -1240,86 +1240,16 @@ struct velocity_context {
         u32 pattern[8];
 };
 
-
-/*
- *      MII registers.
- */
-
-
 /*
  *      Registers in the MII (offset unit is WORD)
  */
 
-#define MII_REG_BMCR        0x00        // physical address
-#define MII_REG_BMSR        0x01        //
-#define MII_REG_PHYID1      0x02        // OUI
-#define MII_REG_PHYID2      0x03        // OUI + Module ID + REV ID
-#define MII_REG_ANAR        0x04        //
-#define MII_REG_ANLPAR      0x05        //
-#define MII_REG_G1000CR     0x09        //
-#define MII_REG_G1000SR     0x0A        //
-#define MII_REG_MODCFG      0x10        //
-#define MII_REG_TCSR        0x16        //
-#define MII_REG_PLED        0x1B        //
-// NS, MYSON only
-#define MII_REG_PCR         0x17        //
-// ESI only
-#define MII_REG_PCSR        0x17        //
-#define MII_REG_AUXCR       0x1C        //
-
 // Marvell 88E1000/88E1000S
 #define MII_REG_PSCR        0x10        // PHY specific control register
 
 //
-// Bits in the BMCR register
-//
-#define BMCR_RESET          0x8000      //
-#define BMCR_LBK            0x4000      //
-#define BMCR_SPEED100       0x2000      //
-#define BMCR_AUTO           0x1000      //
-#define BMCR_PD             0x0800      //
-#define BMCR_ISO            0x0400      //
-#define BMCR_REAUTO         0x0200      //
-#define BMCR_FDX            0x0100      //
-#define BMCR_SPEED1G        0x0040      //
-//
-// Bits in the BMSR register
-//
-#define BMSR_AUTOCM         0x0020      //
-#define BMSR_LNK            0x0004      //
-
-//
-// Bits in the ANAR register
-//
-#define ANAR_ASMDIR         0x0800      // Asymmetric PAUSE support
-#define ANAR_PAUSE          0x0400      // Symmetric PAUSE Support
-#define ANAR_T4             0x0200      //
-#define ANAR_TXFD           0x0100      //
-#define ANAR_TX             0x0080      //
-#define ANAR_10FD           0x0040      //
-#define ANAR_10             0x0020      //
-//
-// Bits in the ANLPAR register
-//
-#define ANLPAR_ASMDIR       0x0800      // Asymmetric PAUSE support
-#define ANLPAR_PAUSE        0x0400      // Symmetric PAUSE Support
-#define ANLPAR_T4           0x0200      //
-#define ANLPAR_TXFD         0x0100      //
-#define ANLPAR_TX           0x0080      //
-#define ANLPAR_10FD         0x0040      //
-#define ANLPAR_10           0x0020      //
-
-//
-// Bits in the G1000CR register
-//
-#define G1000CR_1000FD      0x0200      // PHY is 1000-T Full-duplex capable
-#define G1000CR_1000        0x0100      // PHY is 1000-T Half-duplex capable
-
-//
-// Bits in the G1000SR register
+// Bits in the Silicon revision register
 //
-#define G1000SR_1000FD      0x0800      // LP PHY is 1000-T Full-duplex capable
-#define G1000SR_1000        0x0400      // LP PHY is 1000-T Half-duplex capable
 
 #define TCSR_ECHODIS        0x2000      //
 #define AUXCR_MDPPS         0x0004      //
@@ -1338,7 +1268,6 @@ struct velocity_context {
 
 #define PHYID_REV_ID_MASK   0x0000000FUL
 
-#define PHYID_GET_PHY_REV_ID(i)     ((i) & PHYID_REV_ID_MASK)
 #define PHYID_GET_PHY_ID(i)         ((i) & ~PHYID_REV_ID_MASK)
 
 #define MII_REG_BITS_ON(x,i,p) do {\
@@ -1362,8 +1291,8 @@ struct velocity_context {
 
 #define MII_GET_PHY_ID(p) ({\
     u32 id;\
-    velocity_mii_read((p),MII_REG_PHYID2,(u16 *) &id);\
-    velocity_mii_read((p),MII_REG_PHYID1,((u16 *) &id)+1);\
+    velocity_mii_read((p),MII_PHYSID2,(u16 *) &id);\
+    velocity_mii_read((p),MII_PHYSID1,((u16 *) &id)+1);\
     (id);})
 
 /*
diff --git a/drivers/net/virtio_net.c b/drivers/net/virtio_net.c
index 25dc77ccbf58..ecec9a8527f3 100644
--- a/drivers/net/virtio_net.c
+++ b/drivers/net/virtio_net.c
@@ -326,6 +326,7 @@ static int add_recvbuf_small(struct virtnet_info *vi, gfp_t gfp)
         struct scatterlist sg[2];
         int err;
 
+        sg_init_table(sg, 2);
         skb = netdev_alloc_skb_ip_align(vi->dev, MAX_PACKET_LEN);
         if (unlikely(!skb))
                 return -ENOMEM;
@@ -351,6 +352,7 @@ static int add_recvbuf_big(struct virtnet_info *vi, gfp_t gfp)
         char *p;
         int i, err, offset;
 
+        sg_init_table(sg, MAX_SKB_FRAGS + 2);
         /* page in sg[MAX_SKB_FRAGS + 1] is list tail */
         for (i = MAX_SKB_FRAGS + 1; i > 1; --i) {
                 first = get_a_page(vi, gfp);
@@ -719,7 +721,6 @@ static void virtnet_set_rx_mode(struct net_device *dev)
         struct scatterlist sg[2];
         u8 promisc, allmulti;
         struct virtio_net_ctrl_mac *mac_data;
-        struct dev_addr_list *addr;
         struct netdev_hw_addr *ha;
         int uc_count;
         int mc_count;
@@ -776,8 +777,8 @@ static void virtnet_set_rx_mode(struct net_device *dev)
 
         mac_data->entries = mc_count;
         i = 0;
-        netdev_for_each_mc_addr(addr, dev)
-                memcpy(&mac_data->macs[i++][0], addr->da_addr, ETH_ALEN);
+        netdev_for_each_mc_addr(ha, dev)
+                memcpy(&mac_data->macs[i++][0], ha->addr, ETH_ALEN);
 
         sg_set_buf(&sg[1], mac_data,
                    sizeof(mac_data->entries) + (mc_count * ETH_ALEN));
diff --git a/drivers/net/vmxnet3/vmxnet3_drv.c b/drivers/net/vmxnet3/vmxnet3_drv.c
index cff3485d9673..58dfa367bf86 100644
--- a/drivers/net/vmxnet3/vmxnet3_drv.c
+++ b/drivers/net/vmxnet3/vmxnet3_drv.c
@@ -1675,11 +1675,11 @@ vmxnet3_copy_mc(struct net_device *netdev)
                 /* We may be called with BH disabled */
                 buf = kmalloc(sz, GFP_ATOMIC);
                 if (buf) {
-                        struct dev_mc_list *mc;
+                        struct netdev_hw_addr *ha;
                         int i = 0;
 
-                        netdev_for_each_mc_addr(mc, netdev)
-                                memcpy(buf + i++ * ETH_ALEN, mc->dmi_addr,
+                        netdev_for_each_mc_addr(ha, netdev)
+                                memcpy(buf + i++ * ETH_ALEN, ha->addr,
                                        ETH_ALEN);
                 }
         }
diff --git a/drivers/net/vxge/vxge-config.c b/drivers/net/vxge/vxge-config.c
index 32a75fa935ed..ec4408ceef18 100644
--- a/drivers/net/vxge/vxge-config.c
+++ b/drivers/net/vxge/vxge-config.c
@@ -356,8 +356,10 @@ __vxge_hw_device_access_rights_get(u32 host_type, u32 func_id)
 
         switch (host_type) {
         case VXGE_HW_NO_MR_NO_SR_NORMAL_FUNCTION:
-                access_rights |= VXGE_HW_DEVICE_ACCESS_RIGHT_MRPCIM |
-                                VXGE_HW_DEVICE_ACCESS_RIGHT_SRPCIM;
+                if (func_id == 0) {
+                        access_rights |= VXGE_HW_DEVICE_ACCESS_RIGHT_MRPCIM |
+                                        VXGE_HW_DEVICE_ACCESS_RIGHT_SRPCIM;
+                }
                 break;
         case VXGE_HW_MR_NO_SR_VH0_BASE_FUNCTION:
                 access_rights |= VXGE_HW_DEVICE_ACCESS_RIGHT_MRPCIM |
@@ -1217,14 +1219,13 @@ __vxge_hw_ring_mempool_item_alloc(struct vxge_hw_mempool *mempoolh,
 }
 
 /*
- * __vxge_hw_ring_initial_replenish - Initial replenish of RxDs
+ * __vxge_hw_ring_replenish - Initial replenish of RxDs
  * This function replenishes the RxDs from reserve array to work array
  */
 enum vxge_hw_status
-vxge_hw_ring_replenish(struct __vxge_hw_ring *ring, u16 min_flag)
+vxge_hw_ring_replenish(struct __vxge_hw_ring *ring)
 {
         void *rxd;
-        int i = 0;
         struct __vxge_hw_channel *channel;
         enum vxge_hw_status status = VXGE_HW_OK;
 
@@ -1245,11 +1246,6 @@ vxge_hw_ring_replenish(struct __vxge_hw_ring *ring, u16 min_flag)
                 }
 
                 vxge_hw_ring_rxd_post(ring, rxd);
-                if (min_flag) {
-                        i++;
-                        if (i == VXGE_HW_RING_MIN_BUFF_ALLOCATION)
-                                break;
-                }
         }
         status = VXGE_HW_OK;
 exit:
@@ -1354,7 +1350,7 @@ __vxge_hw_ring_create(struct __vxge_hw_vpath_handle *vp,
          * Currently we don't have a case when the 1) is done without the 2).
          */
         if (ring->rxd_init) {
-                status = vxge_hw_ring_replenish(ring, 1);
+                status = vxge_hw_ring_replenish(ring);
                 if (status != VXGE_HW_OK) {
                         __vxge_hw_ring_delete(vp);
                         goto exit;
@@ -1416,7 +1412,7 @@ enum vxge_hw_status __vxge_hw_ring_reset(struct __vxge_hw_ring *ring)
                 goto exit;
 
         if (ring->rxd_init) {
-                status = vxge_hw_ring_replenish(ring, 1);
+                status = vxge_hw_ring_replenish(ring);
                 if (status != VXGE_HW_OK)
                         goto exit;
         }
diff --git a/drivers/net/vxge/vxge-config.h b/drivers/net/vxge/vxge-config.h
index e7877df092f3..01595242a6e8 100644
--- a/drivers/net/vxge/vxge-config.h
+++ b/drivers/net/vxge/vxge-config.h
@@ -1914,20 +1914,32 @@ static inline void *vxge_os_dma_malloc(struct pci_dev *pdev,
         gfp_t flags;
         void *vaddr;
         unsigned long misaligned = 0;
+        int realloc_flag = 0;
         *p_dma_acch = *p_dmah = NULL;
 
         if (in_interrupt())
                 flags = GFP_ATOMIC | GFP_DMA;
         else
                 flags = GFP_KERNEL | GFP_DMA;
-
-        size += VXGE_CACHE_LINE_SIZE;
-
+realloc:
         vaddr = kmalloc((size), flags);
         if (vaddr == NULL)
                 return vaddr;
-        misaligned = (unsigned long)VXGE_ALIGN(*((u64 *)&vaddr),
+        misaligned = (unsigned long)VXGE_ALIGN((unsigned long)vaddr,
                                 VXGE_CACHE_LINE_SIZE);
+        if (realloc_flag)
+                goto out;
+
+        if (misaligned) {
+                /* misaligned, free current one and try allocating
+                 * size + VXGE_CACHE_LINE_SIZE memory
+                 */
+                kfree((void *) vaddr);
+                size += VXGE_CACHE_LINE_SIZE;
+                realloc_flag = 1;
+                goto realloc;
+        }
+out:
         *(unsigned long *)p_dma_acch = misaligned;
         vaddr = (void *)((u8 *)vaddr + misaligned);
         return vaddr;
diff --git a/drivers/net/vxge/vxge-ethtool.c b/drivers/net/vxge/vxge-ethtool.c
index c6736b972635..6faa39e9d7a6 100644
--- a/drivers/net/vxge/vxge-ethtool.c
+++ b/drivers/net/vxge/vxge-ethtool.c
@@ -108,7 +108,7 @@ static void vxge_ethtool_gregs(struct net_device *dev,
         int index, offset;
         enum vxge_hw_status status;
         u64 reg;
-        u8 *reg_space = (u8 *) space;
+        u64 *reg_space = (u64 *) space;
         struct vxgedev *vdev = (struct vxgedev *)netdev_priv(dev);
         struct __vxge_hw_device  *hldev = (struct __vxge_hw_device *)
                                         pci_get_drvdata(vdev->pdev);
@@ -128,8 +128,7 @@ static void vxge_ethtool_gregs(struct net_device *dev,
                                                 __func__, __LINE__);
                                 return;
                         }
-
-                        memcpy((reg_space + offset), &reg, 8);
+                        *reg_space++ = reg;
                 }
         }
 }
diff --git a/drivers/net/vxge/vxge-main.c b/drivers/net/vxge/vxge-main.c
index 46a7c9e689ec..37836a10d093 100644
--- a/drivers/net/vxge/vxge-main.c
+++ b/drivers/net/vxge/vxge-main.c
@@ -444,7 +444,7 @@ vxge_rx_1b_compl(struct __vxge_hw_ring *ringh, void *dtr,
                 ring->ndev->name, __func__, __LINE__);
         ring->pkts_processed = 0;
 
-        vxge_hw_ring_replenish(ringh, 0);
+        vxge_hw_ring_replenish(ringh);
 
         do {
                 prefetch((char *)dtr + L1_CACHE_BYTES);
@@ -1117,7 +1117,7 @@ vxge_tx_term(void *dtrh, enum vxge_hw_txdl_state state, void *userdata)
  */
 static void vxge_set_multicast(struct net_device *dev)
 {
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         struct vxgedev *vdev;
         int i, mcast_cnt = 0;
         struct __vxge_hw_device  *hldev;
@@ -1217,8 +1217,8 @@ static void vxge_set_multicast(struct net_device *dev)
                 }
 
                 /* Add new ones */
-                netdev_for_each_mc_addr(mclist, dev) {
-                        memcpy(mac_info.macaddr, mclist->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, dev) {
+                        memcpy(mac_info.macaddr, ha->addr, ETH_ALEN);
                         for (vpath_idx = 0; vpath_idx < vdev->no_of_vpath;
                                         vpath_idx++) {
                                 mac_info.vpath_no = vpath_idx;
@@ -1363,28 +1363,26 @@ static int vxge_set_mac_addr(struct net_device *dev, void *p)
 void vxge_vpath_intr_enable(struct vxgedev *vdev, int vp_id)
 {
         struct vxge_vpath *vpath = &vdev->vpaths[vp_id];
-        int msix_id, alarm_msix_id;
-        int tim_msix_id[4] = {[0 ...3] = 0};
+        int msix_id = 0;
+        int tim_msix_id[4] = {0, 1, 0, 0};
+        int alarm_msix_id = VXGE_ALARM_MSIX_ID;
 
         vxge_hw_vpath_intr_enable(vpath->handle);
 
         if (vdev->config.intr_type == INTA)
                 vxge_hw_vpath_inta_unmask_tx_rx(vpath->handle);
         else {
-                msix_id = vp_id * VXGE_HW_VPATH_MSIX_ACTIVE;
-                alarm_msix_id =
-                        VXGE_HW_VPATH_MSIX_ACTIVE * vdev->no_of_vpath - 2;
-
-                tim_msix_id[0] = msix_id;
-                tim_msix_id[1] = msix_id + 1;
                 vxge_hw_vpath_msix_set(vpath->handle, tim_msix_id,
                         alarm_msix_id);
 
+                msix_id = vpath->device_id * VXGE_HW_VPATH_MSIX_ACTIVE;
                 vxge_hw_vpath_msix_unmask(vpath->handle, msix_id);
                 vxge_hw_vpath_msix_unmask(vpath->handle, msix_id + 1);
 
                 /* enable the alarm vector */
-                vxge_hw_vpath_msix_unmask(vpath->handle, alarm_msix_id);
+                msix_id = (vpath->handle->vpath->hldev->first_vp_id *
+                        VXGE_HW_VPATH_MSIX_ACTIVE) + alarm_msix_id;
+                vxge_hw_vpath_msix_unmask(vpath->handle, msix_id);
         }
 }
 
@@ -1405,12 +1403,13 @@ void vxge_vpath_intr_disable(struct vxgedev *vdev, int vp_id)
         if (vdev->config.intr_type == INTA)
                 vxge_hw_vpath_inta_mask_tx_rx(vpath->handle);
         else {
-                msix_id = vp_id * VXGE_HW_VPATH_MSIX_ACTIVE;
+                msix_id = vpath->device_id * VXGE_HW_VPATH_MSIX_ACTIVE;
                 vxge_hw_vpath_msix_mask(vpath->handle, msix_id);
                 vxge_hw_vpath_msix_mask(vpath->handle, msix_id + 1);
 
                 /* disable the alarm vector */
-                msix_id = VXGE_HW_VPATH_MSIX_ACTIVE * vdev->no_of_vpath - 2;
+                msix_id = (vpath->handle->vpath->hldev->first_vp_id *
+                        VXGE_HW_VPATH_MSIX_ACTIVE) + VXGE_ALARM_MSIX_ID;
                 vxge_hw_vpath_msix_mask(vpath->handle, msix_id);
         }
 }
@@ -2223,19 +2222,18 @@ vxge_alarm_msix_handle(int irq, void *dev_id)
         enum vxge_hw_status status;
         struct vxge_vpath *vpath = (struct vxge_vpath *)dev_id;
         struct vxgedev *vdev = vpath->vdev;
-        int alarm_msix_id =
-                VXGE_HW_VPATH_MSIX_ACTIVE * vdev->no_of_vpath - 2;
+        int msix_id = (vpath->handle->vpath->vp_id *
+                VXGE_HW_VPATH_MSIX_ACTIVE) + VXGE_ALARM_MSIX_ID;
 
         for (i = 0; i < vdev->no_of_vpath; i++) {
-                vxge_hw_vpath_msix_mask(vdev->vpaths[i].handle,
-                        alarm_msix_id);
+                vxge_hw_vpath_msix_mask(vdev->vpaths[i].handle, msix_id);
 
                 status = vxge_hw_vpath_alarm_process(vdev->vpaths[i].handle,
                         vdev->exec_mode);
                 if (status == VXGE_HW_OK) {
 
                         vxge_hw_vpath_msix_unmask(vdev->vpaths[i].handle,
-                                alarm_msix_id);
+                                        msix_id);
                         continue;
                 }
                 vxge_debug_intr(VXGE_ERR,
@@ -2248,18 +2246,17 @@ vxge_alarm_msix_handle(int irq, void *dev_id)
 static int vxge_alloc_msix(struct vxgedev *vdev)
 {
         int j, i, ret = 0;
-        int intr_cnt = 0;
-        int alarm_msix_id = 0, msix_intr_vect = 0;
+        int msix_intr_vect = 0, temp;
         vdev->intr_cnt = 0;
 
+start:
         /* Tx/Rx MSIX Vectors count */
         vdev->intr_cnt = vdev->no_of_vpath * 2;
 
         /* Alarm MSIX Vectors count */
         vdev->intr_cnt++;
 
-        intr_cnt = (vdev->max_vpath_supported * 2) + 1;
-        vdev->entries = kzalloc(intr_cnt * sizeof(struct msix_entry),
+        vdev->entries = kzalloc(vdev->intr_cnt * sizeof(struct msix_entry),
                                                 GFP_KERNEL);
         if (!vdev->entries) {
                 vxge_debug_init(VXGE_ERR,
@@ -2268,8 +2265,9 @@ static int vxge_alloc_msix(struct vxgedev *vdev)
                 return  -ENOMEM;
         }
 
-        vdev->vxge_entries = kzalloc(intr_cnt * sizeof(struct vxge_msix_entry),
-                                                        GFP_KERNEL);
+        vdev->vxge_entries =
+                kzalloc(vdev->intr_cnt * sizeof(struct vxge_msix_entry),
+                                GFP_KERNEL);
         if (!vdev->vxge_entries) {
                 vxge_debug_init(VXGE_ERR, "%s: memory allocation failed",
                         VXGE_DRIVER_NAME);
@@ -2277,9 +2275,7 @@ static int vxge_alloc_msix(struct vxgedev *vdev)
                 return -ENOMEM;
         }
 
-        /* Last vector in the list is used for alarm */
-        alarm_msix_id = VXGE_HW_VPATH_MSIX_ACTIVE * vdev->no_of_vpath - 2;
-        for (i = 0, j = 0; i < vdev->max_vpath_supported; i++) {
+        for (i = 0, j = 0; i < vdev->no_of_vpath; i++) {
 
                 msix_intr_vect = i * VXGE_HW_VPATH_MSIX_ACTIVE;
 
@@ -2297,47 +2293,31 @@ static int vxge_alloc_msix(struct vxgedev *vdev)
         }
 
         /* Initialize the alarm vector */
-        vdev->entries[j].entry = alarm_msix_id;
-        vdev->vxge_entries[j].entry = alarm_msix_id;
+        vdev->entries[j].entry = VXGE_ALARM_MSIX_ID;
+        vdev->vxge_entries[j].entry = VXGE_ALARM_MSIX_ID;
         vdev->vxge_entries[j].in_use = 0;
 
-        ret = pci_enable_msix(vdev->pdev, vdev->entries, intr_cnt);
-        /* if driver request exceeeds available irq's, request with a small
-         * number.
-        */
-        if (ret > 0) {
-                vxge_debug_init(VXGE_ERR,
-                        "%s: MSI-X enable failed for %d vectors, available: %d",
-                        VXGE_DRIVER_NAME, intr_cnt, ret);
-                vdev->max_vpath_supported = vdev->no_of_vpath;
-                intr_cnt = (vdev->max_vpath_supported * 2) + 1;
-
-                /* Reset the alarm vector setting */
-                vdev->entries[j].entry = 0;
-                vdev->vxge_entries[j].entry = 0;
-
-                /* Initialize the alarm vector with new setting */
-                vdev->entries[intr_cnt - 1].entry = alarm_msix_id;
-                vdev->vxge_entries[intr_cnt - 1].entry = alarm_msix_id;
-                vdev->vxge_entries[intr_cnt - 1].in_use = 0;
-
-                ret = pci_enable_msix(vdev->pdev, vdev->entries, intr_cnt);
-                if (!ret)
-                        vxge_debug_init(VXGE_ERR,
-                                "%s: MSI-X enabled for %d vectors",
-                                VXGE_DRIVER_NAME, intr_cnt);
-        }
+        ret = pci_enable_msix(vdev->pdev, vdev->entries, vdev->intr_cnt);
 
-        if (ret) {
+        if (ret > 0) {
                 vxge_debug_init(VXGE_ERR,
                         "%s: MSI-X enable failed for %d vectors, ret: %d",
-                        VXGE_DRIVER_NAME, intr_cnt, ret);
+                        VXGE_DRIVER_NAME, vdev->intr_cnt, ret);
                 kfree(vdev->entries);
                 kfree(vdev->vxge_entries);
                 vdev->entries = NULL;
                 vdev->vxge_entries = NULL;
+
+                if ((max_config_vpath != VXGE_USE_DEFAULT) || (ret < 3))
+                        return -ENODEV;
+                /* Try with less no of vector by reducing no of vpaths count */
+                temp = (ret - 1)/2;
+                vxge_close_vpaths(vdev, temp);
+                vdev->no_of_vpath = temp;
+                goto start;
+        } else if (ret < 0)
                 return -ENODEV;
-        }
+
         return 0;
 }
 
@@ -2345,43 +2325,26 @@ static int vxge_enable_msix(struct vxgedev *vdev)
 {
 
         int i, ret = 0;
-        enum vxge_hw_status status;
         /* 0 - Tx, 1 - Rx  */
-        int tim_msix_id[4];
-        int alarm_msix_id = 0, msix_intr_vect = 0;
+        int tim_msix_id[4] = {0, 1, 0, 0};
+
         vdev->intr_cnt = 0;
 
         /* allocate msix vectors */
         ret = vxge_alloc_msix(vdev);
         if (!ret) {
-                /* Last vector in the list is used for alarm */
-                alarm_msix_id =
-                        VXGE_HW_VPATH_MSIX_ACTIVE * vdev->no_of_vpath - 2;
                 for (i = 0; i < vdev->no_of_vpath; i++) {
 
                         /* If fifo or ring are not enabled
                            the MSIX vector for that should be set to 0
                            Hence initializeing this array to all 0s.
                         */
-                        memset(tim_msix_id, 0, sizeof(tim_msix_id));
-                        msix_intr_vect = i * VXGE_HW_VPATH_MSIX_ACTIVE;
-                        tim_msix_id[0] = msix_intr_vect;
-
-                        tim_msix_id[1] = msix_intr_vect + 1;
-                        vdev->vpaths[i].ring.rx_vector_no = tim_msix_id[1];
+                        vdev->vpaths[i].ring.rx_vector_no =
+                                (vdev->vpaths[i].device_id *
+                                        VXGE_HW_VPATH_MSIX_ACTIVE) + 1;
 
-                        status = vxge_hw_vpath_msix_set(
-                                                vdev->vpaths[i].handle,
-                                                tim_msix_id, alarm_msix_id);
-                        if (status != VXGE_HW_OK) {
-                                vxge_debug_init(VXGE_ERR,
-                                        "vxge_hw_vpath_msix_set "
-                                        "failed with status : %x", status);
-                                kfree(vdev->entries);
-                                kfree(vdev->vxge_entries);
-                                pci_disable_msix(vdev->pdev);
-                                return -ENODEV;
-                        }
+                        vxge_hw_vpath_msix_set(vdev->vpaths[i].handle,
+                                        tim_msix_id, VXGE_ALARM_MSIX_ID);
                 }
         }
 
@@ -2392,7 +2355,7 @@ static void vxge_rem_msix_isr(struct vxgedev *vdev)
 {
         int intr_cnt;
 
-        for (intr_cnt = 0; intr_cnt < (vdev->max_vpath_supported * 2 + 1);
+        for (intr_cnt = 0; intr_cnt < (vdev->no_of_vpath * 2 + 1);
                 intr_cnt++) {
                 if (vdev->vxge_entries[intr_cnt].in_use) {
                         synchronize_irq(vdev->entries[intr_cnt].vector);
@@ -2457,9 +2420,10 @@ static int vxge_add_isr(struct vxgedev *vdev)
                         switch (msix_idx) {
                         case 0:
                                 snprintf(vdev->desc[intr_cnt], VXGE_INTR_STRLEN,
-                                        "%s:vxge fn: %d vpath: %d Tx MSI-X: %d",
-                                        vdev->ndev->name, pci_fun, vp_idx,
-                                        vdev->entries[intr_cnt].entry);
+                                "%s:vxge:MSI-X %d - Tx - fn:%d vpath:%d",
+                                        vdev->ndev->name,
+                                        vdev->entries[intr_cnt].entry,
+                                        pci_fun, vp_idx);
                                 ret = request_irq(
                                     vdev->entries[intr_cnt].vector,
                                         vxge_tx_msix_handle, 0,
@@ -2471,9 +2435,10 @@ static int vxge_add_isr(struct vxgedev *vdev)
                                 break;
                         case 1:
                                 snprintf(vdev->desc[intr_cnt], VXGE_INTR_STRLEN,
-                                        "%s:vxge fn: %d vpath: %d Rx MSI-X: %d",
-                                        vdev->ndev->name, pci_fun, vp_idx,
-                                        vdev->entries[intr_cnt].entry);
+                                "%s:vxge:MSI-X %d - Rx - fn:%d vpath:%d",
+                                        vdev->ndev->name,
+                                        vdev->entries[intr_cnt].entry,
+                                        pci_fun, vp_idx);
                                 ret = request_irq(
                                     vdev->entries[intr_cnt].vector,
                                         vxge_rx_msix_napi_handle,
@@ -2501,9 +2466,11 @@ static int vxge_add_isr(struct vxgedev *vdev)
                         if (irq_req) {
                                 /* We requested for this msix interrupt */
                                 vdev->vxge_entries[intr_cnt].in_use = 1;
+                                msix_idx +=  vdev->vpaths[vp_idx].device_id *
+                                        VXGE_HW_VPATH_MSIX_ACTIVE;
                                 vxge_hw_vpath_msix_unmask(
                                         vdev->vpaths[vp_idx].handle,
-                                        intr_idx);
+                                        msix_idx);
                                 intr_cnt++;
                         }
 
@@ -2513,16 +2480,17 @@ static int vxge_add_isr(struct vxgedev *vdev)
                                 vp_idx++;
                 }
 
-                intr_cnt = vdev->max_vpath_supported * 2;
+                intr_cnt = vdev->no_of_vpath * 2;
                 snprintf(vdev->desc[intr_cnt], VXGE_INTR_STRLEN,
-                        "%s:vxge Alarm fn: %d MSI-X: %d",
-                        vdev->ndev->name, pci_fun,
-                        vdev->entries[intr_cnt].entry);
+                        "%s:vxge:MSI-X %d - Alarm - fn:%d",
+                        vdev->ndev->name,
+                        vdev->entries[intr_cnt].entry,
+                        pci_fun);
                 /* For Alarm interrupts */
                 ret = request_irq(vdev->entries[intr_cnt].vector,
                                         vxge_alarm_msix_handle, 0,
                                         vdev->desc[intr_cnt],
-                                        &vdev->vpaths[vp_idx]);
+                                        &vdev->vpaths[0]);
                 if (ret) {
                         vxge_debug_init(VXGE_ERR,
                                 "%s: MSIX - %d Registration failed",
@@ -2535,16 +2503,19 @@ static int vxge_add_isr(struct vxgedev *vdev)
                                 goto INTA_MODE;
                 }
 
+                msix_idx = (vdev->vpaths[0].handle->vpath->vp_id *
+                        VXGE_HW_VPATH_MSIX_ACTIVE) + VXGE_ALARM_MSIX_ID;
                 vxge_hw_vpath_msix_unmask(vdev->vpaths[vp_idx].handle,
-                                        intr_idx - 2);
+                                        msix_idx);
                 vdev->vxge_entries[intr_cnt].in_use = 1;
-                vdev->vxge_entries[intr_cnt].arg = &vdev->vpaths[vp_idx];
+                vdev->vxge_entries[intr_cnt].arg = &vdev->vpaths[0];
         }
 INTA_MODE:
 #endif
-        snprintf(vdev->desc[0], VXGE_INTR_STRLEN, "%s:vxge", vdev->ndev->name);
 
         if (vdev->config.intr_type == INTA) {
+                snprintf(vdev->desc[0], VXGE_INTR_STRLEN,
+                        "%s:vxge:INTA", vdev->ndev->name);
                 vxge_hw_device_set_intr_type(vdev->devh,
                         VXGE_HW_INTR_MODE_IRQLINE);
                 vxge_hw_vpath_tti_ci_set(vdev->devh,
@@ -4174,7 +4145,7 @@ vxge_probe(struct pci_dev *pdev, const struct pci_device_id *pre)
                         ret = pci_enable_sriov(pdev, max_config_dev - 1);
                         if (ret)
                                 vxge_debug_ll_config(VXGE_ERR,
-                                        "Failed to enable SRIOV: %d \n", ret);
+                                        "Failed to enable SRIOV: %d\n", ret);
         }
 
         /*
diff --git a/drivers/net/vxge/vxge-main.h b/drivers/net/vxge/vxge-main.h
index 7c83ba4be9d7..0441d5aa3042 100644
--- a/drivers/net/vxge/vxge-main.h
+++ b/drivers/net/vxge/vxge-main.h
@@ -31,6 +31,7 @@
 #define PCI_DEVICE_ID_TITAN_UNI         0x5833
 #define VXGE_USE_DEFAULT                0xffffffff
 #define VXGE_HW_VPATH_MSIX_ACTIVE       4
+#define VXGE_ALARM_MSIX_ID              2
 #define VXGE_HW_RXSYNC_FREQ_CNT         4
 #define VXGE_LL_WATCH_DOG_TIMEOUT       (15 * HZ)
 #define VXGE_LL_RX_COPY_THRESHOLD       256
diff --git a/drivers/net/vxge/vxge-traffic.c b/drivers/net/vxge/vxge-traffic.c
index 2c012f4ce465..f83e6aee3f6a 100644
--- a/drivers/net/vxge/vxge-traffic.c
+++ b/drivers/net/vxge/vxge-traffic.c
@@ -231,8 +231,7 @@ void vxge_hw_channel_msix_mask(struct __vxge_hw_channel *channel, int msix_id)
 {
 
         __vxge_hw_pio_mem_write32_upper(
-                (u32)vxge_bVALn(vxge_mBIT(channel->first_vp_id+(msix_id/4)),
-                        0, 32),
+                (u32)vxge_bVALn(vxge_mBIT(msix_id >> 2), 0, 32),
                 &channel->common_reg->set_msix_mask_vect[msix_id%4]);
 
         return;
@@ -252,8 +251,7 @@ vxge_hw_channel_msix_unmask(struct __vxge_hw_channel *channel, int msix_id)
 {
 
         __vxge_hw_pio_mem_write32_upper(
-                (u32)vxge_bVALn(vxge_mBIT(channel->first_vp_id+(msix_id/4)),
-                        0, 32),
+                (u32)vxge_bVALn(vxge_mBIT(msix_id >> 2), 0, 32),
                 &channel->common_reg->clear_msix_mask_vect[msix_id%4]);
 
         return;
@@ -878,7 +876,7 @@ void vxge_hw_ring_rxd_post_post(struct __vxge_hw_ring *ring, void *rxdh)
 
         channel = &ring->channel;
 
-        rxdp->control_0 |= VXGE_HW_RING_RXD_LIST_OWN_ADAPTER;
+        rxdp->control_0 = VXGE_HW_RING_RXD_LIST_OWN_ADAPTER;
 
         if (ring->stats->common_stats.usage_cnt > 0)
                 ring->stats->common_stats.usage_cnt--;
@@ -902,7 +900,7 @@ void vxge_hw_ring_rxd_post(struct __vxge_hw_ring *ring, void *rxdh)
         channel = &ring->channel;
 
         wmb();
-        rxdp->control_0 |= VXGE_HW_RING_RXD_LIST_OWN_ADAPTER;
+        rxdp->control_0 = VXGE_HW_RING_RXD_LIST_OWN_ADAPTER;
 
         vxge_hw_channel_dtr_post(channel, rxdh);
 
@@ -966,6 +964,7 @@ enum vxge_hw_status vxge_hw_ring_rxd_next_completed(
         struct __vxge_hw_channel *channel;
         struct vxge_hw_ring_rxd_1 *rxdp;
         enum vxge_hw_status status = VXGE_HW_OK;
+        u64 control_0, own;
 
         channel = &ring->channel;
 
@@ -977,8 +976,12 @@ enum vxge_hw_status vxge_hw_ring_rxd_next_completed(
                 goto exit;
         }
 
+        control_0 = rxdp->control_0;
+        own = control_0 & VXGE_HW_RING_RXD_LIST_OWN_ADAPTER;
+        *t_code = (u8)VXGE_HW_RING_RXD_T_CODE_GET(control_0);
+
         /* check whether it is not the end */
-        if (!(rxdp->control_0 & VXGE_HW_RING_RXD_LIST_OWN_ADAPTER)) {
+        if (!own || ((*t_code == VXGE_HW_RING_T_CODE_FRM_DROP) && own)) {
 
                 vxge_assert(((struct vxge_hw_ring_rxd_1 *)rxdp)->host_control !=
                                 0);
@@ -986,8 +989,6 @@ enum vxge_hw_status vxge_hw_ring_rxd_next_completed(
                 ++ring->cmpl_cnt;
                 vxge_hw_channel_dtr_complete(channel);
 
-                *t_code = (u8)VXGE_HW_RING_RXD_T_CODE_GET(rxdp->control_0);
-
                 vxge_assert(*t_code != VXGE_HW_RING_RXD_T_CODE_UNUSED);
 
                 ring->stats->common_stats.usage_cnt++;
@@ -1035,12 +1036,13 @@ enum vxge_hw_status vxge_hw_ring_handle_tcode(
          * such as unknown UPV6 header), Drop it !!!
          */
 
-        if (t_code == 0 || t_code == 5) {
+        if (t_code ==  VXGE_HW_RING_T_CODE_OK ||
+                t_code == VXGE_HW_RING_T_CODE_L3_PKT_ERR) {
                 status = VXGE_HW_OK;
                 goto exit;
         }
 
-        if (t_code > 0xF) {
+        if (t_code > VXGE_HW_RING_T_CODE_MULTI_ERR) {
                 status = VXGE_HW_ERR_INVALID_TCODE;
                 goto exit;
         }
@@ -2216,29 +2218,24 @@ exit:
  * This API will associate a given MSIX vector numbers with the four TIM
  * interrupts and alarm interrupt.
  */
-enum vxge_hw_status
+void
 vxge_hw_vpath_msix_set(struct __vxge_hw_vpath_handle *vp, int *tim_msix_id,
                        int alarm_msix_id)
 {
         u64 val64;
         struct __vxge_hw_virtualpath *vpath = vp->vpath;
         struct vxge_hw_vpath_reg __iomem *vp_reg = vpath->vp_reg;
-        u32 first_vp_id = vpath->hldev->first_vp_id;
+        u32 vp_id = vp->vpath->vp_id;
 
         val64 =  VXGE_HW_INTERRUPT_CFG0_GROUP0_MSIX_FOR_TXTI(
-                  (first_vp_id * 4) + tim_msix_id[0]) |
+                  (vp_id * 4) + tim_msix_id[0]) |
                  VXGE_HW_INTERRUPT_CFG0_GROUP1_MSIX_FOR_TXTI(
-                  (first_vp_id * 4) + tim_msix_id[1]) |
-                 VXGE_HW_INTERRUPT_CFG0_GROUP2_MSIX_FOR_TXTI(
-                        (first_vp_id * 4) + tim_msix_id[2]);
-
-                val64 |= VXGE_HW_INTERRUPT_CFG0_GROUP3_MSIX_FOR_TXTI(
-                        (first_vp_id * 4) + tim_msix_id[3]);
+                  (vp_id * 4) + tim_msix_id[1]);
 
         writeq(val64, &vp_reg->interrupt_cfg0);
 
         writeq(VXGE_HW_INTERRUPT_CFG2_ALARM_MAP_TO_MSG(
-                        (first_vp_id * 4) + alarm_msix_id),
+                        (vpath->hldev->first_vp_id * 4) + alarm_msix_id),
                         &vp_reg->interrupt_cfg2);
 
         if (vpath->hldev->config.intr_mode ==
@@ -2259,7 +2256,7 @@ vxge_hw_vpath_msix_set(struct __vxge_hw_vpath_handle *vp, int *tim_msix_id,
                                 0, 32), &vp_reg->one_shot_vect3_en);
         }
 
-        return VXGE_HW_OK;
+        return;
 }
 
 /**
@@ -2279,8 +2276,7 @@ vxge_hw_vpath_msix_mask(struct __vxge_hw_vpath_handle *vp, int msix_id)
 {
         struct __vxge_hw_device *hldev = vp->vpath->hldev;
         __vxge_hw_pio_mem_write32_upper(
-                (u32) vxge_bVALn(vxge_mBIT(hldev->first_vp_id +
-                        (msix_id  / 4)), 0, 32),
+                (u32) vxge_bVALn(vxge_mBIT(msix_id  >> 2), 0, 32),
                 &hldev->common_reg->set_msix_mask_vect[msix_id % 4]);
 
         return;
@@ -2305,14 +2301,12 @@ vxge_hw_vpath_msix_clear(struct __vxge_hw_vpath_handle *vp, int msix_id)
         if (hldev->config.intr_mode ==
                         VXGE_HW_INTR_MODE_MSIX_ONE_SHOT) {
                 __vxge_hw_pio_mem_write32_upper(
-                        (u32)vxge_bVALn(vxge_mBIT(hldev->first_vp_id +
-                                (msix_id/4)), 0, 32),
+                        (u32)vxge_bVALn(vxge_mBIT(msix_id >> 2), 0, 32),
                                 &hldev->common_reg->
                                         clr_msix_one_shot_vec[msix_id%4]);
         } else {
                 __vxge_hw_pio_mem_write32_upper(
-                        (u32)vxge_bVALn(vxge_mBIT(hldev->first_vp_id +
-                                (msix_id/4)), 0, 32),
+                        (u32)vxge_bVALn(vxge_mBIT(msix_id >> 2), 0, 32),
                                 &hldev->common_reg->
                                         clear_msix_mask_vect[msix_id%4]);
         }
@@ -2337,8 +2331,7 @@ vxge_hw_vpath_msix_unmask(struct __vxge_hw_vpath_handle *vp, int msix_id)
 {
         struct __vxge_hw_device *hldev = vp->vpath->hldev;
         __vxge_hw_pio_mem_write32_upper(
-                        (u32)vxge_bVALn(vxge_mBIT(hldev->first_vp_id +
-                        (msix_id/4)), 0, 32),
+                        (u32)vxge_bVALn(vxge_mBIT(msix_id >> 2), 0, 32),
                         &hldev->common_reg->clear_msix_mask_vect[msix_id%4]);
 
         return;
diff --git a/drivers/net/vxge/vxge-traffic.h b/drivers/net/vxge/vxge-traffic.h
index 861c853e3e84..c252f3d3f650 100644
--- a/drivers/net/vxge/vxge-traffic.h
+++ b/drivers/net/vxge/vxge-traffic.h
@@ -1866,6 +1866,51 @@ struct vxge_hw_ring_rxd_info {
         u32     rth_hash_type;
         u32     rth_value;
 };
+/**
+ * enum vxge_hw_ring_tcode - Transfer codes returned by adapter
+ * @VXGE_HW_RING_T_CODE_OK: Transfer ok.
+ * @VXGE_HW_RING_T_CODE_L3_CKSUM_MISMATCH: Layer 3 checksum presentation
+ *              configuration mismatch.
+ * @VXGE_HW_RING_T_CODE_L4_CKSUM_MISMATCH: Layer 4 checksum presentation
+ *              configuration mismatch.
+ * @VXGE_HW_RING_T_CODE_L3_L4_CKSUM_MISMATCH: Layer 3 and Layer 4 checksum
+ *              presentation configuration mismatch.
+ * @VXGE_HW_RING_T_CODE_L3_PKT_ERR: Layer 3 error unparseable packet,
+ *              such as unknown IPv6 header.
+ * @VXGE_HW_RING_T_CODE_L2_FRM_ERR: Layer 2 error frame integrity
+ *              error, such as FCS or ECC).
+ * @VXGE_HW_RING_T_CODE_BUF_SIZE_ERR: Buffer size error the RxD buffer(
+ *              s) were not appropriately sized and data loss occurred.
+ * @VXGE_HW_RING_T_CODE_INT_ECC_ERR: Internal ECC error RxD corrupted.
+ * @VXGE_HW_RING_T_CODE_BENIGN_OVFLOW: Benign overflow the contents of
+ *              Segment1 exceeded the capacity of Buffer1 and the remainder
+ *              was placed in Buffer2. Segment2 now starts in Buffer3.
+ *              No data loss or errors occurred.
+ * @VXGE_HW_RING_T_CODE_ZERO_LEN_BUFF: Buffer size 0 one of the RxDs
+ *              assigned buffers has a size of 0 bytes.
+ * @VXGE_HW_RING_T_CODE_FRM_DROP: Frame dropped either due to
+ *              VPath Reset or because of a VPIN mismatch.
+ * @VXGE_HW_RING_T_CODE_UNUSED: Unused
+ * @VXGE_HW_RING_T_CODE_MULTI_ERR: Multiple errors more than one
+ *              transfer code condition occurred.
+ *
+ * Transfer codes returned by adapter.
+ */
+enum vxge_hw_ring_tcode {
+        VXGE_HW_RING_T_CODE_OK                          = 0x0,
+        VXGE_HW_RING_T_CODE_L3_CKSUM_MISMATCH           = 0x1,
+        VXGE_HW_RING_T_CODE_L4_CKSUM_MISMATCH           = 0x2,
+        VXGE_HW_RING_T_CODE_L3_L4_CKSUM_MISMATCH        = 0x3,
+        VXGE_HW_RING_T_CODE_L3_PKT_ERR                  = 0x5,
+        VXGE_HW_RING_T_CODE_L2_FRM_ERR                  = 0x6,
+        VXGE_HW_RING_T_CODE_BUF_SIZE_ERR                = 0x7,
+        VXGE_HW_RING_T_CODE_INT_ECC_ERR                 = 0x8,
+        VXGE_HW_RING_T_CODE_BENIGN_OVFLOW               = 0x9,
+        VXGE_HW_RING_T_CODE_ZERO_LEN_BUFF               = 0xA,
+        VXGE_HW_RING_T_CODE_FRM_DROP                    = 0xC,
+        VXGE_HW_RING_T_CODE_UNUSED                      = 0xE,
+        VXGE_HW_RING_T_CODE_MULTI_ERR                   = 0xF
+};
 
 /**
  * enum enum vxge_hw_ring_hash_type - RTH hash types
@@ -1910,7 +1955,7 @@ vxge_hw_ring_rxd_post_post(
         void *rxdh);
 
 enum vxge_hw_status
-vxge_hw_ring_replenish(struct __vxge_hw_ring *ring_handle, u16 min_flag);
+vxge_hw_ring_replenish(struct __vxge_hw_ring *ring_handle);
 
 void
 vxge_hw_ring_rxd_post_post_wmb(
@@ -2042,7 +2087,6 @@ void vxge_hw_fifo_txdl_free(
 
 #define VXGE_HW_RING_NEXT_BLOCK_POINTER_OFFSET  (VXGE_HW_BLOCK_SIZE-8)
 #define VXGE_HW_RING_MEMBLOCK_IDX_OFFSET                (VXGE_HW_BLOCK_SIZE-16)
-#define VXGE_HW_RING_MIN_BUFF_ALLOCATION                64
 
 /*
  * struct __vxge_hw_ring_rxd_priv - Receive descriptor HW-private data.
@@ -2332,7 +2376,7 @@ enum vxge_hw_status vxge_hw_vpath_alarm_process(
         struct __vxge_hw_vpath_handle *vpath_handle,
         u32 skip_alarms);
 
-enum vxge_hw_status
+void
 vxge_hw_vpath_msix_set(struct __vxge_hw_vpath_handle *vpath_handle,
                        int *tim_msix_id, int alarm_msix_id);
 
diff --git a/drivers/net/vxge/vxge-version.h b/drivers/net/vxge/vxge-version.h
index 77c2a754b7b8..487513900182 100644
--- a/drivers/net/vxge/vxge-version.h
+++ b/drivers/net/vxge/vxge-version.h
@@ -17,7 +17,7 @@
 
 #define VXGE_VERSION_MAJOR      "2"
 #define VXGE_VERSION_MINOR      "0"
-#define VXGE_VERSION_FIX        "6"
-#define VXGE_VERSION_BUILD      "18937"
+#define VXGE_VERSION_FIX        "7"
+#define VXGE_VERSION_BUILD      "20144"
 #define VXGE_VERSION_FOR        "k"
 #endif
diff --git a/drivers/net/wan/pc300_drv.c b/drivers/net/wan/pc300_drv.c
index f4f1c00d0d23..cb72cc7a1e86 100644
--- a/drivers/net/wan/pc300_drv.c
+++ b/drivers/net/wan/pc300_drv.c
@@ -395,7 +395,7 @@ static void tx1_dma_buf_check(pc300_t * card, int ch)
         u16 next_bd = card->chan[ch].tx_next_bd;
         u32 scabase = card->hw.scabase;
 
-        printk ("\nnfree_tx_bd = %d \n", card->chan[ch].nfree_tx_bd);
+        printk ("\nnfree_tx_bd = %d\n", card->chan[ch].nfree_tx_bd);
         printk("#CH%d: f_bd = %d(0x%08x), n_bd = %d(0x%08x)\n", ch,
                first_bd, TX_BD_ADDR(ch, first_bd),
                next_bd, TX_BD_ADDR(ch, next_bd));
diff --git a/drivers/net/wan/pc300_tty.c b/drivers/net/wan/pc300_tty.c
index 4917a94943bd..4293889e287e 100644
--- a/drivers/net/wan/pc300_tty.c
+++ b/drivers/net/wan/pc300_tty.c
@@ -366,7 +366,7 @@ static void cpc_tty_close(struct tty_struct *tty, struct file *flip)
         int res;
 
         if (!tty || !tty->driver_data ) {
-                CPC_TTY_DBG("hdlx-tty: no TTY in close \n");
+                CPC_TTY_DBG("hdlx-tty: no TTY in close\n");
                 return;
         }
 
diff --git a/drivers/net/wan/sdla.c b/drivers/net/wan/sdla.c
index 31c41af2246d..43ae6f440bfb 100644
--- a/drivers/net/wan/sdla.c
+++ b/drivers/net/wan/sdla.c
@@ -1352,7 +1352,7 @@ static int sdla_set_config(struct net_device *dev, struct ifmap *map)
                 return(-EINVAL);
 
         if (!request_region(map->base_addr, SDLA_IO_EXTENTS, dev->name)){
-                printk(KERN_WARNING "SDLA: io-port 0x%04lx in use \n", dev->base_addr);
+                printk(KERN_WARNING "SDLA: io-port 0x%04lx in use\n", dev->base_addr);
                 return(-EINVAL);
         }
         base = map->base_addr;
diff --git a/drivers/net/wimax/i2400m/tx.c b/drivers/net/wimax/i2400m/tx.c
index 54480e8947f1..38f9c921f3e8 100644
--- a/drivers/net/wimax/i2400m/tx.c
+++ b/drivers/net/wimax/i2400m/tx.c
@@ -688,7 +688,7 @@ try_new:
                          pl_type, buf_len);
                 tx_msg->num_pls = le16_to_cpu(num_pls+1);
                 tx_msg->size += padded_len;
-                d_printf(2, dev, "TX: appended %zu b (up to %u b) pl #%u \n",
+                d_printf(2, dev, "TX: appended %zu b (up to %u b) pl #%u\n",
                         padded_len, tx_msg->size, num_pls+1);
                 d_printf(2, dev,
                          "TX: appended hdr @%zu %zu b pl #%u @%zu %zu/%zu b\n",
diff --git a/drivers/net/wireless/adm8211.c b/drivers/net/wireless/adm8211.c
index 547912e6843f..2277998b7264 100644
--- a/drivers/net/wireless/adm8211.c
+++ b/drivers/net/wireless/adm8211.c
@@ -1317,21 +1317,19 @@ static void adm8211_bss_info_changed(struct ieee80211_hw *dev,
 }
 
 static u64 adm8211_prepare_multicast(struct ieee80211_hw *hw,
-                                     int mc_count, struct dev_addr_list *mclist)
+                                     struct netdev_hw_addr_list *mc_list)
 {
-        unsigned int bit_nr, i;
+        unsigned int bit_nr;
         u32 mc_filter[2];
+        struct netdev_hw_addr *ha;
 
         mc_filter[1] = mc_filter[0] = 0;
 
-        for (i = 0; i < mc_count; i++) {
-                if (!mclist)
-                        break;
-                bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+        netdev_hw_addr_list_for_each(ha, mc_list) {
+                bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
 
                 bit_nr &= 0x3F;
                 mc_filter[bit_nr >> 5] |= 1 << (bit_nr & 31);
-                mclist = mclist->next;
         }
 
         return mc_filter[0] | ((u64)(mc_filter[1]) << 32);
diff --git a/drivers/net/wireless/airo.c b/drivers/net/wireless/airo.c
index dc5018a6d9ed..a441aad922c2 100644
--- a/drivers/net/wireless/airo.c
+++ b/drivers/net/wireless/airo.c
@@ -2876,7 +2876,7 @@ static struct net_device *_init_airo_card( unsigned short irq, int port,
         ai->wep_capable = (cap_rid.softCap & cpu_to_le16(0x02)) ? 1 : 0;
         ai->max_wep_idx = (cap_rid.softCap & cpu_to_le16(0x80)) ? 3 : 0;
 
-        airo_print_info(dev->name, "Firmware version %x.%x.%02x",
+        airo_print_info(dev->name, "Firmware version %x.%x.%02d",
                         ((le16_to_cpu(cap_rid.softVer) >> 8) & 0xF),
                         (le16_to_cpu(cap_rid.softVer) & 0xFF),
                         le16_to_cpu(cap_rid.softSubVer));
@@ -3193,19 +3193,26 @@ static void airo_print_status(const char *devname, u16 status)
 {
         u8 reason = status & 0xFF;
 
-        switch (status) {
+        switch (status & 0xFF00) {
         case STAT_NOBEACON:
-                airo_print_dbg(devname, "link lost (missed beacons)");
-                break;
-        case STAT_MAXRETRIES:
-        case STAT_MAXARL:
-                airo_print_dbg(devname, "link lost (max retries)");
-                break;
-        case STAT_FORCELOSS:
-                airo_print_dbg(devname, "link lost (local choice)");
-                break;
-        case STAT_TSFSYNC:
-                airo_print_dbg(devname, "link lost (TSF sync lost)");
+                switch (status) {
+                case STAT_NOBEACON:
+                        airo_print_dbg(devname, "link lost (missed beacons)");
+                        break;
+                case STAT_MAXRETRIES:
+                case STAT_MAXARL:
+                        airo_print_dbg(devname, "link lost (max retries)");
+                        break;
+                case STAT_FORCELOSS:
+                        airo_print_dbg(devname, "link lost (local choice)");
+                        break;
+                case STAT_TSFSYNC:
+                        airo_print_dbg(devname, "link lost (TSF sync lost)");
+                        break;
+                default:
+                        airo_print_dbg(devname, "unknow status %x\n", status);
+                        break;
+                }
                 break;
         case STAT_DEAUTH:
                 airo_print_dbg(devname, "deauthenticated (reason: %d)", reason);
@@ -3221,7 +3228,11 @@ static void airo_print_status(const char *devname, u16 status)
                 airo_print_dbg(devname, "authentication failed (reason: %d)",
                                reason);
                 break;
+        case STAT_ASSOC:
+        case STAT_REASSOC:
+                break;
         default:
+                airo_print_dbg(devname, "unknow status %x\n", status);
                 break;
         }
 }
diff --git a/drivers/net/wireless/ath/Kconfig b/drivers/net/wireless/ath/Kconfig
index 4e7a7fd695c8..0a75be027afa 100644
--- a/drivers/net/wireless/ath/Kconfig
+++ b/drivers/net/wireless/ath/Kconfig
@@ -3,7 +3,7 @@ menuconfig ATH_COMMON
         depends on CFG80211
         ---help---
           This will enable the support for the Atheros wireless drivers.
-          ath5k, ath9k and ar9170 drivers share some common code, this option
+          ath5k, ath9k, ath9k_htc and ar9170 drivers share some common code, this option
           enables the common ath.ko module which shares common helpers.
 
           For more information and documentation on this module you can visit:
diff --git a/drivers/net/wireless/ath/ar9170/main.c b/drivers/net/wireless/ath/ar9170/main.c
index 257c734733d1..b43d4b006d7e 100644
--- a/drivers/net/wireless/ath/ar9170/main.c
+++ b/drivers/net/wireless/ath/ar9170/main.c
@@ -2045,21 +2045,17 @@ out:
         return err;
 }
 
-static u64 ar9170_op_prepare_multicast(struct ieee80211_hw *hw, int mc_count,
-                                       struct dev_addr_list *mclist)
+static u64 ar9170_op_prepare_multicast(struct ieee80211_hw *hw,
+                                       struct netdev_hw_addr_list *mc_list)
 {
         u64 mchash;
-        int i;
+        struct netdev_hw_addr *ha;
 
         /* always get broadcast frames */
         mchash = 1ULL << (0xff >> 2);
 
-        for (i = 0; i < mc_count; i++) {
-                if (WARN_ON(!mclist))
-                        break;
-                mchash |= 1ULL << (mclist->dmi_addr[5] >> 2);
-                mclist = mclist->next;
-        }
+        netdev_hw_addr_list_for_each(ha, mc_list)
+                mchash |= 1ULL << (ha->addr[5] >> 2);
 
         return mchash;
 }
diff --git a/drivers/net/wireless/ath/ath5k/ath5k.h b/drivers/net/wireless/ath/ath5k/ath5k.h
index ac67f02e26d8..1d7491c85460 100644
--- a/drivers/net/wireless/ath/ath5k/ath5k.h
+++ b/drivers/net/wireless/ath/ath5k/ath5k.h
@@ -202,7 +202,6 @@
 #define AR5K_TUNE_MAX_TXPOWER                   63
 #define AR5K_TUNE_DEFAULT_TXPOWER               25
 #define AR5K_TUNE_TPC_TXPOWER                   false
-#define AR5K_TUNE_HWTXTRIES                     4
 
 #define AR5K_INIT_CARR_SENSE_EN                 1
 
@@ -614,28 +613,6 @@ struct ath5k_rx_status {
 #define AR5K_BEACON_ENA         0x00800000 /*enable beacon xmit*/
 #define AR5K_BEACON_RESET_TSF   0x01000000 /*force a TSF reset*/
 
-#if 0
-/**
- * struct ath5k_beacon_state - Per-station beacon timer state.
- * @bs_interval: in TU's, can also include the above flags
- * @bs_cfp_max_duration: if non-zero hw is setup to coexist with a
- *      Point Coordination Function capable AP
- */
-struct ath5k_beacon_state {
-        u32     bs_next_beacon;
-        u32     bs_next_dtim;
-        u32     bs_interval;
-        u8      bs_dtim_period;
-        u8      bs_cfp_period;
-        u16     bs_cfp_max_duration;
-        u16     bs_cfp_du_remain;
-        u16     bs_tim_offset;
-        u16     bs_sleep_duration;
-        u16     bs_bmiss_threshold;
-        u32     bs_cfp_next;
-};
-#endif
-
 
 /*
  * TSF to TU conversion:
@@ -1028,7 +1005,6 @@ struct ath5k_nfcal_hist
 
 /* TODO: Clean up and merge with ath5k_softc */
 struct ath5k_hw {
-        u32                     ah_magic;
         struct ath_common       common;
 
         struct ath5k_softc      *ah_sc;
@@ -1036,7 +1012,6 @@ struct ath5k_hw {
 
         enum ath5k_int          ah_imr;
 
-        enum nl80211_iftype     ah_op_mode;
         struct ieee80211_channel *ah_current_channel;
         bool                    ah_turbo;
         bool                    ah_calibration;
@@ -1049,7 +1024,6 @@ struct ath5k_hw {
         u32                     ah_phy;
         u32                     ah_mac_srev;
         u16                     ah_mac_version;
-        u16                     ah_mac_revision;
         u16                     ah_phy_revision;
         u16                     ah_radio_5ghz_revision;
         u16                     ah_radio_2ghz_revision;
@@ -1071,8 +1045,6 @@ struct ath5k_hw {
         u8                      ah_def_ant;
         bool                    ah_software_retry;
 
-        int                     ah_gpio_npins;
-
         struct ath5k_capabilities ah_capabilities;
 
         struct ath5k_txq_info   ah_txq[AR5K_NUM_TX_QUEUES];
@@ -1141,9 +1113,9 @@ struct ath5k_hw {
         int (*ah_setup_rx_desc)(struct ath5k_hw *ah, struct ath5k_desc *desc,
                                 u32 size, unsigned int flags);
         int (*ah_setup_tx_desc)(struct ath5k_hw *, struct ath5k_desc *,
-                unsigned int, unsigned int, enum ath5k_pkt_type, unsigned int,
+                unsigned int, unsigned int, int, enum ath5k_pkt_type,
                 unsigned int, unsigned int, unsigned int, unsigned int,
-                unsigned int, unsigned int, unsigned int);
+                unsigned int, unsigned int, unsigned int, unsigned int);
         int (*ah_setup_mrr_tx_desc)(struct ath5k_hw *, struct ath5k_desc *,
                 unsigned int, unsigned int, unsigned int, unsigned int,
                 unsigned int, unsigned int);
@@ -1158,158 +1130,147 @@ struct ath5k_hw {
  */
 
 /* Attach/Detach Functions */
-extern int ath5k_hw_attach(struct ath5k_softc *sc);
-extern void ath5k_hw_detach(struct ath5k_hw *ah);
+int ath5k_hw_attach(struct ath5k_softc *sc);
+void ath5k_hw_detach(struct ath5k_hw *ah);
 
 /* LED functions */
-extern int ath5k_init_leds(struct ath5k_softc *sc);
-extern void ath5k_led_enable(struct ath5k_softc *sc);
-extern void ath5k_led_off(struct ath5k_softc *sc);
-extern void ath5k_unregister_leds(struct ath5k_softc *sc);
+int ath5k_init_leds(struct ath5k_softc *sc);
+void ath5k_led_enable(struct ath5k_softc *sc);
+void ath5k_led_off(struct ath5k_softc *sc);
+void ath5k_unregister_leds(struct ath5k_softc *sc);
 
 /* Reset Functions */
-extern int ath5k_hw_nic_wakeup(struct ath5k_hw *ah, int flags, bool initial);
-extern int ath5k_hw_on_hold(struct ath5k_hw *ah);
-extern int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode, struct ieee80211_channel *channel, bool change_channel);
+int ath5k_hw_nic_wakeup(struct ath5k_hw *ah, int flags, bool initial);
+int ath5k_hw_on_hold(struct ath5k_hw *ah);
+int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode,
+                   struct ieee80211_channel *channel, bool change_channel);
+int ath5k_hw_register_timeout(struct ath5k_hw *ah, u32 reg, u32 flag, u32 val,
+                              bool is_set);
 /* Power management functions */
-extern int ath5k_hw_set_power(struct ath5k_hw *ah, enum ath5k_power_mode mode, bool set_chip, u16 sleep_duration);
 
 /* DMA Related Functions */
-extern void ath5k_hw_start_rx_dma(struct ath5k_hw *ah);
-extern int ath5k_hw_stop_rx_dma(struct ath5k_hw *ah);
-extern u32 ath5k_hw_get_rxdp(struct ath5k_hw *ah);
-extern void ath5k_hw_set_rxdp(struct ath5k_hw *ah, u32 phys_addr);
-extern int ath5k_hw_start_tx_dma(struct ath5k_hw *ah, unsigned int queue);
-extern int ath5k_hw_stop_tx_dma(struct ath5k_hw *ah, unsigned int queue);
-extern u32 ath5k_hw_get_txdp(struct ath5k_hw *ah, unsigned int queue);
-extern int ath5k_hw_set_txdp(struct ath5k_hw *ah, unsigned int queue,
+void ath5k_hw_start_rx_dma(struct ath5k_hw *ah);
+int ath5k_hw_stop_rx_dma(struct ath5k_hw *ah);
+u32 ath5k_hw_get_rxdp(struct ath5k_hw *ah);
+void ath5k_hw_set_rxdp(struct ath5k_hw *ah, u32 phys_addr);
+int ath5k_hw_start_tx_dma(struct ath5k_hw *ah, unsigned int queue);
+int ath5k_hw_stop_tx_dma(struct ath5k_hw *ah, unsigned int queue);
+u32 ath5k_hw_get_txdp(struct ath5k_hw *ah, unsigned int queue);
+int ath5k_hw_set_txdp(struct ath5k_hw *ah, unsigned int queue,
                                 u32 phys_addr);
-extern int ath5k_hw_update_tx_triglevel(struct ath5k_hw *ah, bool increase);
+int ath5k_hw_update_tx_triglevel(struct ath5k_hw *ah, bool increase);
 /* Interrupt handling */
-extern bool ath5k_hw_is_intr_pending(struct ath5k_hw *ah);
-extern int ath5k_hw_get_isr(struct ath5k_hw *ah, enum ath5k_int *interrupt_mask);
-extern enum ath5k_int ath5k_hw_set_imr(struct ath5k_hw *ah, enum
-ath5k_int new_mask);
-extern void ath5k_hw_update_mib_counters(struct ath5k_hw *ah, struct ieee80211_low_level_stats *stats);
+bool ath5k_hw_is_intr_pending(struct ath5k_hw *ah);
+int ath5k_hw_get_isr(struct ath5k_hw *ah, enum ath5k_int *interrupt_mask);
+enum ath5k_int ath5k_hw_set_imr(struct ath5k_hw *ah, enum ath5k_int new_mask);
+void ath5k_hw_update_mib_counters(struct ath5k_hw *ah,
+                                  struct ieee80211_low_level_stats *stats);
 
 /* EEPROM access functions */
-extern int ath5k_eeprom_init(struct ath5k_hw *ah);
-extern void ath5k_eeprom_detach(struct ath5k_hw *ah);
-extern int ath5k_eeprom_read_mac(struct ath5k_hw *ah, u8 *mac);
-extern bool ath5k_eeprom_is_hb63(struct ath5k_hw *ah);
+int ath5k_eeprom_init(struct ath5k_hw *ah);
+void ath5k_eeprom_detach(struct ath5k_hw *ah);
+int ath5k_eeprom_read_mac(struct ath5k_hw *ah, u8 *mac);
 
 /* Protocol Control Unit Functions */
-extern int ath5k_hw_set_opmode(struct ath5k_hw *ah);
-extern void ath5k_hw_set_coverage_class(struct ath5k_hw *ah, u8 coverage_class);
+extern int ath5k_hw_set_opmode(struct ath5k_hw *ah, enum nl80211_iftype opmode);
+void ath5k_hw_set_coverage_class(struct ath5k_hw *ah, u8 coverage_class);
 /* BSSID Functions */
-extern int ath5k_hw_set_lladdr(struct ath5k_hw *ah, const u8 *mac);
-extern void ath5k_hw_set_associd(struct ath5k_hw *ah);
-extern void ath5k_hw_set_bssid_mask(struct ath5k_hw *ah, const u8 *mask);
+int ath5k_hw_set_lladdr(struct ath5k_hw *ah, const u8 *mac);
+void ath5k_hw_set_associd(struct ath5k_hw *ah);
+void ath5k_hw_set_bssid_mask(struct ath5k_hw *ah, const u8 *mask);
 /* Receive start/stop functions */
-extern void ath5k_hw_start_rx_pcu(struct ath5k_hw *ah);
-extern void ath5k_hw_stop_rx_pcu(struct ath5k_hw *ah);
+void ath5k_hw_start_rx_pcu(struct ath5k_hw *ah);
+void ath5k_hw_stop_rx_pcu(struct ath5k_hw *ah);
 /* RX Filter functions */
-extern void ath5k_hw_set_mcast_filter(struct ath5k_hw *ah, u32 filter0, u32 filter1);
-extern int ath5k_hw_set_mcast_filter_idx(struct ath5k_hw *ah, u32 index);
-extern int ath5k_hw_clear_mcast_filter_idx(struct ath5k_hw *ah, u32 index);
-extern u32 ath5k_hw_get_rx_filter(struct ath5k_hw *ah);
-extern void ath5k_hw_set_rx_filter(struct ath5k_hw *ah, u32 filter);
+void ath5k_hw_set_mcast_filter(struct ath5k_hw *ah, u32 filter0, u32 filter1);
+u32 ath5k_hw_get_rx_filter(struct ath5k_hw *ah);
+void ath5k_hw_set_rx_filter(struct ath5k_hw *ah, u32 filter);
 /* Beacon control functions */
-extern u32 ath5k_hw_get_tsf32(struct ath5k_hw *ah);
-extern u64 ath5k_hw_get_tsf64(struct ath5k_hw *ah);
-extern void ath5k_hw_set_tsf64(struct ath5k_hw *ah, u64 tsf64);
-extern void ath5k_hw_reset_tsf(struct ath5k_hw *ah);
-extern void ath5k_hw_init_beacon(struct ath5k_hw *ah, u32 next_beacon, u32 interval);
-#if 0
-extern int ath5k_hw_set_beacon_timers(struct ath5k_hw *ah, const struct ath5k_beacon_state *state);
-extern void ath5k_hw_reset_beacon(struct ath5k_hw *ah);
-extern int ath5k_hw_beaconq_finish(struct ath5k_hw *ah, unsigned long phys_addr);
-#endif
+u64 ath5k_hw_get_tsf64(struct ath5k_hw *ah);
+void ath5k_hw_set_tsf64(struct ath5k_hw *ah, u64 tsf64);
+void ath5k_hw_reset_tsf(struct ath5k_hw *ah);
+void ath5k_hw_init_beacon(struct ath5k_hw *ah, u32 next_beacon, u32 interval);
 /* ACK bit rate */
 void ath5k_hw_set_ack_bitrate_high(struct ath5k_hw *ah, bool high);
-/* ACK/CTS Timeouts */
-extern int ath5k_hw_set_ack_timeout(struct ath5k_hw *ah, unsigned int timeout);
-extern unsigned int ath5k_hw_get_ack_timeout(struct ath5k_hw *ah);
-extern int ath5k_hw_set_cts_timeout(struct ath5k_hw *ah, unsigned int timeout);
-extern unsigned int ath5k_hw_get_cts_timeout(struct ath5k_hw *ah);
 /* Clock rate related functions */
 unsigned int ath5k_hw_htoclock(struct ath5k_hw *ah, unsigned int usec);
 unsigned int ath5k_hw_clocktoh(struct ath5k_hw *ah, unsigned int clock);
 unsigned int ath5k_hw_get_clockrate(struct ath5k_hw *ah);
 /* Key table (WEP) functions */
-extern int ath5k_hw_reset_key(struct ath5k_hw *ah, u16 entry);
-extern int ath5k_hw_is_key_valid(struct ath5k_hw *ah, u16 entry);
-extern int ath5k_hw_set_key(struct ath5k_hw *ah, u16 entry, const struct ieee80211_key_conf *key, const u8 *mac);
-extern int ath5k_hw_set_key_lladdr(struct ath5k_hw *ah, u16 entry, const u8 *mac);
+int ath5k_hw_reset_key(struct ath5k_hw *ah, u16 entry);
+int ath5k_hw_set_key(struct ath5k_hw *ah, u16 entry,
+                     const struct ieee80211_key_conf *key, const u8 *mac);
+int ath5k_hw_set_key_lladdr(struct ath5k_hw *ah, u16 entry, const u8 *mac);
 
 /* Queue Control Unit, DFS Control Unit Functions */
-extern int ath5k_hw_get_tx_queueprops(struct ath5k_hw *ah, int queue, struct ath5k_txq_info *queue_info);
-extern int ath5k_hw_set_tx_queueprops(struct ath5k_hw *ah, int queue,
-                                const struct ath5k_txq_info *queue_info);
-extern int ath5k_hw_setup_tx_queue(struct ath5k_hw *ah,
-                                enum ath5k_tx_queue queue_type,
-                                struct ath5k_txq_info *queue_info);
-extern u32 ath5k_hw_num_tx_pending(struct ath5k_hw *ah, unsigned int queue);
-extern void ath5k_hw_release_tx_queue(struct ath5k_hw *ah, unsigned int queue);
-extern int ath5k_hw_reset_tx_queue(struct ath5k_hw *ah, unsigned int queue);
-extern unsigned int ath5k_hw_get_slot_time(struct ath5k_hw *ah);
-extern int ath5k_hw_set_slot_time(struct ath5k_hw *ah, unsigned int slot_time);
+int ath5k_hw_get_tx_queueprops(struct ath5k_hw *ah, int queue,
+                               struct ath5k_txq_info *queue_info);
+int ath5k_hw_set_tx_queueprops(struct ath5k_hw *ah, int queue,
+                               const struct ath5k_txq_info *queue_info);
+int ath5k_hw_setup_tx_queue(struct ath5k_hw *ah,
+                            enum ath5k_tx_queue queue_type,
+                            struct ath5k_txq_info *queue_info);
+u32 ath5k_hw_num_tx_pending(struct ath5k_hw *ah, unsigned int queue);
+void ath5k_hw_release_tx_queue(struct ath5k_hw *ah, unsigned int queue);
+int ath5k_hw_reset_tx_queue(struct ath5k_hw *ah, unsigned int queue);
+int ath5k_hw_set_slot_time(struct ath5k_hw *ah, unsigned int slot_time);
 
 /* Hardware Descriptor Functions */
-extern int ath5k_hw_init_desc_functions(struct ath5k_hw *ah);
+int ath5k_hw_init_desc_functions(struct ath5k_hw *ah);
 
 /* GPIO Functions */
-extern void ath5k_hw_set_ledstate(struct ath5k_hw *ah, unsigned int state);
-extern int ath5k_hw_set_gpio_input(struct ath5k_hw *ah, u32 gpio);
-extern int ath5k_hw_set_gpio_output(struct ath5k_hw *ah, u32 gpio);
-extern u32 ath5k_hw_get_gpio(struct ath5k_hw *ah, u32 gpio);
-extern int ath5k_hw_set_gpio(struct ath5k_hw *ah, u32 gpio, u32 val);
-extern void ath5k_hw_set_gpio_intr(struct ath5k_hw *ah, unsigned int gpio, u32 interrupt_level);
+void ath5k_hw_set_ledstate(struct ath5k_hw *ah, unsigned int state);
+int ath5k_hw_set_gpio_input(struct ath5k_hw *ah, u32 gpio);
+int ath5k_hw_set_gpio_output(struct ath5k_hw *ah, u32 gpio);
+u32 ath5k_hw_get_gpio(struct ath5k_hw *ah, u32 gpio);
+int ath5k_hw_set_gpio(struct ath5k_hw *ah, u32 gpio, u32 val);
+void ath5k_hw_set_gpio_intr(struct ath5k_hw *ah, unsigned int gpio,
+                            u32 interrupt_level);
 
 /* rfkill Functions */
-extern void ath5k_rfkill_hw_start(struct ath5k_hw *ah);
-extern void ath5k_rfkill_hw_stop(struct ath5k_hw *ah);
+void ath5k_rfkill_hw_start(struct ath5k_hw *ah);
+void ath5k_rfkill_hw_stop(struct ath5k_hw *ah);
 
 /* Misc functions */
 int ath5k_hw_set_capabilities(struct ath5k_hw *ah);
-extern int ath5k_hw_get_capability(struct ath5k_hw *ah, enum ath5k_capability_type cap_type, u32 capability, u32 *result);
-extern int ath5k_hw_enable_pspoll(struct ath5k_hw *ah, u8 *bssid, u16 assoc_id);
-extern int ath5k_hw_disable_pspoll(struct ath5k_hw *ah);
+int ath5k_hw_get_capability(struct ath5k_hw *ah,
+                            enum ath5k_capability_type cap_type, u32 capability,
+                            u32 *result);
+int ath5k_hw_enable_pspoll(struct ath5k_hw *ah, u8 *bssid, u16 assoc_id);
+int ath5k_hw_disable_pspoll(struct ath5k_hw *ah);
 
 /* Initial register settings functions */
-extern int ath5k_hw_write_initvals(struct ath5k_hw *ah, u8 mode, bool change_channel);
+int ath5k_hw_write_initvals(struct ath5k_hw *ah, u8 mode, bool change_channel);
 
 /* Initialize RF */
-extern int ath5k_hw_rfregs_init(struct ath5k_hw *ah,
-                                struct ieee80211_channel *channel,
-                                unsigned int mode);
-extern int ath5k_hw_rfgain_init(struct ath5k_hw *ah, unsigned int freq);
-extern enum ath5k_rfgain ath5k_hw_gainf_calibrate(struct ath5k_hw *ah);
-extern int ath5k_hw_rfgain_opt_init(struct ath5k_hw *ah);
+int ath5k_hw_rfregs_init(struct ath5k_hw *ah,
+                         struct ieee80211_channel *channel,
+                         unsigned int mode);
+int ath5k_hw_rfgain_init(struct ath5k_hw *ah, unsigned int freq);
+enum ath5k_rfgain ath5k_hw_gainf_calibrate(struct ath5k_hw *ah);
+int ath5k_hw_rfgain_opt_init(struct ath5k_hw *ah);
 /* PHY/RF channel functions */
-extern bool ath5k_channel_ok(struct ath5k_hw *ah, u16 freq, unsigned int flags);
-extern int ath5k_hw_channel(struct ath5k_hw *ah, struct ieee80211_channel *channel);
+bool ath5k_channel_ok(struct ath5k_hw *ah, u16 freq, unsigned int flags);
+int ath5k_hw_channel(struct ath5k_hw *ah, struct ieee80211_channel *channel);
 /* PHY calibration */
 void ath5k_hw_init_nfcal_hist(struct ath5k_hw *ah);
-extern int ath5k_hw_phy_calibrate(struct ath5k_hw *ah, struct ieee80211_channel *channel);
-extern int ath5k_hw_noise_floor_calibration(struct ath5k_hw *ah, short freq);
-extern s16 ath5k_hw_get_noise_floor(struct ath5k_hw *ah);
-extern void ath5k_hw_calibration_poll(struct ath5k_hw *ah);
+int ath5k_hw_phy_calibrate(struct ath5k_hw *ah,
+                           struct ieee80211_channel *channel);
+void ath5k_hw_calibration_poll(struct ath5k_hw *ah);
 /* Spur mitigation */
 bool ath5k_hw_chan_has_spur_noise(struct ath5k_hw *ah,
-                                struct ieee80211_channel *channel);
+                                  struct ieee80211_channel *channel);
 void ath5k_hw_set_spur_mitigation_filter(struct ath5k_hw *ah,
-                                struct ieee80211_channel *channel);
+                                         struct ieee80211_channel *channel);
 /* Misc PHY functions */
-extern u16 ath5k_hw_radio_revision(struct ath5k_hw *ah, unsigned int chan);
-extern int ath5k_hw_phy_disable(struct ath5k_hw *ah);
+u16 ath5k_hw_radio_revision(struct ath5k_hw *ah, unsigned int chan);
+int ath5k_hw_phy_disable(struct ath5k_hw *ah);
 /* Antenna control */
-extern void ath5k_hw_set_antenna_mode(struct ath5k_hw *ah, u8 ant_mode);
-extern void ath5k_hw_set_def_antenna(struct ath5k_hw *ah, u8 ant);
-extern unsigned int ath5k_hw_get_def_antenna(struct ath5k_hw *ah);
+void ath5k_hw_set_antenna_mode(struct ath5k_hw *ah, u8 ant_mode);
 /* TX power setup */
-extern int ath5k_hw_txpower(struct ath5k_hw *ah, struct ieee80211_channel *channel, u8 ee_mode, u8 txpower);
-extern int ath5k_hw_set_txpower_limit(struct ath5k_hw *ah, u8 txpower);
+int ath5k_hw_txpower(struct ath5k_hw *ah, struct ieee80211_channel *channel,
+                     u8 ee_mode, u8 txpower);
+int ath5k_hw_set_txpower_limit(struct ath5k_hw *ah, u8 txpower);
 
 /*
  * Functions used internaly
@@ -1335,29 +1296,6 @@ static inline void ath5k_hw_reg_write(struct ath5k_hw *ah, u32 val, u16 reg)
         iowrite32(val, ah->ah_iobase + reg);
 }
 
-#if defined(_ATH5K_RESET) || defined(_ATH5K_PHY)
-/*
- * Check if a register write has been completed
- */
-static int ath5k_hw_register_timeout(struct ath5k_hw *ah, u32 reg, u32 flag,
-                u32 val, bool is_set)
-{
-        int i;
-        u32 data;
-
-        for (i = AR5K_TUNE_REGISTER_TIMEOUT; i > 0; i--) {
-                data = ath5k_hw_reg_read(ah, reg);
-                if (is_set && (data & flag))
-                        break;
-                else if ((data & flag) == val)
-                        break;
-                udelay(15);
-        }
-
-        return (i <= 0) ? -EAGAIN : 0;
-}
-#endif
-
 static inline u32 ath5k_hw_bitswap(u32 val, unsigned int bits)
 {
         u32 retval = 0, bit, i;
@@ -1370,9 +1308,4 @@ static inline u32 ath5k_hw_bitswap(u32 val, unsigned int bits)
         return retval;
 }
 
-static inline int ath5k_pad_size(int hdrlen)
-{
-        return (hdrlen < 24) ? 0 : hdrlen & 3;
-}
-
 #endif
diff --git a/drivers/net/wireless/ath/ath5k/attach.c b/drivers/net/wireless/ath/ath5k/attach.c
index 42284445b75e..dd4099a2ff15 100644
--- a/drivers/net/wireless/ath/ath5k/attach.c
+++ b/drivers/net/wireless/ath/ath5k/attach.c
@@ -113,7 +113,6 @@ int ath5k_hw_attach(struct ath5k_softc *sc)
         /*
          * HW information
          */
-        ah->ah_op_mode = NL80211_IFTYPE_STATION;
         ah->ah_radar.r_enabled = AR5K_TUNE_RADAR_ALERT;
         ah->ah_turbo = false;
         ah->ah_txpower.txp_tpc = AR5K_TUNE_TPC_TXPOWER;
@@ -123,6 +122,7 @@ int ath5k_hw_attach(struct ath5k_softc *sc)
         ah->ah_cw_min = AR5K_TUNE_CWMIN;
         ah->ah_limit_tx_retries = AR5K_INIT_TX_RETRY;
         ah->ah_software_retry = false;
+        ah->ah_ant_mode = AR5K_ANTMODE_DEFAULT;
 
         /*
          * Find the mac version
@@ -148,7 +148,6 @@ int ath5k_hw_attach(struct ath5k_softc *sc)
         /* Get MAC, PHY and RADIO revisions */
         ah->ah_mac_srev = srev;
         ah->ah_mac_version = AR5K_REG_MS(srev, AR5K_SREV_VER);
-        ah->ah_mac_revision = AR5K_REG_MS(srev, AR5K_SREV_REV);
         ah->ah_phy_revision = ath5k_hw_reg_read(ah, AR5K_PHY_CHIP_ID) &
                         0xffffffff;
         ah->ah_radio_5ghz_revision = ath5k_hw_radio_revision(ah,
@@ -327,7 +326,7 @@ int ath5k_hw_attach(struct ath5k_softc *sc)
         /* Set BSSID to bcast address: ff:ff:ff:ff:ff:ff for now */
         memcpy(common->curbssid, ath_bcast_mac, ETH_ALEN);
         ath5k_hw_set_associd(ah);
-        ath5k_hw_set_opmode(ah);
+        ath5k_hw_set_opmode(ah, sc->opmode);
 
         ath5k_hw_rfgain_opt_init(ah);
 
diff --git a/drivers/net/wireless/ath/ath5k/base.c b/drivers/net/wireless/ath/ath5k/base.c
index 8dce0077b023..53a2340f52bc 100644
--- a/drivers/net/wireless/ath/ath5k/base.c
+++ b/drivers/net/wireless/ath/ath5k/base.c
@@ -198,7 +198,7 @@ static void __devexit	ath5k_pci_remove(struct pci_dev *pdev);
 static int              ath5k_pci_suspend(struct device *dev);
 static int              ath5k_pci_resume(struct device *dev);
 
-SIMPLE_DEV_PM_OPS(ath5k_pm_ops, ath5k_pci_suspend, ath5k_pci_resume);
+static SIMPLE_DEV_PM_OPS(ath5k_pm_ops, ath5k_pci_suspend, ath5k_pci_resume);
 #define ATH5K_PM_OPS    (&ath5k_pm_ops)
 #else
 #define ATH5K_PM_OPS    NULL
@@ -230,7 +230,7 @@ static void ath5k_remove_interface(struct ieee80211_hw *hw,
                 struct ieee80211_vif *vif);
 static int ath5k_config(struct ieee80211_hw *hw, u32 changed);
 static u64 ath5k_prepare_multicast(struct ieee80211_hw *hw,
-                                   int mc_count, struct dev_addr_list *mc_list);
+                                   struct netdev_hw_addr_list *mc_list);
 static void ath5k_configure_filter(struct ieee80211_hw *hw,
                 unsigned int changed_flags,
                 unsigned int *new_flags,
@@ -307,7 +307,7 @@ static int 	ath5k_rxbuf_setup(struct ath5k_softc *sc,
                                 struct ath5k_buf *bf);
 static int      ath5k_txbuf_setup(struct ath5k_softc *sc,
                                 struct ath5k_buf *bf,
-                                struct ath5k_txq *txq);
+                                struct ath5k_txq *txq, int padsize);
 static inline void ath5k_txbuf_free(struct ath5k_softc *sc,
                                 struct ath5k_buf *bf)
 {
@@ -1137,8 +1137,6 @@ ath5k_mode_setup(struct ath5k_softc *sc)
         struct ath5k_hw *ah = sc->ah;
         u32 rfilt;
 
-        ah->ah_op_mode = sc->opmode;
-
         /* configure rx filter */
         rfilt = sc->filter_flags;
         ath5k_hw_set_rx_filter(ah, rfilt);
@@ -1147,8 +1145,9 @@ ath5k_mode_setup(struct ath5k_softc *sc)
                 ath5k_hw_set_bssid_mask(ah, sc->bssidmask);
 
         /* configure operational mode */
-        ath5k_hw_set_opmode(ah);
+        ath5k_hw_set_opmode(ah, sc->opmode);
 
+        ATH5K_DBG(sc, ATH5K_DEBUG_MODE, "mode setup opmode %d\n", sc->opmode);
         ATH5K_DBG(sc, ATH5K_DEBUG_MODE, "RX filter 0x%x\n", rfilt);
 }
 
@@ -1271,7 +1270,7 @@ static enum ath5k_pkt_type get_hw_packet_type(struct sk_buff *skb)
 
 static int
 ath5k_txbuf_setup(struct ath5k_softc *sc, struct ath5k_buf *bf,
-                  struct ath5k_txq *txq)
+                  struct ath5k_txq *txq, int padsize)
 {
         struct ath5k_hw *ah = sc->ah;
         struct ath5k_desc *ds = bf->desc;
@@ -1323,7 +1322,7 @@ ath5k_txbuf_setup(struct ath5k_softc *sc, struct ath5k_buf *bf,
                         sc->vif, pktlen, info));
         }
         ret = ah->ah_setup_tx_desc(ah, ds, pktlen,
-                ieee80211_get_hdrlen_from_skb(skb),
+                ieee80211_get_hdrlen_from_skb(skb), padsize,
                 get_hw_packet_type(skb),
                 (sc->power_level * 2),
                 hw_rate,
@@ -1805,6 +1804,67 @@ ath5k_check_ibss_tsf(struct ath5k_softc *sc, struct sk_buff *skb,
         }
 }
 
+/*
+ * Compute padding position. skb must contains an IEEE 802.11 frame
+ */
+static int ath5k_common_padpos(struct sk_buff *skb)
+{
+        struct ieee80211_hdr * hdr = (struct ieee80211_hdr *)skb->data;
+        __le16 frame_control = hdr->frame_control;
+        int padpos = 24;
+
+        if (ieee80211_has_a4(frame_control)) {
+                padpos += ETH_ALEN;
+        }
+        if (ieee80211_is_data_qos(frame_control)) {
+                padpos += IEEE80211_QOS_CTL_LEN;
+        }
+
+        return padpos;
+}
+
+/*
+ * This function expects a 802.11 frame and returns the number of
+ * bytes added, or -1 if we don't have enought header room.
+ */
+
+static int ath5k_add_padding(struct sk_buff *skb)
+{
+        int padpos = ath5k_common_padpos(skb);
+        int padsize = padpos & 3;
+
+        if (padsize && skb->len>padpos) {
+
+                if (skb_headroom(skb) < padsize)
+                        return -1;
+
+                skb_push(skb, padsize);
+                memmove(skb->data, skb->data+padsize, padpos);
+                return padsize;
+        }
+
+        return 0;
+}
+
+/*
+ * This function expects a 802.11 frame and returns the number of
+ * bytes removed
+ */
+
+static int ath5k_remove_padding(struct sk_buff *skb)
+{
+        int padpos = ath5k_common_padpos(skb);
+        int padsize = padpos & 3;
+
+        if (padsize && skb->len>=padpos+padsize) {
+                memmove(skb->data + padsize, skb->data, padpos);
+                skb_pull(skb, padsize);
+                return padsize;
+        }
+
+        return 0;
+}
+
 static void
 ath5k_tasklet_rx(unsigned long data)
 {
@@ -1818,8 +1878,6 @@ ath5k_tasklet_rx(unsigned long data)
         struct ath5k_buf *bf;
         struct ath5k_desc *ds;
         int ret;
-        int hdrlen;
-        int padsize;
         int rx_flag;
 
         spin_lock(&sc->rxbuflock);
@@ -1844,18 +1902,28 @@ ath5k_tasklet_rx(unsigned long data)
                         break;
                 else if (unlikely(ret)) {
                         ATH5K_ERR(sc, "error in processing rx descriptor\n");
+                        sc->stats.rxerr_proc++;
                         spin_unlock(&sc->rxbuflock);
                         return;
                 }
 
+                sc->stats.rx_all_count++;
+
                 if (unlikely(rs.rs_more)) {
                         ATH5K_WARN(sc, "unsupported jumbo\n");
+                        sc->stats.rxerr_jumbo++;
                         goto next;
                 }
 
                 if (unlikely(rs.rs_status)) {
-                        if (rs.rs_status & AR5K_RXERR_PHY)
+                        if (rs.rs_status & AR5K_RXERR_CRC)
+                                sc->stats.rxerr_crc++;
+                        if (rs.rs_status & AR5K_RXERR_FIFO)
+                                sc->stats.rxerr_fifo++;
+                        if (rs.rs_status & AR5K_RXERR_PHY) {
+                                sc->stats.rxerr_phy++;
                                 goto next;
+                        }
                         if (rs.rs_status & AR5K_RXERR_DECRYPT) {
                                 /*
                                  * Decrypt error.  If the error occurred
@@ -1867,12 +1935,14 @@ ath5k_tasklet_rx(unsigned long data)
                                  *
                                  * XXX do key cache faulting
                                  */
+                                sc->stats.rxerr_decrypt++;
                                 if (rs.rs_keyix == AR5K_RXKEYIX_INVALID &&
                                     !(rs.rs_status & AR5K_RXERR_CRC))
                                         goto accept;
                         }
                         if (rs.rs_status & AR5K_RXERR_MIC) {
                                 rx_flag |= RX_FLAG_MMIC_ERROR;
+                                sc->stats.rxerr_mic++;
                                 goto accept;
                         }
 
@@ -1904,12 +1974,8 @@ accept:
                  * bytes and we can optimize this a bit. In addition, we must
                  * not try to remove padding from short control frames that do
                  * not have payload. */
-                hdrlen = ieee80211_get_hdrlen_from_skb(skb);
-                padsize = ath5k_pad_size(hdrlen);
-                if (padsize) {
-                        memmove(skb->data + padsize, skb->data, hdrlen);
-                        skb_pull(skb, padsize);
-                }
+                ath5k_remove_padding(skb);
+
                 rxs = IEEE80211_SKB_RXCB(skb);
 
                 /*
@@ -1942,6 +2008,12 @@ accept:
                 rxs->signal = rxs->noise + rs.rs_rssi;
 
                 rxs->antenna = rs.rs_antenna;
+
+                if (rs.rs_antenna > 0 && rs.rs_antenna < 5)
+                        sc->stats.antenna_rx[rs.rs_antenna]++;
+                else
+                        sc->stats.antenna_rx[0]++; /* invalid */
+
                 rxs->rate_idx = ath5k_hw_to_driver_rix(sc, rs.rs_rate);
                 rxs->flag |= ath5k_rx_decrypted(sc, ds, skb, &rs);
 
@@ -1996,6 +2068,7 @@ ath5k_tx_processq(struct ath5k_softc *sc, struct ath5k_txq *txq)
                         break;
                 }
 
+                sc->stats.tx_all_count++;
                 skb = bf->skb;
                 info = IEEE80211_SKB_CB(skb);
                 bf->skb = NULL;
@@ -2022,13 +2095,30 @@ ath5k_tx_processq(struct ath5k_softc *sc, struct ath5k_txq *txq)
 
                 if (unlikely(ts.ts_status)) {
                         sc->ll_stats.dot11ACKFailureCount++;
-                        if (ts.ts_status & AR5K_TXERR_FILT)
+                        if (ts.ts_status & AR5K_TXERR_FILT) {
                                 info->flags |= IEEE80211_TX_STAT_TX_FILTERED;
+                                sc->stats.txerr_filt++;
+                        }
+                        if (ts.ts_status & AR5K_TXERR_XRETRY)
+                                sc->stats.txerr_retry++;
+                        if (ts.ts_status & AR5K_TXERR_FIFO)
+                                sc->stats.txerr_fifo++;
                 } else {
                         info->flags |= IEEE80211_TX_STAT_ACK;
                         info->status.ack_signal = ts.ts_rssi;
                 }
 
+                /*
+                 * Remove MAC header padding before giving the frame
+                 * back to mac80211.
+                 */
+                ath5k_remove_padding(skb);
+
+                if (ts.ts_antenna > 0 && ts.ts_antenna < 5)
+                        sc->stats.antenna_tx[ts.ts_antenna]++;
+                else
+                        sc->stats.antenna_tx[0]++; /* invalid */
+
                 ieee80211_tx_status(sc->hw, skb);
 
                 spin_lock(&sc->txbuflock);
@@ -2072,6 +2162,7 @@ ath5k_beacon_setup(struct ath5k_softc *sc, struct ath5k_buf *bf)
         int ret = 0;
         u8 antenna;
         u32 flags;
+        const int padsize = 0;
 
         bf->skbaddr = pci_map_single(sc->pdev, skb->data, skb->len,
                         PCI_DMA_TODEVICE);
@@ -2119,7 +2210,7 @@ ath5k_beacon_setup(struct ath5k_softc *sc, struct ath5k_buf *bf)
          * from tx power (value is in dB units already) */
         ds->ds_data = bf->skbaddr;
         ret = ah->ah_setup_tx_desc(ah, ds, skb->len,
-                        ieee80211_get_hdrlen_from_skb(skb),
+                        ieee80211_get_hdrlen_from_skb(skb), padsize,
                         AR5K_PKT_TYPE_BEACON, (sc->power_level * 2),
                         ieee80211_get_tx_rate(sc->hw, info)->hw_value,
                         1, AR5K_TXKEYIX_INVALID,
@@ -2679,7 +2770,6 @@ static int ath5k_tx_queue(struct ieee80211_hw *hw, struct sk_buff *skb,
         struct ath5k_softc *sc = hw->priv;
         struct ath5k_buf *bf;
         unsigned long flags;
-        int hdrlen;
         int padsize;
 
         ath5k_debug_dump_skb(sc, skb, "TX  ", 1);
@@ -2691,17 +2781,11 @@ static int ath5k_tx_queue(struct ieee80211_hw *hw, struct sk_buff *skb,
          * the hardware expects the header padded to 4 byte boundaries
          * if this is not the case we add the padding after the header
          */
-        hdrlen = ieee80211_get_hdrlen_from_skb(skb);
-        padsize = ath5k_pad_size(hdrlen);
-        if (padsize) {
-
-                if (skb_headroom(skb) < padsize) {
-                        ATH5K_ERR(sc, "tx hdrlen not %%4: %d not enough"
-                                  " headroom to pad %d\n", hdrlen, padsize);
-                        goto drop_packet;
-                }
-                skb_push(skb, padsize);
-                memmove(skb->data, skb->data+padsize, hdrlen);
+        padsize = ath5k_add_padding(skb);
+        if (padsize < 0) {
+                ATH5K_ERR(sc, "tx hdrlen not %%4: not enough"
+                          " headroom to pad");
+                goto drop_packet;
         }
 
         spin_lock_irqsave(&sc->txbuflock, flags);
@@ -2720,7 +2804,7 @@ static int ath5k_tx_queue(struct ieee80211_hw *hw, struct sk_buff *skb,
 
         bf->skb = skb;
 
-        if (ath5k_txbuf_setup(sc, bf, txq)) {
+        if (ath5k_txbuf_setup(sc, bf, txq, padsize)) {
                 bf->skb = NULL;
                 spin_lock_irqsave(&sc->txbuflock, flags);
                 list_add_tail(&bf->list, &sc->txbuf);
@@ -2835,6 +2919,8 @@ static int ath5k_add_interface(struct ieee80211_hw *hw,
                 goto end;
         }
 
+        ATH5K_DBG(sc, ATH5K_DEBUG_MODE, "add interface mode %d\n", sc->opmode);
+
         ath5k_hw_set_lladdr(sc->ah, vif->addr);
         ath5k_mode_setup(sc);
 
@@ -2905,7 +2991,7 @@ ath5k_config(struct ieee80211_hw *hw, u32 changed)
          * then we must allow the user to set how many tx antennas we
          * have available
          */
-        ath5k_hw_set_antenna_mode(ah, AR5K_ANTMODE_DEFAULT);
+        ath5k_hw_set_antenna_mode(ah, ah->ah_ant_mode);
 
 unlock:
         mutex_unlock(&sc->lock);
@@ -2913,22 +2999,20 @@ unlock:
 }
 
 static u64 ath5k_prepare_multicast(struct ieee80211_hw *hw,
-                                   int mc_count, struct dev_addr_list *mclist)
+                                   struct netdev_hw_addr_list *mc_list)
 {
         u32 mfilt[2], val;
-        int i;
         u8 pos;
+        struct netdev_hw_addr *ha;
 
         mfilt[0] = 0;
         mfilt[1] = 1;
 
-        for (i = 0; i < mc_count; i++) {
-                if (!mclist)
-                        break;
+        netdev_hw_addr_list_for_each(ha, mc_list) {
                 /* calculate XOR of eight 6-bit values */
-                val = get_unaligned_le32(mclist->dmi_addr + 0);
+                val = get_unaligned_le32(ha->addr + 0);
                 pos = (val >> 18) ^ (val >> 12) ^ (val >> 6) ^ val;
-                val = get_unaligned_le32(mclist->dmi_addr + 3);
+                val = get_unaligned_le32(ha->addr + 3);
                 pos ^= (val >> 18) ^ (val >> 12) ^ (val >> 6) ^ val;
                 pos &= 0x3f;
                 mfilt[pos / 32] |= (1 << (pos % 32));
@@ -2936,8 +3020,7 @@ static u64 ath5k_prepare_multicast(struct ieee80211_hw *hw,
                 * but not sure, needs testing, if we do use this we'd
                 * neet to inform below to not reset the mcast */
                 /* ath5k_hw_set_mcast_filterindex(ah,
-                 *      mclist->dmi_addr[5]); */
-                mclist = mclist->next;
+                 *      ha->addr[5]); */
         }
 
         return ((u64)(mfilt[1]) << 32) | mfilt[0];
diff --git a/drivers/net/wireless/ath/ath5k/base.h b/drivers/net/wireless/ath/ath5k/base.h
index 7e1a88a5abdb..33f1d8b87ee1 100644
--- a/drivers/net/wireless/ath/ath5k/base.h
+++ b/drivers/net/wireless/ath/ath5k/base.h
@@ -105,6 +105,24 @@ struct ath5k_rfkill {
         struct tasklet_struct toggleq;
 };
 
+/* statistics (only used for debugging now) */
+struct ath5k_statistics {
+        unsigned int antenna_rx[5];     /* frames count per antenna RX */
+        unsigned int antenna_tx[5];     /* frames count per antenna TX */
+        unsigned int rx_all_count;      /* all RX frames, including errors */
+        unsigned int tx_all_count;      /* all TX frames, including errors */
+        unsigned int rxerr_crc;
+        unsigned int rxerr_phy;
+        unsigned int rxerr_fifo;
+        unsigned int rxerr_decrypt;
+        unsigned int rxerr_mic;
+        unsigned int rxerr_proc;
+        unsigned int rxerr_jumbo;
+        unsigned int txerr_retry;
+        unsigned int txerr_fifo;
+        unsigned int txerr_filt;
+};
+
 #if CHAN_DEBUG
 #define ATH_CHAN_MAX    (26+26+26+200+200)
 #else
@@ -191,6 +209,8 @@ struct ath5k_softc {
         int                     power_level;    /* Requested tx power in dbm */
         bool                    assoc;          /* associate state */
         bool                    enable_beacon;  /* true if beacons are on */
+
+        struct ath5k_statistics stats;
 };
 
 #define ath5k_hw_hasbssidmask(_ah) \
diff --git a/drivers/net/wireless/ath/ath5k/caps.c b/drivers/net/wireless/ath/ath5k/caps.c
index 367a6c7d3cc7..e618e71b1ce6 100644
--- a/drivers/net/wireless/ath/ath5k/caps.c
+++ b/drivers/net/wireless/ath/ath5k/caps.c
@@ -102,9 +102,6 @@ int ath5k_hw_set_capabilities(struct ath5k_hw *ah)
                 }
         }
 
-        /* GPIO */
-        ah->ah_gpio_npins = AR5K_NUM_GPIO;
-
         /* Set number of supported TX queues */
         if (ah->ah_version == AR5K_AR5210)
                 ah->ah_capabilities.cap_queues.q_tx_num =
diff --git a/drivers/net/wireless/ath/ath5k/debug.c b/drivers/net/wireless/ath/ath5k/debug.c
index 747508c15d34..bccd4a78027e 100644
--- a/drivers/net/wireless/ath/ath5k/debug.c
+++ b/drivers/net/wireless/ath/ath5k/debug.c
@@ -364,6 +364,207 @@ static const struct file_operations fops_debug = {
 };
 
 
+/* debugfs: antenna */
+
+static ssize_t read_file_antenna(struct file *file, char __user *user_buf,
+                                   size_t count, loff_t *ppos)
+{
+        struct ath5k_softc *sc = file->private_data;
+        char buf[700];
+        unsigned int len = 0;
+        unsigned int i;
+        unsigned int v;
+
+        len += snprintf(buf+len, sizeof(buf)-len, "antenna mode\t%d\n",
+                sc->ah->ah_ant_mode);
+        len += snprintf(buf+len, sizeof(buf)-len, "default antenna\t%d\n",
+                sc->ah->ah_def_ant);
+        len += snprintf(buf+len, sizeof(buf)-len, "tx antenna\t%d\n",
+                sc->ah->ah_tx_ant);
+
+        len += snprintf(buf+len, sizeof(buf)-len, "\nANTENNA\t\tRX\tTX\n");
+        for (i = 1; i < ARRAY_SIZE(sc->stats.antenna_rx); i++) {
+                len += snprintf(buf+len, sizeof(buf)-len,
+                        "[antenna %d]\t%d\t%d\n",
+                        i, sc->stats.antenna_rx[i], sc->stats.antenna_tx[i]);
+        }
+        len += snprintf(buf+len, sizeof(buf)-len, "[invalid]\t%d\t%d\n",
+                        sc->stats.antenna_rx[0], sc->stats.antenna_tx[0]);
+
+        v = ath5k_hw_reg_read(sc->ah, AR5K_DEFAULT_ANTENNA);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                        "\nAR5K_DEFAULT_ANTENNA\t0x%08x\n", v);
+
+        v = ath5k_hw_reg_read(sc->ah, AR5K_STA_ID1);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_STA_ID1_DEFAULT_ANTENNA\t%d\n",
+                (v & AR5K_STA_ID1_DEFAULT_ANTENNA) != 0);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_STA_ID1_DESC_ANTENNA\t%d\n",
+                (v & AR5K_STA_ID1_DESC_ANTENNA) != 0);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_STA_ID1_RTS_DEF_ANTENNA\t%d\n",
+                (v & AR5K_STA_ID1_RTS_DEF_ANTENNA) != 0);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_STA_ID1_SELFGEN_DEF_ANT\t%d\n",
+                (v & AR5K_STA_ID1_SELFGEN_DEF_ANT) != 0);
+
+        v = ath5k_hw_reg_read(sc->ah, AR5K_PHY_AGCCTL);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "\nAR5K_PHY_AGCCTL_OFDM_DIV_DIS\t%d\n",
+                (v & AR5K_PHY_AGCCTL_OFDM_DIV_DIS) != 0);
+
+        v = ath5k_hw_reg_read(sc->ah, AR5K_PHY_RESTART);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_PHY_RESTART_DIV_GC\t\t%x\n",
+                (v & AR5K_PHY_RESTART_DIV_GC) >> AR5K_PHY_RESTART_DIV_GC_S);
+
+        v = ath5k_hw_reg_read(sc->ah, AR5K_PHY_FAST_ANT_DIV);
+        len += snprintf(buf+len, sizeof(buf)-len,
+                "AR5K_PHY_FAST_ANT_DIV_EN\t%d\n",
+                (v & AR5K_PHY_FAST_ANT_DIV_EN) != 0);
+
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static ssize_t write_file_antenna(struct file *file,
+                                 const char __user *userbuf,
+                                 size_t count, loff_t *ppos)
+{
+        struct ath5k_softc *sc = file->private_data;
+        unsigned int i;
+        char buf[20];
+
+        if (copy_from_user(buf, userbuf, min(count, sizeof(buf))))
+                return -EFAULT;
+
+        if (strncmp(buf, "diversity", 9) == 0) {
+                ath5k_hw_set_antenna_mode(sc->ah, AR5K_ANTMODE_DEFAULT);
+                printk(KERN_INFO "ath5k debug: enable diversity\n");
+        } else if (strncmp(buf, "fixed-a", 7) == 0) {
+                ath5k_hw_set_antenna_mode(sc->ah, AR5K_ANTMODE_FIXED_A);
+                printk(KERN_INFO "ath5k debugfs: fixed antenna A\n");
+        } else if (strncmp(buf, "fixed-b", 7) == 0) {
+                ath5k_hw_set_antenna_mode(sc->ah, AR5K_ANTMODE_FIXED_B);
+                printk(KERN_INFO "ath5k debug: fixed antenna B\n");
+        } else if (strncmp(buf, "clear", 5) == 0) {
+                for (i = 0; i < ARRAY_SIZE(sc->stats.antenna_rx); i++) {
+                        sc->stats.antenna_rx[i] = 0;
+                        sc->stats.antenna_tx[i] = 0;
+                }
+                printk(KERN_INFO "ath5k debug: cleared antenna stats\n");
+        }
+        return count;
+}
+
+static const struct file_operations fops_antenna = {
+        .read = read_file_antenna,
+        .write = write_file_antenna,
+        .open = ath5k_debugfs_open,
+        .owner = THIS_MODULE,
+};
+
+
+/* debugfs: frameerrors */
+
+static ssize_t read_file_frameerrors(struct file *file, char __user *user_buf,
+                                   size_t count, loff_t *ppos)
+{
+        struct ath5k_softc *sc = file->private_data;
+        struct ath5k_statistics *st = &sc->stats;
+        char buf[700];
+        unsigned int len = 0;
+
+        len += snprintf(buf+len, sizeof(buf)-len,
+                        "RX\n---------------------\n");
+        len += snprintf(buf+len, sizeof(buf)-len, "CRC\t%d\t(%d%%)\n",
+                        st->rxerr_crc,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_crc*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "PHY\t%d\t(%d%%)\n",
+                        st->rxerr_phy,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_phy*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "FIFO\t%d\t(%d%%)\n",
+                        st->rxerr_fifo,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_fifo*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "decrypt\t%d\t(%d%%)\n",
+                        st->rxerr_decrypt,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_decrypt*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "MIC\t%d\t(%d%%)\n",
+                        st->rxerr_mic,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_mic*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "process\t%d\t(%d%%)\n",
+                        st->rxerr_proc,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_proc*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "jumbo\t%d\t(%d%%)\n",
+                        st->rxerr_jumbo,
+                        st->rx_all_count > 0 ?
+                                st->rxerr_jumbo*100/st->rx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "[RX all\t%d]\n",
+                        st->rx_all_count);
+
+        len += snprintf(buf+len, sizeof(buf)-len,
+                        "\nTX\n---------------------\n");
+        len += snprintf(buf+len, sizeof(buf)-len, "retry\t%d\t(%d%%)\n",
+                        st->txerr_retry,
+                        st->tx_all_count > 0 ?
+                                st->txerr_retry*100/st->tx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "FIFO\t%d\t(%d%%)\n",
+                        st->txerr_fifo,
+                        st->tx_all_count > 0 ?
+                                st->txerr_fifo*100/st->tx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "filter\t%d\t(%d%%)\n",
+                        st->txerr_filt,
+                        st->tx_all_count > 0 ?
+                                st->txerr_filt*100/st->tx_all_count : 0);
+        len += snprintf(buf+len, sizeof(buf)-len, "[TX all\t%d]\n",
+                        st->tx_all_count);
+
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static ssize_t write_file_frameerrors(struct file *file,
+                                 const char __user *userbuf,
+                                 size_t count, loff_t *ppos)
+{
+        struct ath5k_softc *sc = file->private_data;
+        struct ath5k_statistics *st = &sc->stats;
+        char buf[20];
+
+        if (copy_from_user(buf, userbuf, min(count, sizeof(buf))))
+                return -EFAULT;
+
+        if (strncmp(buf, "clear", 5) == 0) {
+                st->rxerr_crc = 0;
+                st->rxerr_phy = 0;
+                st->rxerr_fifo = 0;
+                st->rxerr_decrypt = 0;
+                st->rxerr_mic = 0;
+                st->rxerr_proc = 0;
+                st->rxerr_jumbo = 0;
+                st->rx_all_count = 0;
+                st->txerr_retry = 0;
+                st->txerr_fifo = 0;
+                st->txerr_filt = 0;
+                st->tx_all_count = 0;
+                printk(KERN_INFO "ath5k debug: cleared frameerrors stats\n");
+        }
+        return count;
+}
+
+static const struct file_operations fops_frameerrors = {
+        .read = read_file_frameerrors,
+        .write = write_file_frameerrors,
+        .open = ath5k_debugfs_open,
+        .owner = THIS_MODULE,
+};
+
+
 /* init */
 
 void
@@ -393,6 +594,15 @@ ath5k_debug_init_device(struct ath5k_softc *sc)
 
         sc->debug.debugfs_reset = debugfs_create_file("reset", S_IWUSR,
                                 sc->debug.debugfs_phydir, sc, &fops_reset);
+
+        sc->debug.debugfs_antenna = debugfs_create_file("antenna",
+                                S_IWUSR | S_IRUSR,
+                                sc->debug.debugfs_phydir, sc, &fops_antenna);
+
+        sc->debug.debugfs_frameerrors = debugfs_create_file("frameerrors",
+                                S_IWUSR | S_IRUSR,
+                                sc->debug.debugfs_phydir, sc,
+                                &fops_frameerrors);
 }
 
 void
@@ -408,6 +618,8 @@ ath5k_debug_finish_device(struct ath5k_softc *sc)
         debugfs_remove(sc->debug.debugfs_registers);
         debugfs_remove(sc->debug.debugfs_beacon);
         debugfs_remove(sc->debug.debugfs_reset);
+        debugfs_remove(sc->debug.debugfs_antenna);
+        debugfs_remove(sc->debug.debugfs_frameerrors);
         debugfs_remove(sc->debug.debugfs_phydir);
 }
 
diff --git a/drivers/net/wireless/ath/ath5k/debug.h b/drivers/net/wireless/ath/ath5k/debug.h
index 66f69f04e55e..da24ff52e274 100644
--- a/drivers/net/wireless/ath/ath5k/debug.h
+++ b/drivers/net/wireless/ath/ath5k/debug.h
@@ -74,6 +74,8 @@ struct ath5k_dbg_info {
         struct dentry           *debugfs_registers;
         struct dentry           *debugfs_beacon;
         struct dentry           *debugfs_reset;
+        struct dentry           *debugfs_antenna;
+        struct dentry           *debugfs_frameerrors;
 };
 
 /**
diff --git a/drivers/net/wireless/ath/ath5k/desc.c b/drivers/net/wireless/ath/ath5k/desc.c
index dc30a2b70a6b..9d920fb14d5d 100644
--- a/drivers/net/wireless/ath/ath5k/desc.c
+++ b/drivers/net/wireless/ath/ath5k/desc.c
@@ -35,7 +35,8 @@
  */
 static int
 ath5k_hw_setup_2word_tx_desc(struct ath5k_hw *ah, struct ath5k_desc *desc,
-        unsigned int pkt_len, unsigned int hdr_len, enum ath5k_pkt_type type,
+        unsigned int pkt_len, unsigned int hdr_len, int padsize,
+        enum ath5k_pkt_type type,
         unsigned int tx_power, unsigned int tx_rate0, unsigned int tx_tries0,
         unsigned int key_index, unsigned int antenna_mode, unsigned int flags,
         unsigned int rtscts_rate, unsigned int rtscts_duration)
@@ -71,7 +72,7 @@ ath5k_hw_setup_2word_tx_desc(struct ath5k_hw *ah, struct ath5k_desc *desc,
         /* Verify and set frame length */
 
         /* remove padding we might have added before */
-        frame_len = pkt_len - ath5k_pad_size(hdr_len) + FCS_LEN;
+        frame_len = pkt_len - padsize + FCS_LEN;
 
         if (frame_len & ~AR5K_2W_TX_DESC_CTL0_FRAME_LEN)
                 return -EINVAL;
@@ -100,7 +101,7 @@ ath5k_hw_setup_2word_tx_desc(struct ath5k_hw *ah, struct ath5k_desc *desc,
                         AR5K_REG_SM(hdr_len, AR5K_2W_TX_DESC_CTL0_HEADER_LEN);
         }
 
-        /*Diferences between 5210-5211*/
+        /*Differences between 5210-5211*/
         if (ah->ah_version == AR5K_AR5210) {
                 switch (type) {
                 case AR5K_PKT_TYPE_BEACON:
@@ -165,6 +166,7 @@ ath5k_hw_setup_2word_tx_desc(struct ath5k_hw *ah, struct ath5k_desc *desc,
  */
 static int ath5k_hw_setup_4word_tx_desc(struct ath5k_hw *ah,
         struct ath5k_desc *desc, unsigned int pkt_len, unsigned int hdr_len,
+        int padsize,
         enum ath5k_pkt_type type, unsigned int tx_power, unsigned int tx_rate0,
         unsigned int tx_tries0, unsigned int key_index,
         unsigned int antenna_mode, unsigned int flags,
@@ -206,7 +208,7 @@ static int ath5k_hw_setup_4word_tx_desc(struct ath5k_hw *ah,
         /* Verify and set frame length */
 
         /* remove padding we might have added before */
-        frame_len = pkt_len - ath5k_pad_size(hdr_len) + FCS_LEN;
+        frame_len = pkt_len - padsize + FCS_LEN;
 
         if (frame_len & ~AR5K_4W_TX_DESC_CTL0_FRAME_LEN)
                 return -EINVAL;
@@ -229,7 +231,7 @@ static int ath5k_hw_setup_4word_tx_desc(struct ath5k_hw *ah,
                 AR5K_REG_SM(antenna_mode, AR5K_4W_TX_DESC_CTL0_ANT_MODE_XMIT);
         tx_ctl->tx_control_1 |= AR5K_REG_SM(type,
                                         AR5K_4W_TX_DESC_CTL1_FRAME_TYPE);
-        tx_ctl->tx_control_2 = AR5K_REG_SM(tx_tries0 + AR5K_TUNE_HWTXTRIES,
+        tx_ctl->tx_control_2 = AR5K_REG_SM(tx_tries0,
                                         AR5K_4W_TX_DESC_CTL2_XMIT_TRIES0);
         tx_ctl->tx_control_3 = tx_rate0 & AR5K_4W_TX_DESC_CTL3_XMIT_RATE0;
 
@@ -668,12 +670,6 @@ int ath5k_hw_init_desc_functions(struct ath5k_hw *ah)
                 ah->ah_version != AR5K_AR5212)
                         return -ENOTSUPP;
 
-        /* XXX: What is this magic value and where is it used ? */
-        if (ah->ah_version == AR5K_AR5212)
-                ah->ah_magic = AR5K_EEPROM_MAGIC_5212;
-        else if (ah->ah_version == AR5K_AR5211)
-                ah->ah_magic = AR5K_EEPROM_MAGIC_5211;
-
         if (ah->ah_version == AR5K_AR5212) {
                 ah->ah_setup_rx_desc = ath5k_hw_setup_rx_desc;
                 ah->ah_setup_tx_desc = ath5k_hw_setup_4word_tx_desc;
diff --git a/drivers/net/wireless/ath/ath5k/eeprom.c b/drivers/net/wireless/ath/ath5k/eeprom.c
index 10b52262b232..a3cbfe4fc389 100644
--- a/drivers/net/wireless/ath/ath5k/eeprom.c
+++ b/drivers/net/wireless/ath/ath5k/eeprom.c
@@ -329,7 +329,8 @@ static int ath5k_eeprom_read_modes(struct ath5k_hw *ah, u32 *offset,
         ee->ee_x_gain[mode]             = (val >> 1) & 0xf;
         ee->ee_xpd[mode]                = val & 0x1;
 
-        if (ah->ah_ee_version >= AR5K_EEPROM_VERSION_4_0)
+        if (ah->ah_ee_version >= AR5K_EEPROM_VERSION_4_0 &&
+            mode != AR5K_EEPROM_MODE_11B)
                 ee->ee_fixed_bias[mode] = (val >> 13) & 0x1;
 
         if (ah->ah_ee_version >= AR5K_EEPROM_VERSION_3_3) {
@@ -339,6 +340,7 @@ static int ath5k_eeprom_read_modes(struct ath5k_hw *ah, u32 *offset,
                 if (mode == AR5K_EEPROM_MODE_11A)
                         ee->ee_xr_power[mode] = val & 0x3f;
                 else {
+                        /* b_DB_11[bg] and b_OB_11[bg] */
                         ee->ee_ob[mode][0] = val & 0x7;
                         ee->ee_db[mode][0] = (val >> 3) & 0x7;
                 }
diff --git a/drivers/net/wireless/ath/ath5k/eeprom.h b/drivers/net/wireless/ath/ath5k/eeprom.h
index 473a483bb9c3..c4a6d5f26af4 100644
--- a/drivers/net/wireless/ath/ath5k/eeprom.h
+++ b/drivers/net/wireless/ath/ath5k/eeprom.h
@@ -24,9 +24,6 @@
                                                  * SERDES infos are present */
 #define AR5K_EEPROM_MAGIC               0x003d  /* EEPROM Magic number */
 #define AR5K_EEPROM_MAGIC_VALUE         0x5aa5  /* Default - found on EEPROM */
-#define AR5K_EEPROM_MAGIC_5212          0x0000145c /* 5212 */
-#define AR5K_EEPROM_MAGIC_5211          0x0000145b /* 5211 */
-#define AR5K_EEPROM_MAGIC_5210          0x0000145a /* 5210 */
 
 #define AR5K_EEPROM_IS_HB63             0x000b  /* Talon detect */
 
@@ -78,9 +75,9 @@
 #define AR5K_EEPROM_HDR_11A(_v)         (((_v) >> AR5K_EEPROM_MODE_11A) & 0x1)
 #define AR5K_EEPROM_HDR_11B(_v)         (((_v) >> AR5K_EEPROM_MODE_11B) & 0x1)
 #define AR5K_EEPROM_HDR_11G(_v)         (((_v) >> AR5K_EEPROM_MODE_11G) & 0x1)
-#define AR5K_EEPROM_HDR_T_2GHZ_DIS(_v)  (((_v) >> 3) & 0x1)     /* Disable turbo for 2Ghz (?) */
-#define AR5K_EEPROM_HDR_T_5GHZ_DBM(_v)  (((_v) >> 4) & 0x7f)    /* Max turbo power for a/XR mode (eeprom_init) */
-#define AR5K_EEPROM_HDR_DEVICE(_v)      (((_v) >> 11) & 0x7)
+#define AR5K_EEPROM_HDR_T_2GHZ_DIS(_v)  (((_v) >> 3) & 0x1)     /* Disable turbo for 2Ghz */
+#define AR5K_EEPROM_HDR_T_5GHZ_DBM(_v)  (((_v) >> 4) & 0x7f)    /* Max turbo power for < 2W power consumption */
+#define AR5K_EEPROM_HDR_DEVICE(_v)      (((_v) >> 11) & 0x7)    /* Device type (1 Cardbus, 2 PCI, 3 MiniPCI, 4 AP) */
 #define AR5K_EEPROM_HDR_RFKILL(_v)      (((_v) >> 14) & 0x1)    /* Device has RFKill support */
 #define AR5K_EEPROM_HDR_T_5GHZ_DIS(_v)  (((_v) >> 15) & 0x1)    /* Disable turbo for 5Ghz */
 
@@ -101,7 +98,7 @@
 
 #define AR5K_EEPROM_MISC1                       AR5K_EEPROM_INFO(5)
 #define AR5K_EEPROM_TARGET_PWRSTART(_v)         ((_v) & 0xfff)
-#define AR5K_EEPROM_HAS32KHZCRYSTAL(_v)         (((_v) >> 14) & 0x1)
+#define AR5K_EEPROM_HAS32KHZCRYSTAL(_v)         (((_v) >> 14) & 0x1)    /* has 32KHz crystal for sleep mode */
 #define AR5K_EEPROM_HAS32KHZCRYSTAL_OLD(_v)     (((_v) >> 15) & 0x1)
 
 #define AR5K_EEPROM_MISC2                       AR5K_EEPROM_INFO(6)
@@ -114,26 +111,27 @@
 
 #define AR5K_EEPROM_MISC4               AR5K_EEPROM_INFO(8)
 #define AR5K_EEPROM_CAL_DATA_START(_v)  (((_v) >> 4) & 0xfff)
-#define AR5K_EEPROM_MASK_R0(_v)         (((_v) >> 2) & 0x3)
-#define AR5K_EEPROM_MASK_R1(_v)         ((_v) & 0x3)
+#define AR5K_EEPROM_MASK_R0(_v)         (((_v) >> 2) & 0x3)     /* modes supported by radio 0 (bit 1: G, bit 2: A) */
+#define AR5K_EEPROM_MASK_R1(_v)         ((_v) & 0x3)            /* modes supported by radio 1 (bit 1: G, bit 2: A) */
 
 #define AR5K_EEPROM_MISC5               AR5K_EEPROM_INFO(9)
-#define AR5K_EEPROM_COMP_DIS(_v)        ((_v) & 0x1)
-#define AR5K_EEPROM_AES_DIS(_v)         (((_v) >> 1) & 0x1)
-#define AR5K_EEPROM_FF_DIS(_v)          (((_v) >> 2) & 0x1)
-#define AR5K_EEPROM_BURST_DIS(_v)       (((_v) >> 3) & 0x1)
-#define AR5K_EEPROM_MAX_QCU(_v)         (((_v) >> 4) & 0xf)
-#define AR5K_EEPROM_HEAVY_CLIP_EN(_v)   (((_v) >> 8) & 0x1)
-#define AR5K_EEPROM_KEY_CACHE_SIZE(_v)  (((_v) >> 12) & 0xf)
+#define AR5K_EEPROM_COMP_DIS(_v)        ((_v) & 0x1)            /* disable compression */
+#define AR5K_EEPROM_AES_DIS(_v)         (((_v) >> 1) & 0x1)     /* disable AES */
+#define AR5K_EEPROM_FF_DIS(_v)          (((_v) >> 2) & 0x1)     /* disable fast frames */
+#define AR5K_EEPROM_BURST_DIS(_v)       (((_v) >> 3) & 0x1)     /* disable bursting */
+#define AR5K_EEPROM_MAX_QCU(_v)         (((_v) >> 4) & 0xf)     /* max number of QCUs. defaults to 10 */
+#define AR5K_EEPROM_HEAVY_CLIP_EN(_v)   (((_v) >> 8) & 0x1)     /* enable heayy clipping */
+#define AR5K_EEPROM_KEY_CACHE_SIZE(_v)  (((_v) >> 12) & 0xf)    /* key cache size. defaults to 128 */
 
 #define AR5K_EEPROM_MISC6               AR5K_EEPROM_INFO(10)
-#define AR5K_EEPROM_TX_CHAIN_DIS        ((_v) & 0x8)
-#define AR5K_EEPROM_RX_CHAIN_DIS        (((_v) >> 3) & 0x8)
-#define AR5K_EEPROM_FCC_MID_EN          (((_v) >> 6) & 0x1)
-#define AR5K_EEPROM_JAP_U1EVEN_EN       (((_v) >> 7) & 0x1)
-#define AR5K_EEPROM_JAP_U2_EN           (((_v) >> 8) & 0x1)
-#define AR5K_EEPROM_JAP_U1ODD_EN        (((_v) >> 9) & 0x1)
-#define AR5K_EEPROM_JAP_11A_NEW_EN      (((_v) >> 10) & 0x1)
+#define AR5K_EEPROM_TX_CHAIN_DIS        ((_v) & 0x7)            /* MIMO chains disabled for TX bitmask */
+#define AR5K_EEPROM_RX_CHAIN_DIS        (((_v) >> 3) & 0x7)     /* MIMO chains disabled for RX bitmask */
+#define AR5K_EEPROM_FCC_MID_EN          (((_v) >> 6) & 0x1)     /* 5.47-5.7GHz supported */
+#define AR5K_EEPROM_JAP_U1EVEN_EN       (((_v) >> 7) & 0x1)     /* Japan UNII1 band (5.15-5.25GHz) on even channels (5180, 5200, 5220, 5240) supported */
+#define AR5K_EEPROM_JAP_U2_EN           (((_v) >> 8) & 0x1)     /* Japan UNII2 band (5.25-5.35GHz) supported */
+#define AR5K_EEPROM_JAP_MID_EN          (((_v) >> 9) & 0x1)     /* Japan band from 5.47-5.7GHz supported */
+#define AR5K_EEPROM_JAP_U1ODD_EN        (((_v) >> 10) & 0x1)    /* Japan UNII2 band (5.15-5.25GHz) on odd channels (5170, 5190, 5210, 5230) supported */
+#define AR5K_EEPROM_JAP_11A_NEW_EN      (((_v) >> 11) & 0x1)    /* Japan A mode enabled (using even channels) */
 
 /* calibration settings */
 #define AR5K_EEPROM_MODES_11A(_v)       AR5K_EEPROM_OFF(_v, 0x00c5, 0x00d4)
@@ -389,7 +387,49 @@ struct ath5k_edge_power {
         bool flag;
 };
 
-/* EEPROM calibration data */
+/**
+ * struct ath5k_eeprom_info - EEPROM calibration data
+ *
+ * @ee_regdomain: ath/regd.c takes care of COUNTRY_ERD and WORLDWIDE_ROAMING
+ *      flags
+ * @ee_ant_gain: Antenna gain in 0.5dB steps signed [5211 only?]
+ * @ee_cck_ofdm_gain_delta: difference in gainF to output the same power for
+ *      OFDM and CCK packets
+ * @ee_cck_ofdm_power_delta: power difference between OFDM (6Mbps) and CCK
+ *      (11Mbps) rate in G mode. 0.1dB steps
+ * @ee_scaled_cck_delta: for Japan Channel 14: 0.1dB resolution
+ *
+ * @ee_i_cal: Initial I coefficient to correct I/Q mismatch in the receive path
+ * @ee_q_cal: Initial Q coefficient to correct I/Q mismatch in the receive path
+ * @ee_fixed_bias: use ee_ob and ee_db settings or use automatic control
+ * @ee_switch_settling: RX/TX Switch settling time
+ * @ee_atn_tx_rx: Difference in attenuation between TX and RX in 1dB steps
+ * @ee_ant_control: Antenna Control Settings
+ * @ee_ob: Bias current for Output stage of PA
+ *      B/G mode: Index [0] is used for AR2112/5112, otherwise [1]
+ *      A mode: [0] 5.15-5.25 [1] 5.25-5.50 [2] 5.50-5.70 [3] 5.70-5.85 GHz
+ * @ee_db: Bias current for Output stage of PA. see @ee_ob
+ * @ee_tx_end2xlna_enable: Time difference from when BB finishes sending a frame
+ *      to when the external LNA is activated
+ * @ee_tx_end2xpa_disable: Time difference from when BB finishes sending a frame
+ *      to when the external PA switch is deactivated
+ * @ee_tx_frm2xpa_enable: Time difference from when MAC sends frame to when
+ *      external PA switch is activated
+ * @ee_thr_62: Clear Channel Assessment (CCA) sensitivity
+ *      (IEEE802.11a section 17.3.10.5 )
+ * @ee_xlna_gain: Total gain of the LNA (information only)
+ * @ee_xpd: Use external (1) or internal power detector
+ * @ee_x_gain: Gain for external power detector output (differences in EEMAP
+ *      versions!)
+ * @ee_i_gain: Initial gain value after reset
+ * @ee_margin_tx_rx: Margin in dB when final attenuation stage should be used
+ *
+ * @ee_false_detect: Backoff in Sensitivity (dB) on channels with spur signals
+ * @ee_noise_floor_thr: Noise floor threshold in 1dB steps
+ * @ee_adc_desired_size: Desired amplitude for ADC, used by AGC; in 0.5 dB steps
+ * @ee_pga_desired_size: Desired output of PGA (for BB gain) in 0.5 dB steps
+ * @ee_pd_gain_overlap: PD ADC curves need to overlap in 0.5dB steps (ee_map>=2)
+ */
 struct ath5k_eeprom_info {
 
         /* Header information */
diff --git a/drivers/net/wireless/ath/ath5k/pcu.c b/drivers/net/wireless/ath/ath5k/pcu.c
index aefe84f9c04b..1b9fcb842167 100644
--- a/drivers/net/wireless/ath/ath5k/pcu.c
+++ b/drivers/net/wireless/ath/ath5k/pcu.c
@@ -39,16 +39,16 @@
  * ath5k_hw_set_opmode - Set PCU operating mode
  *
  * @ah: The &struct ath5k_hw
+ * @op_mode: &enum nl80211_iftype operating mode
  *
  * Initialize PCU for the various operating modes (AP/STA etc)
- *
- * NOTE: ah->ah_op_mode must be set before calling this.
  */
-int ath5k_hw_set_opmode(struct ath5k_hw *ah)
+int ath5k_hw_set_opmode(struct ath5k_hw *ah, enum nl80211_iftype op_mode)
 {
         struct ath_common *common = ath5k_hw_common(ah);
         u32 pcu_reg, beacon_reg, low_id, high_id;
 
+        ATH5K_DBG(ah->ah_sc, ATH5K_DEBUG_MODE, "mode %d\n", op_mode);
 
         /* Preserve rest settings */
         pcu_reg = ath5k_hw_reg_read(ah, AR5K_STA_ID1) & 0xffff0000;
@@ -61,7 +61,7 @@ int ath5k_hw_set_opmode(struct ath5k_hw *ah)
 
         ATH5K_TRACE(ah->ah_sc);
 
-        switch (ah->ah_op_mode) {
+        switch (op_mode) {
         case NL80211_IFTYPE_ADHOC:
                 pcu_reg |= AR5K_STA_ID1_ADHOC | AR5K_STA_ID1_KEYSRCH_MODE;
                 beacon_reg |= AR5K_BCR_ADHOC;
@@ -179,25 +179,12 @@ void ath5k_hw_set_ack_bitrate_high(struct ath5k_hw *ah, bool high)
 \******************/
 
 /**
- * ath5k_hw_het_ack_timeout - Get ACK timeout from PCU in usec
- *
- * @ah: The &struct ath5k_hw
- */
-unsigned int ath5k_hw_get_ack_timeout(struct ath5k_hw *ah)
-{
-        ATH5K_TRACE(ah->ah_sc);
-
-        return ath5k_hw_clocktoh(ah, AR5K_REG_MS(ath5k_hw_reg_read(ah,
-                        AR5K_TIME_OUT), AR5K_TIME_OUT_ACK));
-}
-
-/**
  * ath5k_hw_set_ack_timeout - Set ACK timeout on PCU
  *
  * @ah: The &struct ath5k_hw
  * @timeout: Timeout in usec
  */
-int ath5k_hw_set_ack_timeout(struct ath5k_hw *ah, unsigned int timeout)
+static int ath5k_hw_set_ack_timeout(struct ath5k_hw *ah, unsigned int timeout)
 {
         ATH5K_TRACE(ah->ah_sc);
         if (ath5k_hw_clocktoh(ah, AR5K_REG_MS(0xffffffff, AR5K_TIME_OUT_ACK))
@@ -211,24 +198,12 @@ int ath5k_hw_set_ack_timeout(struct ath5k_hw *ah, unsigned int timeout)
 }
 
 /**
- * ath5k_hw_get_cts_timeout - Get CTS timeout from PCU in usec
- *
- * @ah: The &struct ath5k_hw
- */
-unsigned int ath5k_hw_get_cts_timeout(struct ath5k_hw *ah)
-{
-        ATH5K_TRACE(ah->ah_sc);
-        return ath5k_hw_clocktoh(ah, AR5K_REG_MS(ath5k_hw_reg_read(ah,
-                        AR5K_TIME_OUT), AR5K_TIME_OUT_CTS));
-}
-
-/**
  * ath5k_hw_set_cts_timeout - Set CTS timeout on PCU
  *
  * @ah: The &struct ath5k_hw
  * @timeout: Timeout in usec
  */
-int ath5k_hw_set_cts_timeout(struct ath5k_hw *ah, unsigned int timeout)
+static int ath5k_hw_set_cts_timeout(struct ath5k_hw *ah, unsigned int timeout)
 {
         ATH5K_TRACE(ah->ah_sc);
         if (ath5k_hw_clocktoh(ah, AR5K_REG_MS(0xffffffff, AR5K_TIME_OUT_CTS))
@@ -290,7 +265,7 @@ unsigned int ath5k_hw_get_clockrate(struct ath5k_hw *ah)
  *
  * @ah: The &struct ath5k_hw
  */
-unsigned int ath5k_hw_get_default_slottime(struct ath5k_hw *ah)
+static unsigned int ath5k_hw_get_default_slottime(struct ath5k_hw *ah)
 {
         struct ieee80211_channel *channel = ah->ah_current_channel;
 
@@ -308,7 +283,7 @@ unsigned int ath5k_hw_get_default_slottime(struct ath5k_hw *ah)
  *
  * @ah: The &struct ath5k_hw
  */
-unsigned int ath5k_hw_get_default_sifs(struct ath5k_hw *ah)
+static unsigned int ath5k_hw_get_default_sifs(struct ath5k_hw *ah)
 {
         struct ieee80211_channel *channel = ah->ah_current_channel;
 
@@ -451,42 +426,6 @@ void ath5k_hw_set_mcast_filter(struct ath5k_hw *ah, u32 filter0, u32 filter1)
         ath5k_hw_reg_write(ah, filter1, AR5K_MCAST_FILTER1);
 }
 
-/*
- * Set multicast filter by index
- */
-int ath5k_hw_set_mcast_filter_idx(struct ath5k_hw *ah, u32 index)
-{
-
-        ATH5K_TRACE(ah->ah_sc);
-        if (index >= 64)
-                return -EINVAL;
-        else if (index >= 32)
-                AR5K_REG_ENABLE_BITS(ah, AR5K_MCAST_FILTER1,
-                                (1 << (index - 32)));
-        else
-                AR5K_REG_ENABLE_BITS(ah, AR5K_MCAST_FILTER0, (1 << index));
-
-        return 0;
-}
-
-/*
- * Clear Multicast filter by index
- */
-int ath5k_hw_clear_mcast_filter_idx(struct ath5k_hw *ah, u32 index)
-{
-
-        ATH5K_TRACE(ah->ah_sc);
-        if (index >= 64)
-                return -EINVAL;
-        else if (index >= 32)
-                AR5K_REG_DISABLE_BITS(ah, AR5K_MCAST_FILTER1,
-                                (1 << (index - 32)));
-        else
-                AR5K_REG_DISABLE_BITS(ah, AR5K_MCAST_FILTER0, (1 << index));
-
-        return 0;
-}
-
 /**
  * ath5k_hw_get_rx_filter - Get current rx filter
  *
@@ -572,19 +511,6 @@ void ath5k_hw_set_rx_filter(struct ath5k_hw *ah, u32 filter)
 \****************/
 
 /**
- * ath5k_hw_get_tsf32 - Get a 32bit TSF
- *
- * @ah: The &struct ath5k_hw
- *
- * Returns lower 32 bits of current TSF
- */
-u32 ath5k_hw_get_tsf32(struct ath5k_hw *ah)
-{
-        ATH5K_TRACE(ah->ah_sc);
-        return ath5k_hw_reg_read(ah, AR5K_TSF_L32);
-}
-
-/**
  * ath5k_hw_get_tsf64 - Get the full 64bit TSF
  *
  * @ah: The &struct ath5k_hw
@@ -651,7 +577,7 @@ void ath5k_hw_init_beacon(struct ath5k_hw *ah, u32 next_beacon, u32 interval)
         /*
          * Set the additional timers by mode
          */
-        switch (ah->ah_op_mode) {
+        switch (ah->ah_sc->opmode) {
         case NL80211_IFTYPE_MONITOR:
         case NL80211_IFTYPE_STATION:
                 /* In STA mode timer1 is used as next wakeup
@@ -688,8 +614,8 @@ void ath5k_hw_init_beacon(struct ath5k_hw *ah, u32 next_beacon, u32 interval)
          * Set the beacon register and enable all timers.
          */
         /* When in AP or Mesh Point mode zero timer0 to start TSF */
-        if (ah->ah_op_mode == NL80211_IFTYPE_AP ||
-            ah->ah_op_mode == NL80211_IFTYPE_MESH_POINT)
+        if (ah->ah_sc->opmode == NL80211_IFTYPE_AP ||
+            ah->ah_sc->opmode == NL80211_IFTYPE_MESH_POINT)
                 ath5k_hw_reg_write(ah, 0, AR5K_TIMER0);
 
         ath5k_hw_reg_write(ah, next_beacon, AR5K_TIMER0);
@@ -722,203 +648,6 @@ void ath5k_hw_init_beacon(struct ath5k_hw *ah, u32 next_beacon, u32 interval)
 
 }
 
-#if 0
-/*
- * Set beacon timers
- */
-int ath5k_hw_set_beacon_timers(struct ath5k_hw *ah,
-                const struct ath5k_beacon_state *state)
-{
-        u32 cfp_period, next_cfp, dtim, interval, next_beacon;
-
-        /*
-         * TODO: should be changed through *state
-         * review struct ath5k_beacon_state struct
-         *
-         * XXX: These are used for cfp period bellow, are they
-         * ok ? Is it O.K. for tsf here to be 0 or should we use
-         * get_tsf ?
-         */
-        u32 dtim_count = 0; /* XXX */
-        u32 cfp_count = 0; /* XXX */
-        u32 tsf = 0; /* XXX */
-
-        ATH5K_TRACE(ah->ah_sc);
-        /* Return on an invalid beacon state */
-        if (state->bs_interval < 1)
-                return -EINVAL;
-
-        interval = state->bs_interval;
-        dtim = state->bs_dtim_period;
-
-        /*
-         * PCF support?
-         */
-        if (state->bs_cfp_period > 0) {
-                /*
-                 * Enable PCF mode and set the CFP
-                 * (Contention Free Period) and timer registers
-                 */
-                cfp_period = state->bs_cfp_period * state->bs_dtim_period *
-                        state->bs_interval;
-                next_cfp = (cfp_count * state->bs_dtim_period + dtim_count) *
-                        state->bs_interval;
-
-                AR5K_REG_ENABLE_BITS(ah, AR5K_STA_ID1,
-                                AR5K_STA_ID1_DEFAULT_ANTENNA |
-                                AR5K_STA_ID1_PCF);
-                ath5k_hw_reg_write(ah, cfp_period, AR5K_CFP_PERIOD);
-                ath5k_hw_reg_write(ah, state->bs_cfp_max_duration,
-                                AR5K_CFP_DUR);
-                ath5k_hw_reg_write(ah, (tsf + (next_cfp == 0 ? cfp_period :
-                                                next_cfp)) << 3, AR5K_TIMER2);
-        } else {
-                /* Disable PCF mode */
-                AR5K_REG_DISABLE_BITS(ah, AR5K_STA_ID1,
-                                AR5K_STA_ID1_DEFAULT_ANTENNA |
-                                AR5K_STA_ID1_PCF);
-        }
-
-        /*
-         * Enable the beacon timer register
-         */
-        ath5k_hw_reg_write(ah, state->bs_next_beacon, AR5K_TIMER0);
-
-        /*
-         * Start the beacon timers
-         */
-        ath5k_hw_reg_write(ah, (ath5k_hw_reg_read(ah, AR5K_BEACON) &
-                ~(AR5K_BEACON_PERIOD | AR5K_BEACON_TIM)) |
-                AR5K_REG_SM(state->bs_tim_offset ? state->bs_tim_offset + 4 : 0,
-                AR5K_BEACON_TIM) | AR5K_REG_SM(state->bs_interval,
-                AR5K_BEACON_PERIOD), AR5K_BEACON);
-
-        /*
-         * Write new beacon miss threshold, if it appears to be valid
-         * XXX: Figure out right values for min <= bs_bmiss_threshold <= max
-         * and return if its not in range. We can test this by reading value and
-         * setting value to a largest value and seeing which values register.
-         */
-
-        AR5K_REG_WRITE_BITS(ah, AR5K_RSSI_THR, AR5K_RSSI_THR_BMISS,
-                        state->bs_bmiss_threshold);
-
-        /*
-         * Set sleep control register
-         * XXX: Didn't find this in 5210 code but since this register
-         * exists also in ar5k's 5210 headers i leave it as common code.
-         */
-        AR5K_REG_WRITE_BITS(ah, AR5K_SLEEP_CTL, AR5K_SLEEP_CTL_SLDUR,
-                        (state->bs_sleep_duration - 3) << 3);
-
-        /*
-         * Set enhanced sleep registers on 5212
-         */
-        if (ah->ah_version == AR5K_AR5212) {
-                if (state->bs_sleep_duration > state->bs_interval &&
-                                roundup(state->bs_sleep_duration, interval) ==
-                                state->bs_sleep_duration)
-                        interval = state->bs_sleep_duration;
-
-                if (state->bs_sleep_duration > dtim && (dtim == 0 ||
-                                roundup(state->bs_sleep_duration, dtim) ==
-                                state->bs_sleep_duration))
-                        dtim = state->bs_sleep_duration;
-
-                if (interval > dtim)
-                        return -EINVAL;
-
-                next_beacon = interval == dtim ? state->bs_next_dtim :
-                        state->bs_next_beacon;
-
-                ath5k_hw_reg_write(ah,
-                        AR5K_REG_SM((state->bs_next_dtim - 3) << 3,
-                        AR5K_SLEEP0_NEXT_DTIM) |
-                        AR5K_REG_SM(10, AR5K_SLEEP0_CABTO) |
-                        AR5K_SLEEP0_ENH_SLEEP_EN |
-                        AR5K_SLEEP0_ASSUME_DTIM, AR5K_SLEEP0);
-
-                ath5k_hw_reg_write(ah, AR5K_REG_SM((next_beacon - 3) << 3,
-                        AR5K_SLEEP1_NEXT_TIM) |
-                        AR5K_REG_SM(10, AR5K_SLEEP1_BEACON_TO), AR5K_SLEEP1);
-
-                ath5k_hw_reg_write(ah,
-                        AR5K_REG_SM(interval, AR5K_SLEEP2_TIM_PER) |
-                        AR5K_REG_SM(dtim, AR5K_SLEEP2_DTIM_PER), AR5K_SLEEP2);
-        }
-
-        return 0;
-}
-
-/*
- * Reset beacon timers
- */
-void ath5k_hw_reset_beacon(struct ath5k_hw *ah)
-{
-        ATH5K_TRACE(ah->ah_sc);
-        /*
-         * Disable beacon timer
-         */
-        ath5k_hw_reg_write(ah, 0, AR5K_TIMER0);
-
-        /*
-         * Disable some beacon register values
-         */
-        AR5K_REG_DISABLE_BITS(ah, AR5K_STA_ID1,
-                        AR5K_STA_ID1_DEFAULT_ANTENNA | AR5K_STA_ID1_PCF);
-        ath5k_hw_reg_write(ah, AR5K_BEACON_PERIOD, AR5K_BEACON);
-}
-
-/*
- * Wait for beacon queue to finish
- */
-int ath5k_hw_beaconq_finish(struct ath5k_hw *ah, unsigned long phys_addr)
-{
-        unsigned int i;
-        int ret;
-
-        ATH5K_TRACE(ah->ah_sc);
-
-        /* 5210 doesn't have QCU*/
-        if (ah->ah_version == AR5K_AR5210) {
-                /*
-                 * Wait for beaconn queue to finish by checking
-                 * Control Register and Beacon Status Register.
-                 */
-                for (i = AR5K_TUNE_BEACON_INTERVAL / 2; i > 0; i--) {
-                        if (!(ath5k_hw_reg_read(ah, AR5K_BSR) & AR5K_BSR_TXQ1F)
-                                        ||
-                            !(ath5k_hw_reg_read(ah, AR5K_CR) & AR5K_BSR_TXQ1F))
-                                break;
-                        udelay(10);
-                }
-
-                /* Timeout... */
-                if (i <= 0) {
-                        /*
-                         * Re-schedule the beacon queue
-                         */
-                        ath5k_hw_reg_write(ah, phys_addr, AR5K_NOQCU_TXDP1);
-                        ath5k_hw_reg_write(ah, AR5K_BCR_TQ1V | AR5K_BCR_BDMAE,
-                                        AR5K_BCR);
-
-                        return -EIO;
-                }
-                ret = 0;
-        } else {
-        /*5211/5212*/
-                ret = ath5k_hw_register_timeout(ah,
-                        AR5K_QUEUE_STATUS(AR5K_TX_QUEUE_ID_BEACON),
-                        AR5K_QCU_STS_FRMPENDCNT, 0, false);
-
-                if (AR5K_REG_READ_Q(ah, AR5K_QCU_TXE, AR5K_TX_QUEUE_ID_BEACON))
-                        return -EIO;
-        }
-
-        return ret;
-}
-#endif
-
 
 /*********************\
 * Key table functions *
@@ -971,19 +700,6 @@ int ath5k_hw_reset_key(struct ath5k_hw *ah, u16 entry)
         return 0;
 }
 
-/*
- * Check if a table entry is valid
- */
-int ath5k_hw_is_key_valid(struct ath5k_hw *ah, u16 entry)
-{
-        ATH5K_TRACE(ah->ah_sc);
-        AR5K_ASSERT_ENTRY(entry, AR5K_KEYTABLE_SIZE);
-
-        /* Check the validation flag at the end of the entry */
-        return ath5k_hw_reg_read(ah, AR5K_KEYTABLE_MAC1(entry)) &
-                AR5K_KEYTABLE_VALID;
-}
-
 static
 int ath5k_keycache_type(const struct ieee80211_key_conf *key)
 {
diff --git a/drivers/net/wireless/ath/ath5k/phy.c b/drivers/net/wireless/ath/ath5k/phy.c
index eff3323efb4b..a8adca62e527 100644
--- a/drivers/net/wireless/ath/ath5k/phy.c
+++ b/drivers/net/wireless/ath/ath5k/phy.c
@@ -20,8 +20,6 @@
  *
  */
 
-#define _ATH5K_PHY
-
 #include <linux/delay.h>
 
 #include "ath5k.h"
@@ -1190,7 +1188,7 @@ static s16 ath5k_hw_get_median_noise_floor(struct ath5k_hw *ah)
  * The median of the values in the history is then loaded into the
  * hardware for its own use for RSSI and CCA measurements.
  */
-void ath5k_hw_update_noise_floor(struct ath5k_hw *ah)
+static void ath5k_hw_update_noise_floor(struct ath5k_hw *ah)
 {
         struct ath5k_eeprom_info *ee = &ah->ah_capabilities.cap_eeprom;
         u32 val;
@@ -1399,7 +1397,11 @@ static int ath5k_hw_rf511x_calibrate(struct ath5k_hw *ah,
         }
 
         i_coffd = ((i_pwr >> 1) + (q_pwr >> 1)) >> 7;
-        q_coffd = q_pwr >> 7;
+
+        if (ah->ah_version == AR5K_AR5211)
+                q_coffd = q_pwr >> 6;
+        else
+                q_coffd = q_pwr >> 7;
 
         /* protect against divide by 0 and loss of sign bits */
         if (i_coffd == 0 || q_coffd < 2)
@@ -1768,7 +1770,7 @@ u16 ath5k_hw_radio_revision(struct ath5k_hw *ah, unsigned int chan)
 * Antenna control *
 \*****************/
 
-void /*TODO:Boundary check*/
+static void /*TODO:Boundary check*/
 ath5k_hw_set_def_antenna(struct ath5k_hw *ah, u8 ant)
 {
         ATH5K_TRACE(ah->ah_sc);
@@ -1777,16 +1779,6 @@ ath5k_hw_set_def_antenna(struct ath5k_hw *ah, u8 ant)
                 ath5k_hw_reg_write(ah, ant & 0x7, AR5K_DEFAULT_ANTENNA);
 }
 
-unsigned int ath5k_hw_get_def_antenna(struct ath5k_hw *ah)
-{
-        ATH5K_TRACE(ah->ah_sc);
-
-        if (ah->ah_version != AR5K_AR5210)
-                return ath5k_hw_reg_read(ah, AR5K_DEFAULT_ANTENNA) & 0x7;
-
-        return false; /*XXX: What do we return for 5210 ?*/
-}
-
 /*
  * Enable/disable fast rx antenna diversity
  */
@@ -1930,6 +1922,7 @@ ath5k_hw_set_antenna_mode(struct ath5k_hw *ah, u8 ant_mode)
 
         ah->ah_tx_ant = tx_ant;
         ah->ah_ant_mode = ant_mode;
+        ah->ah_def_ant = def_ant;
 
         sta_id1 |= use_def_for_tx ? AR5K_STA_ID1_DEFAULT_ANTENNA : 0;
         sta_id1 |= update_def_on_tx ? AR5K_STA_ID1_DESC_ANTENNA : 0;
@@ -2440,19 +2433,6 @@ ath5k_combine_linear_pcdac_curves(struct ath5k_hw *ah, s16* table_min,
                 pcdac_tmp = pcdac_high_pwr;
 
                 edge_flag = 0x40;
-#if 0
-                /* If both min and max power limits are in lower
-                 * power curve's range, only use the low power curve.
-                 * TODO: min/max levels are related to target
-                 * power values requested from driver/user
-                 * XXX: Is this really needed ? */
-                if (min_pwr < table_max[1] &&
-                max_pwr < table_max[1]) {
-                        edge_flag = 0;
-                        pcdac_tmp = pcdac_low_pwr;
-                        max_pwr_idx = (table_max[1] - table_min[1])/2;
-                }
-#endif
         } else {
                 pcdac_low_pwr = ah->ah_txpower.tmpL[1]; /* Zeroed */
                 pcdac_high_pwr = ah->ah_txpower.tmpL[0];
@@ -3143,5 +3123,3 @@ int ath5k_hw_set_txpower_limit(struct ath5k_hw *ah, u8 txpower)
 
         return ath5k_hw_txpower(ah, channel, ee_mode, txpower);
 }
-
-#undef _ATH5K_PHY
diff --git a/drivers/net/wireless/ath/ath5k/qcu.c b/drivers/net/wireless/ath/ath5k/qcu.c
index 9122a8556f45..f5831da33f7b 100644
--- a/drivers/net/wireless/ath/ath5k/qcu.c
+++ b/drivers/net/wireless/ath/ath5k/qcu.c
@@ -517,23 +517,6 @@ int ath5k_hw_reset_tx_queue(struct ath5k_hw *ah, unsigned int queue)
 }
 
 /*
- * Get slot time from DCU
- */
-unsigned int ath5k_hw_get_slot_time(struct ath5k_hw *ah)
-{
-        unsigned int slot_time_clock;
-
-        ATH5K_TRACE(ah->ah_sc);
-
-        if (ah->ah_version == AR5K_AR5210)
-                slot_time_clock = ath5k_hw_reg_read(ah, AR5K_SLOT_TIME);
-        else
-                slot_time_clock = ath5k_hw_reg_read(ah, AR5K_DCU_GBL_IFS_SLOT);
-
-        return ath5k_hw_clocktoh(ah, slot_time_clock & 0xffff);
-}
-
-/*
  * Set slot time on DCU
  */
 int ath5k_hw_set_slot_time(struct ath5k_hw *ah, unsigned int slot_time)
diff --git a/drivers/net/wireless/ath/ath5k/reg.h b/drivers/net/wireless/ath/ath5k/reg.h
index 1464f89b249c..47f04932ab8b 100644
--- a/drivers/net/wireless/ath/ath5k/reg.h
+++ b/drivers/net/wireless/ath/ath5k/reg.h
@@ -1974,7 +1974,7 @@
 #define AR5K_PHY_SETTLING               0x9844                  /* Register Address */
 #define AR5K_PHY_SETTLING_AGC           0x0000007f      /* AGC settling time */
 #define AR5K_PHY_SETTLING_AGC_S         0
-#define AR5K_PHY_SETTLING_SWITCH        0x00003f80      /* Switch settlig time */
+#define AR5K_PHY_SETTLING_SWITCH        0x00003f80      /* Switch settling time */
 #define AR5K_PHY_SETTLING_SWITCH_S      7
 
 /*
diff --git a/drivers/net/wireless/ath/ath5k/reset.c b/drivers/net/wireless/ath/ath5k/reset.c
index cbf28e379843..44bbbf2a6edd 100644
--- a/drivers/net/wireless/ath/ath5k/reset.c
+++ b/drivers/net/wireless/ath/ath5k/reset.c
@@ -19,8 +19,6 @@
  *
  */
 
-#define _ATH5K_RESET
-
 /*****************************\
   Reset functions and helpers
 \*****************************/
@@ -34,6 +32,27 @@
 #include "base.h"
 #include "debug.h"
 
+/*
+ * Check if a register write has been completed
+ */
+int ath5k_hw_register_timeout(struct ath5k_hw *ah, u32 reg, u32 flag, u32 val,
+                              bool is_set)
+{
+        int i;
+        u32 data;
+
+        for (i = AR5K_TUNE_REGISTER_TIMEOUT; i > 0; i--) {
+                data = ath5k_hw_reg_read(ah, reg);
+                if (is_set && (data & flag))
+                        break;
+                else if ((data & flag) == val)
+                        break;
+                udelay(15);
+        }
+
+        return (i <= 0) ? -EAGAIN : 0;
+}
+
 /**
  * ath5k_hw_write_ofdm_timings - set OFDM timings on AR5212
  *
@@ -221,8 +240,8 @@ static int ath5k_hw_nic_reset(struct ath5k_hw *ah, u32 val)
 /*
  * Sleep control
  */
-int ath5k_hw_set_power(struct ath5k_hw *ah, enum ath5k_power_mode mode,
-                bool set_chip, u16 sleep_duration)
+static int ath5k_hw_set_power(struct ath5k_hw *ah, enum ath5k_power_mode mode,
+                              bool set_chip, u16 sleep_duration)
 {
         unsigned int i;
         u32 staid, data;
@@ -1017,11 +1036,6 @@ int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode,
         if (ret)
                 return ret;
 
-        /*
-         * Initialize operating mode
-         */
-        ah->ah_op_mode = op_mode;
-
         /* PHY access enable */
         if (ah->ah_mac_srev >= AR5K_SREV_AR5211)
                 ath5k_hw_reg_write(ah, AR5K_PHY_SHIFT_5GHZ, AR5K_PHY(0));
@@ -1192,7 +1206,7 @@ int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode,
         ath5k_hw_set_associd(ah);
 
         /* Set PCU config */
-        ath5k_hw_set_opmode(ah);
+        ath5k_hw_set_opmode(ah, op_mode);
 
         /* Clear any pending interrupts
          * PISR/SISR Not available on 5210 */
@@ -1378,7 +1392,7 @@ int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode,
          * external 32KHz crystal when sleeping if one
          * exists */
         if (ah->ah_version == AR5K_AR5212 &&
-            ah->ah_op_mode != NL80211_IFTYPE_AP)
+            op_mode != NL80211_IFTYPE_AP)
                 ath5k_hw_set_sleep_clock(ah, true);
 
         /*
@@ -1388,5 +1402,3 @@ int ath5k_hw_reset(struct ath5k_hw *ah, enum nl80211_iftype op_mode,
         ath5k_hw_reset_tsf(ah);
         return 0;
 }
-
-#undef _ATH5K_RESET
diff --git a/drivers/net/wireless/ath/ath9k/Kconfig b/drivers/net/wireless/ath/ath9k/Kconfig
index 5774cea23a3b..35f23bdc442f 100644
--- a/drivers/net/wireless/ath/ath9k/Kconfig
+++ b/drivers/net/wireless/ath/ath9k/Kconfig
@@ -32,3 +32,24 @@ config ATH9K_DEBUGFS
 
           Also required for changing debug message flags at run time.
 
+config ATH9K_HTC
+       tristate "Atheros HTC based wireless cards support"
+       depends on USB && MAC80211
+       select ATH9K_HW
+       select MAC80211_LEDS
+       select LEDS_CLASS
+       select NEW_LEDS
+       select ATH9K_COMMON
+       ---help---
+         Support for Atheros HTC based cards.
+         Chipsets supported: AR9271
+
+         For more information: http://wireless.kernel.org/en/users/Drivers/ath9k_htc
+
+         The built module will be ath9k_htc.
+
+config ATH9K_HTC_DEBUGFS
+        bool "Atheros ath9k_htc debugging"
+        depends on ATH9K_HTC && DEBUG_FS
+        ---help---
+          Say Y, if you need access to ath9k_htc's statistics.
diff --git a/drivers/net/wireless/ath/ath9k/Makefile b/drivers/net/wireless/ath/ath9k/Makefile
index 6b50d5eb9ec3..97133beda269 100644
--- a/drivers/net/wireless/ath/ath9k/Makefile
+++ b/drivers/net/wireless/ath/ath9k/Makefile
@@ -28,3 +28,13 @@ obj-$(CONFIG_ATH9K_HW) += ath9k_hw.o
 
 obj-$(CONFIG_ATH9K_COMMON) += ath9k_common.o
 ath9k_common-y:=        common.o
+
+ath9k_htc-y +=  htc_hst.o \
+                hif_usb.o \
+                wmi.o \
+                htc_drv_txrx.o \
+                htc_drv_main.o \
+                htc_drv_beacon.o \
+                htc_drv_init.o
+
+obj-$(CONFIG_ATH9K_HTC) += ath9k_htc.o
diff --git a/drivers/net/wireless/ath/ath9k/calib.c b/drivers/net/wireless/ath/ath9k/calib.c
index 238a5744d8e9..d5026e4f484b 100644
--- a/drivers/net/wireless/ath/ath9k/calib.c
+++ b/drivers/net/wireless/ath/ath9k/calib.c
@@ -101,9 +101,13 @@ static void ath9k_hw_do_getnf(struct ath_hw *ah,
                 nf = 0 - ((nf ^ 0x1ff) + 1);
         ath_print(common, ATH_DBG_CALIBRATE,
                   "NF calibrated [ctl] [chain 0] is %d\n", nf);
+
+        if (AR_SREV_9271(ah) && (nf >= -114))
+                nf = -116;
+
         nfarray[0] = nf;
 
-        if (!AR_SREV_9285(ah)) {
+        if (!AR_SREV_9285(ah) && !AR_SREV_9271(ah)) {
                 if (AR_SREV_9280_10_OR_LATER(ah))
                         nf = MS(REG_READ(ah, AR_PHY_CH1_CCA),
                                         AR9280_PHY_CH1_MINCCA_PWR);
@@ -139,9 +143,13 @@ static void ath9k_hw_do_getnf(struct ath_hw *ah,
                 nf = 0 - ((nf ^ 0x1ff) + 1);
         ath_print(common, ATH_DBG_CALIBRATE,
                   "NF calibrated [ext] [chain 0] is %d\n", nf);
+
+        if (AR_SREV_9271(ah) && (nf >= -114))
+                nf = -116;
+
         nfarray[3] = nf;
 
-        if (!AR_SREV_9285(ah)) {
+        if (!AR_SREV_9285(ah) && !AR_SREV_9271(ah)) {
                 if (AR_SREV_9280_10_OR_LATER(ah))
                         nf = MS(REG_READ(ah, AR_PHY_CH1_EXT_CCA),
                                         AR9280_PHY_CH1_EXT_MINCCA_PWR);
@@ -621,7 +629,7 @@ void ath9k_hw_loadnf(struct ath_hw *ah, struct ath9k_channel *chan)
         u8 chainmask, rx_chain_status;
 
         rx_chain_status = REG_READ(ah, AR_PHY_RX_CHAINMASK);
-        if (AR_SREV_9285(ah))
+        if (AR_SREV_9285(ah) || AR_SREV_9271(ah))
                 chainmask = 0x9;
         else if (AR_SREV_9280(ah) || AR_SREV_9287(ah)) {
                 if ((rx_chain_status & 0x2) || (rx_chain_status & 0x4))
@@ -715,7 +723,7 @@ void ath9k_init_nfcal_hist_buffer(struct ath_hw *ah)
 
         if (AR_SREV_9280(ah))
                 noise_floor = AR_PHY_CCA_MAX_AR9280_GOOD_VALUE;
-        else if (AR_SREV_9285(ah))
+        else if (AR_SREV_9285(ah) || AR_SREV_9271(ah))
                 noise_floor = AR_PHY_CCA_MAX_AR9285_GOOD_VALUE;
         else if (AR_SREV_9287(ah))
                 noise_floor = AR_PHY_CCA_MAX_AR9287_GOOD_VALUE;
@@ -1051,9 +1059,12 @@ bool ath9k_hw_calibrate(struct ath_hw *ah, struct ath9k_channel *chan,
         /* Do NF cal only at longer intervals */
         if (longcal) {
                 /* Do periodic PAOffset Cal */
-                if (AR_SREV_9271(ah))
-                        ath9k_hw_9271_pa_cal(ah, false);
-                else if (AR_SREV_9285_11_OR_LATER(ah)) {
+                if (AR_SREV_9271(ah)) {
+                        if (!ah->pacal_info.skipcount)
+                                ath9k_hw_9271_pa_cal(ah, false);
+                        else
+                                ah->pacal_info.skipcount--;
+                } else if (AR_SREV_9285_11_OR_LATER(ah)) {
                         if (!ah->pacal_info.skipcount)
                                 ath9k_hw_9285_pa_cal(ah, false);
                         else
diff --git a/drivers/net/wireless/ath/ath9k/common.c b/drivers/net/wireless/ath/ath9k/common.c
index 4d775ae141db..7902d287f671 100644
--- a/drivers/net/wireless/ath/ath9k/common.c
+++ b/drivers/net/wireless/ath/ath9k/common.c
@@ -286,6 +286,427 @@ int ath9k_cmn_padpos(__le16 frame_control)
 }
 EXPORT_SYMBOL(ath9k_cmn_padpos);
 
+int ath9k_cmn_get_hw_crypto_keytype(struct sk_buff *skb)
+{
+        struct ieee80211_tx_info *tx_info = IEEE80211_SKB_CB(skb);
+
+        if (tx_info->control.hw_key) {
+                if (tx_info->control.hw_key->alg == ALG_WEP)
+                        return ATH9K_KEY_TYPE_WEP;
+                else if (tx_info->control.hw_key->alg == ALG_TKIP)
+                        return ATH9K_KEY_TYPE_TKIP;
+                else if (tx_info->control.hw_key->alg == ALG_CCMP)
+                        return ATH9K_KEY_TYPE_AES;
+        }
+
+        return ATH9K_KEY_TYPE_CLEAR;
+}
+EXPORT_SYMBOL(ath9k_cmn_get_hw_crypto_keytype);
+
+/*
+ * Calculate the RX filter to be set in the HW.
+ */
+u32 ath9k_cmn_calcrxfilter(struct ieee80211_hw *hw, struct ath_hw *ah,
+                           unsigned int rxfilter)
+{
+#define RX_FILTER_PRESERVE (ATH9K_RX_FILTER_PHYERR | ATH9K_RX_FILTER_PHYRADAR)
+
+        u32 rfilt;
+
+        rfilt = (ath9k_hw_getrxfilter(ah) & RX_FILTER_PRESERVE)
+                | ATH9K_RX_FILTER_UCAST | ATH9K_RX_FILTER_BCAST
+                | ATH9K_RX_FILTER_MCAST;
+
+        /* If not a STA, enable processing of Probe Requests */
+        if (ah->opmode != NL80211_IFTYPE_STATION)
+                rfilt |= ATH9K_RX_FILTER_PROBEREQ;
+
+        /*
+         * Set promiscuous mode when FIF_PROMISC_IN_BSS is enabled for station
+         * mode interface or when in monitor mode. AP mode does not need this
+         * since it receives all in-BSS frames anyway.
+         */
+        if (((ah->opmode != NL80211_IFTYPE_AP) &&
+             (rxfilter & FIF_PROMISC_IN_BSS)) ||
+            (ah->opmode == NL80211_IFTYPE_MONITOR))
+                rfilt |= ATH9K_RX_FILTER_PROM;
+
+        if (rxfilter & FIF_CONTROL)
+                rfilt |= ATH9K_RX_FILTER_CONTROL;
+
+        if ((ah->opmode == NL80211_IFTYPE_STATION) &&
+            !(rxfilter & FIF_BCN_PRBRESP_PROMISC))
+                rfilt |= ATH9K_RX_FILTER_MYBEACON;
+        else
+                rfilt |= ATH9K_RX_FILTER_BEACON;
+
+        if ((AR_SREV_9280_10_OR_LATER(ah) ||
+            AR_SREV_9285_10_OR_LATER(ah)) &&
+            (ah->opmode == NL80211_IFTYPE_AP) &&
+            (rxfilter & FIF_PSPOLL))
+                rfilt |= ATH9K_RX_FILTER_PSPOLL;
+
+        if (conf_is_ht(&hw->conf))
+                rfilt |= ATH9K_RX_FILTER_COMP_BAR;
+
+        return rfilt;
+
+#undef RX_FILTER_PRESERVE
+}
+EXPORT_SYMBOL(ath9k_cmn_calcrxfilter);
+
+/*
+ * Recv initialization for opmode change.
+ */
+void ath9k_cmn_opmode_init(struct ieee80211_hw *hw, struct ath_hw *ah,
+                           unsigned int rxfilter)
+{
+        struct ath_common *common = ath9k_hw_common(ah);
+
+        u32 rfilt, mfilt[2];
+
+        /* configure rx filter */
+        rfilt = ath9k_cmn_calcrxfilter(hw, ah, rxfilter);
+        ath9k_hw_setrxfilter(ah, rfilt);
+
+        /* configure bssid mask */
+        if (ah->caps.hw_caps & ATH9K_HW_CAP_BSSIDMASK)
+                ath_hw_setbssidmask(common);
+
+        /* configure operational mode */
+        ath9k_hw_setopmode(ah);
+
+        /* Handle any link-level address change. */
+        ath9k_hw_setmac(ah, common->macaddr);
+
+        /* calculate and install multicast filter */
+        mfilt[0] = mfilt[1] = ~0;
+        ath9k_hw_setmcastfilter(ah, mfilt[0], mfilt[1]);
+}
+EXPORT_SYMBOL(ath9k_cmn_opmode_init);
+
+static u32 ath9k_get_extchanmode(struct ieee80211_channel *chan,
+                                 enum nl80211_channel_type channel_type)
+{
+        u32 chanmode = 0;
+
+        switch (chan->band) {
+        case IEEE80211_BAND_2GHZ:
+                switch (channel_type) {
+                case NL80211_CHAN_NO_HT:
+                case NL80211_CHAN_HT20:
+                        chanmode = CHANNEL_G_HT20;
+                        break;
+                case NL80211_CHAN_HT40PLUS:
+                        chanmode = CHANNEL_G_HT40PLUS;
+                        break;
+                case NL80211_CHAN_HT40MINUS:
+                        chanmode = CHANNEL_G_HT40MINUS;
+                        break;
+                }
+                break;
+        case IEEE80211_BAND_5GHZ:
+                switch (channel_type) {
+                case NL80211_CHAN_NO_HT:
+                case NL80211_CHAN_HT20:
+                        chanmode = CHANNEL_A_HT20;
+                        break;
+                case NL80211_CHAN_HT40PLUS:
+                        chanmode = CHANNEL_A_HT40PLUS;
+                        break;
+                case NL80211_CHAN_HT40MINUS:
+                        chanmode = CHANNEL_A_HT40MINUS;
+                        break;
+                }
+                break;
+        default:
+                break;
+        }
+
+        return chanmode;
+}
+
+/*
+ * Update internal channel flags.
+ */
+void ath9k_cmn_update_ichannel(struct ieee80211_hw *hw,
+                               struct ath9k_channel *ichan)
+{
+        struct ieee80211_channel *chan = hw->conf.channel;
+        struct ieee80211_conf *conf = &hw->conf;
+
+        ichan->channel = chan->center_freq;
+        ichan->chan = chan;
+
+        if (chan->band == IEEE80211_BAND_2GHZ) {
+                ichan->chanmode = CHANNEL_G;
+                ichan->channelFlags = CHANNEL_2GHZ | CHANNEL_OFDM | CHANNEL_G;
+        } else {
+                ichan->chanmode = CHANNEL_A;
+                ichan->channelFlags = CHANNEL_5GHZ | CHANNEL_OFDM;
+        }
+
+        if (conf_is_ht(conf))
+                ichan->chanmode = ath9k_get_extchanmode(chan,
+                                                        conf->channel_type);
+}
+EXPORT_SYMBOL(ath9k_cmn_update_ichannel);
+
+/*
+ * Get the internal channel reference.
+ */
+struct ath9k_channel *ath9k_cmn_get_curchannel(struct ieee80211_hw *hw,
+                                               struct ath_hw *ah)
+{
+        struct ieee80211_channel *curchan = hw->conf.channel;
+        struct ath9k_channel *channel;
+        u8 chan_idx;
+
+        chan_idx = curchan->hw_value;
+        channel = &ah->channels[chan_idx];
+        ath9k_cmn_update_ichannel(hw, channel);
+
+        return channel;
+}
+EXPORT_SYMBOL(ath9k_cmn_get_curchannel);
+
+static int ath_setkey_tkip(struct ath_common *common, u16 keyix, const u8 *key,
+                           struct ath9k_keyval *hk, const u8 *addr,
+                           bool authenticator)
+{
+        struct ath_hw *ah = common->ah;
+        const u8 *key_rxmic;
+        const u8 *key_txmic;
+
+        key_txmic = key + NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY;
+        key_rxmic = key + NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY;
+
+        if (addr == NULL) {
+                /*
+                 * Group key installation - only two key cache entries are used
+                 * regardless of splitmic capability since group key is only
+                 * used either for TX or RX.
+                 */
+                if (authenticator) {
+                        memcpy(hk->kv_mic, key_txmic, sizeof(hk->kv_mic));
+                        memcpy(hk->kv_txmic, key_txmic, sizeof(hk->kv_mic));
+                } else {
+                        memcpy(hk->kv_mic, key_rxmic, sizeof(hk->kv_mic));
+                        memcpy(hk->kv_txmic, key_rxmic, sizeof(hk->kv_mic));
+                }
+                return ath9k_hw_set_keycache_entry(ah, keyix, hk, addr);
+        }
+        if (!common->splitmic) {
+                /* TX and RX keys share the same key cache entry. */
+                memcpy(hk->kv_mic, key_rxmic, sizeof(hk->kv_mic));
+                memcpy(hk->kv_txmic, key_txmic, sizeof(hk->kv_txmic));
+                return ath9k_hw_set_keycache_entry(ah, keyix, hk, addr);
+        }
+
+        /* Separate key cache entries for TX and RX */
+
+        /* TX key goes at first index, RX key at +32. */
+        memcpy(hk->kv_mic, key_txmic, sizeof(hk->kv_mic));
+        if (!ath9k_hw_set_keycache_entry(ah, keyix, hk, NULL)) {
+                /* TX MIC entry failed. No need to proceed further */
+                ath_print(common, ATH_DBG_FATAL,
+                          "Setting TX MIC Key Failed\n");
+                return 0;
+        }
+
+        memcpy(hk->kv_mic, key_rxmic, sizeof(hk->kv_mic));
+        /* XXX delete tx key on failure? */
+        return ath9k_hw_set_keycache_entry(ah, keyix + 32, hk, addr);
+}
+
+static int ath_reserve_key_cache_slot_tkip(struct ath_common *common)
+{
+        int i;
+
+        for (i = IEEE80211_WEP_NKID; i < common->keymax / 2; i++) {
+                if (test_bit(i, common->keymap) ||
+                    test_bit(i + 64, common->keymap))
+                        continue; /* At least one part of TKIP key allocated */
+                if (common->splitmic &&
+                    (test_bit(i + 32, common->keymap) ||
+                     test_bit(i + 64 + 32, common->keymap)))
+                        continue; /* At least one part of TKIP key allocated */
+
+                /* Found a free slot for a TKIP key */
+                return i;
+        }
+        return -1;
+}
+
+static int ath_reserve_key_cache_slot(struct ath_common *common)
+{
+        int i;
+
+        /* First, try to find slots that would not be available for TKIP. */
+        if (common->splitmic) {
+                for (i = IEEE80211_WEP_NKID; i < common->keymax / 4; i++) {
+                        if (!test_bit(i, common->keymap) &&
+                            (test_bit(i + 32, common->keymap) ||
+                             test_bit(i + 64, common->keymap) ||
+                             test_bit(i + 64 + 32, common->keymap)))
+                                return i;
+                        if (!test_bit(i + 32, common->keymap) &&
+                            (test_bit(i, common->keymap) ||
+                             test_bit(i + 64, common->keymap) ||
+                             test_bit(i + 64 + 32, common->keymap)))
+                                return i + 32;
+                        if (!test_bit(i + 64, common->keymap) &&
+                            (test_bit(i , common->keymap) ||
+                             test_bit(i + 32, common->keymap) ||
+                             test_bit(i + 64 + 32, common->keymap)))
+                                return i + 64;
+                        if (!test_bit(i + 64 + 32, common->keymap) &&
+                            (test_bit(i, common->keymap) ||
+                             test_bit(i + 32, common->keymap) ||
+                             test_bit(i + 64, common->keymap)))
+                                return i + 64 + 32;
+                }
+        } else {
+                for (i = IEEE80211_WEP_NKID; i < common->keymax / 2; i++) {
+                        if (!test_bit(i, common->keymap) &&
+                            test_bit(i + 64, common->keymap))
+                                return i;
+                        if (test_bit(i, common->keymap) &&
+                            !test_bit(i + 64, common->keymap))
+                                return i + 64;
+                }
+        }
+
+        /* No partially used TKIP slots, pick any available slot */
+        for (i = IEEE80211_WEP_NKID; i < common->keymax; i++) {
+                /* Do not allow slots that could be needed for TKIP group keys
+                 * to be used. This limitation could be removed if we know that
+                 * TKIP will not be used. */
+                if (i >= 64 && i < 64 + IEEE80211_WEP_NKID)
+                        continue;
+                if (common->splitmic) {
+                        if (i >= 32 && i < 32 + IEEE80211_WEP_NKID)
+                                continue;
+                        if (i >= 64 + 32 && i < 64 + 32 + IEEE80211_WEP_NKID)
+                                continue;
+                }
+
+                if (!test_bit(i, common->keymap))
+                        return i; /* Found a free slot for a key */
+        }
+
+        /* No free slot found */
+        return -1;
+}
+
+/*
+ * Configure encryption in the HW.
+ */
+int ath9k_cmn_key_config(struct ath_common *common,
+                         struct ieee80211_vif *vif,
+                         struct ieee80211_sta *sta,
+                         struct ieee80211_key_conf *key)
+{
+        struct ath_hw *ah = common->ah;
+        struct ath9k_keyval hk;
+        const u8 *mac = NULL;
+        int ret = 0;
+        int idx;
+
+        memset(&hk, 0, sizeof(hk));
+
+        switch (key->alg) {
+        case ALG_WEP:
+                hk.kv_type = ATH9K_CIPHER_WEP;
+                break;
+        case ALG_TKIP:
+                hk.kv_type = ATH9K_CIPHER_TKIP;
+                break;
+        case ALG_CCMP:
+                hk.kv_type = ATH9K_CIPHER_AES_CCM;
+                break;
+        default:
+                return -EOPNOTSUPP;
+        }
+
+        hk.kv_len = key->keylen;
+        memcpy(hk.kv_val, key->key, key->keylen);
+
+        if (!(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
+                /* For now, use the default keys for broadcast keys. This may
+                 * need to change with virtual interfaces. */
+                idx = key->keyidx;
+        } else if (key->keyidx) {
+                if (WARN_ON(!sta))
+                        return -EOPNOTSUPP;
+                mac = sta->addr;
+
+                if (vif->type != NL80211_IFTYPE_AP) {
+                        /* Only keyidx 0 should be used with unicast key, but
+                         * allow this for client mode for now. */
+                        idx = key->keyidx;
+                } else
+                        return -EIO;
+        } else {
+                if (WARN_ON(!sta))
+                        return -EOPNOTSUPP;
+                mac = sta->addr;
+
+                if (key->alg == ALG_TKIP)
+                        idx = ath_reserve_key_cache_slot_tkip(common);
+                else
+                        idx = ath_reserve_key_cache_slot(common);
+                if (idx < 0)
+                        return -ENOSPC; /* no free key cache entries */
+        }
+
+        if (key->alg == ALG_TKIP)
+                ret = ath_setkey_tkip(common, idx, key->key, &hk, mac,
+                                      vif->type == NL80211_IFTYPE_AP);
+        else
+                ret = ath9k_hw_set_keycache_entry(ah, idx, &hk, mac);
+
+        if (!ret)
+                return -EIO;
+
+        set_bit(idx, common->keymap);
+        if (key->alg == ALG_TKIP) {
+                set_bit(idx + 64, common->keymap);
+                if (common->splitmic) {
+                        set_bit(idx + 32, common->keymap);
+                        set_bit(idx + 64 + 32, common->keymap);
+                }
+        }
+
+        return idx;
+}
+EXPORT_SYMBOL(ath9k_cmn_key_config);
+
+/*
+ * Delete Key.
+ */
+void ath9k_cmn_key_delete(struct ath_common *common,
+                          struct ieee80211_key_conf *key)
+{
+        struct ath_hw *ah = common->ah;
+
+        ath9k_hw_keyreset(ah, key->hw_key_idx);
+        if (key->hw_key_idx < IEEE80211_WEP_NKID)
+                return;
+
+        clear_bit(key->hw_key_idx, common->keymap);
+        if (key->alg != ALG_TKIP)
+                return;
+
+        clear_bit(key->hw_key_idx + 64, common->keymap);
+        if (common->splitmic) {
+                ath9k_hw_keyreset(ah, key->hw_key_idx + 32);
+                clear_bit(key->hw_key_idx + 32, common->keymap);
+                clear_bit(key->hw_key_idx + 64 + 32, common->keymap);
+        }
+}
+EXPORT_SYMBOL(ath9k_cmn_key_delete);
+
 static int __init ath9k_cmn_init(void)
 {
         return 0;
diff --git a/drivers/net/wireless/ath/ath9k/common.h b/drivers/net/wireless/ath/ath9k/common.h
index 042999c2fe9c..bbcc57f6eba3 100644
--- a/drivers/net/wireless/ath/ath9k/common.h
+++ b/drivers/net/wireless/ath/ath9k/common.h
@@ -23,6 +23,8 @@
 
 /* Common header for Atheros 802.11n base driver cores */
 
+#define IEEE80211_WEP_NKID 4
+
 #define WME_NUM_TID             16
 #define WME_BA_BMP_SIZE         64
 #define WME_MAX_BA              WME_BA_BMP_SIZE
@@ -125,3 +127,18 @@ void ath9k_cmn_rx_skb_postprocess(struct ath_common *common,
                                   bool decrypt_error);
 
 int ath9k_cmn_padpos(__le16 frame_control);
+int ath9k_cmn_get_hw_crypto_keytype(struct sk_buff *skb);
+u32 ath9k_cmn_calcrxfilter(struct ieee80211_hw *hw, struct ath_hw *ah,
+                           unsigned int rxfilter);
+void ath9k_cmn_opmode_init(struct ieee80211_hw *hw, struct ath_hw *ah,
+                           unsigned int rxfilter);
+void ath9k_cmn_update_ichannel(struct ieee80211_hw *hw,
+                               struct ath9k_channel *ichan);
+struct ath9k_channel *ath9k_cmn_get_curchannel(struct ieee80211_hw *hw,
+                                               struct ath_hw *ah);
+int ath9k_cmn_key_config(struct ath_common *common,
+                         struct ieee80211_vif *vif,
+                         struct ieee80211_sta *sta,
+                         struct ieee80211_key_conf *key);
+void ath9k_cmn_key_delete(struct ath_common *common,
+                          struct ieee80211_key_conf *key);
diff --git a/drivers/net/wireless/ath/ath9k/hif_usb.c b/drivers/net/wireless/ath/ath9k/hif_usb.c
new file mode 100644
index 000000000000..fc4f6e8c9ef3
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/hif_usb.c
@@ -0,0 +1,993 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+#define ATH9K_FW_USB_DEV(devid, fw)                                     \
+        { USB_DEVICE(0x0cf3, devid), .driver_info = (unsigned long) fw }
+
+static struct usb_device_id ath9k_hif_usb_ids[] = {
+        ATH9K_FW_USB_DEV(0x9271, "ar9271.fw"),
+        { },
+};
+
+MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
+
+static int __hif_usb_tx(struct hif_device_usb *hif_dev);
+
+static void hif_usb_regout_cb(struct urb *urb)
+{
+        struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
+        struct hif_device_usb *hif_dev = cmd->hif_dev;
+
+        if (!hif_dev) {
+                usb_free_urb(urb);
+                if (cmd) {
+                        if (cmd->skb)
+                                dev_kfree_skb_any(cmd->skb);
+                        kfree(cmd);
+                }
+                return;
+        }
+
+        switch (urb->status) {
+        case 0:
+                break;
+        case -ENOENT:
+        case -ECONNRESET:
+                break;
+        case -ENODEV:
+        case -ESHUTDOWN:
+                return;
+        default:
+                break;
+        }
+
+        if (cmd) {
+                ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
+                                          cmd->skb, 1);
+                kfree(cmd);
+                usb_free_urb(urb);
+        }
+}
+
+static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
+                               struct sk_buff *skb)
+{
+        struct urb *urb;
+        struct cmd_buf *cmd;
+        int ret = 0;
+
+        urb = usb_alloc_urb(0, GFP_KERNEL);
+        if (urb == NULL)
+                return -ENOMEM;
+
+        cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
+        if (cmd == NULL) {
+                usb_free_urb(urb);
+                return -ENOMEM;
+        }
+
+        cmd->skb = skb;
+        cmd->hif_dev = hif_dev;
+
+        usb_fill_int_urb(urb, hif_dev->udev,
+                         usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE),
+                         skb->data, skb->len,
+                         hif_usb_regout_cb, cmd, 1);
+
+        ret = usb_submit_urb(urb, GFP_KERNEL);
+        if (ret) {
+                usb_free_urb(urb);
+                kfree(cmd);
+        }
+
+        return ret;
+}
+
+static void hif_usb_tx_cb(struct urb *urb)
+{
+        struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
+        struct hif_device_usb *hif_dev = tx_buf->hif_dev;
+        struct sk_buff *skb;
+        bool drop, flush;
+
+        if (!hif_dev)
+                return;
+
+        switch (urb->status) {
+        case 0:
+                break;
+        case -ENOENT:
+        case -ECONNRESET:
+                break;
+        case -ENODEV:
+        case -ESHUTDOWN:
+                return;
+        default:
+                break;
+        }
+
+        if (tx_buf) {
+                spin_lock(&hif_dev->tx.tx_lock);
+                drop = !!(hif_dev->tx.flags & HIF_USB_TX_STOP);
+                flush = !!(hif_dev->tx.flags & HIF_USB_TX_FLUSH);
+                spin_unlock(&hif_dev->tx.tx_lock);
+
+                while ((skb = __skb_dequeue(&tx_buf->skb_queue)) != NULL) {
+                        if (!drop && !flush) {
+                                ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
+                                                          skb, 1);
+                                TX_STAT_INC(skb_completed);
+                        } else {
+                                dev_kfree_skb_any(skb);
+                        }
+                }
+
+                if (flush)
+                        return;
+
+                tx_buf->len = tx_buf->offset = 0;
+                __skb_queue_head_init(&tx_buf->skb_queue);
+
+                spin_lock(&hif_dev->tx.tx_lock);
+                list_del(&tx_buf->list);
+                list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
+                hif_dev->tx.tx_buf_cnt++;
+                if (!drop)
+                        __hif_usb_tx(hif_dev); /* Check for pending SKBs */
+                TX_STAT_INC(buf_completed);
+                spin_unlock(&hif_dev->tx.tx_lock);
+        }
+}
+
+/* TX lock has to be taken */
+static int __hif_usb_tx(struct hif_device_usb *hif_dev)
+{
+        struct tx_buf *tx_buf = NULL;
+        struct sk_buff *nskb = NULL;
+        int ret = 0, i;
+        u16 *hdr, tx_skb_cnt = 0;
+        u8 *buf;
+
+        if (hif_dev->tx.tx_skb_cnt == 0)
+                return 0;
+
+        /* Check if a free TX buffer is available */
+        if (list_empty(&hif_dev->tx.tx_buf))
+                return 0;
+
+        tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
+        list_del(&tx_buf->list);
+        list_add_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
+        hif_dev->tx.tx_buf_cnt--;
+
+        tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
+
+        for (i = 0; i < tx_skb_cnt; i++) {
+                nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
+
+                /* Should never be NULL */
+                BUG_ON(!nskb);
+
+                hif_dev->tx.tx_skb_cnt--;
+
+                buf = tx_buf->buf;
+                buf += tx_buf->offset;
+                hdr = (u16 *)buf;
+                *hdr++ = nskb->len;
+                *hdr++ = ATH_USB_TX_STREAM_MODE_TAG;
+                buf += 4;
+                memcpy(buf, nskb->data, nskb->len);
+                tx_buf->len = nskb->len + 4;
+
+                if (i < (tx_skb_cnt - 1))
+                        tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
+
+                if (i == (tx_skb_cnt - 1))
+                        tx_buf->len += tx_buf->offset;
+
+                __skb_queue_tail(&tx_buf->skb_queue, nskb);
+                TX_STAT_INC(skb_queued);
+        }
+
+        usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
+                          usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
+                          tx_buf->buf, tx_buf->len,
+                          hif_usb_tx_cb, tx_buf);
+
+        ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
+        if (ret) {
+                tx_buf->len = tx_buf->offset = 0;
+                __skb_queue_purge(&tx_buf->skb_queue);
+                __skb_queue_head_init(&tx_buf->skb_queue);
+                list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
+                hif_dev->tx.tx_buf_cnt++;
+        }
+
+        if (!ret)
+                TX_STAT_INC(buf_queued);
+
+        return ret;
+}
+
+static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb,
+                           struct ath9k_htc_tx_ctl *tx_ctl)
+{
+        unsigned long flags;
+
+        spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
+
+        if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
+                spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+                return -ENODEV;
+        }
+
+        /* Check if the max queue count has been reached */
+        if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
+                spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+                return -ENOMEM;
+        }
+
+        __skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
+        hif_dev->tx.tx_skb_cnt++;
+
+        /* Send normal frames immediately */
+        if (!tx_ctl || (tx_ctl && (tx_ctl->type == ATH9K_HTC_NORMAL)))
+                __hif_usb_tx(hif_dev);
+
+        /* Check if AMPDUs have to be sent immediately */
+        if (tx_ctl && (tx_ctl->type == ATH9K_HTC_AMPDU) &&
+            (hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
+            (hif_dev->tx.tx_skb_cnt < 2)) {
+                __hif_usb_tx(hif_dev);
+        }
+
+        spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+
+        return 0;
+}
+
+static void hif_usb_start(void *hif_handle, u8 pipe_id)
+{
+        struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
+        unsigned long flags;
+
+        hif_dev->flags |= HIF_USB_START;
+
+        spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
+        hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
+        spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+}
+
+static void hif_usb_stop(void *hif_handle, u8 pipe_id)
+{
+        struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
+        unsigned long flags;
+
+        spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
+        __skb_queue_purge(&hif_dev->tx.tx_skb_queue);
+        hif_dev->tx.tx_skb_cnt = 0;
+        hif_dev->tx.flags |= HIF_USB_TX_STOP;
+        spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+}
+
+static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb,
+                        struct ath9k_htc_tx_ctl *tx_ctl)
+{
+        struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
+        int ret = 0;
+
+        switch (pipe_id) {
+        case USB_WLAN_TX_PIPE:
+                ret = hif_usb_send_tx(hif_dev, skb, tx_ctl);
+                break;
+        case USB_REG_OUT_PIPE:
+                ret = hif_usb_send_regout(hif_dev, skb);
+                break;
+        default:
+                ret = -EINVAL;
+                break;
+        }
+
+        return ret;
+}
+
+static struct ath9k_htc_hif hif_usb = {
+        .transport = ATH9K_HIF_USB,
+        .name = "ath9k_hif_usb",
+
+        .control_ul_pipe = USB_REG_OUT_PIPE,
+        .control_dl_pipe = USB_REG_IN_PIPE,
+
+        .start = hif_usb_start,
+        .stop = hif_usb_stop,
+        .send = hif_usb_send,
+};
+
+static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
+                                    struct sk_buff *skb)
+{
+        struct sk_buff *nskb, *skb_pool[8];
+        int index = 0, i = 0, chk_idx, len = skb->len;
+        int rx_remain_len = 0, rx_pkt_len = 0;
+        u16 pkt_len, pkt_tag, pool_index = 0;
+        u8 *ptr;
+
+        rx_remain_len = hif_dev->rx_remain_len;
+        rx_pkt_len = hif_dev->rx_transfer_len;
+
+        if (rx_remain_len != 0) {
+                struct sk_buff *remain_skb = hif_dev->remain_skb;
+
+                if (remain_skb) {
+                        ptr = (u8 *) remain_skb->data;
+
+                        index = rx_remain_len;
+                        rx_remain_len -= hif_dev->rx_pad_len;
+                        ptr += rx_pkt_len;
+
+                        memcpy(ptr, skb->data, rx_remain_len);
+
+                        rx_pkt_len += rx_remain_len;
+                        hif_dev->rx_remain_len = 0;
+                        skb_put(remain_skb, rx_pkt_len);
+
+                        skb_pool[pool_index++] = remain_skb;
+
+                } else {
+                        index = rx_remain_len;
+                }
+        }
+
+        while (index < len) {
+                ptr = (u8 *) skb->data;
+
+                pkt_len = ptr[index] + (ptr[index+1] << 8);
+                pkt_tag = ptr[index+2] + (ptr[index+3] << 8);
+
+                if (pkt_tag == ATH_USB_RX_STREAM_MODE_TAG) {
+                        u16 pad_len;
+
+                        pad_len = 4 - (pkt_len & 0x3);
+                        if (pad_len == 4)
+                                pad_len = 0;
+
+                        chk_idx = index;
+                        index = index + 4 + pkt_len + pad_len;
+
+                        if (index > MAX_RX_BUF_SIZE) {
+                                hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
+                                hif_dev->rx_transfer_len =
+                                        MAX_RX_BUF_SIZE - chk_idx - 4;
+                                hif_dev->rx_pad_len = pad_len;
+
+                                nskb = __dev_alloc_skb(pkt_len + 32,
+                                                       GFP_ATOMIC);
+                                if (!nskb) {
+                                        dev_err(&hif_dev->udev->dev,
+                                        "ath9k_htc: RX memory allocation"
+                                        " error\n");
+                                        goto err;
+                                }
+                                skb_reserve(nskb, 32);
+                                RX_STAT_INC(skb_allocated);
+
+                                memcpy(nskb->data, &(skb->data[chk_idx+4]),
+                                       hif_dev->rx_transfer_len);
+
+                                /* Record the buffer pointer */
+                                hif_dev->remain_skb = nskb;
+                        } else {
+                                nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
+                                if (!nskb) {
+                                        dev_err(&hif_dev->udev->dev,
+                                        "ath9k_htc: RX memory allocation"
+                                        " error\n");
+                                        goto err;
+                                }
+                                skb_reserve(nskb, 32);
+                                RX_STAT_INC(skb_allocated);
+
+                                memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
+                                skb_put(nskb, pkt_len);
+                                skb_pool[pool_index++] = nskb;
+                        }
+                } else {
+                        RX_STAT_INC(skb_dropped);
+                        dev_kfree_skb_any(skb);
+                        return;
+                }
+        }
+
+err:
+        dev_kfree_skb_any(skb);
+
+        for (i = 0; i < pool_index; i++) {
+                ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
+                                 skb_pool[i]->len, USB_WLAN_RX_PIPE);
+                RX_STAT_INC(skb_completed);
+        }
+}
+
+static void ath9k_hif_usb_rx_cb(struct urb *urb)
+{
+        struct sk_buff *skb = (struct sk_buff *) urb->context;
+        struct sk_buff *nskb;
+        struct hif_device_usb *hif_dev = (struct hif_device_usb *)
+                usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
+        int ret;
+
+        if (!hif_dev)
+                goto free;
+
+        switch (urb->status) {
+        case 0:
+                break;
+        case -ENOENT:
+        case -ECONNRESET:
+        case -ENODEV:
+        case -ESHUTDOWN:
+                goto free;
+        default:
+                goto resubmit;
+        }
+
+        if (likely(urb->actual_length != 0)) {
+                skb_put(skb, urb->actual_length);
+
+                nskb = __dev_alloc_skb(MAX_RX_BUF_SIZE, GFP_ATOMIC);
+                if (!nskb)
+                        goto resubmit;
+
+                usb_fill_bulk_urb(urb, hif_dev->udev,
+                                  usb_rcvbulkpipe(hif_dev->udev,
+                                                  USB_WLAN_RX_PIPE),
+                                  nskb->data, MAX_RX_BUF_SIZE,
+                                  ath9k_hif_usb_rx_cb, nskb);
+
+                ret = usb_submit_urb(urb, GFP_ATOMIC);
+                if (ret) {
+                        dev_kfree_skb_any(nskb);
+                        goto free;
+                }
+
+                ath9k_hif_usb_rx_stream(hif_dev, skb);
+                return;
+        }
+
+resubmit:
+        skb_reset_tail_pointer(skb);
+        skb_trim(skb, 0);
+
+        ret = usb_submit_urb(urb, GFP_ATOMIC);
+        if (ret)
+                goto free;
+
+        return;
+free:
+        dev_kfree_skb_any(skb);
+}
+
+static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
+{
+        struct sk_buff *skb = (struct sk_buff *) urb->context;
+        struct sk_buff *nskb;
+        struct hif_device_usb *hif_dev = (struct hif_device_usb *)
+                usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
+        int ret;
+
+        if (!hif_dev)
+                goto free;
+
+        switch (urb->status) {
+        case 0:
+                break;
+        case -ENOENT:
+        case -ECONNRESET:
+        case -ENODEV:
+        case -ESHUTDOWN:
+                goto free;
+        default:
+                goto resubmit;
+        }
+
+        if (likely(urb->actual_length != 0)) {
+                skb_put(skb, urb->actual_length);
+
+                nskb = __dev_alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
+                if (!nskb)
+                        goto resubmit;
+
+                usb_fill_int_urb(urb, hif_dev->udev,
+                                 usb_rcvintpipe(hif_dev->udev, USB_REG_IN_PIPE),
+                                 nskb->data, MAX_REG_IN_BUF_SIZE,
+                                 ath9k_hif_usb_reg_in_cb, nskb, 1);
+
+                ret = usb_submit_urb(urb, GFP_ATOMIC);
+                if (ret) {
+                        dev_kfree_skb_any(nskb);
+                        goto free;
+                }
+
+                ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
+                                 skb->len, USB_REG_IN_PIPE);
+
+                return;
+        }
+
+resubmit:
+        skb_reset_tail_pointer(skb);
+        skb_trim(skb, 0);
+
+        ret = usb_submit_urb(urb, GFP_ATOMIC);
+        if (ret)
+                goto free;
+
+        return;
+free:
+        dev_kfree_skb_any(skb);
+}
+
+static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
+{
+        unsigned long flags;
+        struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
+
+        list_for_each_entry_safe(tx_buf, tx_buf_tmp, &hif_dev->tx.tx_buf, list) {
+                list_del(&tx_buf->list);
+                usb_free_urb(tx_buf->urb);
+                kfree(tx_buf->buf);
+                kfree(tx_buf);
+        }
+
+        spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
+        hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
+        spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+
+        list_for_each_entry_safe(tx_buf, tx_buf_tmp,
+                                 &hif_dev->tx.tx_pending, list) {
+                usb_kill_urb(tx_buf->urb);
+                list_del(&tx_buf->list);
+                usb_free_urb(tx_buf->urb);
+                kfree(tx_buf->buf);
+                kfree(tx_buf);
+        }
+
+        spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
+        hif_dev->tx.flags &= ~HIF_USB_TX_FLUSH;
+        spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
+}
+
+static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
+{
+        struct tx_buf *tx_buf;
+        int i;
+
+        INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
+        INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
+        spin_lock_init(&hif_dev->tx.tx_lock);
+        __skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
+
+        for (i = 0; i < MAX_TX_URB_NUM; i++) {
+                tx_buf = kzalloc(sizeof(struct tx_buf), GFP_KERNEL);
+                if (!tx_buf)
+                        goto err;
+
+                tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
+                if (!tx_buf->buf)
+                        goto err;
+
+                tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
+                if (!tx_buf->urb)
+                        goto err;
+
+                tx_buf->hif_dev = hif_dev;
+                __skb_queue_head_init(&tx_buf->skb_queue);
+
+                list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
+        }
+
+        hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
+
+        return 0;
+err:
+        ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
+        return -ENOMEM;
+}
+
+static void ath9k_hif_usb_dealloc_rx_skbs(struct hif_device_usb *hif_dev)
+{
+        int i;
+
+        for (i = 0; i < MAX_RX_URB_NUM; i++) {
+                if (hif_dev->wlan_rx_data_urb[i]) {
+                        if (hif_dev->wlan_rx_data_urb[i]->transfer_buffer)
+                                dev_kfree_skb_any((void *)
+                                          hif_dev->wlan_rx_data_urb[i]->context);
+                }
+        }
+}
+
+static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
+{
+        int i;
+
+        for (i = 0; i < MAX_RX_URB_NUM; i++) {
+                if (hif_dev->wlan_rx_data_urb[i]) {
+                        usb_kill_urb(hif_dev->wlan_rx_data_urb[i]);
+                        usb_free_urb(hif_dev->wlan_rx_data_urb[i]);
+                        hif_dev->wlan_rx_data_urb[i] = NULL;
+                }
+        }
+}
+
+static int ath9k_hif_usb_prep_rx_urb(struct hif_device_usb *hif_dev,
+                                     struct urb *urb)
+{
+        struct sk_buff *skb;
+
+        skb = __dev_alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
+        if (!skb)
+                return -ENOMEM;
+
+        usb_fill_bulk_urb(urb, hif_dev->udev,
+                          usb_rcvbulkpipe(hif_dev->udev, USB_WLAN_RX_PIPE),
+                          skb->data, MAX_RX_BUF_SIZE,
+                          ath9k_hif_usb_rx_cb, skb);
+        return 0;
+}
+
+static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
+{
+        int i, ret;
+
+        for (i = 0; i < MAX_RX_URB_NUM; i++) {
+
+                /* Allocate URB */
+                hif_dev->wlan_rx_data_urb[i] = usb_alloc_urb(0, GFP_KERNEL);
+                if (hif_dev->wlan_rx_data_urb[i] == NULL) {
+                        ret = -ENOMEM;
+                        goto err_rx_urb;
+                }
+
+                /* Allocate buffer */
+                ret = ath9k_hif_usb_prep_rx_urb(hif_dev,
+                                                hif_dev->wlan_rx_data_urb[i]);
+                if (ret)
+                        goto err_rx_urb;
+
+                /* Submit URB */
+                ret = usb_submit_urb(hif_dev->wlan_rx_data_urb[i], GFP_KERNEL);
+                if (ret)
+                        goto err_rx_urb;
+
+        }
+
+        return 0;
+
+err_rx_urb:
+        ath9k_hif_usb_dealloc_rx_skbs(hif_dev);
+        ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
+        return ret;
+}
+
+static void ath9k_hif_usb_dealloc_reg_in_urb(struct hif_device_usb *hif_dev)
+{
+        if (hif_dev->reg_in_urb) {
+                usb_kill_urb(hif_dev->reg_in_urb);
+                usb_free_urb(hif_dev->reg_in_urb);
+                hif_dev->reg_in_urb = NULL;
+        }
+}
+
+static int ath9k_hif_usb_alloc_reg_in_urb(struct hif_device_usb *hif_dev)
+{
+        struct sk_buff *skb;
+
+        hif_dev->reg_in_urb = usb_alloc_urb(0, GFP_KERNEL);
+        if (hif_dev->reg_in_urb == NULL)
+                return -ENOMEM;
+
+        skb = __dev_alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
+        if (!skb)
+                goto err;
+
+        usb_fill_int_urb(hif_dev->reg_in_urb, hif_dev->udev,
+                         usb_rcvintpipe(hif_dev->udev, USB_REG_IN_PIPE),
+                         skb->data, MAX_REG_IN_BUF_SIZE,
+                         ath9k_hif_usb_reg_in_cb, skb, 1);
+
+        if (usb_submit_urb(hif_dev->reg_in_urb, GFP_KERNEL) != 0)
+                goto err_skb;
+
+        return 0;
+
+err_skb:
+        dev_kfree_skb_any(skb);
+err:
+        ath9k_hif_usb_dealloc_reg_in_urb(hif_dev);
+        return -ENOMEM;
+}
+
+static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
+{
+        /* TX */
+        if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
+                goto err;
+
+        /* RX */
+        if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
+                goto err;
+
+        /* Register Read/Write */
+        if (ath9k_hif_usb_alloc_reg_in_urb(hif_dev) < 0)
+                goto err;
+
+        return 0;
+err:
+        return -ENOMEM;
+}
+
+static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
+{
+        int transfer, err;
+        const void *data = hif_dev->firmware->data;
+        size_t len = hif_dev->firmware->size;
+        u32 addr = AR9271_FIRMWARE;
+        u8 *buf = kzalloc(4096, GFP_KERNEL);
+
+        if (!buf)
+                return -ENOMEM;
+
+        while (len) {
+                transfer = min_t(int, len, 4096);
+                memcpy(buf, data, transfer);
+
+                err = usb_control_msg(hif_dev->udev,
+                                      usb_sndctrlpipe(hif_dev->udev, 0),
+                                      FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
+                                      addr >> 8, 0, buf, transfer, HZ);
+                if (err < 0) {
+                        kfree(buf);
+                        return err;
+                }
+
+                len -= transfer;
+                data += transfer;
+                addr += transfer;
+        }
+        kfree(buf);
+
+        /*
+         * Issue FW download complete command to firmware.
+         */
+        err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
+                              FIRMWARE_DOWNLOAD_COMP,
+                              0x40 | USB_DIR_OUT,
+                              AR9271_FIRMWARE_TEXT >> 8, 0, NULL, 0, HZ);
+        if (err)
+                return -EIO;
+
+        dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
+                 "ar9271.fw", (unsigned long) hif_dev->firmware->size);
+
+        return 0;
+}
+
+static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev,
+                                  const char *fw_name)
+{
+        int ret;
+
+        /* Request firmware */
+        ret = request_firmware(&hif_dev->firmware, fw_name, &hif_dev->udev->dev);
+        if (ret) {
+                dev_err(&hif_dev->udev->dev,
+                        "ath9k_htc: Firmware - %s not found\n", fw_name);
+                goto err_fw_req;
+        }
+
+        /* Download firmware */
+        ret = ath9k_hif_usb_download_fw(hif_dev);
+        if (ret) {
+                dev_err(&hif_dev->udev->dev,
+                        "ath9k_htc: Firmware - %s download failed\n", fw_name);
+                goto err_fw_download;
+        }
+
+        /* Alloc URBs */
+        ret = ath9k_hif_usb_alloc_urbs(hif_dev);
+        if (ret) {
+                dev_err(&hif_dev->udev->dev,
+                        "ath9k_htc: Unable to allocate URBs\n");
+                goto err_urb;
+        }
+
+        return 0;
+
+err_urb:
+        /* Nothing */
+err_fw_download:
+        release_firmware(hif_dev->firmware);
+err_fw_req:
+        hif_dev->firmware = NULL;
+        return ret;
+}
+
+static void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
+{
+        ath9k_hif_usb_dealloc_reg_in_urb(hif_dev);
+        ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
+        ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
+}
+
+static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
+{
+        ath9k_hif_usb_dealloc_urbs(hif_dev);
+        if (hif_dev->firmware)
+                release_firmware(hif_dev->firmware);
+}
+
+static int ath9k_hif_usb_probe(struct usb_interface *interface,
+                               const struct usb_device_id *id)
+{
+        struct usb_device *udev = interface_to_usbdev(interface);
+        struct hif_device_usb *hif_dev;
+        const char *fw_name = (const char *) id->driver_info;
+        int ret = 0;
+
+        hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
+        if (!hif_dev) {
+                ret = -ENOMEM;
+                goto err_alloc;
+        }
+
+        usb_get_dev(udev);
+        hif_dev->udev = udev;
+        hif_dev->interface = interface;
+        hif_dev->device_id = id->idProduct;
+#ifdef CONFIG_PM
+        udev->reset_resume = 1;
+#endif
+        usb_set_intfdata(interface, hif_dev);
+
+        ret = ath9k_hif_usb_dev_init(hif_dev, fw_name);
+        if (ret) {
+                ret = -EINVAL;
+                goto err_hif_init_usb;
+        }
+
+        hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev);
+        if (hif_dev->htc_handle == NULL) {
+                ret = -ENOMEM;
+                goto err_htc_hw_alloc;
+        }
+
+        ret = ath9k_htc_hw_init(&hif_usb, hif_dev->htc_handle, hif_dev,
+                                &hif_dev->udev->dev, hif_dev->device_id,
+                                ATH9K_HIF_USB);
+        if (ret) {
+                ret = -EINVAL;
+                goto err_htc_hw_init;
+        }
+
+        dev_info(&hif_dev->udev->dev, "ath9k_htc: USB layer initialized\n");
+
+        return 0;
+
+err_htc_hw_init:
+        ath9k_htc_hw_free(hif_dev->htc_handle);
+err_htc_hw_alloc:
+        ath9k_hif_usb_dev_deinit(hif_dev);
+err_hif_init_usb:
+        usb_set_intfdata(interface, NULL);
+        kfree(hif_dev);
+        usb_put_dev(udev);
+err_alloc:
+        return ret;
+}
+
+static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
+{
+        struct usb_device *udev = interface_to_usbdev(interface);
+        struct hif_device_usb *hif_dev =
+                (struct hif_device_usb *) usb_get_intfdata(interface);
+
+        if (hif_dev) {
+                ath9k_htc_hw_deinit(hif_dev->htc_handle, true);
+                ath9k_htc_hw_free(hif_dev->htc_handle);
+                ath9k_hif_usb_dev_deinit(hif_dev);
+                usb_set_intfdata(interface, NULL);
+        }
+
+        if (hif_dev->flags & HIF_USB_START)
+                usb_reset_device(udev);
+
+        kfree(hif_dev);
+        dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
+        usb_put_dev(udev);
+}
+
+#ifdef CONFIG_PM
+static int ath9k_hif_usb_suspend(struct usb_interface *interface,
+                                 pm_message_t message)
+{
+        struct hif_device_usb *hif_dev =
+                (struct hif_device_usb *) usb_get_intfdata(interface);
+
+        ath9k_hif_usb_dealloc_urbs(hif_dev);
+
+        return 0;
+}
+
+static int ath9k_hif_usb_resume(struct usb_interface *interface)
+{
+        struct hif_device_usb *hif_dev =
+                (struct hif_device_usb *) usb_get_intfdata(interface);
+        int ret;
+
+        ret = ath9k_hif_usb_alloc_urbs(hif_dev);
+        if (ret)
+                return ret;
+
+        if (hif_dev->firmware) {
+                ret = ath9k_hif_usb_download_fw(hif_dev);
+                if (ret)
+                        goto fail_resume;
+        } else {
+                ath9k_hif_usb_dealloc_urbs(hif_dev);
+                return -EIO;
+        }
+
+        mdelay(100);
+
+        ret = ath9k_htc_resume(hif_dev->htc_handle);
+
+        if (ret)
+                goto fail_resume;
+
+        return 0;
+
+fail_resume:
+        ath9k_hif_usb_dealloc_urbs(hif_dev);
+
+        return ret;
+}
+#endif
+
+static struct usb_driver ath9k_hif_usb_driver = {
+        .name = "ath9k_hif_usb",
+        .probe = ath9k_hif_usb_probe,
+        .disconnect = ath9k_hif_usb_disconnect,
+#ifdef CONFIG_PM
+        .suspend = ath9k_hif_usb_suspend,
+        .resume = ath9k_hif_usb_resume,
+        .reset_resume = ath9k_hif_usb_resume,
+#endif
+        .id_table = ath9k_hif_usb_ids,
+        .soft_unbind = 1,
+};
+
+int ath9k_hif_usb_init(void)
+{
+        return usb_register(&ath9k_hif_usb_driver);
+}
+
+void ath9k_hif_usb_exit(void)
+{
+        usb_deregister(&ath9k_hif_usb_driver);
+}
diff --git a/drivers/net/wireless/ath/ath9k/hif_usb.h b/drivers/net/wireless/ath/ath9k/hif_usb.h
new file mode 100644
index 000000000000..7cc3762a6789
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/hif_usb.h
@@ -0,0 +1,105 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef HTC_USB_H
+#define HTC_USB_H
+
+#define AR9271_FIRMWARE       0x501000
+#define AR9271_FIRMWARE_TEXT  0x903000
+
+#define FIRMWARE_DOWNLOAD       0x30
+#define FIRMWARE_DOWNLOAD_COMP  0x31
+
+#define ATH_USB_RX_STREAM_MODE_TAG 0x4e00
+#define ATH_USB_TX_STREAM_MODE_TAG 0x697e
+
+/* FIXME: Verify these numbers (with Windows) */
+#define MAX_TX_URB_NUM  8
+#define MAX_TX_BUF_NUM  1024
+#define MAX_TX_BUF_SIZE 32768
+#define MAX_TX_AGGR_NUM 20
+
+#define MAX_RX_URB_NUM  8
+#define MAX_RX_BUF_SIZE 16384
+
+#define MAX_REG_OUT_URB_NUM  1
+#define MAX_REG_OUT_BUF_NUM  8
+
+#define MAX_REG_IN_BUF_SIZE 64
+
+/* USB Endpoint definition */
+#define USB_WLAN_TX_PIPE  1
+#define USB_WLAN_RX_PIPE  2
+#define USB_REG_IN_PIPE   3
+#define USB_REG_OUT_PIPE  4
+
+#define HIF_USB_MAX_RXPIPES 2
+#define HIF_USB_MAX_TXPIPES 4
+
+struct tx_buf {
+        u8 *buf;
+        u16 len;
+        u16 offset;
+        struct urb *urb;
+        struct sk_buff_head skb_queue;
+        struct hif_device_usb *hif_dev;
+        struct list_head list;
+};
+
+#define HIF_USB_TX_STOP  BIT(0)
+#define HIF_USB_TX_FLUSH BIT(1)
+
+struct hif_usb_tx {
+        u8 flags;
+        u8 tx_buf_cnt;
+        u16 tx_skb_cnt;
+        struct sk_buff_head tx_skb_queue;
+        struct list_head tx_buf;
+        struct list_head tx_pending;
+        spinlock_t tx_lock;
+};
+
+struct cmd_buf {
+        struct sk_buff *skb;
+        struct hif_device_usb *hif_dev;
+};
+
+#define HIF_USB_START BIT(0)
+
+struct hif_device_usb {
+        u16 device_id;
+        struct usb_device *udev;
+        struct usb_interface *interface;
+        const struct firmware *firmware;
+        struct htc_target *htc_handle;
+        u8 flags;
+
+        struct hif_usb_tx tx;
+
+        struct urb *wlan_rx_data_urb[MAX_RX_URB_NUM];
+        struct urb *reg_in_urb;
+
+        struct sk_buff *remain_skb;
+        int rx_remain_len;
+        int rx_pkt_len;
+        int rx_transfer_len;
+        int rx_pad_len;
+};
+
+int ath9k_hif_usb_init(void);
+void ath9k_hif_usb_exit(void);
+
+#endif /* HTC_USB_H */
diff --git a/drivers/net/wireless/ath/ath9k/htc.h b/drivers/net/wireless/ath/ath9k/htc.h
new file mode 100644
index 000000000000..777064945fca
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc.h
@@ -0,0 +1,441 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef HTC_H
+#define HTC_H
+
+#include <linux/module.h>
+#include <linux/usb.h>
+#include <linux/firmware.h>
+#include <linux/skbuff.h>
+#include <linux/netdevice.h>
+#include <linux/leds.h>
+#include <net/mac80211.h>
+
+#include "common.h"
+#include "htc_hst.h"
+#include "hif_usb.h"
+#include "wmi.h"
+
+#define ATH_STA_SHORT_CALINTERVAL 1000    /* 1 second */
+#define ATH_ANI_POLLINTERVAL      100     /* 100 ms */
+#define ATH_LONG_CALINTERVAL      30000   /* 30 seconds */
+#define ATH_RESTART_CALINTERVAL   1200000 /* 20 minutes */
+
+#define ATH_DEFAULT_BMISS_LIMIT 10
+#define IEEE80211_MS_TO_TU(x)   (((x) * 1000) / 1024)
+#define TSF_TO_TU(_h, _l) \
+        ((((u32)(_h)) << 22) | (((u32)(_l)) >> 10))
+
+extern struct ieee80211_ops ath9k_htc_ops;
+extern int htc_modparam_nohwcrypt;
+
+enum htc_phymode {
+        HTC_MODE_AUTO           = 0,
+        HTC_MODE_11A            = 1,
+        HTC_MODE_11B            = 2,
+        HTC_MODE_11G            = 3,
+        HTC_MODE_FH             = 4,
+        HTC_MODE_TURBO_A        = 5,
+        HTC_MODE_TURBO_G        = 6,
+        HTC_MODE_11NA           = 7,
+        HTC_MODE_11NG           = 8
+};
+
+enum htc_opmode {
+        HTC_M_STA       = 1,
+        HTC_M_IBSS      = 0,
+        HTC_M_AHDEMO    = 3,
+        HTC_M_HOSTAP    = 6,
+        HTC_M_MONITOR   = 8,
+        HTC_M_WDS       = 2
+};
+
+#define ATH9K_HTC_HDRSPACE sizeof(struct htc_frame_hdr)
+#define ATH9K_HTC_AMPDU 1
+#define ATH9K_HTC_NORMAL 2
+
+#define ATH9K_HTC_TX_CTSONLY      0x1
+#define ATH9K_HTC_TX_RTSCTS       0x2
+#define ATH9K_HTC_TX_USE_MIN_RATE 0x100
+
+struct tx_frame_hdr {
+        u8 data_type;
+        u8 node_idx;
+        u8 vif_idx;
+        u8 tidno;
+        u32 flags; /* ATH9K_HTC_TX_* */
+        u8 key_type;
+        u8 keyix;
+        u8 reserved[26];
+} __packed;
+
+struct tx_mgmt_hdr {
+        u8 node_idx;
+        u8 vif_idx;
+        u8 tidno;
+        u8 flags;
+        u8 key_type;
+        u8 keyix;
+        u16 reserved;
+} __packed;
+
+struct tx_beacon_header {
+        u8 len_changed;
+        u8 vif_index;
+        u16 rev;
+} __packed;
+
+struct ath9k_htc_target_hw {
+        u32 flags;
+        u32 flags_ext;
+        u32 ampdu_limit;
+        u8 ampdu_subframes;
+        u8 tx_chainmask;
+        u8 tx_chainmask_legacy;
+        u8 rtscts_ratecode;
+        u8 protmode;
+} __packed;
+
+struct ath9k_htc_cap_target {
+        u32 flags;
+        u32 flags_ext;
+        u32 ampdu_limit;
+        u8 ampdu_subframes;
+        u8 tx_chainmask;
+        u8 tx_chainmask_legacy;
+        u8 rtscts_ratecode;
+        u8 protmode;
+} __packed;
+
+struct ath9k_htc_target_vif {
+        u8 index;
+        u8 des_bssid[ETH_ALEN];
+        enum htc_opmode opmode;
+        u8 myaddr[ETH_ALEN];
+        u8 bssid[ETH_ALEN];
+        u32 flags;
+        u32 flags_ext;
+        u16 ps_sta;
+        u16 rtsthreshold;
+        u8 ath_cap;
+        u8 node;
+        s8 mcast_rate;
+} __packed;
+
+#define ATH_HTC_STA_AUTH  0x0001
+#define ATH_HTC_STA_QOS   0x0002
+#define ATH_HTC_STA_ERP   0x0004
+#define ATH_HTC_STA_HT    0x0008
+
+/* FIXME: UAPSD variables */
+struct ath9k_htc_target_sta {
+        u16 associd;
+        u16 txpower;
+        u32 ucastkey;
+        u8 macaddr[ETH_ALEN];
+        u8 bssid[ETH_ALEN];
+        u8 sta_index;
+        u8 vif_index;
+        u8 vif_sta;
+        u16 flags; /* ATH_HTC_STA_* */
+        u16 htcap;
+        u8 valid;
+        u16 capinfo;
+        struct ath9k_htc_target_hw *hw;
+        struct ath9k_htc_target_vif *vif;
+        u16 txseqmgmt;
+        u8 is_vif_sta;
+        u16 maxampdu;
+        u16 iv16;
+        u32 iv32;
+} __packed;
+
+struct ath9k_htc_target_aggr {
+        u8 sta_index;
+        u8 tidno;
+        u8 aggr_enable;
+        u8 padding;
+} __packed;
+
+#define ATH_HTC_RATE_MAX 30
+
+#define WLAN_RC_DS_FLAG  0x01
+#define WLAN_RC_40_FLAG  0x02
+#define WLAN_RC_SGI_FLAG 0x04
+#define WLAN_RC_HT_FLAG  0x08
+
+struct ath9k_htc_rateset {
+        u8 rs_nrates;
+        u8 rs_rates[ATH_HTC_RATE_MAX];
+};
+
+struct ath9k_htc_rate {
+        struct ath9k_htc_rateset legacy_rates;
+        struct ath9k_htc_rateset ht_rates;
+} __packed;
+
+struct ath9k_htc_target_rate {
+        u8 sta_index;
+        u8 isnew;
+        u32 capflags;
+        struct ath9k_htc_rate rates;
+};
+
+struct ath9k_htc_target_stats {
+        u32 tx_shortretry;
+        u32 tx_longretry;
+        u32 tx_xretries;
+        u32 ht_txunaggr_xretry;
+        u32 ht_tx_xretries;
+} __packed;
+
+struct ath9k_htc_vif {
+        u8 index;
+};
+
+#define ATH9K_HTC_MAX_STA 8
+#define ATH9K_HTC_MAX_TID 8
+
+enum tid_aggr_state {
+        AGGR_STOP = 0,
+        AGGR_PROGRESS,
+        AGGR_START,
+        AGGR_OPERATIONAL
+};
+
+struct ath9k_htc_sta {
+        u8 index;
+        enum tid_aggr_state tid_state[ATH9K_HTC_MAX_TID];
+};
+
+struct ath9k_htc_aggr_work {
+        u16 tid;
+        u8 sta_addr[ETH_ALEN];
+        struct ieee80211_hw *hw;
+        struct ieee80211_vif *vif;
+        enum ieee80211_ampdu_mlme_action action;
+        struct mutex mutex;
+};
+
+#define ATH9K_HTC_RXBUF 256
+#define HTC_RX_FRAME_HEADER_SIZE 40
+
+struct ath9k_htc_rxbuf {
+        bool in_process;
+        struct sk_buff *skb;
+        struct ath_htc_rx_status rxstatus;
+        struct list_head list;
+};
+
+struct ath9k_htc_rx {
+        int last_rssi; /* FIXME: per-STA */
+        struct list_head rxbuf;
+        spinlock_t rxbuflock;
+};
+
+struct ath9k_htc_tx_ctl {
+        u8 type; /* ATH9K_HTC_* */
+};
+
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+
+#define TX_STAT_INC(c) (hif_dev->htc_handle->drv_priv->debug.tx_stats.c++)
+#define RX_STAT_INC(c) (hif_dev->htc_handle->drv_priv->debug.rx_stats.c++)
+
+struct ath_tx_stats {
+        u32 buf_queued;
+        u32 buf_completed;
+        u32 skb_queued;
+        u32 skb_completed;
+};
+
+struct ath_rx_stats {
+        u32 skb_allocated;
+        u32 skb_completed;
+        u32 skb_dropped;
+};
+
+struct ath9k_debug {
+        struct dentry *debugfs_phy;
+        struct dentry *debugfs_tgt_stats;
+        struct dentry *debugfs_xmit;
+        struct dentry *debugfs_recv;
+        struct ath_tx_stats tx_stats;
+        struct ath_rx_stats rx_stats;
+        u32 txrate;
+};
+
+#else
+
+#define TX_STAT_INC(c) do { } while (0)
+#define RX_STAT_INC(c) do { } while (0)
+
+#endif /* CONFIG_ATH9K_HTC_DEBUGFS */
+
+#define ATH_LED_PIN_DEF             1
+#define ATH_LED_PIN_9287            8
+#define ATH_LED_PIN_9271            15
+#define ATH_LED_ON_DURATION_IDLE    350 /* in msecs */
+#define ATH_LED_OFF_DURATION_IDLE   250 /* in msecs */
+
+enum ath_led_type {
+        ATH_LED_RADIO,
+        ATH_LED_ASSOC,
+        ATH_LED_TX,
+        ATH_LED_RX
+};
+
+struct ath_led {
+        struct ath9k_htc_priv *priv;
+        struct led_classdev led_cdev;
+        enum ath_led_type led_type;
+        struct delayed_work brightness_work;
+        char name[32];
+        bool registered;
+        int brightness;
+};
+
+#define OP_INVALID        BIT(0)
+#define OP_SCANNING       BIT(1)
+#define OP_FULL_RESET     BIT(2)
+#define OP_LED_ASSOCIATED BIT(3)
+#define OP_LED_ON         BIT(4)
+#define OP_PREAMBLE_SHORT BIT(5)
+#define OP_PROTECT_ENABLE BIT(6)
+#define OP_TXAGGR         BIT(7)
+#define OP_ASSOCIATED     BIT(8)
+#define OP_ENABLE_BEACON  BIT(9)
+#define OP_LED_DEINIT     BIT(10)
+
+struct ath9k_htc_priv {
+        struct device *dev;
+        struct ieee80211_hw *hw;
+        struct ath_hw *ah;
+        struct htc_target *htc;
+        struct wmi *wmi;
+
+        enum htc_endpoint_id wmi_cmd_ep;
+        enum htc_endpoint_id beacon_ep;
+        enum htc_endpoint_id cab_ep;
+        enum htc_endpoint_id uapsd_ep;
+        enum htc_endpoint_id mgmt_ep;
+        enum htc_endpoint_id data_be_ep;
+        enum htc_endpoint_id data_bk_ep;
+        enum htc_endpoint_id data_vi_ep;
+        enum htc_endpoint_id data_vo_ep;
+
+        u16 op_flags;
+        u16 curtxpow;
+        u16 txpowlimit;
+        u16 nvifs;
+        u16 nstations;
+        u16 seq_no;
+        u32 bmiss_cnt;
+
+        struct sk_buff *beacon;
+        spinlock_t beacon_lock;
+
+        struct ieee80211_vif *vif;
+        unsigned int rxfilter;
+        struct tasklet_struct wmi_tasklet;
+        struct tasklet_struct rx_tasklet;
+        struct ieee80211_supported_band sbands[IEEE80211_NUM_BANDS];
+        struct ath9k_htc_rx rx;
+        struct tasklet_struct tx_tasklet;
+        struct sk_buff_head tx_queue;
+        struct ath9k_htc_aggr_work aggr_work;
+        struct delayed_work ath9k_aggr_work;
+        struct delayed_work ath9k_ani_work;
+
+        struct ath_led radio_led;
+        struct ath_led assoc_led;
+        struct ath_led tx_led;
+        struct ath_led rx_led;
+        struct delayed_work ath9k_led_blink_work;
+        int led_on_duration;
+        int led_off_duration;
+        int led_on_cnt;
+        int led_off_cnt;
+        int hwq_map[ATH9K_WME_AC_VO+1];
+
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+        struct ath9k_debug debug;
+#endif
+        struct ath9k_htc_target_rate tgt_rate;
+
+        struct mutex mutex;
+};
+
+static inline void ath_read_cachesize(struct ath_common *common, int *csz)
+{
+        common->bus_ops->read_cachesize(common, csz);
+}
+
+void ath9k_htc_beacon_config(struct ath9k_htc_priv *priv,
+                             struct ieee80211_vif *vif,
+                             struct ieee80211_bss_conf *bss_conf);
+void ath9k_htc_swba(struct ath9k_htc_priv *priv, u8 beacon_pending);
+void ath9k_htc_beacon_update(struct ath9k_htc_priv *priv,
+                             struct ieee80211_vif *vif);
+
+void ath9k_htc_rxep(void *priv, struct sk_buff *skb,
+                    enum htc_endpoint_id ep_id);
+void ath9k_htc_txep(void *priv, struct sk_buff *skb, enum htc_endpoint_id ep_id,
+                    bool txok);
+
+void ath9k_htc_station_work(struct work_struct *work);
+void ath9k_htc_aggr_work(struct work_struct *work);
+void ath9k_ani_work(struct work_struct *work);;
+
+int ath9k_tx_init(struct ath9k_htc_priv *priv);
+void ath9k_tx_tasklet(unsigned long data);
+int ath9k_htc_tx_start(struct ath9k_htc_priv *priv, struct sk_buff *skb);
+void ath9k_tx_cleanup(struct ath9k_htc_priv *priv);
+bool ath9k_htc_txq_setup(struct ath9k_htc_priv *priv,
+                         enum ath9k_tx_queue_subtype qtype);
+int get_hw_qnum(u16 queue, int *hwq_map);
+int ath_htc_txq_update(struct ath9k_htc_priv *priv, int qnum,
+                       struct ath9k_tx_queue_info *qinfo);
+
+int ath9k_rx_init(struct ath9k_htc_priv *priv);
+void ath9k_rx_cleanup(struct ath9k_htc_priv *priv);
+void ath9k_host_rx_init(struct ath9k_htc_priv *priv);
+void ath9k_rx_tasklet(unsigned long data);
+
+void ath9k_start_rfkill_poll(struct ath9k_htc_priv *priv);
+void ath9k_init_leds(struct ath9k_htc_priv *priv);
+void ath9k_deinit_leds(struct ath9k_htc_priv *priv);
+
+int ath9k_htc_probe_device(struct htc_target *htc_handle, struct device *dev,
+                           u16 devid);
+void ath9k_htc_disconnect_device(struct htc_target *htc_handle, bool hotunplug);
+#ifdef CONFIG_PM
+int ath9k_htc_resume(struct htc_target *htc_handle);
+#endif
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+int ath9k_htc_debug_create_root(void);
+void ath9k_htc_debug_remove_root(void);
+int ath9k_htc_init_debug(struct ath_hw *ah);
+void ath9k_htc_exit_debug(struct ath_hw *ah);
+#else
+static inline int ath9k_htc_debug_create_root(void) { return 0; };
+static inline void ath9k_htc_debug_remove_root(void) {};
+static inline int ath9k_htc_init_debug(struct ath_hw *ah) { return 0; };
+static inline void ath9k_htc_exit_debug(struct ath_hw *ah) {};
+#endif /* CONFIG_ATH9K_HTC_DEBUGFS */
+
+#endif /* HTC_H */
diff --git a/drivers/net/wireless/ath/ath9k/htc_drv_beacon.c b/drivers/net/wireless/ath/ath9k/htc_drv_beacon.c
new file mode 100644
index 000000000000..25f5b5377bac
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_drv_beacon.c
@@ -0,0 +1,260 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+#define FUDGE 2
+
+static void ath9k_htc_beacon_config_sta(struct ath9k_htc_priv *priv,
+                                        struct ieee80211_bss_conf *bss_conf)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_beacon_state bs;
+        enum ath9k_int imask = 0;
+        int dtimperiod, dtimcount, sleepduration;
+        int cfpperiod, cfpcount, bmiss_timeout;
+        u32 nexttbtt = 0, intval, tsftu, htc_imask = 0;
+        u64 tsf;
+        int num_beacons, offset, dtim_dec_count, cfp_dec_count;
+        int ret;
+        u8 cmd_rsp;
+
+        memset(&bs, 0, sizeof(bs));
+
+        intval = bss_conf->beacon_int & ATH9K_BEACON_PERIOD;
+        bmiss_timeout = (ATH_DEFAULT_BMISS_LIMIT * bss_conf->beacon_int);
+
+        /*
+         * Setup dtim and cfp parameters according to
+         * last beacon we received (which may be none).
+         */
+        dtimperiod = bss_conf->dtim_period;
+        if (dtimperiod <= 0)            /* NB: 0 if not known */
+                dtimperiod = 1;
+        dtimcount = 1;
+        if (dtimcount >= dtimperiod)    /* NB: sanity check */
+                dtimcount = 0;
+        cfpperiod = 1;                  /* NB: no PCF support yet */
+        cfpcount = 0;
+
+        sleepduration = intval;
+        if (sleepduration <= 0)
+                sleepduration = intval;
+
+        /*
+         * Pull nexttbtt forward to reflect the current
+         * TSF and calculate dtim+cfp state for the result.
+         */
+        tsf = ath9k_hw_gettsf64(priv->ah);
+        tsftu = TSF_TO_TU(tsf>>32, tsf) + FUDGE;
+
+        num_beacons = tsftu / intval + 1;
+        offset = tsftu % intval;
+        nexttbtt = tsftu - offset;
+        if (offset)
+                nexttbtt += intval;
+
+        /* DTIM Beacon every dtimperiod Beacon */
+        dtim_dec_count = num_beacons % dtimperiod;
+        /* CFP every cfpperiod DTIM Beacon */
+        cfp_dec_count = (num_beacons / dtimperiod) % cfpperiod;
+        if (dtim_dec_count)
+                cfp_dec_count++;
+
+        dtimcount -= dtim_dec_count;
+        if (dtimcount < 0)
+                dtimcount += dtimperiod;
+
+        cfpcount -= cfp_dec_count;
+        if (cfpcount < 0)
+                cfpcount += cfpperiod;
+
+        bs.bs_intval = intval;
+        bs.bs_nexttbtt = nexttbtt;
+        bs.bs_dtimperiod = dtimperiod*intval;
+        bs.bs_nextdtim = bs.bs_nexttbtt + dtimcount*intval;
+        bs.bs_cfpperiod = cfpperiod*bs.bs_dtimperiod;
+        bs.bs_cfpnext = bs.bs_nextdtim + cfpcount*bs.bs_dtimperiod;
+        bs.bs_cfpmaxduration = 0;
+
+        /*
+         * Calculate the number of consecutive beacons to miss* before taking
+         * a BMISS interrupt. The configuration is specified in TU so we only
+         * need calculate based on the beacon interval.  Note that we clamp the
+         * result to at most 15 beacons.
+         */
+        if (sleepduration > intval) {
+                bs.bs_bmissthreshold = ATH_DEFAULT_BMISS_LIMIT / 2;
+        } else {
+                bs.bs_bmissthreshold = DIV_ROUND_UP(bmiss_timeout, intval);
+                if (bs.bs_bmissthreshold > 15)
+                        bs.bs_bmissthreshold = 15;
+                else if (bs.bs_bmissthreshold <= 0)
+                        bs.bs_bmissthreshold = 1;
+        }
+
+        /*
+         * Calculate sleep duration. The configuration is given in ms.
+         * We ensure a multiple of the beacon period is used. Also, if the sleep
+         * duration is greater than the DTIM period then it makes senses
+         * to make it a multiple of that.
+         *
+         * XXX fixed at 100ms
+         */
+
+        bs.bs_sleepduration = roundup(IEEE80211_MS_TO_TU(100), sleepduration);
+        if (bs.bs_sleepduration > bs.bs_dtimperiod)
+                bs.bs_sleepduration = bs.bs_dtimperiod;
+
+        /* TSF out of range threshold fixed at 1 second */
+        bs.bs_tsfoor_threshold = ATH9K_TSFOOR_THRESHOLD;
+
+        ath_print(common, ATH_DBG_BEACON, "tsf: %llu tsftu: %u\n", tsf, tsftu);
+        ath_print(common, ATH_DBG_BEACON,
+                  "bmiss: %u sleep: %u cfp-period: %u maxdur: %u next: %u\n",
+                  bs.bs_bmissthreshold, bs.bs_sleepduration,
+                  bs.bs_cfpperiod, bs.bs_cfpmaxduration, bs.bs_cfpnext);
+
+        /* Set the computed STA beacon timers */
+
+        WMI_CMD(WMI_DISABLE_INTR_CMDID);
+        ath9k_hw_set_sta_beacon_timers(priv->ah, &bs);
+        imask |= ATH9K_INT_BMISS;
+        htc_imask = cpu_to_be32(imask);
+        WMI_CMD_BUF(WMI_ENABLE_INTR_CMDID, &htc_imask);
+}
+
+static void ath9k_htc_beacon_config_adhoc(struct ath9k_htc_priv *priv,
+                                          struct ieee80211_bss_conf *bss_conf)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        enum ath9k_int imask = 0;
+        u32 nexttbtt, intval, htc_imask = 0;
+        int ret;
+        u8 cmd_rsp;
+
+        intval = bss_conf->beacon_int & ATH9K_BEACON_PERIOD;
+        nexttbtt = intval;
+        intval |= ATH9K_BEACON_ENA;
+        if (priv->op_flags & OP_ENABLE_BEACON)
+                imask |= ATH9K_INT_SWBA;
+
+        ath_print(common, ATH_DBG_BEACON,
+                  "IBSS Beacon config, intval: %d, imask: 0x%x\n",
+                  bss_conf->beacon_int, imask);
+
+        WMI_CMD(WMI_DISABLE_INTR_CMDID);
+        ath9k_hw_beaconinit(priv->ah, nexttbtt, intval);
+        priv->bmiss_cnt = 0;
+        htc_imask = cpu_to_be32(imask);
+        WMI_CMD_BUF(WMI_ENABLE_INTR_CMDID, &htc_imask);
+}
+
+void ath9k_htc_beacon_update(struct ath9k_htc_priv *priv,
+                             struct ieee80211_vif *vif)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+
+        spin_lock_bh(&priv->beacon_lock);
+
+        if (priv->beacon)
+                dev_kfree_skb_any(priv->beacon);
+
+        priv->beacon = ieee80211_beacon_get(priv->hw, vif);
+        if (!priv->beacon)
+                ath_print(common, ATH_DBG_BEACON,
+                          "Unable to allocate beacon\n");
+
+        spin_unlock_bh(&priv->beacon_lock);
+}
+
+void ath9k_htc_swba(struct ath9k_htc_priv *priv, u8 beacon_pending)
+{
+        struct ath9k_htc_vif *avp = (void *)priv->vif->drv_priv;
+        struct tx_beacon_header beacon_hdr;
+        struct ath9k_htc_tx_ctl tx_ctl;
+        struct ieee80211_tx_info *info;
+        u8 *tx_fhdr;
+
+        memset(&beacon_hdr, 0, sizeof(struct tx_beacon_header));
+        memset(&tx_ctl, 0, sizeof(struct ath9k_htc_tx_ctl));
+
+        /* FIXME: Handle BMISS */
+        if (beacon_pending != 0) {
+                priv->bmiss_cnt++;
+                return;
+        }
+
+        spin_lock_bh(&priv->beacon_lock);
+
+        if (unlikely(priv->op_flags & OP_SCANNING)) {
+                spin_unlock_bh(&priv->beacon_lock);
+                return;
+        }
+
+        if (unlikely(priv->beacon == NULL)) {
+                spin_unlock_bh(&priv->beacon_lock);
+                return;
+        }
+
+        /* Free the old SKB first */
+        dev_kfree_skb_any(priv->beacon);
+
+        /* Get a new beacon */
+        priv->beacon = ieee80211_beacon_get(priv->hw, priv->vif);
+        if (!priv->beacon) {
+                spin_unlock_bh(&priv->beacon_lock);
+                return;
+        }
+
+        info = IEEE80211_SKB_CB(priv->beacon);
+        if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ) {
+                struct ieee80211_hdr *hdr =
+                        (struct ieee80211_hdr *) priv->beacon->data;
+                priv->seq_no += 0x10;
+                hdr->seq_ctrl &= cpu_to_le16(IEEE80211_SCTL_FRAG);
+                hdr->seq_ctrl |= cpu_to_le16(priv->seq_no);
+        }
+
+        tx_ctl.type = ATH9K_HTC_NORMAL;
+        beacon_hdr.vif_index = avp->index;
+        tx_fhdr = skb_push(priv->beacon, sizeof(beacon_hdr));
+        memcpy(tx_fhdr, (u8 *) &beacon_hdr, sizeof(beacon_hdr));
+
+        htc_send(priv->htc, priv->beacon, priv->beacon_ep, &tx_ctl);
+
+        spin_unlock_bh(&priv->beacon_lock);
+}
+
+void ath9k_htc_beacon_config(struct ath9k_htc_priv *priv,
+                             struct ieee80211_vif *vif,
+                             struct ieee80211_bss_conf *bss_conf)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+
+        switch (vif->type) {
+        case NL80211_IFTYPE_STATION:
+                ath9k_htc_beacon_config_sta(priv, bss_conf);
+                break;
+        case NL80211_IFTYPE_ADHOC:
+                ath9k_htc_beacon_config_adhoc(priv, bss_conf);
+                break;
+        default:
+                ath_print(common, ATH_DBG_CONFIG,
+                          "Unsupported beaconing mode\n");
+                return;
+        }
+}
diff --git a/drivers/net/wireless/ath/ath9k/htc_drv_init.c b/drivers/net/wireless/ath/ath9k/htc_drv_init.c
new file mode 100644
index 000000000000..10c87605d2c4
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_drv_init.c
@@ -0,0 +1,713 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+MODULE_AUTHOR("Atheros Communications");
+MODULE_LICENSE("Dual BSD/GPL");
+MODULE_DESCRIPTION("Atheros driver 802.11n HTC based wireless devices");
+
+static unsigned int ath9k_debug = ATH_DBG_DEFAULT;
+module_param_named(debug, ath9k_debug, uint, 0);
+MODULE_PARM_DESC(debug, "Debugging mask");
+
+int htc_modparam_nohwcrypt;
+module_param_named(nohwcrypt, htc_modparam_nohwcrypt, int, 0444);
+MODULE_PARM_DESC(nohwcrypt, "Disable hardware encryption");
+
+#define CHAN2G(_freq, _idx)  { \
+        .center_freq = (_freq), \
+        .hw_value = (_idx), \
+        .max_power = 20, \
+}
+
+static struct ieee80211_channel ath9k_2ghz_channels[] = {
+        CHAN2G(2412, 0), /* Channel 1 */
+        CHAN2G(2417, 1), /* Channel 2 */
+        CHAN2G(2422, 2), /* Channel 3 */
+        CHAN2G(2427, 3), /* Channel 4 */
+        CHAN2G(2432, 4), /* Channel 5 */
+        CHAN2G(2437, 5), /* Channel 6 */
+        CHAN2G(2442, 6), /* Channel 7 */
+        CHAN2G(2447, 7), /* Channel 8 */
+        CHAN2G(2452, 8), /* Channel 9 */
+        CHAN2G(2457, 9), /* Channel 10 */
+        CHAN2G(2462, 10), /* Channel 11 */
+        CHAN2G(2467, 11), /* Channel 12 */
+        CHAN2G(2472, 12), /* Channel 13 */
+        CHAN2G(2484, 13), /* Channel 14 */
+};
+
+/* Atheros hardware rate code addition for short premble */
+#define SHPCHECK(__hw_rate, __flags) \
+        ((__flags & IEEE80211_RATE_SHORT_PREAMBLE) ? (__hw_rate | 0x04) : 0)
+
+#define RATE(_bitrate, _hw_rate, _flags) {              \
+        .bitrate        = (_bitrate),                   \
+        .flags          = (_flags),                     \
+        .hw_value       = (_hw_rate),                   \
+        .hw_value_short = (SHPCHECK(_hw_rate, _flags))  \
+}
+
+static struct ieee80211_rate ath9k_legacy_rates[] = {
+        RATE(10, 0x1b, 0),
+        RATE(20, 0x1a, IEEE80211_RATE_SHORT_PREAMBLE), /* shortp : 0x1e */
+        RATE(55, 0x19, IEEE80211_RATE_SHORT_PREAMBLE), /* shortp: 0x1d */
+        RATE(110, 0x18, IEEE80211_RATE_SHORT_PREAMBLE), /* short: 0x1c */
+        RATE(60, 0x0b, 0),
+        RATE(90, 0x0f, 0),
+        RATE(120, 0x0a, 0),
+        RATE(180, 0x0e, 0),
+        RATE(240, 0x09, 0),
+        RATE(360, 0x0d, 0),
+        RATE(480, 0x08, 0),
+        RATE(540, 0x0c, 0),
+};
+
+static int ath9k_htc_wait_for_target(struct ath9k_htc_priv *priv)
+{
+        int time_left;
+
+        /* Firmware can take up to 50ms to get ready, to be safe use 1 second */
+        time_left = wait_for_completion_timeout(&priv->htc->target_wait, HZ);
+        if (!time_left) {
+                dev_err(priv->dev, "ath9k_htc: Target is unresponsive\n");
+                return -ETIMEDOUT;
+        }
+
+        return 0;
+}
+
+static void ath9k_deinit_priv(struct ath9k_htc_priv *priv)
+{
+        ath9k_htc_exit_debug(priv->ah);
+        ath9k_hw_deinit(priv->ah);
+        tasklet_kill(&priv->wmi_tasklet);
+        tasklet_kill(&priv->rx_tasklet);
+        tasklet_kill(&priv->tx_tasklet);
+        kfree(priv->ah);
+        priv->ah = NULL;
+}
+
+static void ath9k_deinit_device(struct ath9k_htc_priv *priv)
+{
+        struct ieee80211_hw *hw = priv->hw;
+
+        wiphy_rfkill_stop_polling(hw->wiphy);
+        ath9k_deinit_leds(priv);
+        ieee80211_unregister_hw(hw);
+        ath9k_rx_cleanup(priv);
+        ath9k_tx_cleanup(priv);
+        ath9k_deinit_priv(priv);
+}
+
+static inline int ath9k_htc_connect_svc(struct ath9k_htc_priv *priv,
+                                        u16 service_id,
+                                        void (*tx) (void *,
+                                                    struct sk_buff *,
+                                                    enum htc_endpoint_id,
+                                                    bool txok),
+                                        enum htc_endpoint_id *ep_id)
+{
+        struct htc_service_connreq req;
+
+        memset(&req, 0, sizeof(struct htc_service_connreq));
+
+        req.service_id = service_id;
+        req.ep_callbacks.priv = priv;
+        req.ep_callbacks.rx = ath9k_htc_rxep;
+        req.ep_callbacks.tx = tx;
+
+        return htc_connect_service(priv->htc, &req, ep_id);
+}
+
+static int ath9k_init_htc_services(struct ath9k_htc_priv *priv)
+{
+        int ret;
+
+        /* WMI CMD*/
+        ret = ath9k_wmi_connect(priv->htc, priv->wmi, &priv->wmi_cmd_ep);
+        if (ret)
+                goto err;
+
+        /* Beacon */
+        ret = ath9k_htc_connect_svc(priv, WMI_BEACON_SVC, NULL,
+                                    &priv->beacon_ep);
+        if (ret)
+                goto err;
+
+        /* CAB */
+        ret = ath9k_htc_connect_svc(priv, WMI_CAB_SVC, ath9k_htc_txep,
+                                    &priv->cab_ep);
+        if (ret)
+                goto err;
+
+
+        /* UAPSD */
+        ret = ath9k_htc_connect_svc(priv, WMI_UAPSD_SVC, ath9k_htc_txep,
+                                    &priv->uapsd_ep);
+        if (ret)
+                goto err;
+
+        /* MGMT */
+        ret = ath9k_htc_connect_svc(priv, WMI_MGMT_SVC, ath9k_htc_txep,
+                                    &priv->mgmt_ep);
+        if (ret)
+                goto err;
+
+        /* DATA BE */
+        ret = ath9k_htc_connect_svc(priv, WMI_DATA_BE_SVC, ath9k_htc_txep,
+                                    &priv->data_be_ep);
+        if (ret)
+                goto err;
+
+        /* DATA BK */
+        ret = ath9k_htc_connect_svc(priv, WMI_DATA_BK_SVC, ath9k_htc_txep,
+                                    &priv->data_bk_ep);
+        if (ret)
+                goto err;
+
+        /* DATA VI */
+        ret = ath9k_htc_connect_svc(priv, WMI_DATA_VI_SVC, ath9k_htc_txep,
+                                    &priv->data_vi_ep);
+        if (ret)
+                goto err;
+
+        /* DATA VO */
+        ret = ath9k_htc_connect_svc(priv, WMI_DATA_VO_SVC, ath9k_htc_txep,
+                                    &priv->data_vo_ep);
+        if (ret)
+                goto err;
+
+        ret = htc_init(priv->htc);
+        if (ret)
+                goto err;
+
+        return 0;
+
+err:
+        dev_err(priv->dev, "ath9k_htc: Unable to initialize HTC services\n");
+        return ret;
+}
+
+static int ath9k_reg_notifier(struct wiphy *wiphy,
+                              struct regulatory_request *request)
+{
+        struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy);
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        return ath_reg_notifier_apply(wiphy, request,
+                                      ath9k_hw_regulatory(priv->ah));
+}
+
+static unsigned int ath9k_ioread32(void *hw_priv, u32 reg_offset)
+{
+        struct ath_hw *ah = (struct ath_hw *) hw_priv;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *) common->priv;
+        __be32 val, reg = cpu_to_be32(reg_offset);
+        int r;
+
+        r = ath9k_wmi_cmd(priv->wmi, WMI_REG_READ_CMDID,
+                          (u8 *) &reg, sizeof(reg),
+                          (u8 *) &val, sizeof(val),
+                          100);
+        if (unlikely(r)) {
+                ath_print(common, ATH_DBG_WMI,
+                          "REGISTER READ FAILED: (0x%04x, %d)\n",
+                           reg_offset, r);
+                return -EIO;
+        }
+
+        return be32_to_cpu(val);
+}
+
+static void ath9k_iowrite32(void *hw_priv, u32 val, u32 reg_offset)
+{
+        struct ath_hw *ah = (struct ath_hw *) hw_priv;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *) common->priv;
+        __be32 buf[2] = {
+                cpu_to_be32(reg_offset),
+                cpu_to_be32(val),
+        };
+        int r;
+
+        r = ath9k_wmi_cmd(priv->wmi, WMI_REG_WRITE_CMDID,
+                          (u8 *) &buf, sizeof(buf),
+                          (u8 *) &val, sizeof(val),
+                          100);
+        if (unlikely(r)) {
+                ath_print(common, ATH_DBG_WMI,
+                          "REGISTER WRITE FAILED:(0x%04x, %d)\n",
+                          reg_offset, r);
+        }
+}
+
+static const struct ath_ops ath9k_common_ops = {
+        .read = ath9k_ioread32,
+        .write = ath9k_iowrite32,
+};
+
+static void ath_usb_read_cachesize(struct ath_common *common, int *csz)
+{
+        *csz = L1_CACHE_BYTES >> 2;
+}
+
+static bool ath_usb_eeprom_read(struct ath_common *common, u32 off, u16 *data)
+{
+        struct ath_hw *ah = (struct ath_hw *) common->ah;
+
+        (void)REG_READ(ah, AR5416_EEPROM_OFFSET + (off << AR5416_EEPROM_S));
+
+        if (!ath9k_hw_wait(ah,
+                           AR_EEPROM_STATUS_DATA,
+                           AR_EEPROM_STATUS_DATA_BUSY |
+                           AR_EEPROM_STATUS_DATA_PROT_ACCESS, 0,
+                           AH_WAIT_TIMEOUT))
+                return false;
+
+        *data = MS(REG_READ(ah, AR_EEPROM_STATUS_DATA),
+                   AR_EEPROM_STATUS_DATA_VAL);
+
+        return true;
+}
+
+static const struct ath_bus_ops ath9k_usb_bus_ops = {
+        .read_cachesize = ath_usb_read_cachesize,
+        .eeprom_read = ath_usb_eeprom_read,
+};
+
+static void setup_ht_cap(struct ath9k_htc_priv *priv,
+                         struct ieee80211_sta_ht_cap *ht_info)
+{
+        ht_info->ht_supported = true;
+        ht_info->cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
+                       IEEE80211_HT_CAP_SM_PS |
+                       IEEE80211_HT_CAP_SGI_40 |
+                       IEEE80211_HT_CAP_DSSSCCK40;
+
+        ht_info->ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
+        ht_info->ampdu_density = IEEE80211_HT_MPDU_DENSITY_8;
+
+        memset(&ht_info->mcs, 0, sizeof(ht_info->mcs));
+        ht_info->mcs.rx_mask[0] = 0xff;
+        ht_info->mcs.tx_params |= IEEE80211_HT_MCS_TX_DEFINED;
+}
+
+static int ath9k_init_queues(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        int i;
+
+        for (i = 0; i < ARRAY_SIZE(priv->hwq_map); i++)
+                priv->hwq_map[i] = -1;
+
+        if (!ath9k_htc_txq_setup(priv, ATH9K_WME_AC_BE)) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to setup xmit queue for BE traffic\n");
+                goto err;
+        }
+
+        if (!ath9k_htc_txq_setup(priv, ATH9K_WME_AC_BK)) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to setup xmit queue for BK traffic\n");
+                goto err;
+        }
+        if (!ath9k_htc_txq_setup(priv, ATH9K_WME_AC_VI)) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to setup xmit queue for VI traffic\n");
+                goto err;
+        }
+        if (!ath9k_htc_txq_setup(priv, ATH9K_WME_AC_VO)) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to setup xmit queue for VO traffic\n");
+                goto err;
+        }
+
+        return 0;
+
+err:
+        return -EINVAL;
+}
+
+static void ath9k_init_crypto(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        int i = 0;
+
+        /* Get the hardware key cache size. */
+        common->keymax = priv->ah->caps.keycache_size;
+        if (common->keymax > ATH_KEYMAX) {
+                ath_print(common, ATH_DBG_ANY,
+                          "Warning, using only %u entries in %u key cache\n",
+                          ATH_KEYMAX, common->keymax);
+                common->keymax = ATH_KEYMAX;
+        }
+
+        /*
+         * Reset the key cache since some parts do not
+         * reset the contents on initial power up.
+         */
+        for (i = 0; i < common->keymax; i++)
+                ath9k_hw_keyreset(priv->ah, (u16) i);
+
+        if (ath9k_hw_getcapability(priv->ah, ATH9K_CAP_CIPHER,
+                                   ATH9K_CIPHER_TKIP, NULL)) {
+                /*
+                 * Whether we should enable h/w TKIP MIC.
+                 * XXX: if we don't support WME TKIP MIC, then we wouldn't
+                 * report WMM capable, so it's always safe to turn on
+                 * TKIP MIC in this case.
+                 */
+                ath9k_hw_setcapability(priv->ah, ATH9K_CAP_TKIP_MIC, 0, 1, NULL);
+        }
+
+        /*
+         * Check whether the separate key cache entries
+         * are required to handle both tx+rx MIC keys.
+         * With split mic keys the number of stations is limited
+         * to 27 otherwise 59.
+         */
+        if (ath9k_hw_getcapability(priv->ah, ATH9K_CAP_CIPHER,
+                                   ATH9K_CIPHER_TKIP, NULL)
+            && ath9k_hw_getcapability(priv->ah, ATH9K_CAP_CIPHER,
+                                      ATH9K_CIPHER_MIC, NULL)
+            && ath9k_hw_getcapability(priv->ah, ATH9K_CAP_TKIP_SPLIT,
+                                      0, NULL))
+                common->splitmic = 1;
+
+        /* turn on mcast key search if possible */
+        if (!ath9k_hw_getcapability(priv->ah, ATH9K_CAP_MCAST_KEYSRCH, 0, NULL))
+                (void)ath9k_hw_setcapability(priv->ah, ATH9K_CAP_MCAST_KEYSRCH,
+                                             1, 1, NULL);
+}
+
+static void ath9k_init_channels_rates(struct ath9k_htc_priv *priv)
+{
+        if (test_bit(ATH9K_MODE_11G, priv->ah->caps.wireless_modes)) {
+                priv->sbands[IEEE80211_BAND_2GHZ].channels =
+                        ath9k_2ghz_channels;
+                priv->sbands[IEEE80211_BAND_2GHZ].band = IEEE80211_BAND_2GHZ;
+                priv->sbands[IEEE80211_BAND_2GHZ].n_channels =
+                        ARRAY_SIZE(ath9k_2ghz_channels);
+                priv->sbands[IEEE80211_BAND_2GHZ].bitrates = ath9k_legacy_rates;
+                priv->sbands[IEEE80211_BAND_2GHZ].n_bitrates =
+                        ARRAY_SIZE(ath9k_legacy_rates);
+        }
+}
+
+static void ath9k_init_misc(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+
+        common->tx_chainmask = priv->ah->caps.tx_chainmask;
+        common->rx_chainmask = priv->ah->caps.rx_chainmask;
+
+        if (priv->ah->caps.hw_caps & ATH9K_HW_CAP_BSSIDMASK)
+                memcpy(common->bssidmask, ath_bcast_mac, ETH_ALEN);
+
+        priv->op_flags |= OP_TXAGGR;
+}
+
+static int ath9k_init_priv(struct ath9k_htc_priv *priv, u16 devid)
+{
+        struct ath_hw *ah = NULL;
+        struct ath_common *common;
+        int ret = 0, csz = 0;
+
+        priv->op_flags |= OP_INVALID;
+
+        ah = kzalloc(sizeof(struct ath_hw), GFP_KERNEL);
+        if (!ah)
+                return -ENOMEM;
+
+        ah->hw_version.devid = devid;
+        ah->hw_version.subsysid = 0; /* FIXME */
+        priv->ah = ah;
+
+        common = ath9k_hw_common(ah);
+        common->ops = &ath9k_common_ops;
+        common->bus_ops = &ath9k_usb_bus_ops;
+        common->ah = ah;
+        common->hw = priv->hw;
+        common->priv = priv;
+        common->debug_mask = ath9k_debug;
+
+        spin_lock_init(&priv->wmi->wmi_lock);
+        spin_lock_init(&priv->beacon_lock);
+        mutex_init(&priv->mutex);
+        mutex_init(&priv->aggr_work.mutex);
+        tasklet_init(&priv->wmi_tasklet, ath9k_wmi_tasklet,
+                     (unsigned long)priv);
+        tasklet_init(&priv->rx_tasklet, ath9k_rx_tasklet,
+                     (unsigned long)priv);
+        tasklet_init(&priv->tx_tasklet, ath9k_tx_tasklet, (unsigned long)priv);
+        INIT_DELAYED_WORK(&priv->ath9k_aggr_work, ath9k_htc_aggr_work);
+        INIT_DELAYED_WORK(&priv->ath9k_ani_work, ath9k_ani_work);
+
+        /*
+         * Cache line size is used to size and align various
+         * structures used to communicate with the hardware.
+         */
+        ath_read_cachesize(common, &csz);
+        common->cachelsz = csz << 2; /* convert to bytes */
+
+        ret = ath9k_hw_init(ah);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to initialize hardware; "
+                          "initialization status: %d\n", ret);
+                goto err_hw;
+        }
+
+        ret = ath9k_htc_init_debug(ah);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to create debugfs files\n");
+                goto err_debug;
+        }
+
+        ret = ath9k_init_queues(priv);
+        if (ret)
+                goto err_queues;
+
+        ath9k_init_crypto(priv);
+        ath9k_init_channels_rates(priv);
+        ath9k_init_misc(priv);
+
+        return 0;
+
+err_queues:
+        ath9k_htc_exit_debug(ah);
+err_debug:
+        ath9k_hw_deinit(ah);
+err_hw:
+
+        kfree(ah);
+        priv->ah = NULL;
+
+        return ret;
+}
+
+static void ath9k_set_hw_capab(struct ath9k_htc_priv *priv,
+                               struct ieee80211_hw *hw)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+
+        hw->flags = IEEE80211_HW_SIGNAL_DBM |
+                IEEE80211_HW_AMPDU_AGGREGATION |
+                IEEE80211_HW_SPECTRUM_MGMT |
+                IEEE80211_HW_HAS_RATE_CONTROL;
+
+        hw->wiphy->interface_modes =
+                BIT(NL80211_IFTYPE_STATION) |
+                BIT(NL80211_IFTYPE_ADHOC);
+
+        hw->queues = 4;
+        hw->channel_change_time = 5000;
+        hw->max_listen_interval = 10;
+        hw->vif_data_size = sizeof(struct ath9k_htc_vif);
+        hw->sta_data_size = sizeof(struct ath9k_htc_sta);
+
+        /* tx_frame_hdr is larger than tx_mgmt_hdr anyway */
+        hw->extra_tx_headroom = sizeof(struct tx_frame_hdr) +
+                sizeof(struct htc_frame_hdr) + 4;
+
+        if (test_bit(ATH9K_MODE_11G, priv->ah->caps.wireless_modes))
+                hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
+                        &priv->sbands[IEEE80211_BAND_2GHZ];
+
+        if (priv->ah->caps.hw_caps & ATH9K_HW_CAP_HT) {
+                if (test_bit(ATH9K_MODE_11G, priv->ah->caps.wireless_modes))
+                        setup_ht_cap(priv,
+                                     &priv->sbands[IEEE80211_BAND_2GHZ].ht_cap);
+        }
+
+        SET_IEEE80211_PERM_ADDR(hw, common->macaddr);
+}
+
+static int ath9k_init_device(struct ath9k_htc_priv *priv, u16 devid)
+{
+        struct ieee80211_hw *hw = priv->hw;
+        struct ath_common *common;
+        struct ath_hw *ah;
+        int error = 0;
+        struct ath_regulatory *reg;
+
+        /* Bring up device */
+        error = ath9k_init_priv(priv, devid);
+        if (error != 0)
+                goto err_init;
+
+        ah = priv->ah;
+        common = ath9k_hw_common(ah);
+        ath9k_set_hw_capab(priv, hw);
+
+        /* Initialize regulatory */
+        error = ath_regd_init(&common->regulatory, priv->hw->wiphy,
+                              ath9k_reg_notifier);
+        if (error)
+                goto err_regd;
+
+        reg = &common->regulatory;
+
+        /* Setup TX */
+        error = ath9k_tx_init(priv);
+        if (error != 0)
+                goto err_tx;
+
+        /* Setup RX */
+        error = ath9k_rx_init(priv);
+        if (error != 0)
+                goto err_rx;
+
+        /* Register with mac80211 */
+        error = ieee80211_register_hw(hw);
+        if (error)
+                goto err_register;
+
+        /* Handle world regulatory */
+        if (!ath_is_world_regd(reg)) {
+                error = regulatory_hint(hw->wiphy, reg->alpha2);
+                if (error)
+                        goto err_world;
+        }
+
+        ath9k_init_leds(priv);
+        ath9k_start_rfkill_poll(priv);
+
+        return 0;
+
+err_world:
+        ieee80211_unregister_hw(hw);
+err_register:
+        ath9k_rx_cleanup(priv);
+err_rx:
+        ath9k_tx_cleanup(priv);
+err_tx:
+        /* Nothing */
+err_regd:
+        ath9k_deinit_priv(priv);
+err_init:
+        return error;
+}
+
+int ath9k_htc_probe_device(struct htc_target *htc_handle, struct device *dev,
+                           u16 devid)
+{
+        struct ieee80211_hw *hw;
+        struct ath9k_htc_priv *priv;
+        int ret;
+
+        hw = ieee80211_alloc_hw(sizeof(struct ath9k_htc_priv), &ath9k_htc_ops);
+        if (!hw)
+                return -ENOMEM;
+
+        priv = hw->priv;
+        priv->hw = hw;
+        priv->htc = htc_handle;
+        priv->dev = dev;
+        htc_handle->drv_priv = priv;
+        SET_IEEE80211_DEV(hw, priv->dev);
+
+        ret = ath9k_htc_wait_for_target(priv);
+        if (ret)
+                goto err_free;
+
+        priv->wmi = ath9k_init_wmi(priv);
+        if (!priv->wmi) {
+                ret = -EINVAL;
+                goto err_free;
+        }
+
+        ret = ath9k_init_htc_services(priv);
+        if (ret)
+                goto err_init;
+
+        ret = ath9k_init_device(priv, devid);
+        if (ret)
+                goto err_init;
+
+        return 0;
+
+err_init:
+        ath9k_deinit_wmi(priv);
+err_free:
+        ieee80211_free_hw(hw);
+        return ret;
+}
+
+void ath9k_htc_disconnect_device(struct htc_target *htc_handle, bool hotunplug)
+{
+        if (htc_handle->drv_priv) {
+                ath9k_deinit_device(htc_handle->drv_priv);
+                ath9k_deinit_wmi(htc_handle->drv_priv);
+                ieee80211_free_hw(htc_handle->drv_priv->hw);
+        }
+}
+
+#ifdef CONFIG_PM
+int ath9k_htc_resume(struct htc_target *htc_handle)
+{
+        int ret;
+
+        ret = ath9k_htc_wait_for_target(htc_handle->drv_priv);
+        if (ret)
+                return ret;
+
+        ret = ath9k_init_htc_services(htc_handle->drv_priv);
+        return ret;
+}
+#endif
+
+static int __init ath9k_htc_init(void)
+{
+        int error;
+
+        error = ath9k_htc_debug_create_root();
+        if (error < 0) {
+                printk(KERN_ERR
+                        "ath9k_htc: Unable to create debugfs root: %d\n",
+                        error);
+                goto err_dbg;
+        }
+
+        error = ath9k_hif_usb_init();
+        if (error < 0) {
+                printk(KERN_ERR
+                        "ath9k_htc: No USB devices found,"
+                        " driver not installed.\n");
+                error = -ENODEV;
+                goto err_usb;
+        }
+
+        return 0;
+
+err_usb:
+        ath9k_htc_debug_remove_root();
+err_dbg:
+        return error;
+}
+module_init(ath9k_htc_init);
+
+static void __exit ath9k_htc_exit(void)
+{
+        ath9k_hif_usb_exit();
+        ath9k_htc_debug_remove_root();
+        printk(KERN_INFO "ath9k_htc: Driver unloaded\n");
+}
+module_exit(ath9k_htc_exit);
diff --git a/drivers/net/wireless/ath/ath9k/htc_drv_main.c b/drivers/net/wireless/ath/ath9k/htc_drv_main.c
new file mode 100644
index 000000000000..20a2c1341e20
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_drv_main.c
@@ -0,0 +1,1626 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+static struct dentry *ath9k_debugfs_root;
+#endif
+
+/*************/
+/* Utilities */
+/*************/
+
+static void ath_update_txpow(struct ath9k_htc_priv *priv)
+{
+        struct ath_hw *ah = priv->ah;
+        u32 txpow;
+
+        if (priv->curtxpow != priv->txpowlimit) {
+                ath9k_hw_set_txpowerlimit(ah, priv->txpowlimit);
+                /* read back in case value is clamped */
+                ath9k_hw_getcapability(ah, ATH9K_CAP_TXPOW, 1, &txpow);
+                priv->curtxpow = txpow;
+        }
+}
+
+/* HACK Alert: Use 11NG for 2.4, use 11NA for 5 */
+static enum htc_phymode ath9k_htc_get_curmode(struct ath9k_htc_priv *priv,
+                                              struct ath9k_channel *ichan)
+{
+        enum htc_phymode mode;
+
+        mode = HTC_MODE_AUTO;
+
+        switch (ichan->chanmode) {
+        case CHANNEL_G:
+        case CHANNEL_G_HT20:
+        case CHANNEL_G_HT40PLUS:
+        case CHANNEL_G_HT40MINUS:
+                mode = HTC_MODE_11NG;
+                break;
+        case CHANNEL_A:
+        case CHANNEL_A_HT20:
+        case CHANNEL_A_HT40PLUS:
+        case CHANNEL_A_HT40MINUS:
+                mode = HTC_MODE_11NA;
+                break;
+        default:
+                break;
+        }
+
+        return mode;
+}
+
+static int ath9k_htc_set_channel(struct ath9k_htc_priv *priv,
+                                 struct ieee80211_hw *hw,
+                                 struct ath9k_channel *hchan)
+{
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ieee80211_conf *conf = &common->hw->conf;
+        bool fastcc = true;
+        struct ieee80211_channel *channel = hw->conf.channel;
+        enum htc_phymode mode;
+        u16 htc_mode;
+        u8 cmd_rsp;
+        int ret;
+
+        if (priv->op_flags & OP_INVALID)
+                return -EIO;
+
+        if (priv->op_flags & OP_FULL_RESET)
+                fastcc = false;
+
+        /* Fiddle around with fastcc later on, for now just use full reset */
+        fastcc = false;
+
+        htc_stop(priv->htc);
+        WMI_CMD(WMI_DISABLE_INTR_CMDID);
+        WMI_CMD(WMI_DRAIN_TXQ_ALL_CMDID);
+        WMI_CMD(WMI_STOP_RECV_CMDID);
+
+        ath_print(common, ATH_DBG_CONFIG,
+                  "(%u MHz) -> (%u MHz), HT: %d, HT40: %d\n",
+                  priv->ah->curchan->channel,
+                  channel->center_freq, conf_is_ht(conf), conf_is_ht40(conf));
+
+        ret = ath9k_hw_reset(ah, hchan, fastcc);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to reset channel (%u Mhz) "
+                          "reset status %d\n", channel->center_freq, ret);
+                goto err;
+        }
+
+        ath_update_txpow(priv);
+
+        WMI_CMD(WMI_START_RECV_CMDID);
+        if (ret)
+                goto err;
+
+        ath9k_host_rx_init(priv);
+
+        mode = ath9k_htc_get_curmode(priv, hchan);
+        htc_mode = cpu_to_be16(mode);
+        WMI_CMD_BUF(WMI_SET_MODE_CMDID, &htc_mode);
+        if (ret)
+                goto err;
+
+        WMI_CMD(WMI_ENABLE_INTR_CMDID);
+        if (ret)
+                goto err;
+
+        htc_start(priv->htc);
+
+        priv->op_flags &= ~OP_FULL_RESET;
+err:
+        return ret;
+}
+
+static int ath9k_htc_add_monitor_interface(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_target_vif hvif;
+        int ret = 0;
+        u8 cmd_rsp;
+
+        if (priv->nvifs > 0)
+                return -ENOBUFS;
+
+        memset(&hvif, 0, sizeof(struct ath9k_htc_target_vif));
+        memcpy(&hvif.myaddr, common->macaddr, ETH_ALEN);
+
+        hvif.opmode = cpu_to_be32(HTC_M_MONITOR);
+        priv->ah->opmode = NL80211_IFTYPE_MONITOR;
+        hvif.index = priv->nvifs;
+
+        WMI_CMD_BUF(WMI_VAP_CREATE_CMDID, &hvif);
+        if (ret)
+                return ret;
+
+        priv->nvifs++;
+        return 0;
+}
+
+static int ath9k_htc_remove_monitor_interface(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_target_vif hvif;
+        int ret = 0;
+        u8 cmd_rsp;
+
+        memset(&hvif, 0, sizeof(struct ath9k_htc_target_vif));
+        memcpy(&hvif.myaddr, common->macaddr, ETH_ALEN);
+        hvif.index = 0; /* Should do for now */
+        WMI_CMD_BUF(WMI_VAP_REMOVE_CMDID, &hvif);
+        priv->nvifs--;
+
+        return ret;
+}
+
+static int ath9k_htc_add_station(struct ath9k_htc_priv *priv,
+                                 struct ieee80211_vif *vif,
+                                 struct ieee80211_sta *sta)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_target_sta tsta;
+        struct ath9k_htc_vif *avp = (struct ath9k_htc_vif *) vif->drv_priv;
+        struct ath9k_htc_sta *ista;
+        int ret;
+        u8 cmd_rsp;
+
+        if (priv->nstations >= ATH9K_HTC_MAX_STA)
+                return -ENOBUFS;
+
+        memset(&tsta, 0, sizeof(struct ath9k_htc_target_sta));
+
+        if (sta) {
+                ista = (struct ath9k_htc_sta *) sta->drv_priv;
+                memcpy(&tsta.macaddr, sta->addr, ETH_ALEN);
+                memcpy(&tsta.bssid, common->curbssid, ETH_ALEN);
+                tsta.associd = common->curaid;
+                tsta.is_vif_sta = 0;
+                tsta.valid = true;
+                ista->index = priv->nstations;
+        } else {
+                memcpy(&tsta.macaddr, vif->addr, ETH_ALEN);
+                tsta.is_vif_sta = 1;
+        }
+
+        tsta.sta_index = priv->nstations;
+        tsta.vif_index = avp->index;
+        tsta.maxampdu = 0xffff;
+        if (sta && sta->ht_cap.ht_supported)
+                tsta.flags = cpu_to_be16(ATH_HTC_STA_HT);
+
+        WMI_CMD_BUF(WMI_NODE_CREATE_CMDID, &tsta);
+        if (ret) {
+                if (sta)
+                        ath_print(common, ATH_DBG_FATAL,
+                          "Unable to add station entry for: %pM\n", sta->addr);
+                return ret;
+        }
+
+        if (sta)
+                ath_print(common, ATH_DBG_CONFIG,
+                          "Added a station entry for: %pM (idx: %d)\n",
+                          sta->addr, tsta.sta_index);
+
+        priv->nstations++;
+        return 0;
+}
+
+static int ath9k_htc_remove_station(struct ath9k_htc_priv *priv,
+                                    struct ieee80211_vif *vif,
+                                    struct ieee80211_sta *sta)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_sta *ista;
+        int ret;
+        u8 cmd_rsp, sta_idx;
+
+        if (sta) {
+                ista = (struct ath9k_htc_sta *) sta->drv_priv;
+                sta_idx = ista->index;
+        } else {
+                sta_idx = 0;
+        }
+
+        WMI_CMD_BUF(WMI_NODE_REMOVE_CMDID, &sta_idx);
+        if (ret) {
+                if (sta)
+                        ath_print(common, ATH_DBG_FATAL,
+                          "Unable to remove station entry for: %pM\n",
+                          sta->addr);
+                return ret;
+        }
+
+        if (sta)
+                ath_print(common, ATH_DBG_CONFIG,
+                          "Removed a station entry for: %pM (idx: %d)\n",
+                          sta->addr, sta_idx);
+
+        priv->nstations--;
+        return 0;
+}
+
+static int ath9k_htc_update_cap_target(struct ath9k_htc_priv *priv)
+{
+        struct ath9k_htc_cap_target tcap;
+        int ret;
+        u8 cmd_rsp;
+
+        memset(&tcap, 0, sizeof(struct ath9k_htc_cap_target));
+
+        /* FIXME: Values are hardcoded */
+        tcap.flags = 0x240c40;
+        tcap.flags_ext = 0x80601000;
+        tcap.ampdu_limit = 0xffff0000;
+        tcap.ampdu_subframes = 20;
+        tcap.tx_chainmask_legacy = 1;
+        tcap.protmode = 1;
+        tcap.tx_chainmask = 1;
+
+        WMI_CMD_BUF(WMI_TARGET_IC_UPDATE_CMDID, &tcap);
+
+        return ret;
+}
+
+static int ath9k_htc_init_rate(struct ath9k_htc_priv *priv,
+                                 struct ieee80211_vif *vif,
+                                 struct ieee80211_sta *sta)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_sta *ista = (struct ath9k_htc_sta *) sta->drv_priv;
+        struct ieee80211_supported_band *sband;
+        struct ath9k_htc_target_rate trate;
+        u32 caps = 0;
+        u8 cmd_rsp;
+        int i, j, ret;
+
+        memset(&trate, 0, sizeof(trate));
+
+        /* Only 2GHz is supported */
+        sband = priv->hw->wiphy->bands[IEEE80211_BAND_2GHZ];
+
+        for (i = 0, j = 0; i < sband->n_bitrates; i++) {
+                if (sta->supp_rates[sband->band] & BIT(i)) {
+                        priv->tgt_rate.rates.legacy_rates.rs_rates[j]
+                                = (sband->bitrates[i].bitrate * 2) / 10;
+                        j++;
+                }
+        }
+        priv->tgt_rate.rates.legacy_rates.rs_nrates = j;
+
+        if (sta->ht_cap.ht_supported) {
+                for (i = 0, j = 0; i < 77; i++) {
+                        if (sta->ht_cap.mcs.rx_mask[i/8] & (1<<(i%8)))
+                                priv->tgt_rate.rates.ht_rates.rs_rates[j++] = i;
+                        if (j == ATH_HTC_RATE_MAX)
+                                break;
+                }
+                priv->tgt_rate.rates.ht_rates.rs_nrates = j;
+
+                caps = WLAN_RC_HT_FLAG;
+                if (sta->ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40)
+                        caps |= WLAN_RC_40_FLAG;
+                if (sta->ht_cap.cap & IEEE80211_HT_CAP_SGI_40)
+                        caps |= WLAN_RC_SGI_FLAG;
+
+        }
+
+        priv->tgt_rate.sta_index = ista->index;
+        priv->tgt_rate.isnew = 1;
+        trate = priv->tgt_rate;
+        priv->tgt_rate.capflags = caps;
+        trate.capflags = cpu_to_be32(caps);
+
+        WMI_CMD_BUF(WMI_RC_RATE_UPDATE_CMDID, &trate);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to initialize Rate information on target\n");
+                return ret;
+        }
+
+        ath_print(common, ATH_DBG_CONFIG,
+                  "Updated target STA: %pM (caps: 0x%x)\n", sta->addr, caps);
+        return 0;
+}
+
+static bool check_rc_update(struct ieee80211_hw *hw, bool *cw40)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ieee80211_conf *conf = &hw->conf;
+
+        if (!conf_is_ht(conf))
+                return false;
+
+        if (!(priv->op_flags & OP_ASSOCIATED) ||
+            (priv->op_flags & OP_SCANNING))
+                return false;
+
+        if (conf_is_ht40(conf)) {
+                if (priv->ah->curchan->chanmode &
+                        (CHANNEL_HT40PLUS | CHANNEL_HT40MINUS)) {
+                        return false;
+                } else {
+                        *cw40 = true;
+                        return true;
+                }
+        } else {  /* ht20 */
+                if (priv->ah->curchan->chanmode & CHANNEL_HT20)
+                        return false;
+                else
+                        return true;
+        }
+}
+
+static void ath9k_htc_rc_update(struct ath9k_htc_priv *priv, bool is_cw40)
+{
+        struct ath9k_htc_target_rate trate;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        int ret;
+        u8 cmd_rsp;
+
+        memset(&trate, 0, sizeof(trate));
+
+        trate = priv->tgt_rate;
+
+        if (is_cw40)
+                priv->tgt_rate.capflags |= WLAN_RC_40_FLAG;
+        else
+                priv->tgt_rate.capflags &= ~WLAN_RC_40_FLAG;
+
+        trate.capflags = cpu_to_be32(priv->tgt_rate.capflags);
+
+        WMI_CMD_BUF(WMI_RC_RATE_UPDATE_CMDID, &trate);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to update Rate information on target\n");
+                return;
+        }
+
+        ath_print(common, ATH_DBG_CONFIG, "Rate control updated with "
+                  "caps:0x%x on target\n", priv->tgt_rate.capflags);
+}
+
+static int ath9k_htc_aggr_oper(struct ath9k_htc_priv *priv,
+                               struct ieee80211_vif *vif,
+                               u8 *sta_addr, u8 tid, bool oper)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_target_aggr aggr;
+        struct ieee80211_sta *sta = NULL;
+        struct ath9k_htc_sta *ista = (struct ath9k_htc_sta *) sta->drv_priv;
+        int ret = 0;
+        u8 cmd_rsp;
+
+        if (tid > ATH9K_HTC_MAX_TID)
+                return -EINVAL;
+
+        rcu_read_lock();
+        sta = ieee80211_find_sta(vif, sta_addr);
+        if (sta) {
+                ista = (struct ath9k_htc_sta *) sta->drv_priv;
+        } else {
+                rcu_read_unlock();
+                return -EINVAL;
+        }
+
+        if (!ista) {
+                rcu_read_unlock();
+                return -EINVAL;
+        }
+
+        memset(&aggr, 0, sizeof(struct ath9k_htc_target_aggr));
+
+        aggr.sta_index = ista->index;
+        rcu_read_unlock();
+        aggr.tidno = tid;
+        aggr.aggr_enable = oper;
+
+        if (oper)
+                ista->tid_state[tid] = AGGR_START;
+        else
+                ista->tid_state[tid] = AGGR_STOP;
+
+        WMI_CMD_BUF(WMI_TX_AGGR_ENABLE_CMDID, &aggr);
+        if (ret)
+                ath_print(common, ATH_DBG_CONFIG,
+                          "Unable to %s TX aggregation for (%pM, %d)\n",
+                          (oper) ? "start" : "stop", sta->addr, tid);
+        else
+                ath_print(common, ATH_DBG_CONFIG,
+                          "%s aggregation for (%pM, %d)\n",
+                          (oper) ? "Starting" : "Stopping", sta->addr, tid);
+
+        return ret;
+}
+
+void ath9k_htc_aggr_work(struct work_struct *work)
+{
+        int ret = 0;
+        struct ath9k_htc_priv *priv =
+                container_of(work, struct ath9k_htc_priv,
+                             ath9k_aggr_work.work);
+        struct ath9k_htc_aggr_work *wk = &priv->aggr_work;
+
+        mutex_lock(&wk->mutex);
+
+        switch (wk->action) {
+        case IEEE80211_AMPDU_TX_START:
+                ret = ath9k_htc_aggr_oper(priv, wk->vif, wk->sta_addr,
+                                          wk->tid, true);
+                if (!ret)
+                        ieee80211_start_tx_ba_cb(wk->vif, wk->sta_addr,
+                                                 wk->tid);
+                break;
+        case IEEE80211_AMPDU_TX_STOP:
+                ath9k_htc_aggr_oper(priv, wk->vif, wk->sta_addr,
+                                    wk->tid, false);
+                ieee80211_stop_tx_ba_cb(wk->vif, wk->sta_addr, wk->tid);
+                break;
+        default:
+                ath_print(ath9k_hw_common(priv->ah), ATH_DBG_FATAL,
+                          "Unknown AMPDU action\n");
+        }
+
+        mutex_unlock(&wk->mutex);
+}
+
+/*********/
+/* DEBUG */
+/*********/
+
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+
+static int ath9k_debugfs_open(struct inode *inode, struct file *file)
+{
+        file->private_data = inode->i_private;
+        return 0;
+}
+
+static ssize_t read_file_tgt_stats(struct file *file, char __user *user_buf,
+                                   size_t count, loff_t *ppos)
+{
+        struct ath9k_htc_priv *priv =
+                (struct ath9k_htc_priv *) file->private_data;
+        struct ath9k_htc_target_stats cmd_rsp;
+        char buf[512];
+        unsigned int len = 0;
+        int ret = 0;
+
+        memset(&cmd_rsp, 0, sizeof(cmd_rsp));
+
+        WMI_CMD(WMI_TGT_STATS_CMDID);
+        if (ret)
+                return -EINVAL;
+
+
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Short Retries",
+                        be32_to_cpu(cmd_rsp.tx_shortretry));
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Long Retries",
+                        be32_to_cpu(cmd_rsp.tx_longretry));
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Xretries",
+                        be32_to_cpu(cmd_rsp.tx_xretries));
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Unaggr. Xretries",
+                        be32_to_cpu(cmd_rsp.ht_txunaggr_xretry));
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Xretries (HT)",
+                        be32_to_cpu(cmd_rsp.ht_tx_xretries));
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%19s : %10u\n", "TX Rate", priv->debug.txrate);
+
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static const struct file_operations fops_tgt_stats = {
+        .read = read_file_tgt_stats,
+        .open = ath9k_debugfs_open,
+        .owner = THIS_MODULE
+};
+
+static ssize_t read_file_xmit(struct file *file, char __user *user_buf,
+                              size_t count, loff_t *ppos)
+{
+        struct ath9k_htc_priv *priv =
+                (struct ath9k_htc_priv *) file->private_data;
+        char buf[512];
+        unsigned int len = 0;
+
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "Buffers queued",
+                        priv->debug.tx_stats.buf_queued);
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "Buffers completed",
+                        priv->debug.tx_stats.buf_completed);
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "SKBs queued",
+                        priv->debug.tx_stats.skb_queued);
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "SKBs completed",
+                        priv->debug.tx_stats.skb_completed);
+
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static const struct file_operations fops_xmit = {
+        .read = read_file_xmit,
+        .open = ath9k_debugfs_open,
+        .owner = THIS_MODULE
+};
+
+static ssize_t read_file_recv(struct file *file, char __user *user_buf,
+                              size_t count, loff_t *ppos)
+{
+        struct ath9k_htc_priv *priv =
+                (struct ath9k_htc_priv *) file->private_data;
+        char buf[512];
+        unsigned int len = 0;
+
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "SKBs allocated",
+                        priv->debug.rx_stats.skb_allocated);
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "SKBs completed",
+                        priv->debug.rx_stats.skb_completed);
+        len += snprintf(buf + len, sizeof(buf) - len,
+                        "%20s : %10u\n", "SKBs Dropped",
+                        priv->debug.rx_stats.skb_dropped);
+
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static const struct file_operations fops_recv = {
+        .read = read_file_recv,
+        .open = ath9k_debugfs_open,
+        .owner = THIS_MODULE
+};
+
+int ath9k_htc_init_debug(struct ath_hw *ah)
+{
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *) common->priv;
+
+        if (!ath9k_debugfs_root)
+                return -ENOENT;
+
+        priv->debug.debugfs_phy = debugfs_create_dir(wiphy_name(priv->hw->wiphy),
+                                                     ath9k_debugfs_root);
+        if (!priv->debug.debugfs_phy)
+                goto err;
+
+        priv->debug.debugfs_tgt_stats = debugfs_create_file("tgt_stats", S_IRUSR,
+                                                    priv->debug.debugfs_phy,
+                                                    priv, &fops_tgt_stats);
+        if (!priv->debug.debugfs_tgt_stats)
+                goto err;
+
+
+        priv->debug.debugfs_xmit = debugfs_create_file("xmit", S_IRUSR,
+                                                       priv->debug.debugfs_phy,
+                                                       priv, &fops_xmit);
+        if (!priv->debug.debugfs_xmit)
+                goto err;
+
+        priv->debug.debugfs_recv = debugfs_create_file("recv", S_IRUSR,
+                                                       priv->debug.debugfs_phy,
+                                                       priv, &fops_recv);
+        if (!priv->debug.debugfs_recv)
+                goto err;
+
+        return 0;
+
+err:
+        ath9k_htc_exit_debug(ah);
+        return -ENOMEM;
+}
+
+void ath9k_htc_exit_debug(struct ath_hw *ah)
+{
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *) common->priv;
+
+        debugfs_remove(priv->debug.debugfs_recv);
+        debugfs_remove(priv->debug.debugfs_xmit);
+        debugfs_remove(priv->debug.debugfs_tgt_stats);
+        debugfs_remove(priv->debug.debugfs_phy);
+}
+
+int ath9k_htc_debug_create_root(void)
+{
+        ath9k_debugfs_root = debugfs_create_dir(KBUILD_MODNAME, NULL);
+        if (!ath9k_debugfs_root)
+                return -ENOENT;
+
+        return 0;
+}
+
+void ath9k_htc_debug_remove_root(void)
+{
+        debugfs_remove(ath9k_debugfs_root);
+        ath9k_debugfs_root = NULL;
+}
+
+#endif /* CONFIG_ATH9K_HTC_DEBUGFS */
+
+/*******/
+/* ANI */
+/*******/
+
+static void ath_start_ani(struct ath9k_htc_priv *priv)
+{
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        unsigned long timestamp = jiffies_to_msecs(jiffies);
+
+        common->ani.longcal_timer = timestamp;
+        common->ani.shortcal_timer = timestamp;
+        common->ani.checkani_timer = timestamp;
+
+        ieee80211_queue_delayed_work(common->hw, &priv->ath9k_ani_work,
+                                     msecs_to_jiffies(ATH_ANI_POLLINTERVAL));
+}
+
+void ath9k_ani_work(struct work_struct *work)
+{
+        struct ath9k_htc_priv *priv =
+                container_of(work, struct ath9k_htc_priv,
+                             ath9k_ani_work.work);
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        bool longcal = false;
+        bool shortcal = false;
+        bool aniflag = false;
+        unsigned int timestamp = jiffies_to_msecs(jiffies);
+        u32 cal_interval, short_cal_interval;
+
+        short_cal_interval = ATH_STA_SHORT_CALINTERVAL;
+
+        /* Long calibration runs independently of short calibration. */
+        if ((timestamp - common->ani.longcal_timer) >= ATH_LONG_CALINTERVAL) {
+                longcal = true;
+                ath_print(common, ATH_DBG_ANI, "longcal @%lu\n", jiffies);
+                common->ani.longcal_timer = timestamp;
+        }
+
+        /* Short calibration applies only while caldone is false */
+        if (!common->ani.caldone) {
+                if ((timestamp - common->ani.shortcal_timer) >=
+                    short_cal_interval) {
+                        shortcal = true;
+                        ath_print(common, ATH_DBG_ANI,
+                                  "shortcal @%lu\n", jiffies);
+                        common->ani.shortcal_timer = timestamp;
+                        common->ani.resetcal_timer = timestamp;
+                }
+        } else {
+                if ((timestamp - common->ani.resetcal_timer) >=
+                    ATH_RESTART_CALINTERVAL) {
+                        common->ani.caldone = ath9k_hw_reset_calvalid(ah);
+                        if (common->ani.caldone)
+                                common->ani.resetcal_timer = timestamp;
+                }
+        }
+
+        /* Verify whether we must check ANI */
+        if ((timestamp - common->ani.checkani_timer) >= ATH_ANI_POLLINTERVAL) {
+                aniflag = true;
+                common->ani.checkani_timer = timestamp;
+        }
+
+        /* Skip all processing if there's nothing to do. */
+        if (longcal || shortcal || aniflag) {
+                /* Call ANI routine if necessary */
+                if (aniflag)
+                        ath9k_hw_ani_monitor(ah, ah->curchan);
+
+                /* Perform calibration if necessary */
+                if (longcal || shortcal) {
+                        common->ani.caldone =
+                                ath9k_hw_calibrate(ah, ah->curchan,
+                                                   common->rx_chainmask,
+                                                   longcal);
+
+                        if (longcal)
+                                common->ani.noise_floor =
+                                        ath9k_hw_getchan_noise(ah, ah->curchan);
+
+                        ath_print(common, ATH_DBG_ANI,
+                                  " calibrate chan %u/%x nf: %d\n",
+                                  ah->curchan->channel,
+                                  ah->curchan->channelFlags,
+                                  common->ani.noise_floor);
+                }
+        }
+
+        /*
+        * Set timer interval based on previous results.
+        * The interval must be the shortest necessary to satisfy ANI,
+        * short calibration and long calibration.
+        */
+        cal_interval = ATH_LONG_CALINTERVAL;
+        if (priv->ah->config.enable_ani)
+                cal_interval = min(cal_interval, (u32)ATH_ANI_POLLINTERVAL);
+        if (!common->ani.caldone)
+                cal_interval = min(cal_interval, (u32)short_cal_interval);
+
+        ieee80211_queue_delayed_work(common->hw, &priv->ath9k_ani_work,
+                                     msecs_to_jiffies(cal_interval));
+}
+
+/*******/
+/* LED */
+/*******/
+
+static void ath9k_led_blink_work(struct work_struct *work)
+{
+        struct ath9k_htc_priv *priv = container_of(work, struct ath9k_htc_priv,
+                                                   ath9k_led_blink_work.work);
+
+        if (!(priv->op_flags & OP_LED_ASSOCIATED))
+                return;
+
+        if ((priv->led_on_duration == ATH_LED_ON_DURATION_IDLE) ||
+            (priv->led_off_duration == ATH_LED_OFF_DURATION_IDLE))
+                ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin, 0);
+        else
+                ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin,
+                                  (priv->op_flags & OP_LED_ON) ? 1 : 0);
+
+        ieee80211_queue_delayed_work(priv->hw,
+                                     &priv->ath9k_led_blink_work,
+                                     (priv->op_flags & OP_LED_ON) ?
+                                     msecs_to_jiffies(priv->led_off_duration) :
+                                     msecs_to_jiffies(priv->led_on_duration));
+
+        priv->led_on_duration = priv->led_on_cnt ?
+                max((ATH_LED_ON_DURATION_IDLE - priv->led_on_cnt), 25) :
+                ATH_LED_ON_DURATION_IDLE;
+        priv->led_off_duration = priv->led_off_cnt ?
+                max((ATH_LED_OFF_DURATION_IDLE - priv->led_off_cnt), 10) :
+                ATH_LED_OFF_DURATION_IDLE;
+        priv->led_on_cnt = priv->led_off_cnt = 0;
+
+        if (priv->op_flags & OP_LED_ON)
+                priv->op_flags &= ~OP_LED_ON;
+        else
+                priv->op_flags |= OP_LED_ON;
+}
+
+static void ath9k_led_brightness_work(struct work_struct *work)
+{
+        struct ath_led *led = container_of(work, struct ath_led,
+                                           brightness_work.work);
+        struct ath9k_htc_priv *priv = led->priv;
+
+        switch (led->brightness) {
+        case LED_OFF:
+                if (led->led_type == ATH_LED_ASSOC ||
+                    led->led_type == ATH_LED_RADIO) {
+                        ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin,
+                                          (led->led_type == ATH_LED_RADIO));
+                        priv->op_flags &= ~OP_LED_ASSOCIATED;
+                        if (led->led_type == ATH_LED_RADIO)
+                                priv->op_flags &= ~OP_LED_ON;
+                } else {
+                        priv->led_off_cnt++;
+                }
+                break;
+        case LED_FULL:
+                if (led->led_type == ATH_LED_ASSOC) {
+                        priv->op_flags |= OP_LED_ASSOCIATED;
+                        ieee80211_queue_delayed_work(priv->hw,
+                                             &priv->ath9k_led_blink_work, 0);
+                } else if (led->led_type == ATH_LED_RADIO) {
+                        ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin, 0);
+                        priv->op_flags |= OP_LED_ON;
+                } else {
+                        priv->led_on_cnt++;
+                }
+                break;
+        default:
+                break;
+        }
+}
+
+static void ath9k_led_brightness(struct led_classdev *led_cdev,
+                                 enum led_brightness brightness)
+{
+        struct ath_led *led = container_of(led_cdev, struct ath_led, led_cdev);
+        struct ath9k_htc_priv *priv = led->priv;
+
+        led->brightness = brightness;
+        if (!(priv->op_flags & OP_LED_DEINIT))
+                ieee80211_queue_delayed_work(priv->hw,
+                                             &led->brightness_work, 0);
+}
+
+static void ath9k_led_stop_brightness(struct ath9k_htc_priv *priv)
+{
+        cancel_delayed_work_sync(&priv->radio_led.brightness_work);
+        cancel_delayed_work_sync(&priv->assoc_led.brightness_work);
+        cancel_delayed_work_sync(&priv->tx_led.brightness_work);
+        cancel_delayed_work_sync(&priv->rx_led.brightness_work);
+}
+
+static int ath9k_register_led(struct ath9k_htc_priv *priv, struct ath_led *led,
+                              char *trigger)
+{
+        int ret;
+
+        led->priv = priv;
+        led->led_cdev.name = led->name;
+        led->led_cdev.default_trigger = trigger;
+        led->led_cdev.brightness_set = ath9k_led_brightness;
+
+        ret = led_classdev_register(wiphy_dev(priv->hw->wiphy), &led->led_cdev);
+        if (ret)
+                ath_print(ath9k_hw_common(priv->ah), ATH_DBG_FATAL,
+                          "Failed to register led:%s", led->name);
+        else
+                led->registered = 1;
+
+        INIT_DELAYED_WORK(&led->brightness_work, ath9k_led_brightness_work);
+
+        return ret;
+}
+
+static void ath9k_unregister_led(struct ath_led *led)
+{
+        if (led->registered) {
+                led_classdev_unregister(&led->led_cdev);
+                led->registered = 0;
+        }
+}
+
+void ath9k_deinit_leds(struct ath9k_htc_priv *priv)
+{
+        priv->op_flags |= OP_LED_DEINIT;
+        ath9k_unregister_led(&priv->assoc_led);
+        priv->op_flags &= ~OP_LED_ASSOCIATED;
+        ath9k_unregister_led(&priv->tx_led);
+        ath9k_unregister_led(&priv->rx_led);
+        ath9k_unregister_led(&priv->radio_led);
+        ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin, 1);
+}
+
+void ath9k_init_leds(struct ath9k_htc_priv *priv)
+{
+        char *trigger;
+        int ret;
+
+        if (AR_SREV_9287(priv->ah))
+                priv->ah->led_pin = ATH_LED_PIN_9287;
+        else if (AR_SREV_9271(priv->ah))
+                priv->ah->led_pin = ATH_LED_PIN_9271;
+        else
+                priv->ah->led_pin = ATH_LED_PIN_DEF;
+
+        /* Configure gpio 1 for output */
+        ath9k_hw_cfg_output(priv->ah, priv->ah->led_pin,
+                            AR_GPIO_OUTPUT_MUX_AS_OUTPUT);
+        /* LED off, active low */
+        ath9k_hw_set_gpio(priv->ah, priv->ah->led_pin, 1);
+
+        INIT_DELAYED_WORK(&priv->ath9k_led_blink_work, ath9k_led_blink_work);
+
+        trigger = ieee80211_get_radio_led_name(priv->hw);
+        snprintf(priv->radio_led.name, sizeof(priv->radio_led.name),
+                "ath9k-%s::radio", wiphy_name(priv->hw->wiphy));
+        ret = ath9k_register_led(priv, &priv->radio_led, trigger);
+        priv->radio_led.led_type = ATH_LED_RADIO;
+        if (ret)
+                goto fail;
+
+        trigger = ieee80211_get_assoc_led_name(priv->hw);
+        snprintf(priv->assoc_led.name, sizeof(priv->assoc_led.name),
+                "ath9k-%s::assoc", wiphy_name(priv->hw->wiphy));
+        ret = ath9k_register_led(priv, &priv->assoc_led, trigger);
+        priv->assoc_led.led_type = ATH_LED_ASSOC;
+        if (ret)
+                goto fail;
+
+        trigger = ieee80211_get_tx_led_name(priv->hw);
+        snprintf(priv->tx_led.name, sizeof(priv->tx_led.name),
+                "ath9k-%s::tx", wiphy_name(priv->hw->wiphy));
+        ret = ath9k_register_led(priv, &priv->tx_led, trigger);
+        priv->tx_led.led_type = ATH_LED_TX;
+        if (ret)
+                goto fail;
+
+        trigger = ieee80211_get_rx_led_name(priv->hw);
+        snprintf(priv->rx_led.name, sizeof(priv->rx_led.name),
+                "ath9k-%s::rx", wiphy_name(priv->hw->wiphy));
+        ret = ath9k_register_led(priv, &priv->rx_led, trigger);
+        priv->rx_led.led_type = ATH_LED_RX;
+        if (ret)
+                goto fail;
+
+        priv->op_flags &= ~OP_LED_DEINIT;
+
+        return;
+
+fail:
+        cancel_delayed_work_sync(&priv->ath9k_led_blink_work);
+        ath9k_deinit_leds(priv);
+}
+
+/*******************/
+/*      Rfkill     */
+/*******************/
+
+static bool ath_is_rfkill_set(struct ath9k_htc_priv *priv)
+{
+        return ath9k_hw_gpio_get(priv->ah, priv->ah->rfkill_gpio) ==
+                priv->ah->rfkill_polarity;
+}
+
+static void ath9k_htc_rfkill_poll_state(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        bool blocked = !!ath_is_rfkill_set(priv);
+
+        wiphy_rfkill_set_hw_state(hw->wiphy, blocked);
+}
+
+void ath9k_start_rfkill_poll(struct ath9k_htc_priv *priv)
+{
+        if (priv->ah->caps.hw_caps & ATH9K_HW_CAP_RFSILENT)
+                wiphy_rfkill_start_polling(priv->hw->wiphy);
+}
+
+/**********************/
+/* mac80211 Callbacks */
+/**********************/
+
+static int ath9k_htc_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
+{
+        struct ieee80211_hdr *hdr;
+        struct ath9k_htc_priv *priv = hw->priv;
+        int padpos, padsize;
+
+        hdr = (struct ieee80211_hdr *) skb->data;
+
+        /* Add the padding after the header if this is not already done */
+        padpos = ath9k_cmn_padpos(hdr->frame_control);
+        padsize = padpos & 3;
+        if (padsize && skb->len > padpos) {
+                if (skb_headroom(skb) < padsize)
+                        return -1;
+                skb_push(skb, padsize);
+                memmove(skb->data, skb->data + padsize, padpos);
+        }
+
+        if (ath9k_htc_tx_start(priv, skb) != 0) {
+                ath_print(ath9k_hw_common(priv->ah), ATH_DBG_XMIT, "Tx failed");
+                goto fail_tx;
+        }
+
+        return 0;
+
+fail_tx:
+        dev_kfree_skb_any(skb);
+        return 0;
+}
+
+static int ath9k_htc_start(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ieee80211_channel *curchan = hw->conf.channel;
+        struct ath9k_channel *init_channel;
+        int ret = 0;
+        enum htc_phymode mode;
+        u16 htc_mode;
+        u8 cmd_rsp;
+
+        ath_print(common, ATH_DBG_CONFIG,
+                  "Starting driver with initial channel: %d MHz\n",
+                  curchan->center_freq);
+
+        mutex_lock(&priv->mutex);
+
+        /* setup initial channel */
+        init_channel = ath9k_cmn_get_curchannel(hw, ah);
+
+        /* Reset SERDES registers */
+        ath9k_hw_configpcipowersave(ah, 0, 0);
+
+        ath9k_hw_htc_resetinit(ah);
+        ret = ath9k_hw_reset(ah, init_channel, false);
+        if (ret) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Unable to reset hardware; reset status %d "
+                          "(freq %u MHz)\n", ret, curchan->center_freq);
+                goto mutex_unlock;
+        }
+
+        ath_update_txpow(priv);
+
+        mode = ath9k_htc_get_curmode(priv, init_channel);
+        htc_mode = cpu_to_be16(mode);
+        WMI_CMD_BUF(WMI_SET_MODE_CMDID, &htc_mode);
+        if (ret)
+                goto mutex_unlock;
+
+        WMI_CMD(WMI_ATH_INIT_CMDID);
+        if (ret)
+                goto mutex_unlock;
+
+        WMI_CMD(WMI_START_RECV_CMDID);
+        if (ret)
+                goto mutex_unlock;
+
+        ath9k_host_rx_init(priv);
+
+        priv->op_flags &= ~OP_INVALID;
+        htc_start(priv->htc);
+
+mutex_unlock:
+        mutex_unlock(&priv->mutex);
+        return ret;
+}
+
+static void ath9k_htc_stop(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        int ret = 0;
+        u8 cmd_rsp;
+
+        mutex_lock(&priv->mutex);
+
+        if (priv->op_flags & OP_INVALID) {
+                ath_print(common, ATH_DBG_ANY, "Device not present\n");
+                mutex_unlock(&priv->mutex);
+                return;
+        }
+
+        htc_stop(priv->htc);
+        WMI_CMD(WMI_DISABLE_INTR_CMDID);
+        WMI_CMD(WMI_DRAIN_TXQ_ALL_CMDID);
+        WMI_CMD(WMI_STOP_RECV_CMDID);
+        ath9k_hw_phy_disable(ah);
+        ath9k_hw_disable(ah);
+        ath9k_hw_configpcipowersave(ah, 1, 1);
+        ath9k_hw_setpower(ah, ATH9K_PM_FULL_SLEEP);
+
+        cancel_delayed_work_sync(&priv->ath9k_ani_work);
+        cancel_delayed_work_sync(&priv->ath9k_aggr_work);
+        cancel_delayed_work_sync(&priv->ath9k_led_blink_work);
+        ath9k_led_stop_brightness(priv);
+        skb_queue_purge(&priv->tx_queue);
+
+        /* Remove monitor interface here */
+        if (ah->opmode == NL80211_IFTYPE_MONITOR) {
+                if (ath9k_htc_remove_monitor_interface(priv))
+                        ath_print(common, ATH_DBG_FATAL,
+                                  "Unable to remove monitor interface\n");
+                else
+                        ath_print(common, ATH_DBG_CONFIG,
+                                  "Monitor interface removed\n");
+        }
+
+        priv->op_flags |= OP_INVALID;
+        mutex_unlock(&priv->mutex);
+
+        ath_print(common, ATH_DBG_CONFIG, "Driver halt\n");
+}
+
+static int ath9k_htc_add_interface(struct ieee80211_hw *hw,
+                                   struct ieee80211_vif *vif)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath9k_htc_vif *avp = (void *)vif->drv_priv;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_target_vif hvif;
+        int ret = 0;
+        u8 cmd_rsp;
+
+        mutex_lock(&priv->mutex);
+
+        /* Only one interface for now */
+        if (priv->nvifs > 0) {
+                ret = -ENOBUFS;
+                goto out;
+        }
+
+        memset(&hvif, 0, sizeof(struct ath9k_htc_target_vif));
+        memcpy(&hvif.myaddr, vif->addr, ETH_ALEN);
+
+        switch (vif->type) {
+        case NL80211_IFTYPE_STATION:
+                hvif.opmode = cpu_to_be32(HTC_M_STA);
+                break;
+        case NL80211_IFTYPE_ADHOC:
+                hvif.opmode = cpu_to_be32(HTC_M_IBSS);
+                break;
+        default:
+                ath_print(common, ATH_DBG_FATAL,
+                        "Interface type %d not yet supported\n", vif->type);
+                ret = -EOPNOTSUPP;
+                goto out;
+        }
+
+        ath_print(common, ATH_DBG_CONFIG,
+                  "Attach a VIF of type: %d\n", vif->type);
+
+        priv->ah->opmode = vif->type;
+
+        /* Index starts from zero on the target */
+        avp->index = hvif.index = priv->nvifs;
+        hvif.rtsthreshold = cpu_to_be16(2304);
+        WMI_CMD_BUF(WMI_VAP_CREATE_CMDID, &hvif);
+        if (ret)
+                goto out;
+
+        priv->nvifs++;
+
+        /*
+         * We need a node in target to tx mgmt frames
+         * before association.
+         */
+        ret = ath9k_htc_add_station(priv, vif, NULL);
+        if (ret)
+                goto out;
+
+        ret = ath9k_htc_update_cap_target(priv);
+        if (ret)
+                ath_print(common, ATH_DBG_CONFIG, "Failed to update"
+                          " capability in target \n");
+
+        priv->vif = vif;
+out:
+        mutex_unlock(&priv->mutex);
+        return ret;
+}
+
+static void ath9k_htc_remove_interface(struct ieee80211_hw *hw,
+                                       struct ieee80211_vif *vif)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_htc_vif *avp = (void *)vif->drv_priv;
+        struct ath9k_htc_target_vif hvif;
+        int ret = 0;
+        u8 cmd_rsp;
+
+        ath_print(common, ATH_DBG_CONFIG, "Detach Interface\n");
+
+        mutex_lock(&priv->mutex);
+
+        memset(&hvif, 0, sizeof(struct ath9k_htc_target_vif));
+        memcpy(&hvif.myaddr, vif->addr, ETH_ALEN);
+        hvif.index = avp->index;
+        WMI_CMD_BUF(WMI_VAP_REMOVE_CMDID, &hvif);
+        priv->nvifs--;
+
+        ath9k_htc_remove_station(priv, vif, NULL);
+
+        if (vif->type == NL80211_IFTYPE_ADHOC) {
+                spin_lock_bh(&priv->beacon_lock);
+                if (priv->beacon)
+                        dev_kfree_skb_any(priv->beacon);
+                priv->beacon = NULL;
+                spin_unlock_bh(&priv->beacon_lock);
+        }
+
+        priv->vif = NULL;
+
+        mutex_unlock(&priv->mutex);
+}
+
+static int ath9k_htc_config(struct ieee80211_hw *hw, u32 changed)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ieee80211_conf *conf = &hw->conf;
+
+        mutex_lock(&priv->mutex);
+
+        if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
+                struct ieee80211_channel *curchan = hw->conf.channel;
+                int pos = curchan->hw_value;
+                bool is_cw40 = false;
+
+                ath_print(common, ATH_DBG_CONFIG, "Set channel: %d MHz\n",
+                          curchan->center_freq);
+
+                if (check_rc_update(hw, &is_cw40))
+                        ath9k_htc_rc_update(priv, is_cw40);
+
+                ath9k_cmn_update_ichannel(hw, &priv->ah->channels[pos]);
+
+                if (ath9k_htc_set_channel(priv, hw, &priv->ah->channels[pos]) < 0) {
+                        ath_print(common, ATH_DBG_FATAL,
+                                  "Unable to set channel\n");
+                        mutex_unlock(&priv->mutex);
+                        return -EINVAL;
+                }
+
+        }
+
+        if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
+                if (conf->flags & IEEE80211_CONF_MONITOR) {
+                        if (ath9k_htc_add_monitor_interface(priv))
+                                ath_print(common, ATH_DBG_FATAL,
+                                          "Failed to set monitor mode\n");
+                        else
+                                ath_print(common, ATH_DBG_CONFIG,
+                                          "HW opmode set to Monitor mode\n");
+                }
+        }
+
+        mutex_unlock(&priv->mutex);
+
+        return 0;
+}
+
+#define SUPPORTED_FILTERS                       \
+        (FIF_PROMISC_IN_BSS |                   \
+        FIF_ALLMULTI |                          \
+        FIF_CONTROL |                           \
+        FIF_PSPOLL |                            \
+        FIF_OTHER_BSS |                         \
+        FIF_BCN_PRBRESP_PROMISC |               \
+        FIF_FCSFAIL)
+
+static void ath9k_htc_configure_filter(struct ieee80211_hw *hw,
+                                       unsigned int changed_flags,
+                                       unsigned int *total_flags,
+                                       u64 multicast)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        u32 rfilt;
+
+        mutex_lock(&priv->mutex);
+
+        changed_flags &= SUPPORTED_FILTERS;
+        *total_flags &= SUPPORTED_FILTERS;
+
+        priv->rxfilter = *total_flags;
+        rfilt = ath9k_cmn_calcrxfilter(hw, priv->ah, priv->rxfilter);
+        ath9k_hw_setrxfilter(priv->ah, rfilt);
+
+        ath_print(ath9k_hw_common(priv->ah), ATH_DBG_CONFIG,
+                  "Set HW RX filter: 0x%x\n", rfilt);
+
+        mutex_unlock(&priv->mutex);
+}
+
+static void ath9k_htc_sta_notify(struct ieee80211_hw *hw,
+                                 struct ieee80211_vif *vif,
+                                 enum sta_notify_cmd cmd,
+                                 struct ieee80211_sta *sta)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        int ret;
+
+        switch (cmd) {
+        case STA_NOTIFY_ADD:
+                ret = ath9k_htc_add_station(priv, vif, sta);
+                if (!ret)
+                        ath9k_htc_init_rate(priv, vif, sta);
+                break;
+        case STA_NOTIFY_REMOVE:
+                ath9k_htc_remove_station(priv, vif, sta);
+                break;
+        default:
+                break;
+        }
+}
+
+static int ath9k_htc_conf_tx(struct ieee80211_hw *hw, u16 queue,
+                             const struct ieee80211_tx_queue_params *params)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct ath9k_tx_queue_info qi;
+        int ret = 0, qnum;
+
+        if (queue >= WME_NUM_AC)
+                return 0;
+
+        mutex_lock(&priv->mutex);
+
+        memset(&qi, 0, sizeof(struct ath9k_tx_queue_info));
+
+        qi.tqi_aifs = params->aifs;
+        qi.tqi_cwmin = params->cw_min;
+        qi.tqi_cwmax = params->cw_max;
+        qi.tqi_burstTime = params->txop;
+
+        qnum = get_hw_qnum(queue, priv->hwq_map);
+
+        ath_print(common, ATH_DBG_CONFIG,
+                  "Configure tx [queue/hwq] [%d/%d],  "
+                  "aifs: %d, cw_min: %d, cw_max: %d, txop: %d\n",
+                  queue, qnum, params->aifs, params->cw_min,
+                  params->cw_max, params->txop);
+
+        ret = ath_htc_txq_update(priv, qnum, &qi);
+        if (ret)
+                ath_print(common, ATH_DBG_FATAL, "TXQ Update failed\n");
+
+        mutex_unlock(&priv->mutex);
+
+        return ret;
+}
+
+static int ath9k_htc_set_key(struct ieee80211_hw *hw,
+                             enum set_key_cmd cmd,
+                             struct ieee80211_vif *vif,
+                             struct ieee80211_sta *sta,
+                             struct ieee80211_key_conf *key)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        int ret = 0;
+
+        if (htc_modparam_nohwcrypt)
+                return -ENOSPC;
+
+        mutex_lock(&priv->mutex);
+        ath_print(common, ATH_DBG_CONFIG, "Set HW Key\n");
+
+        switch (cmd) {
+        case SET_KEY:
+                ret = ath9k_cmn_key_config(common, vif, sta, key);
+                if (ret >= 0) {
+                        key->hw_key_idx = ret;
+                        /* push IV and Michael MIC generation to stack */
+                        key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
+                        if (key->alg == ALG_TKIP)
+                                key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
+                        if (priv->ah->sw_mgmt_crypto && key->alg == ALG_CCMP)
+                                key->flags |= IEEE80211_KEY_FLAG_SW_MGMT;
+                        ret = 0;
+                }
+                break;
+        case DISABLE_KEY:
+                ath9k_cmn_key_delete(common, key);
+                break;
+        default:
+                ret = -EINVAL;
+        }
+
+        mutex_unlock(&priv->mutex);
+
+        return ret;
+}
+
+static void ath9k_htc_bss_info_changed(struct ieee80211_hw *hw,
+                                       struct ieee80211_vif *vif,
+                                       struct ieee80211_bss_conf *bss_conf,
+                                       u32 changed)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+
+        mutex_lock(&priv->mutex);
+
+        if (changed & BSS_CHANGED_ASSOC) {
+                common->curaid = bss_conf->assoc ?
+                                 bss_conf->aid : 0;
+                ath_print(common, ATH_DBG_CONFIG, "BSS Changed ASSOC %d\n",
+                        bss_conf->assoc);
+
+                if (bss_conf->assoc) {
+                        priv->op_flags |= OP_ASSOCIATED;
+                        ath_start_ani(priv);
+                } else {
+                        priv->op_flags &= ~OP_ASSOCIATED;
+                        cancel_delayed_work_sync(&priv->ath9k_ani_work);
+                }
+        }
+
+        if (changed & BSS_CHANGED_BSSID) {
+                /* Set BSSID */
+                memcpy(common->curbssid, bss_conf->bssid, ETH_ALEN);
+                ath9k_hw_write_associd(ah);
+
+                ath_print(common, ATH_DBG_CONFIG,
+                          "BSSID: %pM aid: 0x%x\n",
+                          common->curbssid, common->curaid);
+        }
+
+        if ((changed & BSS_CHANGED_BEACON_INT) ||
+            (changed & BSS_CHANGED_BEACON) ||
+            ((changed & BSS_CHANGED_BEACON_ENABLED) &&
+            bss_conf->enable_beacon)) {
+                priv->op_flags |= OP_ENABLE_BEACON;
+                ath9k_htc_beacon_config(priv, vif, bss_conf);
+        }
+
+        if (changed & BSS_CHANGED_BEACON)
+                ath9k_htc_beacon_update(priv, vif);
+
+        if ((changed & BSS_CHANGED_BEACON_ENABLED) &&
+            !bss_conf->enable_beacon) {
+                priv->op_flags &= ~OP_ENABLE_BEACON;
+                ath9k_htc_beacon_config(priv, vif, bss_conf);
+        }
+
+        if (changed & BSS_CHANGED_ERP_PREAMBLE) {
+                ath_print(common, ATH_DBG_CONFIG, "BSS Changed PREAMBLE %d\n",
+                          bss_conf->use_short_preamble);
+                if (bss_conf->use_short_preamble)
+                        priv->op_flags |= OP_PREAMBLE_SHORT;
+                else
+                        priv->op_flags &= ~OP_PREAMBLE_SHORT;
+        }
+
+        if (changed & BSS_CHANGED_ERP_CTS_PROT) {
+                ath_print(common, ATH_DBG_CONFIG, "BSS Changed CTS PROT %d\n",
+                          bss_conf->use_cts_prot);
+                if (bss_conf->use_cts_prot &&
+                    hw->conf.channel->band != IEEE80211_BAND_5GHZ)
+                        priv->op_flags |= OP_PROTECT_ENABLE;
+                else
+                        priv->op_flags &= ~OP_PROTECT_ENABLE;
+        }
+
+        if (changed & BSS_CHANGED_ERP_SLOT) {
+                if (bss_conf->use_short_slot)
+                        ah->slottime = 9;
+                else
+                        ah->slottime = 20;
+
+                ath9k_hw_init_global_settings(ah);
+        }
+
+        mutex_unlock(&priv->mutex);
+}
+
+static u64 ath9k_htc_get_tsf(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        u64 tsf;
+
+        mutex_lock(&priv->mutex);
+        tsf = ath9k_hw_gettsf64(priv->ah);
+        mutex_unlock(&priv->mutex);
+
+        return tsf;
+}
+
+static void ath9k_htc_set_tsf(struct ieee80211_hw *hw, u64 tsf)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        mutex_lock(&priv->mutex);
+        ath9k_hw_settsf64(priv->ah, tsf);
+        mutex_unlock(&priv->mutex);
+}
+
+static void ath9k_htc_reset_tsf(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        mutex_lock(&priv->mutex);
+        ath9k_hw_reset_tsf(priv->ah);
+        mutex_unlock(&priv->mutex);
+}
+
+static int ath9k_htc_ampdu_action(struct ieee80211_hw *hw,
+                                  struct ieee80211_vif *vif,
+                                  enum ieee80211_ampdu_mlme_action action,
+                                  struct ieee80211_sta *sta,
+                                  u16 tid, u16 *ssn)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+        struct ath9k_htc_aggr_work *work = &priv->aggr_work;
+        struct ath9k_htc_sta *ista;
+
+        switch (action) {
+        case IEEE80211_AMPDU_RX_START:
+                break;
+        case IEEE80211_AMPDU_RX_STOP:
+                break;
+        case IEEE80211_AMPDU_TX_START:
+        case IEEE80211_AMPDU_TX_STOP:
+                if (!(priv->op_flags & OP_TXAGGR))
+                        return -ENOTSUPP;
+                memcpy(work->sta_addr, sta->addr, ETH_ALEN);
+                work->hw = hw;
+                work->vif = vif;
+                work->action = action;
+                work->tid = tid;
+                ieee80211_queue_delayed_work(hw, &priv->ath9k_aggr_work, 0);
+                break;
+        case IEEE80211_AMPDU_TX_OPERATIONAL:
+                ista = (struct ath9k_htc_sta *) sta->drv_priv;
+                ista->tid_state[tid] = AGGR_OPERATIONAL;
+                break;
+        default:
+                ath_print(ath9k_hw_common(priv->ah), ATH_DBG_FATAL,
+                          "Unknown AMPDU action\n");
+        }
+
+        return 0;
+}
+
+static void ath9k_htc_sw_scan_start(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        mutex_lock(&priv->mutex);
+        spin_lock_bh(&priv->beacon_lock);
+        priv->op_flags |= OP_SCANNING;
+        spin_unlock_bh(&priv->beacon_lock);
+        cancel_delayed_work_sync(&priv->ath9k_ani_work);
+        mutex_unlock(&priv->mutex);
+}
+
+static void ath9k_htc_sw_scan_complete(struct ieee80211_hw *hw)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        mutex_lock(&priv->mutex);
+        spin_lock_bh(&priv->beacon_lock);
+        priv->op_flags &= ~OP_SCANNING;
+        spin_unlock_bh(&priv->beacon_lock);
+        priv->op_flags |= OP_FULL_RESET;
+        ath_start_ani(priv);
+        mutex_unlock(&priv->mutex);
+}
+
+static int ath9k_htc_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
+{
+        return 0;
+}
+
+static void ath9k_htc_set_coverage_class(struct ieee80211_hw *hw,
+                                         u8 coverage_class)
+{
+        struct ath9k_htc_priv *priv = hw->priv;
+
+        mutex_lock(&priv->mutex);
+        priv->ah->coverage_class = coverage_class;
+        ath9k_hw_init_global_settings(priv->ah);
+        mutex_unlock(&priv->mutex);
+}
+
+struct ieee80211_ops ath9k_htc_ops = {
+        .tx                 = ath9k_htc_tx,
+        .start              = ath9k_htc_start,
+        .stop               = ath9k_htc_stop,
+        .add_interface      = ath9k_htc_add_interface,
+        .remove_interface   = ath9k_htc_remove_interface,
+        .config             = ath9k_htc_config,
+        .configure_filter   = ath9k_htc_configure_filter,
+        .sta_notify         = ath9k_htc_sta_notify,
+        .conf_tx            = ath9k_htc_conf_tx,
+        .bss_info_changed   = ath9k_htc_bss_info_changed,
+        .set_key            = ath9k_htc_set_key,
+        .get_tsf            = ath9k_htc_get_tsf,
+        .set_tsf            = ath9k_htc_set_tsf,
+        .reset_tsf          = ath9k_htc_reset_tsf,
+        .ampdu_action       = ath9k_htc_ampdu_action,
+        .sw_scan_start      = ath9k_htc_sw_scan_start,
+        .sw_scan_complete   = ath9k_htc_sw_scan_complete,
+        .set_rts_threshold  = ath9k_htc_set_rts_threshold,
+        .rfkill_poll        = ath9k_htc_rfkill_poll_state,
+        .set_coverage_class = ath9k_htc_set_coverage_class,
+};
diff --git a/drivers/net/wireless/ath/ath9k/htc_drv_txrx.c b/drivers/net/wireless/ath/ath9k/htc_drv_txrx.c
new file mode 100644
index 000000000000..ac66cf0b2d53
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_drv_txrx.c
@@ -0,0 +1,604 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+/******/
+/* TX */
+/******/
+
+int get_hw_qnum(u16 queue, int *hwq_map)
+{
+        switch (queue) {
+        case 0:
+                return hwq_map[ATH9K_WME_AC_VO];
+        case 1:
+                return hwq_map[ATH9K_WME_AC_VI];
+        case 2:
+                return hwq_map[ATH9K_WME_AC_BE];
+        case 3:
+                return hwq_map[ATH9K_WME_AC_BK];
+        default:
+                return hwq_map[ATH9K_WME_AC_BE];
+        }
+}
+
+int ath_htc_txq_update(struct ath9k_htc_priv *priv, int qnum,
+                       struct ath9k_tx_queue_info *qinfo)
+{
+        struct ath_hw *ah = priv->ah;
+        int error = 0;
+        struct ath9k_tx_queue_info qi;
+
+        ath9k_hw_get_txq_props(ah, qnum, &qi);
+
+        qi.tqi_aifs = qinfo->tqi_aifs;
+        qi.tqi_cwmin = qinfo->tqi_cwmin / 2; /* XXX */
+        qi.tqi_cwmax = qinfo->tqi_cwmax;
+        qi.tqi_burstTime = qinfo->tqi_burstTime;
+        qi.tqi_readyTime = qinfo->tqi_readyTime;
+
+        if (!ath9k_hw_set_txq_props(ah, qnum, &qi)) {
+                ath_print(ath9k_hw_common(ah), ATH_DBG_FATAL,
+                          "Unable to update hardware queue %u!\n", qnum);
+                error = -EIO;
+        } else {
+                ath9k_hw_resettxqueue(ah, qnum);
+        }
+
+        return error;
+}
+
+int ath9k_htc_tx_start(struct ath9k_htc_priv *priv, struct sk_buff *skb)
+{
+        struct ieee80211_hdr *hdr;
+        struct ieee80211_tx_info *tx_info = IEEE80211_SKB_CB(skb);
+        struct ieee80211_sta *sta = tx_info->control.sta;
+        struct ath9k_htc_sta *ista;
+        struct ath9k_htc_vif *avp;
+        struct ath9k_htc_tx_ctl tx_ctl;
+        enum htc_endpoint_id epid;
+        u16 qnum, hw_qnum;
+        __le16 fc;
+        u8 *tx_fhdr;
+        u8 sta_idx;
+
+        hdr = (struct ieee80211_hdr *) skb->data;
+        fc = hdr->frame_control;
+
+        avp = (struct ath9k_htc_vif *) tx_info->control.vif->drv_priv;
+        if (sta) {
+                ista = (struct ath9k_htc_sta *) sta->drv_priv;
+                sta_idx = ista->index;
+        } else {
+                sta_idx = 0;
+        }
+
+        memset(&tx_ctl, 0, sizeof(struct ath9k_htc_tx_ctl));
+
+        if (ieee80211_is_data(fc)) {
+                struct tx_frame_hdr tx_hdr;
+                u8 *qc;
+
+                memset(&tx_hdr, 0, sizeof(struct tx_frame_hdr));
+
+                tx_hdr.node_idx = sta_idx;
+                tx_hdr.vif_idx = avp->index;
+
+                if (tx_info->flags & IEEE80211_TX_CTL_AMPDU) {
+                        tx_ctl.type = ATH9K_HTC_AMPDU;
+                        tx_hdr.data_type = ATH9K_HTC_AMPDU;
+                } else {
+                        tx_ctl.type = ATH9K_HTC_NORMAL;
+                        tx_hdr.data_type = ATH9K_HTC_NORMAL;
+                }
+
+                if (ieee80211_is_data(fc)) {
+                        qc = ieee80211_get_qos_ctl(hdr);
+                        tx_hdr.tidno = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
+                }
+
+                /* Check for RTS protection */
+                if (priv->hw->wiphy->rts_threshold != (u32) -1)
+                        if (skb->len > priv->hw->wiphy->rts_threshold)
+                                tx_hdr.flags |= ATH9K_HTC_TX_RTSCTS;
+
+                /* CTS-to-self */
+                if (!(tx_hdr.flags & ATH9K_HTC_TX_RTSCTS) &&
+                    (priv->op_flags & OP_PROTECT_ENABLE))
+                        tx_hdr.flags |= ATH9K_HTC_TX_CTSONLY;
+
+                tx_hdr.key_type = ath9k_cmn_get_hw_crypto_keytype(skb);
+                if (tx_hdr.key_type == ATH9K_KEY_TYPE_CLEAR)
+                        tx_hdr.keyix = (u8) ATH9K_TXKEYIX_INVALID;
+                else
+                        tx_hdr.keyix = tx_info->control.hw_key->hw_key_idx;
+
+                tx_fhdr = skb_push(skb, sizeof(tx_hdr));
+                memcpy(tx_fhdr, (u8 *) &tx_hdr, sizeof(tx_hdr));
+
+                qnum = skb_get_queue_mapping(skb);
+                hw_qnum = get_hw_qnum(qnum, priv->hwq_map);
+
+                switch (hw_qnum) {
+                case 0:
+                        epid = priv->data_be_ep;
+                        break;
+                case 2:
+                        epid = priv->data_vi_ep;
+                        break;
+                case 3:
+                        epid = priv->data_vo_ep;
+                        break;
+                case 1:
+                default:
+                        epid = priv->data_bk_ep;
+                        break;
+                }
+        } else {
+                struct tx_mgmt_hdr mgmt_hdr;
+
+                memset(&mgmt_hdr, 0, sizeof(struct tx_mgmt_hdr));
+
+                tx_ctl.type = ATH9K_HTC_NORMAL;
+
+                mgmt_hdr.node_idx = sta_idx;
+                mgmt_hdr.vif_idx = avp->index;
+                mgmt_hdr.tidno = 0;
+                mgmt_hdr.flags = 0;
+
+                mgmt_hdr.key_type = ath9k_cmn_get_hw_crypto_keytype(skb);
+                if (mgmt_hdr.key_type == ATH9K_KEY_TYPE_CLEAR)
+                        mgmt_hdr.keyix = (u8) ATH9K_TXKEYIX_INVALID;
+                else
+                        mgmt_hdr.keyix = tx_info->control.hw_key->hw_key_idx;
+
+                tx_fhdr = skb_push(skb, sizeof(mgmt_hdr));
+                memcpy(tx_fhdr, (u8 *) &mgmt_hdr, sizeof(mgmt_hdr));
+                epid = priv->mgmt_ep;
+        }
+
+        return htc_send(priv->htc, skb, epid, &tx_ctl);
+}
+
+void ath9k_tx_tasklet(unsigned long data)
+{
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *)data;
+        struct ieee80211_sta *sta;
+        struct ieee80211_hdr *hdr;
+        struct ieee80211_tx_info *tx_info;
+        struct sk_buff *skb = NULL;
+        __le16 fc;
+
+        while ((skb = skb_dequeue(&priv->tx_queue)) != NULL) {
+
+                hdr = (struct ieee80211_hdr *) skb->data;
+                fc = hdr->frame_control;
+                tx_info = IEEE80211_SKB_CB(skb);
+                sta = tx_info->control.sta;
+
+                rcu_read_lock();
+
+                if (sta && conf_is_ht(&priv->hw->conf) &&
+                    (priv->op_flags & OP_TXAGGR)
+                    && !(skb->protocol == cpu_to_be16(ETH_P_PAE))) {
+                        if (ieee80211_is_data_qos(fc)) {
+                                u8 *qc, tid;
+                                struct ath9k_htc_sta *ista;
+
+                                qc = ieee80211_get_qos_ctl(hdr);
+                                tid = qc[0] & 0xf;
+                                ista = (struct ath9k_htc_sta *)sta->drv_priv;
+
+                                if ((tid < ATH9K_HTC_MAX_TID) &&
+                                    ista->tid_state[tid] == AGGR_STOP) {
+                                        ieee80211_start_tx_ba_session(sta, tid);
+                                        ista->tid_state[tid] = AGGR_PROGRESS;
+                                }
+                        }
+                }
+
+                rcu_read_unlock();
+
+                memset(&tx_info->status, 0, sizeof(tx_info->status));
+                ieee80211_tx_status(priv->hw, skb);
+        }
+}
+
+void ath9k_htc_txep(void *drv_priv, struct sk_buff *skb,
+                    enum htc_endpoint_id ep_id, bool txok)
+{
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *) drv_priv;
+        struct ieee80211_tx_info *tx_info;
+
+        if (!skb)
+                return;
+
+        if (ep_id == priv->mgmt_ep)
+                skb_pull(skb, sizeof(struct tx_mgmt_hdr));
+        else
+                /* TODO: Check for cab/uapsd/data */
+                skb_pull(skb, sizeof(struct tx_frame_hdr));
+
+        tx_info = IEEE80211_SKB_CB(skb);
+
+        if (txok)
+                tx_info->flags |= IEEE80211_TX_STAT_ACK;
+
+        skb_queue_tail(&priv->tx_queue, skb);
+        tasklet_schedule(&priv->tx_tasklet);
+}
+
+int ath9k_tx_init(struct ath9k_htc_priv *priv)
+{
+        skb_queue_head_init(&priv->tx_queue);
+        return 0;
+}
+
+void ath9k_tx_cleanup(struct ath9k_htc_priv *priv)
+{
+
+}
+
+bool ath9k_htc_txq_setup(struct ath9k_htc_priv *priv,
+                         enum ath9k_tx_queue_subtype subtype)
+{
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_tx_queue_info qi;
+        int qnum;
+
+        memset(&qi, 0, sizeof(qi));
+
+        qi.tqi_subtype = subtype;
+        qi.tqi_aifs = ATH9K_TXQ_USEDEFAULT;
+        qi.tqi_cwmin = ATH9K_TXQ_USEDEFAULT;
+        qi.tqi_cwmax = ATH9K_TXQ_USEDEFAULT;
+        qi.tqi_physCompBuf = 0;
+        qi.tqi_qflags = TXQ_FLAG_TXEOLINT_ENABLE | TXQ_FLAG_TXDESCINT_ENABLE;
+
+        qnum = ath9k_hw_setuptxqueue(priv->ah, ATH9K_TX_QUEUE_DATA, &qi);
+        if (qnum == -1)
+                return false;
+
+        if (qnum >= ARRAY_SIZE(priv->hwq_map)) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "qnum %u out of range, max %u!\n",
+                          qnum, (unsigned int)ARRAY_SIZE(priv->hwq_map));
+                ath9k_hw_releasetxqueue(ah, qnum);
+                return false;
+        }
+
+        priv->hwq_map[subtype] = qnum;
+        return true;
+}
+
+/******/
+/* RX */
+/******/
+
+void ath9k_host_rx_init(struct ath9k_htc_priv *priv)
+{
+        ath9k_hw_rxena(priv->ah);
+        ath9k_cmn_opmode_init(priv->hw, priv->ah, priv->rxfilter);
+        ath9k_hw_startpcureceive(priv->ah);
+        priv->rx.last_rssi = ATH_RSSI_DUMMY_MARKER;
+}
+
+static void ath9k_process_rate(struct ieee80211_hw *hw,
+                               struct ieee80211_rx_status *rxs,
+                               u8 rx_rate, u8 rs_flags)
+{
+        struct ieee80211_supported_band *sband;
+        enum ieee80211_band band;
+        unsigned int i = 0;
+
+        if (rx_rate & 0x80) {
+                /* HT rate */
+                rxs->flag |= RX_FLAG_HT;
+                if (rs_flags & ATH9K_RX_2040)
+                        rxs->flag |= RX_FLAG_40MHZ;
+                if (rs_flags & ATH9K_RX_GI)
+                        rxs->flag |= RX_FLAG_SHORT_GI;
+                rxs->rate_idx = rx_rate & 0x7f;
+                return;
+        }
+
+        band = hw->conf.channel->band;
+        sband = hw->wiphy->bands[band];
+
+        for (i = 0; i < sband->n_bitrates; i++) {
+                if (sband->bitrates[i].hw_value == rx_rate) {
+                        rxs->rate_idx = i;
+                        return;
+                }
+                if (sband->bitrates[i].hw_value_short == rx_rate) {
+                        rxs->rate_idx = i;
+                        rxs->flag |= RX_FLAG_SHORTPRE;
+                        return;
+                }
+        }
+
+}
+
+static bool ath9k_rx_prepare(struct ath9k_htc_priv *priv,
+                             struct ath9k_htc_rxbuf *rxbuf,
+                             struct ieee80211_rx_status *rx_status)
+
+{
+        struct ieee80211_hdr *hdr;
+        struct ieee80211_hw *hw = priv->hw;
+        struct sk_buff *skb = rxbuf->skb;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        int hdrlen, padpos, padsize;
+        int last_rssi = ATH_RSSI_DUMMY_MARKER;
+        __le16 fc;
+
+        hdr = (struct ieee80211_hdr *)skb->data;
+        fc = hdr->frame_control;
+        hdrlen = ieee80211_get_hdrlen_from_skb(skb);
+
+        padpos = ath9k_cmn_padpos(fc);
+
+        padsize = padpos & 3;
+        if (padsize && skb->len >= padpos+padsize) {
+                memmove(skb->data + padsize, skb->data, padpos);
+                skb_pull(skb, padsize);
+        }
+
+        memset(rx_status, 0, sizeof(struct ieee80211_rx_status));
+
+        if (rxbuf->rxstatus.rs_status != 0) {
+                if (rxbuf->rxstatus.rs_status & ATH9K_RXERR_CRC)
+                        rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
+                if (rxbuf->rxstatus.rs_status & ATH9K_RXERR_PHY)
+                        goto rx_next;
+
+                if (rxbuf->rxstatus.rs_status & ATH9K_RXERR_DECRYPT) {
+                        /* FIXME */
+                } else if (rxbuf->rxstatus.rs_status & ATH9K_RXERR_MIC) {
+                        if (ieee80211_is_ctl(fc))
+                                /*
+                                 * Sometimes, we get invalid
+                                 * MIC failures on valid control frames.
+                                 * Remove these mic errors.
+                                 */
+                                rxbuf->rxstatus.rs_status &= ~ATH9K_RXERR_MIC;
+                        else
+                                rx_status->flag |= RX_FLAG_MMIC_ERROR;
+                }
+
+                /*
+                 * Reject error frames with the exception of
+                 * decryption and MIC failures. For monitor mode,
+                 * we also ignore the CRC error.
+                 */
+                if (priv->ah->opmode == NL80211_IFTYPE_MONITOR) {
+                        if (rxbuf->rxstatus.rs_status &
+                            ~(ATH9K_RXERR_DECRYPT | ATH9K_RXERR_MIC |
+                              ATH9K_RXERR_CRC))
+                                goto rx_next;
+                } else {
+                        if (rxbuf->rxstatus.rs_status &
+                            ~(ATH9K_RXERR_DECRYPT | ATH9K_RXERR_MIC)) {
+                                goto rx_next;
+                        }
+                }
+        }
+
+        if (!(rxbuf->rxstatus.rs_status & ATH9K_RXERR_DECRYPT)) {
+                u8 keyix;
+                keyix = rxbuf->rxstatus.rs_keyix;
+                if (keyix != ATH9K_RXKEYIX_INVALID) {
+                        rx_status->flag |= RX_FLAG_DECRYPTED;
+                } else if (ieee80211_has_protected(fc) &&
+                           skb->len >= hdrlen + 4) {
+                        keyix = skb->data[hdrlen + 3] >> 6;
+                        if (test_bit(keyix, common->keymap))
+                                rx_status->flag |= RX_FLAG_DECRYPTED;
+                }
+        }
+
+        ath9k_process_rate(hw, rx_status, rxbuf->rxstatus.rs_rate,
+                           rxbuf->rxstatus.rs_flags);
+
+        if (priv->op_flags & OP_ASSOCIATED) {
+                if (rxbuf->rxstatus.rs_rssi != ATH9K_RSSI_BAD &&
+                    !rxbuf->rxstatus.rs_moreaggr)
+                        ATH_RSSI_LPF(priv->rx.last_rssi,
+                                     rxbuf->rxstatus.rs_rssi);
+
+                last_rssi = priv->rx.last_rssi;
+
+                if (likely(last_rssi != ATH_RSSI_DUMMY_MARKER))
+                        rxbuf->rxstatus.rs_rssi = ATH_EP_RND(last_rssi,
+                                                             ATH_RSSI_EP_MULTIPLIER);
+
+                if (rxbuf->rxstatus.rs_rssi < 0)
+                        rxbuf->rxstatus.rs_rssi = 0;
+
+                if (ieee80211_is_beacon(fc))
+                        priv->ah->stats.avgbrssi = rxbuf->rxstatus.rs_rssi;
+        }
+
+        rx_status->mactime = rxbuf->rxstatus.rs_tstamp;
+        rx_status->band = hw->conf.channel->band;
+        rx_status->freq = hw->conf.channel->center_freq;
+        rx_status->signal =  rxbuf->rxstatus.rs_rssi + ATH_DEFAULT_NOISE_FLOOR;
+        rx_status->antenna = rxbuf->rxstatus.rs_antenna;
+        rx_status->flag |= RX_FLAG_TSFT;
+
+        return true;
+
+rx_next:
+        return false;
+}
+
+/*
+ * FIXME: Handle FLUSH later on.
+ */
+void ath9k_rx_tasklet(unsigned long data)
+{
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *)data;
+        struct ath9k_htc_rxbuf *rxbuf = NULL, *tmp_buf = NULL;
+        struct ieee80211_rx_status rx_status;
+        struct sk_buff *skb;
+        unsigned long flags;
+
+
+        do {
+                spin_lock_irqsave(&priv->rx.rxbuflock, flags);
+                list_for_each_entry(tmp_buf, &priv->rx.rxbuf, list) {
+                        if (tmp_buf->in_process) {
+                                rxbuf = tmp_buf;
+                                break;
+                        }
+                }
+
+                if (rxbuf == NULL) {
+                        spin_unlock_irqrestore(&priv->rx.rxbuflock, flags);
+                        break;
+                }
+
+                if (!rxbuf->skb)
+                        goto requeue;
+
+                if (!ath9k_rx_prepare(priv, rxbuf, &rx_status)) {
+                        dev_kfree_skb_any(rxbuf->skb);
+                        goto requeue;
+                }
+
+                memcpy(IEEE80211_SKB_RXCB(rxbuf->skb), &rx_status,
+                       sizeof(struct ieee80211_rx_status));
+                skb = rxbuf->skb;
+                spin_unlock_irqrestore(&priv->rx.rxbuflock, flags);
+
+                ieee80211_rx(priv->hw, skb);
+
+                spin_lock_irqsave(&priv->rx.rxbuflock, flags);
+requeue:
+                rxbuf->in_process = false;
+                rxbuf->skb = NULL;
+                list_move_tail(&rxbuf->list, &priv->rx.rxbuf);
+                rxbuf = NULL;
+                spin_unlock_irqrestore(&priv->rx.rxbuflock, flags);
+        } while (1);
+
+}
+
+void ath9k_htc_rxep(void *drv_priv, struct sk_buff *skb,
+                    enum htc_endpoint_id ep_id)
+{
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *)drv_priv;
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_rxbuf *rxbuf = NULL, *tmp_buf = NULL;
+        struct ath_htc_rx_status *rxstatus;
+        u32 len = 0;
+
+        spin_lock(&priv->rx.rxbuflock);
+        list_for_each_entry(tmp_buf, &priv->rx.rxbuf, list) {
+                if (!tmp_buf->in_process) {
+                        rxbuf = tmp_buf;
+                        break;
+                }
+        }
+        spin_unlock(&priv->rx.rxbuflock);
+
+        if (rxbuf == NULL) {
+                ath_print(common, ATH_DBG_ANY,
+                          "No free RX buffer\n");
+                goto err;
+        }
+
+        len = skb->len;
+        if (len <= HTC_RX_FRAME_HEADER_SIZE) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Corrupted RX frame, dropping\n");
+                goto err;
+        }
+
+        rxstatus = (struct ath_htc_rx_status *)skb->data;
+
+        rxstatus->rs_tstamp = be64_to_cpu(rxstatus->rs_tstamp);
+        rxstatus->rs_datalen = be16_to_cpu(rxstatus->rs_datalen);
+        rxstatus->evm0 = be32_to_cpu(rxstatus->evm0);
+        rxstatus->evm1 = be32_to_cpu(rxstatus->evm1);
+        rxstatus->evm2 = be32_to_cpu(rxstatus->evm2);
+
+        if (rxstatus->rs_datalen - (len - HTC_RX_FRAME_HEADER_SIZE) != 0) {
+                ath_print(common, ATH_DBG_FATAL,
+                          "Corrupted RX data len, dropping "
+                          "(epid: %d, dlen: %d, skblen: %d)\n",
+                          ep_id, rxstatus->rs_datalen, len);
+                goto err;
+        }
+
+        spin_lock(&priv->rx.rxbuflock);
+        memcpy(&rxbuf->rxstatus, rxstatus, HTC_RX_FRAME_HEADER_SIZE);
+        skb_pull(skb, HTC_RX_FRAME_HEADER_SIZE);
+        skb->len = rxstatus->rs_datalen;
+        rxbuf->skb = skb;
+        rxbuf->in_process = true;
+        spin_unlock(&priv->rx.rxbuflock);
+
+        tasklet_schedule(&priv->rx_tasklet);
+        return;
+err:
+        dev_kfree_skb_any(skb);
+        return;
+}
+
+/* FIXME: Locking for cleanup/init */
+
+void ath9k_rx_cleanup(struct ath9k_htc_priv *priv)
+{
+        struct ath9k_htc_rxbuf *rxbuf, *tbuf;
+
+        list_for_each_entry_safe(rxbuf, tbuf, &priv->rx.rxbuf, list) {
+                list_del(&rxbuf->list);
+                if (rxbuf->skb)
+                        dev_kfree_skb_any(rxbuf->skb);
+                kfree(rxbuf);
+        }
+}
+
+int ath9k_rx_init(struct ath9k_htc_priv *priv)
+{
+        struct ath_hw *ah = priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        struct ath9k_htc_rxbuf *rxbuf;
+        int i = 0;
+
+        INIT_LIST_HEAD(&priv->rx.rxbuf);
+        spin_lock_init(&priv->rx.rxbuflock);
+
+        for (i = 0; i < ATH9K_HTC_RXBUF; i++) {
+                rxbuf = kzalloc(sizeof(struct ath9k_htc_rxbuf), GFP_KERNEL);
+                if (rxbuf == NULL) {
+                        ath_print(common, ATH_DBG_FATAL,
+                                  "Unable to allocate RX buffers\n");
+                        goto err;
+                }
+                list_add_tail(&rxbuf->list, &priv->rx.rxbuf);
+        }
+
+        return 0;
+
+err:
+        ath9k_rx_cleanup(priv);
+        return -ENOMEM;
+}
diff --git a/drivers/net/wireless/ath/ath9k/htc_hst.c b/drivers/net/wireless/ath/ath9k/htc_hst.c
new file mode 100644
index 000000000000..9a48999d0979
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_hst.c
@@ -0,0 +1,463 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+static int htc_issue_send(struct htc_target *target, struct sk_buff* skb,
+                          u16 len, u8 flags, u8 epid,
+                          struct ath9k_htc_tx_ctl *tx_ctl)
+{
+        struct htc_frame_hdr *hdr;
+        struct htc_endpoint *endpoint = &target->endpoint[epid];
+        int status;
+
+        hdr = (struct htc_frame_hdr *)
+                skb_push(skb, sizeof(struct htc_frame_hdr));
+        hdr->endpoint_id = epid;
+        hdr->flags = flags;
+        hdr->payload_len = cpu_to_be16(len);
+
+        status = target->hif->send(target->hif_dev, endpoint->ul_pipeid, skb,
+                                   tx_ctl);
+        return status;
+}
+
+static struct htc_endpoint *get_next_avail_ep(struct htc_endpoint *endpoint)
+{
+        enum htc_endpoint_id avail_epid;
+
+        for (avail_epid = ENDPOINT_MAX; avail_epid > ENDPOINT0; avail_epid--)
+                if (endpoint[avail_epid].service_id == 0)
+                        return &endpoint[avail_epid];
+        return NULL;
+}
+
+static u8 service_to_ulpipe(u16 service_id)
+{
+        switch (service_id) {
+        case WMI_CONTROL_SVC:
+                return 4;
+        case WMI_BEACON_SVC:
+        case WMI_CAB_SVC:
+        case WMI_UAPSD_SVC:
+        case WMI_MGMT_SVC:
+        case WMI_DATA_VO_SVC:
+        case WMI_DATA_VI_SVC:
+        case WMI_DATA_BE_SVC:
+        case WMI_DATA_BK_SVC:
+                return 1;
+        default:
+                return 0;
+        }
+}
+
+static u8 service_to_dlpipe(u16 service_id)
+{
+        switch (service_id) {
+        case WMI_CONTROL_SVC:
+                return 3;
+        case WMI_BEACON_SVC:
+        case WMI_CAB_SVC:
+        case WMI_UAPSD_SVC:
+        case WMI_MGMT_SVC:
+        case WMI_DATA_VO_SVC:
+        case WMI_DATA_VI_SVC:
+        case WMI_DATA_BE_SVC:
+        case WMI_DATA_BK_SVC:
+                return 2;
+        default:
+                return 0;
+        }
+}
+
+static void htc_process_target_rdy(struct htc_target *target,
+                                   void *buf)
+{
+        struct htc_endpoint *endpoint;
+        struct htc_ready_msg *htc_ready_msg = (struct htc_ready_msg *) buf;
+
+        target->credits = be16_to_cpu(htc_ready_msg->credits);
+        target->credit_size = be16_to_cpu(htc_ready_msg->credit_size);
+
+        endpoint = &target->endpoint[ENDPOINT0];
+        endpoint->service_id = HTC_CTRL_RSVD_SVC;
+        endpoint->max_msglen = HTC_MAX_CONTROL_MESSAGE_LENGTH;
+        complete(&target->target_wait);
+}
+
+static void htc_process_conn_rsp(struct htc_target *target,
+                                 struct htc_frame_hdr *htc_hdr)
+{
+        struct htc_conn_svc_rspmsg *svc_rspmsg;
+        struct htc_endpoint *endpoint, *tmp_endpoint = NULL;
+        u16 service_id;
+        u16 max_msglen;
+        enum htc_endpoint_id epid, tepid;
+
+        svc_rspmsg = (struct htc_conn_svc_rspmsg *)
+                ((void *) htc_hdr + sizeof(struct htc_frame_hdr));
+
+        if (svc_rspmsg->status == HTC_SERVICE_SUCCESS) {
+                epid = svc_rspmsg->endpoint_id;
+                service_id = be16_to_cpu(svc_rspmsg->service_id);
+                max_msglen = be16_to_cpu(svc_rspmsg->max_msg_len);
+                endpoint = &target->endpoint[epid];
+
+                for (tepid = ENDPOINT_MAX; tepid > ENDPOINT0; tepid--) {
+                        tmp_endpoint = &target->endpoint[tepid];
+                        if (tmp_endpoint->service_id == service_id) {
+                                tmp_endpoint->service_id = 0;
+                                break;
+                        }
+                }
+
+                if (!tmp_endpoint)
+                        return;
+
+                endpoint->service_id = service_id;
+                endpoint->max_txqdepth = tmp_endpoint->max_txqdepth;
+                endpoint->ep_callbacks = tmp_endpoint->ep_callbacks;
+                endpoint->ul_pipeid = tmp_endpoint->ul_pipeid;
+                endpoint->dl_pipeid = tmp_endpoint->dl_pipeid;
+                endpoint->max_msglen = max_msglen;
+                target->conn_rsp_epid = epid;
+                complete(&target->cmd_wait);
+        } else {
+                target->conn_rsp_epid = ENDPOINT_UNUSED;
+        }
+}
+
+static int htc_config_pipe_credits(struct htc_target *target)
+{
+        struct sk_buff *skb;
+        struct htc_config_pipe_msg *cp_msg;
+        int ret, time_left;
+
+        skb = dev_alloc_skb(50 + sizeof(struct htc_frame_hdr));
+        if (!skb) {
+                dev_err(target->dev, "failed to allocate send buffer\n");
+                return -ENOMEM;
+        }
+        skb_reserve(skb, sizeof(struct htc_frame_hdr));
+
+        cp_msg = (struct htc_config_pipe_msg *)
+                skb_put(skb, sizeof(struct htc_config_pipe_msg));
+
+        cp_msg->message_id = cpu_to_be16(HTC_MSG_CONFIG_PIPE_ID);
+        cp_msg->pipe_id = USB_WLAN_TX_PIPE;
+        cp_msg->credits = 28;
+
+        target->htc_flags |= HTC_OP_CONFIG_PIPE_CREDITS;
+
+        ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0, NULL);
+        if (ret)
+                goto err;
+
+        time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
+        if (!time_left) {
+                dev_err(target->dev, "HTC credit config timeout\n");
+                return -ETIMEDOUT;
+        }
+
+        return 0;
+err:
+        dev_kfree_skb(skb);
+        return -EINVAL;
+}
+
+static int htc_setup_complete(struct htc_target *target)
+{
+        struct sk_buff *skb;
+        struct htc_comp_msg *comp_msg;
+        int ret = 0, time_left;
+
+        skb = dev_alloc_skb(50 + sizeof(struct htc_frame_hdr));
+        if (!skb) {
+                dev_err(target->dev, "failed to allocate send buffer\n");
+                return -ENOMEM;
+        }
+        skb_reserve(skb, sizeof(struct htc_frame_hdr));
+
+        comp_msg = (struct htc_comp_msg *)
+                skb_put(skb, sizeof(struct htc_comp_msg));
+        comp_msg->msg_id = cpu_to_be16(HTC_MSG_SETUP_COMPLETE_ID);
+
+        target->htc_flags |= HTC_OP_START_WAIT;
+
+        ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0, NULL);
+        if (ret)
+                goto err;
+
+        time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
+        if (!time_left) {
+                dev_err(target->dev, "HTC start timeout\n");
+                return -ETIMEDOUT;
+        }
+
+        return 0;
+
+err:
+        dev_kfree_skb(skb);
+        return -EINVAL;
+}
+
+/* HTC APIs */
+
+int htc_init(struct htc_target *target)
+{
+        int ret;
+
+        ret = htc_config_pipe_credits(target);
+        if (ret)
+                return ret;
+
+        return htc_setup_complete(target);
+}
+
+int htc_connect_service(struct htc_target *target,
+                     struct htc_service_connreq *service_connreq,
+                     enum htc_endpoint_id *conn_rsp_epid)
+{
+        struct sk_buff *skb;
+        struct htc_endpoint *endpoint;
+        struct htc_conn_svc_msg *conn_msg;
+        int ret, time_left;
+
+        /* Find an available endpoint */
+        endpoint = get_next_avail_ep(target->endpoint);
+        if (!endpoint) {
+                dev_err(target->dev, "Endpoint is not available for"
+                        "service %d\n", service_connreq->service_id);
+                return -EINVAL;
+        }
+
+        endpoint->service_id = service_connreq->service_id;
+        endpoint->max_txqdepth = service_connreq->max_send_qdepth;
+        endpoint->ul_pipeid = service_to_ulpipe(service_connreq->service_id);
+        endpoint->dl_pipeid = service_to_dlpipe(service_connreq->service_id);
+        endpoint->ep_callbacks = service_connreq->ep_callbacks;
+
+        skb = dev_alloc_skb(sizeof(struct htc_conn_svc_msg) +
+                            sizeof(struct htc_frame_hdr));
+        if (!skb) {
+                dev_err(target->dev, "Failed to allocate buf to send"
+                        "service connect req\n");
+                return -ENOMEM;
+        }
+
+        skb_reserve(skb, sizeof(struct htc_frame_hdr));
+
+        conn_msg = (struct htc_conn_svc_msg *)
+                        skb_put(skb, sizeof(struct htc_conn_svc_msg));
+        conn_msg->service_id = cpu_to_be16(service_connreq->service_id);
+        conn_msg->msg_id = cpu_to_be16(HTC_MSG_CONNECT_SERVICE_ID);
+        conn_msg->con_flags = cpu_to_be16(service_connreq->con_flags);
+        conn_msg->dl_pipeid = endpoint->dl_pipeid;
+        conn_msg->ul_pipeid = endpoint->ul_pipeid;
+
+        ret = htc_issue_send(target, skb, skb->len, 0, ENDPOINT0, NULL);
+        if (ret)
+                goto err;
+
+        time_left = wait_for_completion_timeout(&target->cmd_wait, HZ);
+        if (!time_left) {
+                dev_err(target->dev, "Service connection timeout for: %d\n",
+                        service_connreq->service_id);
+                return -ETIMEDOUT;
+        }
+
+        *conn_rsp_epid = target->conn_rsp_epid;
+        return 0;
+err:
+        dev_kfree_skb(skb);
+        return ret;
+}
+
+int htc_send(struct htc_target *target, struct sk_buff *skb,
+             enum htc_endpoint_id epid, struct ath9k_htc_tx_ctl *tx_ctl)
+{
+        return htc_issue_send(target, skb, skb->len, 0, epid, tx_ctl);
+}
+
+void htc_stop(struct htc_target *target)
+{
+        enum htc_endpoint_id epid;
+        struct htc_endpoint *endpoint;
+
+        for (epid = ENDPOINT0; epid <= ENDPOINT_MAX; epid++) {
+                endpoint = &target->endpoint[epid];
+                if (endpoint->service_id != 0)
+                        target->hif->stop(target->hif_dev, endpoint->ul_pipeid);
+        }
+}
+
+void htc_start(struct htc_target *target)
+{
+        enum htc_endpoint_id epid;
+        struct htc_endpoint *endpoint;
+
+        for (epid = ENDPOINT0; epid <= ENDPOINT_MAX; epid++) {
+                endpoint = &target->endpoint[epid];
+                if (endpoint->service_id != 0)
+                        target->hif->start(target->hif_dev,
+                                           endpoint->ul_pipeid);
+        }
+}
+
+void ath9k_htc_txcompletion_cb(struct htc_target *htc_handle,
+                               struct sk_buff *skb, bool txok)
+{
+        struct htc_endpoint *endpoint;
+        struct htc_frame_hdr *htc_hdr;
+
+        if (htc_handle->htc_flags & HTC_OP_CONFIG_PIPE_CREDITS) {
+                complete(&htc_handle->cmd_wait);
+                htc_handle->htc_flags &= ~HTC_OP_CONFIG_PIPE_CREDITS;
+        }
+
+        if (htc_handle->htc_flags & HTC_OP_START_WAIT) {
+                complete(&htc_handle->cmd_wait);
+                htc_handle->htc_flags &= ~HTC_OP_START_WAIT;
+        }
+
+        if (skb) {
+                htc_hdr = (struct htc_frame_hdr *) skb->data;
+                endpoint = &htc_handle->endpoint[htc_hdr->endpoint_id];
+                skb_pull(skb, sizeof(struct htc_frame_hdr));
+
+                if (endpoint->ep_callbacks.tx) {
+                        endpoint->ep_callbacks.tx(htc_handle->drv_priv, skb,
+                                                  htc_hdr->endpoint_id, txok);
+                }
+        }
+}
+
+/*
+ * HTC Messages are handled directly here and the obtained SKB
+ * is freed.
+ *
+ * Sevice messages (Data, WMI) passed to the corresponding
+ * endpoint RX handlers, which have to free the SKB.
+ */
+void ath9k_htc_rx_msg(struct htc_target *htc_handle,
+                      struct sk_buff *skb, u32 len, u8 pipe_id)
+{
+        struct htc_frame_hdr *htc_hdr;
+        enum htc_endpoint_id epid;
+        struct htc_endpoint *endpoint;
+        u16 *msg_id;
+
+        if (!htc_handle || !skb)
+                return;
+
+        htc_hdr = (struct htc_frame_hdr *) skb->data;
+        epid = htc_hdr->endpoint_id;
+
+        if (epid >= ENDPOINT_MAX) {
+                dev_kfree_skb_any(skb);
+                return;
+        }
+
+        if (epid == ENDPOINT0) {
+
+                /* Handle trailer */
+                if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER) {
+                        if (be32_to_cpu(*(u32 *) skb->data) == 0x00C60000)
+                                /* Move past the Watchdog pattern */
+                                htc_hdr = (struct htc_frame_hdr *) skb->data + 4;
+                }
+
+                /* Get the message ID */
+                msg_id = (u16 *) ((void *) htc_hdr +
+                                           sizeof(struct htc_frame_hdr));
+
+                /* Now process HTC messages */
+                switch (be16_to_cpu(*msg_id)) {
+                case HTC_MSG_READY_ID:
+                        htc_process_target_rdy(htc_handle, htc_hdr);
+                        break;
+                case HTC_MSG_CONNECT_SERVICE_RESPONSE_ID:
+                        htc_process_conn_rsp(htc_handle, htc_hdr);
+                        break;
+                default:
+                        break;
+                }
+
+                dev_kfree_skb_any(skb);
+
+        } else {
+                if (htc_hdr->flags & HTC_FLAGS_RECV_TRAILER)
+                        skb_trim(skb, len - htc_hdr->control[0]);
+
+                skb_pull(skb, sizeof(struct htc_frame_hdr));
+
+                endpoint = &htc_handle->endpoint[epid];
+                if (endpoint->ep_callbacks.rx)
+                        endpoint->ep_callbacks.rx(endpoint->ep_callbacks.priv,
+                                                  skb, epid);
+        }
+}
+
+struct htc_target *ath9k_htc_hw_alloc(void *hif_handle)
+{
+        struct htc_target *target;
+
+        target = kzalloc(sizeof(struct htc_target), GFP_KERNEL);
+        if (!target)
+                printk(KERN_ERR "Unable to allocate memory for"
+                        "target device\n");
+
+        return target;
+}
+
+void ath9k_htc_hw_free(struct htc_target *htc)
+{
+        kfree(htc);
+}
+
+int ath9k_htc_hw_init(struct ath9k_htc_hif *hif, struct htc_target *target,
+                      void *hif_handle, struct device *dev, u16 devid,
+                      enum ath9k_hif_transports transport)
+{
+        struct htc_endpoint *endpoint;
+        int err = 0;
+
+        init_completion(&target->target_wait);
+        init_completion(&target->cmd_wait);
+
+        target->hif = hif;
+        target->hif_dev = hif_handle;
+        target->dev = dev;
+
+        /* Assign control endpoint pipe IDs */
+        endpoint = &target->endpoint[ENDPOINT0];
+        endpoint->ul_pipeid = hif->control_ul_pipe;
+        endpoint->dl_pipeid = hif->control_dl_pipe;
+
+        err = ath9k_htc_probe_device(target, dev, devid);
+        if (err) {
+                printk(KERN_ERR "Failed to initialize the device\n");
+                return -ENODEV;
+        }
+
+        return 0;
+}
+
+void ath9k_htc_hw_deinit(struct htc_target *target, bool hot_unplug)
+{
+        if (target)
+                ath9k_htc_disconnect_device(target, hot_unplug);
+}
diff --git a/drivers/net/wireless/ath/ath9k/htc_hst.h b/drivers/net/wireless/ath/ath9k/htc_hst.h
new file mode 100644
index 000000000000..cd7048ffd239
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/htc_hst.h
@@ -0,0 +1,246 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef HTC_HST_H
+#define HTC_HST_H
+
+struct ath9k_htc_priv;
+struct htc_target;
+struct ath9k_htc_tx_ctl;
+
+enum ath9k_hif_transports {
+        ATH9K_HIF_USB,
+};
+
+struct ath9k_htc_hif {
+        struct list_head list;
+        const enum ath9k_hif_transports transport;
+        const char *name;
+
+        u8 control_dl_pipe;
+        u8 control_ul_pipe;
+
+        void (*start) (void *hif_handle, u8 pipe);
+        void (*stop) (void *hif_handle, u8 pipe);
+        int (*send) (void *hif_handle, u8 pipe, struct sk_buff *buf,
+                     struct ath9k_htc_tx_ctl *tx_ctl);
+};
+
+enum htc_endpoint_id {
+        ENDPOINT_UNUSED = -1,
+        ENDPOINT0 = 0,
+        ENDPOINT1 = 1,
+        ENDPOINT2 = 2,
+        ENDPOINT3 = 3,
+        ENDPOINT4 = 4,
+        ENDPOINT5 = 5,
+        ENDPOINT6 = 6,
+        ENDPOINT7 = 7,
+        ENDPOINT8 = 8,
+        ENDPOINT_MAX = 22
+};
+
+/* Htc frame hdr flags */
+#define HTC_FLAGS_RECV_TRAILER (1 << 1)
+
+struct htc_frame_hdr {
+        u8 endpoint_id;
+        u8 flags;
+        u16 payload_len;
+        u8 control[4];
+} __packed;
+
+struct htc_ready_msg {
+        u16 message_id;
+        u16 credits;
+        u16 credit_size;
+        u8 max_endpoints;
+        u8 pad;
+} __packed;
+
+struct htc_config_pipe_msg {
+        u16 message_id;
+        u8 pipe_id;
+        u8 credits;
+} __packed;
+
+struct htc_packet {
+        void *pktcontext;
+        u8 *buf;
+        u8 *buf_payload;
+        u32 buflen;
+        u32 payload_len;
+
+        int endpoint;
+        int status;
+
+        void *context;
+        u32 reserved;
+};
+
+struct htc_ep_callbacks {
+        void *priv;
+        void (*tx) (void *, struct sk_buff *, enum htc_endpoint_id, bool txok);
+        void (*rx) (void *, struct sk_buff *, enum htc_endpoint_id);
+};
+
+#define HTC_TX_QUEUE_SIZE 256
+
+struct htc_txq {
+        struct sk_buff *buf[HTC_TX_QUEUE_SIZE];
+        u32 txqdepth;
+        u16 txbuf_cnt;
+        u16 txq_head;
+        u16 txq_tail;
+};
+
+struct htc_endpoint {
+        u16 service_id;
+
+        struct htc_ep_callbacks ep_callbacks;
+        struct htc_txq htc_txq;
+        u32 max_txqdepth;
+        int max_msglen;
+
+        u8 ul_pipeid;
+        u8 dl_pipeid;
+};
+
+#define HTC_MAX_CONTROL_MESSAGE_LENGTH 255
+#define HTC_CONTROL_BUFFER_SIZE \
+        (HTC_MAX_CONTROL_MESSAGE_LENGTH + sizeof(struct htc_frame_hdr))
+
+#define NUM_CONTROL_BUFFERS 8
+#define HST_ENDPOINT_MAX 8
+
+struct htc_control_buf {
+        struct htc_packet htc_pkt;
+        u8 buf[HTC_CONTROL_BUFFER_SIZE];
+};
+
+#define HTC_OP_START_WAIT           BIT(0)
+#define HTC_OP_CONFIG_PIPE_CREDITS  BIT(1)
+
+struct htc_target {
+        void *hif_dev;
+        struct ath9k_htc_priv *drv_priv;
+        struct device *dev;
+        struct ath9k_htc_hif *hif;
+        struct htc_endpoint endpoint[HST_ENDPOINT_MAX];
+        struct completion target_wait;
+        struct completion cmd_wait;
+        struct list_head list;
+        enum htc_endpoint_id conn_rsp_epid;
+        u16 credits;
+        u16 credit_size;
+        u8 htc_flags;
+};
+
+enum htc_msg_id {
+        HTC_MSG_READY_ID = 1,
+        HTC_MSG_CONNECT_SERVICE_ID,
+        HTC_MSG_CONNECT_SERVICE_RESPONSE_ID,
+        HTC_MSG_SETUP_COMPLETE_ID,
+        HTC_MSG_CONFIG_PIPE_ID,
+        HTC_MSG_CONFIG_PIPE_RESPONSE_ID,
+};
+
+struct htc_service_connreq {
+        u16 service_id;
+        u16 con_flags;
+        u32 max_send_qdepth;
+        struct htc_ep_callbacks ep_callbacks;
+};
+
+/* Current service IDs */
+
+enum htc_service_group_ids{
+        RSVD_SERVICE_GROUP = 0,
+        WMI_SERVICE_GROUP = 1,
+
+        HTC_SERVICE_GROUP_LAST = 255
+};
+
+#define MAKE_SERVICE_ID(group, index)           \
+        (int)(((int)group << 8) | (int)(index))
+
+/* NOTE: service ID of 0x0000 is reserved and should never be used */
+#define HTC_CTRL_RSVD_SVC MAKE_SERVICE_ID(RSVD_SERVICE_GROUP, 1)
+#define HTC_LOOPBACK_RSVD_SVC MAKE_SERVICE_ID(RSVD_SERVICE_GROUP, 2)
+
+#define WMI_CONTROL_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 0)
+#define WMI_BEACON_SVC    MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 1)
+#define WMI_CAB_SVC       MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 2)
+#define WMI_UAPSD_SVC     MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 3)
+#define WMI_MGMT_SVC      MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 4)
+#define WMI_DATA_VO_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 5)
+#define WMI_DATA_VI_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 6)
+#define WMI_DATA_BE_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 7)
+#define WMI_DATA_BK_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP, 8)
+
+struct htc_conn_svc_msg {
+        u16 msg_id;
+        u16 service_id;
+        u16 con_flags;
+        u8 dl_pipeid;
+        u8 ul_pipeid;
+        u8 svc_meta_len;
+        u8 pad;
+} __packed;
+
+/* connect response status codes */
+#define HTC_SERVICE_SUCCESS      0
+#define HTC_SERVICE_NOT_FOUND    1
+#define HTC_SERVICE_FAILED       2
+#define HTC_SERVICE_NO_RESOURCES 3
+#define HTC_SERVICE_NO_MORE_EP   4
+
+struct htc_conn_svc_rspmsg {
+        u16 msg_id;
+        u16 service_id;
+        u8 status;
+        u8 endpoint_id;
+        u16 max_msg_len;
+        u8 svc_meta_len;
+        u8 pad;
+} __packed;
+
+struct htc_comp_msg {
+        u16 msg_id;
+} __packed;
+
+int htc_init(struct htc_target *target);
+int htc_connect_service(struct htc_target *target,
+                          struct htc_service_connreq *service_connreq,
+                          enum htc_endpoint_id *conn_rsp_eid);
+int htc_send(struct htc_target *target, struct sk_buff *skb,
+             enum htc_endpoint_id eid, struct ath9k_htc_tx_ctl *tx_ctl);
+void htc_stop(struct htc_target *target);
+void htc_start(struct htc_target *target);
+
+void ath9k_htc_rx_msg(struct htc_target *htc_handle,
+                      struct sk_buff *skb, u32 len, u8 pipe_id);
+void ath9k_htc_txcompletion_cb(struct htc_target *htc_handle,
+                               struct sk_buff *skb, bool txok);
+
+struct htc_target *ath9k_htc_hw_alloc(void *hif_handle);
+void ath9k_htc_hw_free(struct htc_target *htc);
+int ath9k_htc_hw_init(struct ath9k_htc_hif *hif, struct htc_target *target,
+                      void *hif_handle, struct device *dev, u16 devid,
+                      enum ath9k_hif_transports transport);
+void ath9k_htc_hw_deinit(struct htc_target *target, bool hot_unplug);
+
+#endif /* HTC_HST_H */
diff --git a/drivers/net/wireless/ath/ath9k/hw.c b/drivers/net/wireless/ath/ath9k/hw.c
index 2e767cf22f1e..77db932c3137 100644
--- a/drivers/net/wireless/ath/ath9k/hw.c
+++ b/drivers/net/wireless/ath/ath9k/hw.c
@@ -499,8 +499,10 @@ static int ath9k_hw_post_init(struct ath_hw *ah)
 {
         int ecode;
 
-        if (!ath9k_hw_chip_test(ah))
-                return -ENODEV;
+        if (!AR_SREV_9271(ah)) {
+                if (!ath9k_hw_chip_test(ah))
+                        return -ENODEV;
+        }
 
         ecode = ath9k_hw_rf_claim(ah);
         if (ecode != 0)
@@ -603,9 +605,23 @@ static void ath9k_hw_init_mode_regs(struct ath_hw *ah)
                                ARRAY_SIZE(ar9271Modes_9271), 6);
                 INIT_INI_ARRAY(&ah->iniCommon, ar9271Common_9271,
                                ARRAY_SIZE(ar9271Common_9271), 2);
+                INIT_INI_ARRAY(&ah->iniCommon_normal_cck_fir_coeff_9271,
+                               ar9271Common_normal_cck_fir_coeff_9271,
+                               ARRAY_SIZE(ar9271Common_normal_cck_fir_coeff_9271), 2);
+                INIT_INI_ARRAY(&ah->iniCommon_japan_2484_cck_fir_coeff_9271,
+                               ar9271Common_japan_2484_cck_fir_coeff_9271,
+                               ARRAY_SIZE(ar9271Common_japan_2484_cck_fir_coeff_9271), 2);
                 INIT_INI_ARRAY(&ah->iniModes_9271_1_0_only,
                                ar9271Modes_9271_1_0_only,
                                ARRAY_SIZE(ar9271Modes_9271_1_0_only), 6);
+                INIT_INI_ARRAY(&ah->iniModes_9271_ANI_reg, ar9271Modes_9271_ANI_reg,
+                               ARRAY_SIZE(ar9271Modes_9271_ANI_reg), 6);
+                INIT_INI_ARRAY(&ah->iniModes_high_power_tx_gain_9271,
+                               ar9271Modes_high_power_tx_gain_9271,
+                               ARRAY_SIZE(ar9271Modes_high_power_tx_gain_9271), 6);
+                INIT_INI_ARRAY(&ah->iniModes_normal_power_tx_gain_9271,
+                               ar9271Modes_normal_power_tx_gain_9271,
+                               ARRAY_SIZE(ar9271Modes_normal_power_tx_gain_9271), 6);
                 return;
         }
 
@@ -990,22 +1006,6 @@ static void ath9k_hw_init_qos(struct ath_hw *ah)
         REG_WRITE(ah, AR_TXOP_12_15, 0xFFFFFFFF);
 }
 
-static void ath9k_hw_change_target_baud(struct ath_hw *ah, u32 freq, u32 baud)
-{
-        u32 lcr;
-        u32 baud_divider = freq * 1000 * 1000 / 16 / baud;
-
-        lcr = REG_READ(ah , 0x5100c);
-        lcr |= 0x80;
-
-        REG_WRITE(ah, 0x5100c, lcr);
-        REG_WRITE(ah, 0x51004, (baud_divider >> 8));
-        REG_WRITE(ah, 0x51000, (baud_divider & 0xff));
-
-        lcr &= ~0x80;
-        REG_WRITE(ah, 0x5100c, lcr);
-}
-
 static void ath9k_hw_init_pll(struct ath_hw *ah,
                               struct ath9k_channel *chan)
 {
@@ -1071,22 +1071,8 @@ static void ath9k_hw_init_pll(struct ath_hw *ah,
 
         /* Switch the core clock for ar9271 to 117Mhz */
         if (AR_SREV_9271(ah)) {
-                if ((pll == 0x142c) || (pll == 0x2850) ) {
-                        udelay(500);
-                        /* set CLKOBS to output AHB clock */
-                        REG_WRITE(ah, 0x7020, 0xe);
-                        /*
-                         * 0x304: 117Mhz, ahb_ratio: 1x1
-                         * 0x306: 40Mhz, ahb_ratio: 1x1
-                         */
-                        REG_WRITE(ah, 0x50040, 0x304);
-                        /*
-                         * makes adjustments for the baud dividor to keep the
-                         * targetted baud rate based on the used core clock.
-                         */
-                        ath9k_hw_change_target_baud(ah, AR9271_CORE_CLOCK,
-                                                    AR9271_TARGET_BAUD_RATE);
-                }
+                udelay(500);
+                REG_WRITE(ah, 0x50040, 0x304);
         }
 
         udelay(RTC_PLL_SETTLE_DELAY);
@@ -1151,7 +1137,8 @@ static void ath9k_hw_init_interrupt_masks(struct ath_hw *ah,
                 ah->mask_reg |= AR_IMR_MIB;
 
         REG_WRITE(ah, AR_IMR, ah->mask_reg);
-        REG_WRITE(ah, AR_IMR_S2, REG_READ(ah, AR_IMR_S2) | AR_IMR_S2_GTT);
+        ah->imrs2_reg |= AR_IMR_S2_GTT;
+        REG_WRITE(ah, AR_IMR_S2, ah->imrs2_reg);
 
         if (!AR_SREV_9100(ah)) {
                 REG_WRITE(ah, AR_INTR_SYNC_CAUSE, 0xFFFFFFFF);
@@ -1240,7 +1227,7 @@ void ath9k_hw_deinit(struct ath_hw *ah)
 {
         struct ath_common *common = ath9k_hw_common(ah);
 
-        if (common->state <= ATH_HW_INITIALIZED)
+        if (common->state < ATH_HW_INITIALIZED)
                 goto free_hw;
 
         if (!AR_SREV_9100(ah))
@@ -1251,8 +1238,6 @@ void ath9k_hw_deinit(struct ath_hw *ah)
 free_hw:
         if (!AR_SREV_9280_10_OR_LATER(ah))
                 ath9k_hw_rf_free_ext_banks(ah);
-        kfree(ah);
-        ah = NULL;
 }
 EXPORT_SYMBOL(ath9k_hw_deinit);
 
@@ -1265,26 +1250,6 @@ static void ath9k_hw_override_ini(struct ath_hw *ah,
 {
         u32 val;
 
-        if (AR_SREV_9271(ah)) {
-                /*
-                 * Enable spectral scan to solution for issues with stuck
-                 * beacons on AR9271 1.0. The beacon stuck issue is not seeon on
-                 * AR9271 1.1
-                 */
-                if (AR_SREV_9271_10(ah)) {
-                        val = REG_READ(ah, AR_PHY_SPECTRAL_SCAN) |
-                              AR_PHY_SPECTRAL_SCAN_ENABLE;
-                        REG_WRITE(ah, AR_PHY_SPECTRAL_SCAN, val);
-                }
-                else if (AR_SREV_9271_11(ah))
-                        /*
-                         * change AR_PHY_RF_CTL3 setting to fix MAC issue
-                         * present on AR9271 1.1
-                         */
-                        REG_WRITE(ah, AR_PHY_RF_CTL3, 0x3a020001);
-                return;
-        }
-
         /*
          * Set the RX_ABORT and RX_DIS and clear if off only after
          * RXE is set for MAC. This prevents frames with corrupted
@@ -1293,8 +1258,10 @@ static void ath9k_hw_override_ini(struct ath_hw *ah,
         REG_SET_BIT(ah, AR_DIAG_SW, (AR_DIAG_RX_DIS | AR_DIAG_RX_ABORT));
 
         if (AR_SREV_9280_10_OR_LATER(ah)) {
-                val = REG_READ(ah, AR_PCU_MISC_MODE2) &
-                               (~AR_PCU_MISC_MODE2_HWWAR1);
+                val = REG_READ(ah, AR_PCU_MISC_MODE2);
+
+                if (!AR_SREV_9271(ah))
+                        val &= ~AR_PCU_MISC_MODE2_HWWAR1;
 
                 if (AR_SREV_9287_10_OR_LATER(ah))
                         val = val & (~AR_PCU_MISC_MODE2_HWWAR2);
@@ -1438,7 +1405,10 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
                 return -EINVAL;
         }
 
+        /* Set correct baseband to analog shift setting to access analog chips */
         REG_WRITE(ah, AR_PHY(0), 0x00000007);
+
+        /* Write ADDAC shifts */
         REG_WRITE(ah, AR_PHY_ADC_SERIAL_CTL, AR_PHY_SEL_EXTERNAL_RADIO);
         ah->eep_ops->set_addac(ah, chan);
 
@@ -1450,9 +1420,11 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
                         sizeof(u32) * ah->iniAddac.ia_rows *
                         ah->iniAddac.ia_columns;
 
+                /* For AR5416 2.0/2.1 */
                 memcpy(ah->addac5416_21,
                        ah->iniAddac.ia_array, addacSize);
 
+                /* override CLKDRV value at [row, column] = [31, 1] */
                 (ah->addac5416_21)[31 * ah->iniAddac.ia_columns + 1] = 0;
 
                 temp.ia_array = ah->addac5416_21;
@@ -1484,6 +1456,11 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
             AR_SREV_9287_10_OR_LATER(ah))
                 REG_WRITE_ARRAY(&ah->iniModesTxGain, modesIndex, regWrites);
 
+        if (AR_SREV_9271_10(ah))
+                REG_WRITE_ARRAY(&ah->iniModes_9271_1_0_only,
+                                modesIndex, regWrites);
+
+        /* Write common array parameters */
         for (i = 0; i < ah->iniCommon.ia_rows; i++) {
                 u32 reg = INI_RA(&ah->iniCommon, i, 0);
                 u32 val = INI_RA(&ah->iniCommon, i, 1);
@@ -1498,11 +1475,16 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
                 DO_DELAY(regWrites);
         }
 
-        ath9k_hw_write_regs(ah, freqIndex, regWrites);
+        if (AR_SREV_9271(ah)) {
+                if (ah->eep_ops->get_eeprom(ah, EEP_TXGAIN_TYPE) == 1)
+                        REG_WRITE_ARRAY(&ah->iniModes_high_power_tx_gain_9271,
+                                        modesIndex, regWrites);
+                else
+                        REG_WRITE_ARRAY(&ah->iniModes_normal_power_tx_gain_9271,
+                                        modesIndex, regWrites);
+        }
 
-        if (AR_SREV_9271_10(ah))
-                REG_WRITE_ARRAY(&ah->iniModes_9271_1_0_only,
-                                modesIndex, regWrites);
+        ath9k_hw_write_regs(ah, freqIndex, regWrites);
 
         if (AR_SREV_9280_20(ah) && IS_CHAN_A_5MHZ_SPACED(chan)) {
                 REG_WRITE_ARRAY(&ah->iniModesAdditional, modesIndex,
@@ -1516,6 +1498,7 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
         if (OLC_FOR_AR9280_20_LATER)
                 ath9k_olc_init(ah);
 
+        /* Set TX power */
         ah->eep_ops->set_txpower(ah, chan,
                                  ath9k_regd_get_ctl(regulatory, chan),
                                  channel->max_antenna_gain * 2,
@@ -1523,6 +1506,7 @@ static int ath9k_hw_process_ini(struct ath_hw *ah,
                                  min((u32) MAX_RATE_POWER,
                                  (u32) regulatory->power_limit));
 
+        /* Write analog registers */
         if (!ath9k_hw_set_rf_regs(ah, chan, freqIndex)) {
                 ath_print(ath9k_hw_common(ah), ATH_DBG_FATAL,
                           "ar5416SetRfRegs failed\n");
@@ -1965,6 +1949,7 @@ int ath9k_hw_reset(struct ath_hw *ah, struct ath9k_channel *chan,
 
         ath9k_hw_mark_phy_inactive(ah);
 
+        /* Only required on the first reset */
         if (AR_SREV_9271(ah) && ah->htc_reset_init) {
                 REG_WRITE(ah,
                           AR9271_RESET_POWER_DOWN_CONTROL,
@@ -1977,6 +1962,7 @@ int ath9k_hw_reset(struct ath_hw *ah, struct ath9k_channel *chan,
                 return -EINVAL;
         }
 
+        /* Only required on the first reset */
         if (AR_SREV_9271(ah) && ah->htc_reset_init) {
                 ah->htc_reset_init = false;
                 REG_WRITE(ah,
@@ -2437,7 +2423,7 @@ static void ath9k_set_power_sleep(struct ath_hw *ah, int setChip)
                 if (!AR_SREV_9100(ah))
                         REG_WRITE(ah, AR_RC, AR_RC_AHB | AR_RC_HOSTIF);
 
-                if(!AR_SREV_5416(ah))
+                if (!AR_SREV_5416(ah) && !AR_SREV_9271(ah))
                         REG_CLR_BIT(ah, (AR_RTC_RESET),
                                     AR_RTC_RESET_EN);
         }
@@ -2920,14 +2906,11 @@ enum ath9k_int ath9k_hw_set_interrupts(struct ath_hw *ah, enum ath9k_int ints)
 
         ath_print(common, ATH_DBG_INTERRUPT, "new IMR 0x%x\n", mask);
         REG_WRITE(ah, AR_IMR, mask);
-        mask = REG_READ(ah, AR_IMR_S2) & ~(AR_IMR_S2_TIM |
-                                           AR_IMR_S2_DTIM |
-                                           AR_IMR_S2_DTIMSYNC |
-                                           AR_IMR_S2_CABEND |
-                                           AR_IMR_S2_CABTO |
-                                           AR_IMR_S2_TSFOOR |
-                                           AR_IMR_S2_GTT | AR_IMR_S2_CST);
-        REG_WRITE(ah, AR_IMR_S2, mask | mask2);
+        ah->imrs2_reg &= ~(AR_IMR_S2_TIM | AR_IMR_S2_DTIM | AR_IMR_S2_DTIMSYNC |
+                           AR_IMR_S2_CABEND | AR_IMR_S2_CABTO |
+                           AR_IMR_S2_TSFOOR | AR_IMR_S2_GTT | AR_IMR_S2_CST);
+        ah->imrs2_reg |= mask2;
+        REG_WRITE(ah, AR_IMR_S2, ah->imrs2_reg);
         ah->mask_reg = ints;
 
         if (!(pCap->hw_caps & ATH9K_HW_CAP_AUTOSLEEP)) {
@@ -3218,7 +3201,9 @@ int ath9k_hw_fill_cap_info(struct ath_hw *ah)
         else
                 pCap->tx_triglevel_max = MAX_TX_FIFO_THRESHOLD;
 
-        if (AR_SREV_9285_10_OR_LATER(ah))
+        if (AR_SREV_9271(ah))
+                pCap->num_gpio_pins = AR9271_NUM_GPIO;
+        else if (AR_SREV_9285_10_OR_LATER(ah))
                 pCap->num_gpio_pins = AR9285_NUM_GPIO;
         else if (AR_SREV_9280_10_OR_LATER(ah))
                 pCap->num_gpio_pins = AR928X_NUM_GPIO;
@@ -3454,7 +3439,9 @@ u32 ath9k_hw_gpio_get(struct ath_hw *ah, u32 gpio)
         if (gpio >= ah->caps.num_gpio_pins)
                 return 0xffffffff;
 
-        if (AR_SREV_9287_10_OR_LATER(ah))
+        if (AR_SREV_9271(ah))
+                return MS_REG_READ(AR9271, gpio) != 0;
+        else if (AR_SREV_9287_10_OR_LATER(ah))
                 return MS_REG_READ(AR9287, gpio) != 0;
         else if (AR_SREV_9285_10_OR_LATER(ah))
                 return MS_REG_READ(AR9285, gpio) != 0;
@@ -3483,6 +3470,9 @@ EXPORT_SYMBOL(ath9k_hw_cfg_output);
 
 void ath9k_hw_set_gpio(struct ath_hw *ah, u32 gpio, u32 val)
 {
+        if (AR_SREV_9271(ah))
+                val = ~val;
+
         REG_RMW(ah, AR_GPIO_IN_OUT, ((val & 1) << gpio),
                 AR_GPIO_BIT(gpio));
 }
@@ -3867,6 +3857,16 @@ void ath_gen_timer_isr(struct ath_hw *ah)
 }
 EXPORT_SYMBOL(ath_gen_timer_isr);
 
+/********/
+/* HTC  */
+/********/
+
+void ath9k_hw_htc_resetinit(struct ath_hw *ah)
+{
+        ah->htc_reset_init = true;
+}
+EXPORT_SYMBOL(ath9k_hw_htc_resetinit);
+
 static struct {
         u32 version;
         const char * name;
diff --git a/drivers/net/wireless/ath/ath9k/hw.h b/drivers/net/wireless/ath/ath9k/hw.h
index dbbf7ca5f97d..6b03e1688b22 100644
--- a/drivers/net/wireless/ath/ath9k/hw.h
+++ b/drivers/net/wireless/ath/ath9k/hw.h
@@ -479,6 +479,7 @@ struct ath_hw {
 
         int16_t curchan_rad_index;
         u32 mask_reg;
+        u32 imrs2_reg;
         u32 txok_interrupt_mask;
         u32 txerr_interrupt_mask;
         u32 txdesc_interrupt_mask;
@@ -598,6 +599,11 @@ struct ath_hw {
         struct ar5416IniArray iniModes_9271_1_0_only;
         struct ar5416IniArray iniCckfirNormal;
         struct ar5416IniArray iniCckfirJapan2484;
+        struct ar5416IniArray iniCommon_normal_cck_fir_coeff_9271;
+        struct ar5416IniArray iniCommon_japan_2484_cck_fir_coeff_9271;
+        struct ar5416IniArray iniModes_9271_ANI_reg;
+        struct ar5416IniArray iniModes_high_power_tx_gain_9271;
+        struct ar5416IniArray iniModes_normal_power_tx_gain_9271;
 
         u32 intr_gen_timer_trigger;
         u32 intr_gen_timer_thresh;
@@ -701,6 +707,9 @@ u32 ath9k_hw_gettsf32(struct ath_hw *ah);
 
 void ath9k_hw_name(struct ath_hw *ah, char *hw_name, size_t len);
 
+/* HTC */
+void ath9k_hw_htc_resetinit(struct ath_hw *ah);
+
 #define ATH_PCIE_CAP_LINK_CTRL  0x70
 #define ATH_PCIE_CAP_LINK_L0S   1
 #define ATH_PCIE_CAP_LINK_L1    2
diff --git a/drivers/net/wireless/ath/ath9k/init.c b/drivers/net/wireless/ath/ath9k/init.c
index 623c2f884987..6063f5463708 100644
--- a/drivers/net/wireless/ath/ath9k/init.c
+++ b/drivers/net/wireless/ath/ath9k/init.c
@@ -758,6 +758,9 @@ static void ath9k_deinit_softc(struct ath_softc *sc)
 
         tasklet_kill(&sc->intr_tq);
         tasklet_kill(&sc->bcon_tasklet);
+
+        kfree(sc->sc_ah);
+        sc->sc_ah = NULL;
 }
 
 void ath9k_deinit_device(struct ath_softc *sc)
diff --git a/drivers/net/wireless/ath/ath9k/initvals.h b/drivers/net/wireless/ath/ath9k/initvals.h
index 8a3bf3ab998d..177bdeb84ad7 100644
--- a/drivers/net/wireless/ath/ath9k/initvals.h
+++ b/drivers/net/wireless/ath/ath9k/initvals.h
@@ -6441,7 +6441,7 @@ static const u_int32_t ar9271Modes_9271[][6] = {
     { 0x00009a44, 0x00000000, 0x00000000, 0x000581a8, 0x000581a8, 0x00000000 },
     { 0x00009a48, 0x00000000, 0x00000000, 0x00058284, 0x00058284, 0x00000000 },
     { 0x00009a4c, 0x00000000, 0x00000000, 0x00058288, 0x00058288, 0x00000000 },
-    { 0x00009a50, 0x00000000, 0x00000000, 0x00058220, 0x00058220, 0x00000000 },
+    { 0x00009a50, 0x00000000, 0x00000000, 0x00058224, 0x00058224, 0x00000000 },
     { 0x00009a54, 0x00000000, 0x00000000, 0x00058290, 0x00058290, 0x00000000 },
     { 0x00009a58, 0x00000000, 0x00000000, 0x00058300, 0x00058300, 0x00000000 },
     { 0x00009a5c, 0x00000000, 0x00000000, 0x00058304, 0x00058304, 0x00000000 },
@@ -6455,8 +6455,8 @@ static const u_int32_t ar9271Modes_9271[][6] = {
     { 0x00009a7c, 0x00000000, 0x00000000, 0x0006870c, 0x0006870c, 0x00000000 },
     { 0x00009a80, 0x00000000, 0x00000000, 0x00068780, 0x00068780, 0x00000000 },
     { 0x00009a84, 0x00000000, 0x00000000, 0x00068784, 0x00068784, 0x00000000 },
-    { 0x00009a88, 0x00000000, 0x00000000, 0x00078b04, 0x00078b04, 0x00000000 },
-    { 0x00009a8c, 0x00000000, 0x00000000, 0x00078b08, 0x00078b08, 0x00000000 },
+    { 0x00009a88, 0x00000000, 0x00000000, 0x00078b00, 0x00078b00, 0x00000000 },
+    { 0x00009a8c, 0x00000000, 0x00000000, 0x00078b04, 0x00078b04, 0x00000000 },
     { 0x00009a90, 0x00000000, 0x00000000, 0x00078b08, 0x00078b08, 0x00000000 },
     { 0x00009a94, 0x00000000, 0x00000000, 0x00078b0c, 0x00078b0c, 0x00000000 },
     { 0x00009a98, 0x00000000, 0x00000000, 0x00078b80, 0x00078b80, 0x00000000 },
@@ -6569,7 +6569,7 @@ static const u_int32_t ar9271Modes_9271[][6] = {
     { 0x0000aa44, 0x00000000, 0x00000000, 0x000581a8, 0x000581a8, 0x00000000 },
     { 0x0000aa48, 0x00000000, 0x00000000, 0x00058284, 0x00058284, 0x00000000 },
     { 0x0000aa4c, 0x00000000, 0x00000000, 0x00058288, 0x00058288, 0x00000000 },
-    { 0x0000aa50, 0x00000000, 0x00000000, 0x00058220, 0x00058220, 0x00000000 },
+    { 0x0000aa50, 0x00000000, 0x00000000, 0x00058224, 0x00058224, 0x00000000 },
     { 0x0000aa54, 0x00000000, 0x00000000, 0x00058290, 0x00058290, 0x00000000 },
     { 0x0000aa58, 0x00000000, 0x00000000, 0x00058300, 0x00058300, 0x00000000 },
     { 0x0000aa5c, 0x00000000, 0x00000000, 0x00058304, 0x00058304, 0x00000000 },
@@ -6583,8 +6583,8 @@ static const u_int32_t ar9271Modes_9271[][6] = {
     { 0x0000aa7c, 0x00000000, 0x00000000, 0x0006870c, 0x0006870c, 0x00000000 },
     { 0x0000aa80, 0x00000000, 0x00000000, 0x00068780, 0x00068780, 0x00000000 },
     { 0x0000aa84, 0x00000000, 0x00000000, 0x00068784, 0x00068784, 0x00000000 },
-    { 0x0000aa88, 0x00000000, 0x00000000, 0x00078b04, 0x00078b04, 0x00000000 },
-    { 0x0000aa8c, 0x00000000, 0x00000000, 0x00078b08, 0x00078b08, 0x00000000 },
+    { 0x0000aa88, 0x00000000, 0x00000000, 0x00078b00, 0x00078b00, 0x00000000 },
+    { 0x0000aa8c, 0x00000000, 0x00000000, 0x00078b04, 0x00078b04, 0x00000000 },
     { 0x0000aa90, 0x00000000, 0x00000000, 0x00078b08, 0x00078b08, 0x00000000 },
     { 0x0000aa94, 0x00000000, 0x00000000, 0x00078b0c, 0x00078b0c, 0x00000000 },
     { 0x0000aa98, 0x00000000, 0x00000000, 0x00078b80, 0x00078b80, 0x00000000 },
@@ -6683,25 +6683,6 @@ static const u_int32_t ar9271Modes_9271[][6] = {
     { 0x0000a21c, 0x1883800a, 0x1883800a, 0x1883800a, 0x1883800a, 0x1883800a },
     { 0x0000a230, 0x00000000, 0x00000000, 0x00000210, 0x00000108, 0x00000000 },
     { 0x0000a250, 0x0004f000, 0x0004f000, 0x0004a000, 0x0004a000, 0x0004a000 },
-    { 0x0000a274, 0x0a21c652, 0x0a21c652, 0x0a218652, 0x0a218652, 0x0a22a652 },
-    { 0x0000a300, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000 },
-    { 0x0000a304, 0x00000000, 0x00000000, 0x00009200, 0x00009200, 0x00000000 },
-    { 0x0000a308, 0x00000000, 0x00000000, 0x00010208, 0x00010208, 0x00000000 },
-    { 0x0000a30c, 0x00000000, 0x00000000, 0x00019608, 0x00019608, 0x00000000 },
-    { 0x0000a310, 0x00000000, 0x00000000, 0x0001e610, 0x0001e610, 0x00000000 },
-    { 0x0000a314, 0x00000000, 0x00000000, 0x0002d6d0, 0x0002d6d0, 0x00000000 },
-    { 0x0000a318, 0x00000000, 0x00000000, 0x00039758, 0x00039758, 0x00000000 },
-    { 0x0000a31c, 0x00000000, 0x00000000, 0x0003b759, 0x0003b759, 0x00000000 },
-    { 0x0000a320, 0x00000000, 0x00000000, 0x0003d75a, 0x0003d75a, 0x00000000 },
-    { 0x0000a324, 0x00000000, 0x00000000, 0x0004175c, 0x0004175c, 0x00000000 },
-    { 0x0000a328, 0x00000000, 0x00000000, 0x0004575e, 0x0004575e, 0x00000000 },
-    { 0x0000a32c, 0x00000000, 0x00000000, 0x0004979f, 0x0004979f, 0x00000000 },
-    { 0x0000a330, 0x00000000, 0x00000000, 0x0004d7df, 0x0004d7df, 0x00000000 },
-    { 0x0000a334, 0x000368de, 0x000368de, 0x000368de, 0x000368de, 0x00000000 },
-    { 0x0000a338, 0x0003891e, 0x0003891e, 0x0003891e, 0x0003891e, 0x00000000 },
-    { 0x0000a33c, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x00000000 },
-    { 0x0000a340, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
-    { 0x0000a344, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
     { 0x0000a358, 0x7999aa02, 0x7999aa02, 0x7999aa0e, 0x7999aa0e, 0x7999aa0e },
 };
 
@@ -6879,7 +6860,7 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x00008258, 0x00000000 },
     { 0x0000825c, 0x400000ff },
     { 0x00008260, 0x00080922 },
-    { 0x00008264, 0x88a00010 },
+    { 0x00008264, 0xa8a00010 },
     { 0x00008270, 0x00000000 },
     { 0x00008274, 0x40000000 },
     { 0x00008278, 0x003e4180 },
@@ -6910,13 +6891,10 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x00007810, 0x71c0d388 },
     { 0x00007814, 0x924934a8 },
     { 0x0000781c, 0x00000000 },
-    { 0x00007820, 0x00000c04 },
-    { 0x00007824, 0x00d8abff },
     { 0x00007828, 0x66964300 },
     { 0x0000782c, 0x8db6d961 },
     { 0x00007830, 0x8db6d96c },
     { 0x00007834, 0x6140008b },
-    { 0x00007838, 0x00000029 },
     { 0x0000783c, 0x72ee0a72 },
     { 0x00007840, 0xbbfffffc },
     { 0x00007844, 0x000c0db6 },
@@ -6929,7 +6907,6 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x00007860, 0x21084210 },
     { 0x00007864, 0xf7d7ffde },
     { 0x00007868, 0xc2034080 },
-    { 0x0000786c, 0x48609eb4 },
     { 0x00007870, 0x10142c00 },
     { 0x00009808, 0x00000000 },
     { 0x0000980c, 0xafe68e30 },
@@ -6982,9 +6959,6 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x000099e8, 0x3c466478 },
     { 0x000099ec, 0x0cc80caa },
     { 0x000099f0, 0x00000000 },
-    { 0x0000a1f4, 0x00000000 },
-    { 0x0000a1f8, 0x71733d01 },
-    { 0x0000a1fc, 0xd0ad5c12 },
     { 0x0000a208, 0x803e68c8 },
     { 0x0000a210, 0x4080a333 },
     { 0x0000a214, 0x00206c10 },
@@ -7004,13 +6978,9 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x0000a260, 0xdfa90f01 },
     { 0x0000a268, 0x00000000 },
     { 0x0000a26c, 0x0ebae9e6 },
-    { 0x0000a278, 0x3bdef7bd },
-    { 0x0000a27c, 0x050e83bd },
     { 0x0000a388, 0x0c000000 },
     { 0x0000a38c, 0x20202020 },
     { 0x0000a390, 0x20202020 },
-    { 0x0000a394, 0x3bdef7bd },
-    { 0x0000a398, 0x000003bd },
     { 0x0000a39c, 0x00000001 },
     { 0x0000a3a0, 0x00000000 },
     { 0x0000a3a4, 0x00000000 },
@@ -7025,8 +6995,6 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x0000a3cc, 0x20202020 },
     { 0x0000a3d0, 0x20202020 },
     { 0x0000a3d4, 0x20202020 },
-    { 0x0000a3dc, 0x3bdef7bd },
-    { 0x0000a3e0, 0x000003bd },
     { 0x0000a3e4, 0x00000000 },
     { 0x0000a3e8, 0x18c43433 },
     { 0x0000a3ec, 0x00f70081 },
@@ -7046,7 +7014,102 @@ static const u_int32_t ar9271Common_9271[][2] = {
     { 0x0000d384, 0xf3307ff0 },
 };
 
+static const u_int32_t ar9271Common_normal_cck_fir_coeff_9271[][2] = {
+    { 0x0000a1f4, 0x00fffeff },
+    { 0x0000a1f8, 0x00f5f9ff },
+    { 0x0000a1fc, 0xb79f6427 },
+};
+
+static const u_int32_t ar9271Common_japan_2484_cck_fir_coeff_9271[][2] = {
+    { 0x0000a1f4, 0x00000000 },
+    { 0x0000a1f8, 0xefff0301 },
+    { 0x0000a1fc, 0xca9228ee },
+};
+
 static const u_int32_t ar9271Modes_9271_1_0_only[][6] = {
     { 0x00009910, 0x30002311, 0x30002311, 0x30002311, 0x30002311, 0x30002311 },
     { 0x00009828, 0x0a020001, 0x0a020001, 0x0a020001, 0x0a020001, 0x0a020001 },
 };
+
+static const u_int32_t ar9271Modes_9271_ANI_reg[][6] = {
+    { 0x00009850, 0x6d4000e2, 0x6d4000e2, 0x6d4000e2, 0x6d4000e2, 0x6d4000e2 },
+    { 0x0000985c, 0x3139605e, 0x3139605e, 0x3137605e, 0x3137605e, 0x3139605e },
+    { 0x00009858, 0x7ec84d2e, 0x7ec84d2e, 0x7ec84d2e, 0x7ec84d2e, 0x7ec84d2e },
+    { 0x0000986c, 0x06903881, 0x06903881, 0x06903881, 0x06903881, 0x06903881 },
+    { 0x00009868, 0x5ac640d0, 0x5ac640d0, 0x5ac640d0, 0x5ac640d0, 0x5ac640d0 },
+    { 0x0000a208, 0x803e68c8, 0x803e68c8, 0x803e68c8, 0x803e68c8, 0x803e68c8 },
+    { 0x00009924, 0xd00a8007, 0xd00a8007, 0xd00a800d, 0xd00a800d, 0xd00a800d },
+    { 0x000099c0, 0x05eea6d4, 0x05eea6d4, 0x05eea6d4, 0x05eea6d4, 0x05eea6d4 },
+};
+
+static const u_int32_t ar9271Modes_normal_power_tx_gain_9271[][6] = {
+    { 0x0000a300, 0x00000000, 0x00000000, 0x00000000, 0x00000000, 0x00000000 },
+    { 0x0000a304, 0x00000000, 0x00000000, 0x00009200, 0x00009200, 0x00000000 },
+    { 0x0000a308, 0x00000000, 0x00000000, 0x00010208, 0x00010208, 0x00000000 },
+    { 0x0000a30c, 0x00000000, 0x00000000, 0x00019608, 0x00019608, 0x00000000 },
+    { 0x0000a310, 0x00000000, 0x00000000, 0x0001e610, 0x0001e610, 0x00000000 },
+    { 0x0000a314, 0x00000000, 0x00000000, 0x0002d6d0, 0x0002d6d0, 0x00000000 },
+    { 0x0000a318, 0x00000000, 0x00000000, 0x00039758, 0x00039758, 0x00000000 },
+    { 0x0000a31c, 0x00000000, 0x00000000, 0x0003b759, 0x0003b759, 0x00000000 },
+    { 0x0000a320, 0x00000000, 0x00000000, 0x0003d75a, 0x0003d75a, 0x00000000 },
+    { 0x0000a324, 0x00000000, 0x00000000, 0x0004175c, 0x0004175c, 0x00000000 },
+    { 0x0000a328, 0x00000000, 0x00000000, 0x0004575e, 0x0004575e, 0x00000000 },
+    { 0x0000a32c, 0x00000000, 0x00000000, 0x0004979f, 0x0004979f, 0x00000000 },
+    { 0x0000a330, 0x00000000, 0x00000000, 0x0004d7df, 0x0004d7df, 0x00000000 },
+    { 0x0000a334, 0x000368de, 0x000368de, 0x000368de, 0x000368de, 0x00000000 },
+    { 0x0000a338, 0x0003891e, 0x0003891e, 0x0003891e, 0x0003891e, 0x00000000 },
+    { 0x0000a33c, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x00000000 },
+    { 0x0000a340, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a344, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a348, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a34c, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a350, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a354, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x00007838, 0x00000029, 0x00000029, 0x00000029, 0x00000029, 0x00000029 },
+    { 0x00007824, 0x00d8abff, 0x00d8abff, 0x00d8abff, 0x00d8abff, 0x00d8abff },
+    { 0x0000786c, 0x48609eb4, 0x48609eb4, 0x48609eb4, 0x48609eb4, 0x48609eb4 },
+    { 0x00007820, 0x00000c04, 0x00000c04, 0x00000c04, 0x00000c04, 0x00000c04 },
+    { 0x0000a274, 0x0a21c652, 0x0a21c652, 0x0a218652, 0x0a218652, 0x0a22a652 },
+    { 0x0000a278, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd },
+    { 0x0000a27c, 0x050e83bd, 0x050e83bd, 0x050e83bd, 0x050e83bd, 0x050e83bd },
+    { 0x0000a394, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd },
+    { 0x0000a398, 0x000003bd, 0x000003bd, 0x000003bd, 0x000003bd, 0x000003bd },
+    { 0x0000a3dc, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd, 0x3bdef7bd },
+    { 0x0000a3e0, 0x000003bd, 0x000003bd, 0x000003bd, 0x000003bd, 0x000003bd },
+};
+
+static const u_int32_t ar9271Modes_high_power_tx_gain_9271[][6] = {
+    { 0x0000a300, 0x00000000, 0x00000000, 0x00010000, 0x00010000, 0x00000000 },
+    { 0x0000a304, 0x00000000, 0x00000000, 0x00016200, 0x00016200, 0x00000000 },
+    { 0x0000a308, 0x00000000, 0x00000000, 0x00018201, 0x00018201, 0x00000000 },
+    { 0x0000a30c, 0x00000000, 0x00000000, 0x0001b240, 0x0001b240, 0x00000000 },
+    { 0x0000a310, 0x00000000, 0x00000000, 0x0001d241, 0x0001d241, 0x00000000 },
+    { 0x0000a314, 0x00000000, 0x00000000, 0x0001f600, 0x0001f600, 0x00000000 },
+    { 0x0000a318, 0x00000000, 0x00000000, 0x00022800, 0x00022800, 0x00000000 },
+    { 0x0000a31c, 0x00000000, 0x00000000, 0x00026802, 0x00026802, 0x00000000 },
+    { 0x0000a320, 0x00000000, 0x00000000, 0x0002b805, 0x0002b805, 0x00000000 },
+    { 0x0000a324, 0x00000000, 0x00000000, 0x0002ea41, 0x0002ea41, 0x00000000 },
+    { 0x0000a328, 0x00000000, 0x00000000, 0x00038b00, 0x00038b00, 0x00000000 },
+    { 0x0000a32c, 0x00000000, 0x00000000, 0x0003ab40, 0x0003ab40, 0x00000000 },
+    { 0x0000a330, 0x00000000, 0x00000000, 0x0003cd80, 0x0003cd80, 0x00000000 },
+    { 0x0000a334, 0x000368de, 0x000368de, 0x000368de, 0x000368de, 0x00000000 },
+    { 0x0000a338, 0x0003891e, 0x0003891e, 0x0003891e, 0x0003891e, 0x00000000 },
+    { 0x0000a33c, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x0003a95e, 0x00000000 },
+    { 0x0000a340, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a344, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a348, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a34c, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a350, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x0000a354, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x0003e9df, 0x00000000 },
+    { 0x00007838, 0x0000002b, 0x0000002b, 0x0000002b, 0x0000002b, 0x0000002b },
+    { 0x00007824, 0x00d8a7ff, 0x00d8a7ff, 0x00d8a7ff, 0x00d8a7ff, 0x00d8a7ff },
+    { 0x0000786c, 0x08609eb6, 0x08609eb6, 0x08609eba, 0x08609eba, 0x08609eb6 },
+    { 0x00007820, 0x00000c00, 0x00000c00, 0x00000c00, 0x00000c00, 0x00000c00 },
+    { 0x0000a274, 0x0a22a652, 0x0a22a652, 0x0a212652, 0x0a212652, 0x0a22a652 },
+    { 0x0000a278, 0x0e739ce7, 0x0e739ce7, 0x0e739ce7, 0x0e739ce7, 0x0e739ce7 },
+    { 0x0000a27c, 0x05018063, 0x05038063, 0x05018063, 0x05018063, 0x05018063 },
+    { 0x0000a394, 0x06318c63, 0x06318c63, 0x06318c63, 0x06318c63, 0x06318c63 },
+    { 0x0000a398, 0x00000063, 0x00000063, 0x00000063, 0x00000063, 0x00000063 },
+    { 0x0000a3dc, 0x06318c63, 0x06318c63, 0x06318c63, 0x06318c63, 0x06318c63 },
+    { 0x0000a3e0, 0x00000063, 0x00000063, 0x00000063, 0x00000063, 0x00000063 },
+};
diff --git a/drivers/net/wireless/ath/ath9k/mac.c b/drivers/net/wireless/ath/ath9k/mac.c
index efc420cd42bf..7af823a1527d 100644
--- a/drivers/net/wireless/ath/ath9k/mac.c
+++ b/drivers/net/wireless/ath/ath9k/mac.c
@@ -31,8 +31,10 @@ static void ath9k_hw_set_txq_interrupts(struct ath_hw *ah,
         REG_WRITE(ah, AR_IMR_S1,
                   SM(ah->txerr_interrupt_mask, AR_IMR_S1_QCU_TXERR)
                   | SM(ah->txeol_interrupt_mask, AR_IMR_S1_QCU_TXEOL));
-        REG_RMW_FIELD(ah, AR_IMR_S2,
-                      AR_IMR_S2_QCU_TXURN, ah->txurn_interrupt_mask);
+
+        ah->imrs2_reg &= ~AR_IMR_S2_QCU_TXURN;
+        ah->imrs2_reg |= (ah->txurn_interrupt_mask & AR_IMR_S2_QCU_TXURN);
+        REG_WRITE(ah, AR_IMR_S2, ah->imrs2_reg);
 }
 
 u32 ath9k_hw_gettxbuf(struct ath_hw *ah, u32 q)
@@ -349,7 +351,7 @@ void ath9k_hw_set11n_txdesc(struct ath_hw *ah, struct ath_desc *ds,
 
         ads->ds_ctl6 = SM(keyType, AR_EncrType);
 
-        if (AR_SREV_9285(ah)) {
+        if (AR_SREV_9285(ah) || AR_SREV_9271(ah)) {
                 ads->ds_ctl8 = 0;
                 ads->ds_ctl9 = 0;
                 ads->ds_ctl10 = 0;
diff --git a/drivers/net/wireless/ath/ath9k/mac.h b/drivers/net/wireless/ath/ath9k/mac.h
index 29851e6376a9..a5e543bd2271 100644
--- a/drivers/net/wireless/ath/ath9k/mac.h
+++ b/drivers/net/wireless/ath/ath9k/mac.h
@@ -150,6 +150,32 @@ struct ath_rx_status {
         u32 evm2;
 };
 
+struct ath_htc_rx_status {
+        u64 rs_tstamp;
+        u16 rs_datalen;
+        u8 rs_status;
+        u8 rs_phyerr;
+        int8_t rs_rssi;
+        int8_t rs_rssi_ctl0;
+        int8_t rs_rssi_ctl1;
+        int8_t rs_rssi_ctl2;
+        int8_t rs_rssi_ext0;
+        int8_t rs_rssi_ext1;
+        int8_t rs_rssi_ext2;
+        u8 rs_keyix;
+        u8 rs_rate;
+        u8 rs_antenna;
+        u8 rs_more;
+        u8 rs_isaggr;
+        u8 rs_moreaggr;
+        u8 rs_num_delims;
+        u8 rs_flags;
+        u8 rs_dummy;
+        u32 evm0;
+        u32 evm1;
+        u32 evm2;
+};
+
 #define ATH9K_RXERR_CRC           0x01
 #define ATH9K_RXERR_PHY           0x02
 #define ATH9K_RXERR_FIFO          0x04
diff --git a/drivers/net/wireless/ath/ath9k/rc.c b/drivers/net/wireless/ath/ath9k/rc.c
index 0e79e58cf4c9..3c4b5d2d9e16 100644
--- a/drivers/net/wireless/ath/ath9k/rc.c
+++ b/drivers/net/wireless/ath/ath9k/rc.c
@@ -1226,8 +1226,12 @@ static void ath_tx_status(void *priv, struct ieee80211_supported_band *sband,
                 long_retry = rate->count - 1;
         }
 
-        if (!priv_sta || !ieee80211_is_data(fc) ||
-            !(tx_info->pad[0] & ATH_TX_INFO_UPDATE_RC))
+        if (!priv_sta || !ieee80211_is_data(fc))
+                return;
+
+        /* This packet was aggregated but doesn't carry status info */
+        if ((tx_info->flags & IEEE80211_TX_CTL_AMPDU) &&
+            !(tx_info->flags & IEEE80211_TX_STAT_AMPDU))
                 return;
 
         if (tx_info->flags & IEEE80211_TX_STAT_TX_FILTERED)
diff --git a/drivers/net/wireless/ath/ath9k/rc.h b/drivers/net/wireless/ath/ath9k/rc.h
index 4f6d6fd442f4..36083dde863d 100644
--- a/drivers/net/wireless/ath/ath9k/rc.h
+++ b/drivers/net/wireless/ath/ath9k/rc.h
@@ -110,8 +110,8 @@ struct ath_rate_table {
         int rate_cnt;
         int mcs_start;
         struct {
-                int valid;
-                int valid_single_stream;
+                u8 valid;
+                u8 valid_single_stream;
                 u8 phy;
                 u32 ratekbps;
                 u32 user_ratekbps;
@@ -172,7 +172,6 @@ struct ath_rate_priv {
 
 #define ATH_TX_INFO_FRAME_TYPE_INTERNAL (1 << 0)
 #define ATH_TX_INFO_FRAME_TYPE_PAUSE    (1 << 1)
-#define ATH_TX_INFO_UPDATE_RC           (1 << 2)
 #define ATH_TX_INFO_XRETRY              (1 << 3)
 #define ATH_TX_INFO_UNDERRUN            (1 << 4)
 
diff --git a/drivers/net/wireless/ath/ath9k/reg.h b/drivers/net/wireless/ath/ath9k/reg.h
index 72cfa8ebd9ae..198e41dd38a6 100644
--- a/drivers/net/wireless/ath/ath9k/reg.h
+++ b/drivers/net/wireless/ath/ath9k/reg.h
@@ -940,6 +940,7 @@ enum {
 #define AR928X_NUM_GPIO                          10
 #define AR9285_NUM_GPIO                          12
 #define AR9287_NUM_GPIO                          11
+#define AR9271_NUM_GPIO                          16
 
 #define AR_GPIO_IN_OUT                           0x4048
 #define AR_GPIO_IN_VAL                           0x0FFFC000
@@ -950,6 +951,8 @@ enum {
 #define AR9285_GPIO_IN_VAL_S                     12
 #define AR9287_GPIO_IN_VAL                       0x003FF800
 #define AR9287_GPIO_IN_VAL_S                     11
+#define AR9271_GPIO_IN_VAL                       0xFFFF0000
+#define AR9271_GPIO_IN_VAL_S                     16
 
 #define AR_GPIO_OE_OUT                           0x404c
 #define AR_GPIO_OE_OUT_DRV                       0x3
diff --git a/drivers/net/wireless/ath/ath9k/wmi.c b/drivers/net/wireless/ath/ath9k/wmi.c
new file mode 100644
index 000000000000..818dea0164ec
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/wmi.c
@@ -0,0 +1,319 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include "htc.h"
+
+static const char *wmi_cmd_to_name(enum wmi_cmd_id wmi_cmd)
+{
+        switch (wmi_cmd) {
+        case WMI_ECHO_CMDID:
+                return "WMI_ECHO_CMDID";
+        case WMI_ACCESS_MEMORY_CMDID:
+                return "WMI_ACCESS_MEMORY_CMDID";
+        case WMI_DISABLE_INTR_CMDID:
+                return "WMI_DISABLE_INTR_CMDID";
+        case WMI_ENABLE_INTR_CMDID:
+                return "WMI_ENABLE_INTR_CMDID";
+        case WMI_RX_LINK_CMDID:
+                return "WMI_RX_LINK_CMDID";
+        case WMI_ATH_INIT_CMDID:
+                return "WMI_ATH_INIT_CMDID";
+        case WMI_ABORT_TXQ_CMDID:
+                return "WMI_ABORT_TXQ_CMDID";
+        case WMI_STOP_TX_DMA_CMDID:
+                return "WMI_STOP_TX_DMA_CMDID";
+        case WMI_STOP_DMA_RECV_CMDID:
+                return "WMI_STOP_DMA_RECV_CMDID";
+        case WMI_ABORT_TX_DMA_CMDID:
+                return "WMI_ABORT_TX_DMA_CMDID";
+        case WMI_DRAIN_TXQ_CMDID:
+                return "WMI_DRAIN_TXQ_CMDID";
+        case WMI_DRAIN_TXQ_ALL_CMDID:
+                return "WMI_DRAIN_TXQ_ALL_CMDID";
+        case WMI_START_RECV_CMDID:
+                return "WMI_START_RECV_CMDID";
+        case WMI_STOP_RECV_CMDID:
+                return "WMI_STOP_RECV_CMDID";
+        case WMI_FLUSH_RECV_CMDID:
+                return "WMI_FLUSH_RECV_CMDID";
+        case WMI_SET_MODE_CMDID:
+                return "WMI_SET_MODE_CMDID";
+        case WMI_RESET_CMDID:
+                return "WMI_RESET_CMDID";
+        case WMI_NODE_CREATE_CMDID:
+                return "WMI_NODE_CREATE_CMDID";
+        case WMI_NODE_REMOVE_CMDID:
+                return "WMI_NODE_REMOVE_CMDID";
+        case WMI_VAP_REMOVE_CMDID:
+                return "WMI_VAP_REMOVE_CMDID";
+        case WMI_VAP_CREATE_CMDID:
+                return "WMI_VAP_CREATE_CMDID";
+        case WMI_BEACON_UPDATE_CMDID:
+                return "WMI_BEACON_UPDATE_CMDID";
+        case WMI_REG_READ_CMDID:
+                return "WMI_REG_READ_CMDID";
+        case WMI_REG_WRITE_CMDID:
+                return "WMI_REG_WRITE_CMDID";
+        case WMI_RC_STATE_CHANGE_CMDID:
+                return "WMI_RC_STATE_CHANGE_CMDID";
+        case WMI_RC_RATE_UPDATE_CMDID:
+                return "WMI_RC_RATE_UPDATE_CMDID";
+        case WMI_DEBUG_INFO_CMDID:
+                return "WMI_DEBUG_INFO_CMDID";
+        case WMI_HOST_ATTACH:
+                return "WMI_HOST_ATTACH";
+        case WMI_TARGET_IC_UPDATE_CMDID:
+                return "WMI_TARGET_IC_UPDATE_CMDID";
+        case WMI_TGT_STATS_CMDID:
+                return "WMI_TGT_STATS_CMDID";
+        case WMI_TX_AGGR_ENABLE_CMDID:
+                return "WMI_TX_AGGR_ENABLE_CMDID";
+        case WMI_TGT_DETACH_CMDID:
+                return "WMI_TGT_DETACH_CMDID";
+        case WMI_TGT_TXQ_ENABLE_CMDID:
+                return "WMI_TGT_TXQ_ENABLE_CMDID";
+        }
+
+        return "Bogus";
+}
+
+struct wmi *ath9k_init_wmi(struct ath9k_htc_priv *priv)
+{
+        struct wmi *wmi;
+
+        wmi = kzalloc(sizeof(struct wmi), GFP_KERNEL);
+        if (!wmi)
+                return NULL;
+
+        wmi->drv_priv = priv;
+        wmi->stopped = false;
+        mutex_init(&wmi->op_mutex);
+        init_completion(&wmi->cmd_wait);
+
+        return wmi;
+}
+
+void ath9k_deinit_wmi(struct ath9k_htc_priv *priv)
+{
+        struct wmi *wmi = priv->wmi;
+
+        mutex_lock(&wmi->op_mutex);
+        wmi->stopped = true;
+        mutex_unlock(&wmi->op_mutex);
+
+        kfree(priv->wmi);
+}
+
+void ath9k_wmi_tasklet(unsigned long data)
+{
+        struct ath9k_htc_priv *priv = (struct ath9k_htc_priv *)data;
+        struct ath_common *common = ath9k_hw_common(priv->ah);
+        struct wmi_cmd_hdr *hdr;
+        struct wmi_swba *swba_hdr;
+        enum wmi_event_id event;
+        struct sk_buff *skb;
+        void *wmi_event;
+        unsigned long flags;
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+        u32 txrate;
+#endif
+
+        spin_lock_irqsave(&priv->wmi->wmi_lock, flags);
+        skb = priv->wmi->wmi_skb;
+        spin_unlock_irqrestore(&priv->wmi->wmi_lock, flags);
+
+        hdr = (struct wmi_cmd_hdr *) skb->data;
+        event = be16_to_cpu(hdr->command_id);
+        wmi_event = skb_pull(skb, sizeof(struct wmi_cmd_hdr));
+
+        ath_print(common, ATH_DBG_WMI,
+                  "WMI Event: 0x%x\n", event);
+
+        switch (event) {
+        case WMI_TGT_RDY_EVENTID:
+                break;
+        case WMI_SWBA_EVENTID:
+                swba_hdr = (struct wmi_swba *) wmi_event;
+                ath9k_htc_swba(priv, swba_hdr->beacon_pending);
+                break;
+        case WMI_FATAL_EVENTID:
+                break;
+        case WMI_TXTO_EVENTID:
+                break;
+        case WMI_BMISS_EVENTID:
+                break;
+        case WMI_WLAN_TXCOMP_EVENTID:
+                break;
+        case WMI_DELBA_EVENTID:
+                break;
+        case WMI_TXRATE_EVENTID:
+#ifdef CONFIG_ATH9K_HTC_DEBUGFS
+                txrate = ((struct wmi_event_txrate *)wmi_event)->txrate;
+                priv->debug.txrate = be32_to_cpu(txrate);
+#endif
+                break;
+        default:
+                break;
+        }
+
+        dev_kfree_skb_any(skb);
+}
+
+static void ath9k_wmi_rsp_callback(struct wmi *wmi, struct sk_buff *skb)
+{
+        skb_pull(skb, sizeof(struct wmi_cmd_hdr));
+
+        if (wmi->cmd_rsp_buf != NULL && wmi->cmd_rsp_len != 0)
+                memcpy(wmi->cmd_rsp_buf, skb->data, wmi->cmd_rsp_len);
+
+        complete(&wmi->cmd_wait);
+}
+
+static void ath9k_wmi_ctrl_rx(void *priv, struct sk_buff *skb,
+                              enum htc_endpoint_id epid)
+{
+        struct wmi *wmi = (struct wmi *) priv;
+        struct wmi_cmd_hdr *hdr;
+        u16 cmd_id;
+
+        if (unlikely(wmi->stopped))
+                goto free_skb;
+
+        hdr = (struct wmi_cmd_hdr *) skb->data;
+        cmd_id = be16_to_cpu(hdr->command_id);
+
+        if (cmd_id & 0x1000) {
+                spin_lock(&wmi->wmi_lock);
+                wmi->wmi_skb = skb;
+                spin_unlock(&wmi->wmi_lock);
+                tasklet_schedule(&wmi->drv_priv->wmi_tasklet);
+                return;
+        }
+
+        /* WMI command response */
+        ath9k_wmi_rsp_callback(wmi, skb);
+
+free_skb:
+        dev_kfree_skb_any(skb);
+}
+
+static void ath9k_wmi_ctrl_tx(void *priv, struct sk_buff *skb,
+                              enum htc_endpoint_id epid, bool txok)
+{
+        dev_kfree_skb_any(skb);
+}
+
+int ath9k_wmi_connect(struct htc_target *htc, struct wmi *wmi,
+                      enum htc_endpoint_id *wmi_ctrl_epid)
+{
+        struct htc_service_connreq connect;
+        int ret;
+
+        wmi->htc = htc;
+
+        memset(&connect, 0, sizeof(connect));
+
+        connect.ep_callbacks.priv = wmi;
+        connect.ep_callbacks.tx = ath9k_wmi_ctrl_tx;
+        connect.ep_callbacks.rx = ath9k_wmi_ctrl_rx;
+        connect.service_id = WMI_CONTROL_SVC;
+
+        ret = htc_connect_service(htc, &connect, &wmi->ctrl_epid);
+        if (ret)
+                return ret;
+
+        *wmi_ctrl_epid = wmi->ctrl_epid;
+
+        return 0;
+}
+
+static int ath9k_wmi_cmd_issue(struct wmi *wmi,
+                               struct sk_buff *skb,
+                               enum wmi_cmd_id cmd, u16 len)
+{
+        struct wmi_cmd_hdr *hdr;
+
+        hdr = (struct wmi_cmd_hdr *) skb_push(skb, sizeof(struct wmi_cmd_hdr));
+        hdr->command_id = cpu_to_be16(cmd);
+        hdr->seq_no = cpu_to_be16(++wmi->tx_seq_id);
+
+        return htc_send(wmi->htc, skb, wmi->ctrl_epid, NULL);
+}
+
+int ath9k_wmi_cmd(struct wmi *wmi, enum wmi_cmd_id cmd_id,
+                  u8 *cmd_buf, u32 cmd_len,
+                  u8 *rsp_buf, u32 rsp_len,
+                  u32 timeout)
+{
+        struct ath_hw *ah = wmi->drv_priv->ah;
+        struct ath_common *common = ath9k_hw_common(ah);
+        u16 headroom = sizeof(struct htc_frame_hdr) +
+                       sizeof(struct wmi_cmd_hdr);
+        struct sk_buff *skb;
+        u8 *data;
+        int time_left, ret = 0;
+
+        if (!wmi)
+                return -EINVAL;
+
+        skb = dev_alloc_skb(headroom + cmd_len);
+        if (!skb)
+                return -ENOMEM;
+
+        skb_reserve(skb, headroom);
+
+        if (cmd_len != 0 && cmd_buf != NULL) {
+                data = (u8 *) skb_put(skb, cmd_len);
+                memcpy(data, cmd_buf, cmd_len);
+        }
+
+        mutex_lock(&wmi->op_mutex);
+
+        /* check if wmi stopped flag is set */
+        if (unlikely(wmi->stopped)) {
+                ret = -EPROTO;
+                goto out;
+        }
+
+        /* record the rsp buffer and length */
+        wmi->cmd_rsp_buf = rsp_buf;
+        wmi->cmd_rsp_len = rsp_len;
+
+        ret = ath9k_wmi_cmd_issue(wmi, skb, cmd_id, cmd_len);
+        if (ret)
+                goto out;
+
+        time_left = wait_for_completion_timeout(&wmi->cmd_wait, timeout);
+        if (!time_left) {
+                ath_print(common, ATH_DBG_WMI,
+                          "Timeout waiting for WMI command: %s\n",
+                          wmi_cmd_to_name(cmd_id));
+                mutex_unlock(&wmi->op_mutex);
+                return -ETIMEDOUT;
+        }
+
+        mutex_unlock(&wmi->op_mutex);
+
+        return 0;
+
+out:
+        ath_print(common, ATH_DBG_WMI,
+                  "WMI failure for: %s\n", wmi_cmd_to_name(cmd_id));
+        mutex_unlock(&wmi->op_mutex);
+        dev_kfree_skb_any(skb);
+
+        return ret;
+}
diff --git a/drivers/net/wireless/ath/ath9k/wmi.h b/drivers/net/wireless/ath/ath9k/wmi.h
new file mode 100644
index 000000000000..39ef926f27c2
--- /dev/null
+++ b/drivers/net/wireless/ath/ath9k/wmi.h
@@ -0,0 +1,126 @@
+/*
+ * Copyright (c) 2010 Atheros Communications Inc.
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#ifndef WMI_H
+#define WMI_H
+
+
+struct wmi_event_txrate {
+        u32 txrate;
+        struct {
+                u8 rssi_thresh;
+                u8 per;
+        } rc_stats;
+} __packed;
+
+struct wmi_cmd_hdr {
+        u16 command_id;
+        u16 seq_no;
+} __packed;
+
+struct wmi_swba {
+        u8 beacon_pending;
+} __packed;
+
+enum wmi_cmd_id {
+        WMI_ECHO_CMDID = 0x0001,
+        WMI_ACCESS_MEMORY_CMDID,
+
+        /* Commands to Target */
+        WMI_DISABLE_INTR_CMDID,
+        WMI_ENABLE_INTR_CMDID,
+        WMI_RX_LINK_CMDID,
+        WMI_ATH_INIT_CMDID,
+        WMI_ABORT_TXQ_CMDID,
+        WMI_STOP_TX_DMA_CMDID,
+        WMI_STOP_DMA_RECV_CMDID,
+        WMI_ABORT_TX_DMA_CMDID,
+        WMI_DRAIN_TXQ_CMDID,
+        WMI_DRAIN_TXQ_ALL_CMDID,
+        WMI_START_RECV_CMDID,
+        WMI_STOP_RECV_CMDID,
+        WMI_FLUSH_RECV_CMDID,
+        WMI_SET_MODE_CMDID,
+        WMI_RESET_CMDID,
+        WMI_NODE_CREATE_CMDID,
+        WMI_NODE_REMOVE_CMDID,
+        WMI_VAP_REMOVE_CMDID,
+        WMI_VAP_CREATE_CMDID,
+        WMI_BEACON_UPDATE_CMDID,
+        WMI_REG_READ_CMDID,
+        WMI_REG_WRITE_CMDID,
+        WMI_RC_STATE_CHANGE_CMDID,
+        WMI_RC_RATE_UPDATE_CMDID,
+        WMI_DEBUG_INFO_CMDID,
+        WMI_HOST_ATTACH,
+        WMI_TARGET_IC_UPDATE_CMDID,
+        WMI_TGT_STATS_CMDID,
+        WMI_TX_AGGR_ENABLE_CMDID,
+        WMI_TGT_DETACH_CMDID,
+        WMI_TGT_TXQ_ENABLE_CMDID,
+};
+
+enum wmi_event_id {
+        WMI_TGT_RDY_EVENTID = 0x1001,
+        WMI_SWBA_EVENTID,
+        WMI_FATAL_EVENTID,
+        WMI_TXTO_EVENTID,
+        WMI_BMISS_EVENTID,
+        WMI_WLAN_TXCOMP_EVENTID,
+        WMI_DELBA_EVENTID,
+        WMI_TXRATE_EVENTID,
+};
+
+struct wmi {
+        struct ath9k_htc_priv *drv_priv;
+        struct htc_target *htc;
+        enum htc_endpoint_id ctrl_epid;
+        struct mutex op_mutex;
+        struct completion cmd_wait;
+        u16 tx_seq_id;
+        u8 *cmd_rsp_buf;
+        u32 cmd_rsp_len;
+        bool stopped;
+
+        struct sk_buff *wmi_skb;
+        spinlock_t wmi_lock;
+};
+
+struct wmi *ath9k_init_wmi(struct ath9k_htc_priv *priv);
+void ath9k_deinit_wmi(struct ath9k_htc_priv *priv);
+int ath9k_wmi_connect(struct htc_target *htc, struct wmi *wmi,
+                      enum htc_endpoint_id *wmi_ctrl_epid);
+int ath9k_wmi_cmd(struct wmi *wmi, enum wmi_cmd_id cmd_id,
+                  u8 *cmd_buf, u32 cmd_len,
+                  u8 *rsp_buf, u32 rsp_len,
+                  u32 timeout);
+void ath9k_wmi_tasklet(unsigned long data);
+
+#define WMI_CMD(_wmi_cmd)                                               \
+        do {                                                            \
+                ret = ath9k_wmi_cmd(priv->wmi, _wmi_cmd, NULL, 0,       \
+                                    (u8 *) &cmd_rsp,                    \
+                                    sizeof(cmd_rsp), HZ);               \
+        } while (0)
+
+#define WMI_CMD_BUF(_wmi_cmd, _buf)                                     \
+        do {                                                            \
+                ret = ath9k_wmi_cmd(priv->wmi, _wmi_cmd,                \
+                                    (u8 *) _buf, sizeof(*_buf),         \
+                                    &cmd_rsp, sizeof(cmd_rsp), HZ);     \
+        } while (0)
+
+#endif /* WMI_H */
diff --git a/drivers/net/wireless/ath/ath9k/xmit.c b/drivers/net/wireless/ath/ath9k/xmit.c
index 294b486bc3ed..a3b6cf20f8a1 100644
--- a/drivers/net/wireless/ath/ath9k/xmit.c
+++ b/drivers/net/wireless/ath/ath9k/xmit.c
@@ -1928,10 +1928,10 @@ static void ath_tx_rc_status(struct ath_buf *bf, struct ath_desc *ds,
         tx_rateindex = ds->ds_txstat.ts_rateindex;
         WARN_ON(tx_rateindex >= hw->max_rates);
 
-        if (update_rc)
-                tx_info->pad[0] |= ATH_TX_INFO_UPDATE_RC;
         if (ds->ds_txstat.ts_status & ATH9K_TXERR_FILT)
                 tx_info->flags |= IEEE80211_TX_STAT_TX_FILTERED;
+        if ((tx_info->flags & IEEE80211_TX_CTL_AMPDU) && update_rc)
+                tx_info->flags |= IEEE80211_TX_STAT_AMPDU;
 
         if ((ds->ds_txstat.ts_status & ATH9K_TXERR_FILT) == 0 &&
             (bf->bf_flags & ATH9K_TXDESC_NOACK) == 0 && update_rc) {
diff --git a/drivers/net/wireless/ath/debug.h b/drivers/net/wireless/ath/debug.h
index 8263633c003c..873bf526e11f 100644
--- a/drivers/net/wireless/ath/debug.h
+++ b/drivers/net/wireless/ath/debug.h
@@ -59,6 +59,7 @@ enum ATH_DEBUG {
         ATH_DBG_PS              = 0x00000800,
         ATH_DBG_HWTIMER         = 0x00001000,
         ATH_DBG_BTCOEX          = 0x00002000,
+        ATH_DBG_WMI             = 0x00004000,
         ATH_DBG_ANY             = 0xffffffff
 };
 
diff --git a/drivers/net/wireless/b43/b43.h b/drivers/net/wireless/b43/b43.h
index b8807fb12c92..3a003e6803a5 100644
--- a/drivers/net/wireless/b43/b43.h
+++ b/drivers/net/wireless/b43/b43.h
@@ -104,6 +104,7 @@
 #define B43_MMIO_MACFILTER_CONTROL      0x420
 #define B43_MMIO_MACFILTER_DATA         0x422
 #define B43_MMIO_RCMTA_COUNT            0x43C
+#define B43_MMIO_PSM_PHY_HDR            0x492
 #define B43_MMIO_RADIO_HWENABLED_LO     0x49A
 #define B43_MMIO_GPIO_CONTROL           0x49C
 #define B43_MMIO_GPIO_MASK              0x49E
diff --git a/drivers/net/wireless/b43/main.c b/drivers/net/wireless/b43/main.c
index 1521b1e78d21..14cf3bd7ea51 100644
--- a/drivers/net/wireless/b43/main.c
+++ b/drivers/net/wireless/b43/main.c
@@ -4348,11 +4348,10 @@ static int b43_wireless_core_init(struct b43_wldev *dev)
         b43_set_phytxctl_defaults(dev);
 
         /* Minimum Contention Window */
-        if (phy->type == B43_PHYTYPE_B) {
+        if (phy->type == B43_PHYTYPE_B)
                 b43_shm_write16(dev, B43_SHM_SCRATCH, B43_SHM_SC_MINCONT, 0x1F);
-        } else {
+        else
                 b43_shm_write16(dev, B43_SHM_SCRATCH, B43_SHM_SC_MINCONT, 0xF);
-        }
         /* Maximum Contention Window */
         b43_shm_write16(dev, B43_SHM_SCRATCH, B43_SHM_SC_MAXCONT, 0x3FF);
 
diff --git a/drivers/net/wireless/b43/phy_n.c b/drivers/net/wireless/b43/phy_n.c
index 795bb1e3345d..6fd140ac7f9e 100644
--- a/drivers/net/wireless/b43/phy_n.c
+++ b/drivers/net/wireless/b43/phy_n.c
@@ -72,6 +72,22 @@ static void b43_nphy_rf_control_override(struct b43_wldev *dev, u16 field,
                                                 u16 value, u8 core, bool off);
 static void b43_nphy_rf_control_intc_override(struct b43_wldev *dev, u8 field,
                                                 u16 value, u8 core);
+static int nphy_channel_switch(struct b43_wldev *dev, unsigned int channel);
+
+static inline bool b43_empty_chanspec(struct b43_chanspec *chanspec)
+{
+        return !chanspec->channel && !chanspec->sideband &&
+                !chanspec->b_width && !chanspec->b_freq;
+}
+
+static inline bool b43_eq_chanspecs(struct b43_chanspec *chanspec1,
+                                        struct b43_chanspec *chanspec2)
+{
+        return (chanspec1->channel == chanspec2->channel &&
+                chanspec1->sideband == chanspec2->sideband &&
+                chanspec1->b_width == chanspec2->b_width &&
+                chanspec1->b_freq == chanspec2->b_freq);
+}
 
 void b43_nphy_set_rxantenna(struct b43_wldev *dev, int antenna)
 {//TODO
@@ -90,28 +106,38 @@ static enum b43_txpwr_result b43_nphy_op_recalc_txpower(struct b43_wldev *dev,
 static void b43_chantab_radio_upload(struct b43_wldev *dev,
                                      const struct b43_nphy_channeltab_entry *e)
 {
-        b43_radio_write16(dev, B2055_PLL_REF, e->radio_pll_ref);
-        b43_radio_write16(dev, B2055_RF_PLLMOD0, e->radio_rf_pllmod0);
-        b43_radio_write16(dev, B2055_RF_PLLMOD1, e->radio_rf_pllmod1);
-        b43_radio_write16(dev, B2055_VCO_CAPTAIL, e->radio_vco_captail);
-        b43_radio_write16(dev, B2055_VCO_CAL1, e->radio_vco_cal1);
-        b43_radio_write16(dev, B2055_VCO_CAL2, e->radio_vco_cal2);
-        b43_radio_write16(dev, B2055_PLL_LFC1, e->radio_pll_lfc1);
-        b43_radio_write16(dev, B2055_PLL_LFR1, e->radio_pll_lfr1);
-        b43_radio_write16(dev, B2055_PLL_LFC2, e->radio_pll_lfc2);
-        b43_radio_write16(dev, B2055_LGBUF_CENBUF, e->radio_lgbuf_cenbuf);
-        b43_radio_write16(dev, B2055_LGEN_TUNE1, e->radio_lgen_tune1);
-        b43_radio_write16(dev, B2055_LGEN_TUNE2, e->radio_lgen_tune2);
-        b43_radio_write16(dev, B2055_C1_LGBUF_ATUNE, e->radio_c1_lgbuf_atune);
-        b43_radio_write16(dev, B2055_C1_LGBUF_GTUNE, e->radio_c1_lgbuf_gtune);
-        b43_radio_write16(dev, B2055_C1_RX_RFR1, e->radio_c1_rx_rfr1);
-        b43_radio_write16(dev, B2055_C1_TX_PGAPADTN, e->radio_c1_tx_pgapadtn);
-        b43_radio_write16(dev, B2055_C1_TX_MXBGTRIM, e->radio_c1_tx_mxbgtrim);
-        b43_radio_write16(dev, B2055_C2_LGBUF_ATUNE, e->radio_c2_lgbuf_atune);
-        b43_radio_write16(dev, B2055_C2_LGBUF_GTUNE, e->radio_c2_lgbuf_gtune);
-        b43_radio_write16(dev, B2055_C2_RX_RFR1, e->radio_c2_rx_rfr1);
-        b43_radio_write16(dev, B2055_C2_TX_PGAPADTN, e->radio_c2_tx_pgapadtn);
-        b43_radio_write16(dev, B2055_C2_TX_MXBGTRIM, e->radio_c2_tx_mxbgtrim);
+        b43_radio_write(dev, B2055_PLL_REF, e->radio_pll_ref);
+        b43_radio_write(dev, B2055_RF_PLLMOD0, e->radio_rf_pllmod0);
+        b43_radio_write(dev, B2055_RF_PLLMOD1, e->radio_rf_pllmod1);
+        b43_radio_write(dev, B2055_VCO_CAPTAIL, e->radio_vco_captail);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+
+        b43_radio_write(dev, B2055_VCO_CAL1, e->radio_vco_cal1);
+        b43_radio_write(dev, B2055_VCO_CAL2, e->radio_vco_cal2);
+        b43_radio_write(dev, B2055_PLL_LFC1, e->radio_pll_lfc1);
+        b43_radio_write(dev, B2055_PLL_LFR1, e->radio_pll_lfr1);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+
+        b43_radio_write(dev, B2055_PLL_LFC2, e->radio_pll_lfc2);
+        b43_radio_write(dev, B2055_LGBUF_CENBUF, e->radio_lgbuf_cenbuf);
+        b43_radio_write(dev, B2055_LGEN_TUNE1, e->radio_lgen_tune1);
+        b43_radio_write(dev, B2055_LGEN_TUNE2, e->radio_lgen_tune2);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+
+        b43_radio_write(dev, B2055_C1_LGBUF_ATUNE, e->radio_c1_lgbuf_atune);
+        b43_radio_write(dev, B2055_C1_LGBUF_GTUNE, e->radio_c1_lgbuf_gtune);
+        b43_radio_write(dev, B2055_C1_RX_RFR1, e->radio_c1_rx_rfr1);
+        b43_radio_write(dev, B2055_C1_TX_PGAPADTN, e->radio_c1_tx_pgapadtn);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+
+        b43_radio_write(dev, B2055_C1_TX_MXBGTRIM, e->radio_c1_tx_mxbgtrim);
+        b43_radio_write(dev, B2055_C2_LGBUF_ATUNE, e->radio_c2_lgbuf_atune);
+        b43_radio_write(dev, B2055_C2_LGBUF_GTUNE, e->radio_c2_lgbuf_gtune);
+        b43_radio_write(dev, B2055_C2_RX_RFR1, e->radio_c2_rx_rfr1);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+
+        b43_radio_write(dev, B2055_C2_TX_PGAPADTN, e->radio_c2_tx_pgapadtn);
+        b43_radio_write(dev, B2055_C2_TX_MXBGTRIM, e->radio_c2_tx_mxbgtrim);
 }
 
 static void b43_chantab_phy_upload(struct b43_wldev *dev,
@@ -130,34 +156,20 @@ static void b43_nphy_tx_power_fix(struct b43_wldev *dev)
         //TODO
 }
 
-/* Tune the hardware to a new channel. */
-static int nphy_channel_switch(struct b43_wldev *dev, unsigned int channel)
-{
-        const struct b43_nphy_channeltab_entry *tabent;
 
-        tabent = b43_nphy_get_chantabent(dev, channel);
-        if (!tabent)
-                return -ESRCH;
+/* http://bcm-v4.sipsolutions.net/802.11/PHY/Radio/2055Setup */
+static void b43_radio_2055_setup(struct b43_wldev *dev,
+                                const struct b43_nphy_channeltab_entry *e)
+{
+        B43_WARN_ON(dev->phy.rev >= 3);
 
-        //FIXME enable/disable band select upper20 in RXCTL
-        if (0 /*FIXME 5Ghz*/)
-                b43_radio_maskset(dev, B2055_MASTER1, 0xFF8F, 0x20);
-        else
-                b43_radio_maskset(dev, B2055_MASTER1, 0xFF8F, 0x50);
-        b43_chantab_radio_upload(dev, tabent);
+        b43_chantab_radio_upload(dev, e);
         udelay(50);
-        b43_radio_write16(dev, B2055_VCO_CAL10, 5);
-        b43_radio_write16(dev, B2055_VCO_CAL10, 45);
-        b43_radio_write16(dev, B2055_VCO_CAL10, 65);
+        b43_radio_write(dev, B2055_VCO_CAL10, 5);
+        b43_radio_write(dev, B2055_VCO_CAL10, 45);
+        b43_read32(dev, B43_MMIO_MACCTL); /* flush writes */
+        b43_radio_write(dev, B2055_VCO_CAL10, 65);
         udelay(300);
-        if (0 /*FIXME 5Ghz*/)
-                b43_phy_set(dev, B43_NPHY_BANDCTL, B43_NPHY_BANDCTL_5GHZ);
-        else
-                b43_phy_mask(dev, B43_NPHY_BANDCTL, ~B43_NPHY_BANDCTL_5GHZ);
-        b43_chantab_phy_upload(dev, tabent);
-        b43_nphy_tx_power_fix(dev);
-
-        return 0;
 }
 
 static void b43_radio_init2055_pre(struct b43_wldev *dev)
@@ -173,52 +185,64 @@ static void b43_radio_init2055_pre(struct b43_wldev *dev)
 
 static void b43_radio_init2055_post(struct b43_wldev *dev)
 {
+        struct b43_phy_n *nphy = dev->phy.n;
         struct ssb_sprom *sprom = &(dev->dev->bus->sprom);
         struct ssb_boardinfo *binfo = &(dev->dev->bus->boardinfo);
         int i;
         u16 val;
+        bool workaround = false;
+
+        if (sprom->revision < 4)
+                workaround = (binfo->vendor != PCI_VENDOR_ID_BROADCOM ||
+                                binfo->type != 0x46D ||
+                                binfo->rev < 0x41);
+        else
+                workaround = ((sprom->boardflags_hi & B43_BFH_NOPA) == 0);
 
         b43_radio_mask(dev, B2055_MASTER1, 0xFFF3);
-        msleep(1);
-        if ((sprom->revision != 4) ||
-           !(sprom->boardflags_hi & B43_BFH_RSSIINV)) {
-                if ((binfo->vendor != PCI_VENDOR_ID_BROADCOM) ||
-                    (binfo->type != 0x46D) ||
-                    (binfo->rev < 0x41)) {
-                        b43_radio_mask(dev, B2055_C1_RX_BB_REG, 0x7F);
-                        b43_radio_mask(dev, B2055_C1_RX_BB_REG, 0x7F);
-                        msleep(1);
-                }
+        if (workaround) {
+                b43_radio_mask(dev, B2055_C1_RX_BB_REG, 0x7F);
+                b43_radio_mask(dev, B2055_C2_RX_BB_REG, 0x7F);
         }
-        b43_radio_maskset(dev, B2055_RRCCAL_NOPTSEL, 0x3F, 0x2C);
-        msleep(1);
-        b43_radio_write16(dev, B2055_CAL_MISC, 0x3C);
-        msleep(1);
+        b43_radio_maskset(dev, B2055_RRCCAL_NOPTSEL, 0xFFC0, 0x2C);
+        b43_radio_write(dev, B2055_CAL_MISC, 0x3C);
         b43_radio_mask(dev, B2055_CAL_MISC, 0xFFBE);
-        msleep(1);
         b43_radio_set(dev, B2055_CAL_LPOCTL, 0x80);
-        msleep(1);
         b43_radio_set(dev, B2055_CAL_MISC, 0x1);
         msleep(1);
         b43_radio_set(dev, B2055_CAL_MISC, 0x40);
-        msleep(1);
-        for (i = 0; i < 100; i++) {
-                val = b43_radio_read16(dev, B2055_CAL_COUT2);
-                if (val & 0x80)
+        for (i = 0; i < 200; i++) {
+                val = b43_radio_read(dev, B2055_CAL_COUT2);
+                if (val & 0x80) {
+                        i = 0;
                         break;
+                }
                 udelay(10);
         }
-        msleep(1);
+        if (i)
+                b43err(dev->wl, "radio post init timeout\n");
         b43_radio_mask(dev, B2055_CAL_LPOCTL, 0xFF7F);
-        msleep(1);
         nphy_channel_switch(dev, dev->phy.channel);
-        b43_radio_write16(dev, B2055_C1_RX_BB_LPF, 0x9);
-        b43_radio_write16(dev, B2055_C2_RX_BB_LPF, 0x9);
-        b43_radio_write16(dev, B2055_C1_RX_BB_MIDACHP, 0x83);
-        b43_radio_write16(dev, B2055_C2_RX_BB_MIDACHP, 0x83);
+        b43_radio_write(dev, B2055_C1_RX_BB_LPF, 0x9);
+        b43_radio_write(dev, B2055_C2_RX_BB_LPF, 0x9);
+        b43_radio_write(dev, B2055_C1_RX_BB_MIDACHP, 0x83);
+        b43_radio_write(dev, B2055_C2_RX_BB_MIDACHP, 0x83);
+        b43_radio_maskset(dev, B2055_C1_LNA_GAINBST, 0xFFF8, 0x6);
+        b43_radio_maskset(dev, B2055_C2_LNA_GAINBST, 0xFFF8, 0x6);
+        if (!nphy->gain_boost) {
+                b43_radio_set(dev, B2055_C1_RX_RFSPC1, 0x2);
+                b43_radio_set(dev, B2055_C2_RX_RFSPC1, 0x2);
+        } else {
+                b43_radio_mask(dev, B2055_C1_RX_RFSPC1, 0xFFFD);
+                b43_radio_mask(dev, B2055_C2_RX_RFSPC1, 0xFFFD);
+        }
+        udelay(2);
 }
 
-/* Initialize a Broadcom 2055 N-radio */
+/*
+ * Initialize a Broadcom 2055 N-radio
+ * http://bcm-v4.sipsolutions.net/802.11/Radio/2055/Init
+ */
 static void b43_radio_init2055(struct b43_wldev *dev)
 {
         b43_radio_init2055_pre(dev);
@@ -229,17 +253,6 @@ static void b43_radio_init2055(struct b43_wldev *dev)
         b43_radio_init2055_post(dev);
 }
 
-void b43_nphy_radio_turn_on(struct b43_wldev *dev)
-{
-        b43_radio_init2055(dev);
-}
-
-void b43_nphy_radio_turn_off(struct b43_wldev *dev)
-{
-        b43_phy_mask(dev, B43_NPHY_RFCTL_CMD,
-                     ~B43_NPHY_RFCTL_CMD_EN);
-}
-
 /*
  * Upload the N-PHY tables.
  * http://bcm-v4.sipsolutions.net/802.11/PHY/N/InitTables
@@ -646,6 +659,41 @@ static void b43_nphy_read_clip_detection(struct b43_wldev *dev, u16 *clip_st)
         clip_st[1] = b43_phy_read(dev, B43_NPHY_C2_CLIP1THRES);
 }
 
+/* http://bcm-v4.sipsolutions.net/802.11/PHY/N/SuperSwitchInit */
+static void b43_nphy_superswitch_init(struct b43_wldev *dev, bool init)
+{
+        if (dev->phy.rev >= 3) {
+                if (!init)
+                        return;
+                if (0 /* FIXME */) {
+                        b43_ntab_write(dev, B43_NTAB16(9, 2), 0x211);
+                        b43_ntab_write(dev, B43_NTAB16(9, 3), 0x222);
+                        b43_ntab_write(dev, B43_NTAB16(9, 8), 0x144);
+                        b43_ntab_write(dev, B43_NTAB16(9, 12), 0x188);
+                }
+        } else {
+                b43_phy_write(dev, B43_NPHY_GPIO_LOOEN, 0);
+                b43_phy_write(dev, B43_NPHY_GPIO_HIOEN, 0);
+
+                ssb_chipco_gpio_control(&dev->dev->bus->chipco, 0xFC00,
+                                        0xFC00);
+                b43_write32(dev, B43_MMIO_MACCTL,
+                        b43_read32(dev, B43_MMIO_MACCTL) &
+                        ~B43_MACCTL_GPOUTSMSK);
+                b43_write16(dev, B43_MMIO_GPIO_MASK,
+                        b43_read16(dev, B43_MMIO_GPIO_MASK) | 0xFC00);
+                b43_write16(dev, B43_MMIO_GPIO_CONTROL,
+                        b43_read16(dev, B43_MMIO_GPIO_CONTROL) & ~0xFC00);
+
+                if (init) {
+                        b43_phy_write(dev, B43_NPHY_RFCTL_LUT_TRSW_LO1, 0x2D8);
+                        b43_phy_write(dev, B43_NPHY_RFCTL_LUT_TRSW_UP1, 0x301);
+                        b43_phy_write(dev, B43_NPHY_RFCTL_LUT_TRSW_LO2, 0x2D8);
+                        b43_phy_write(dev, B43_NPHY_RFCTL_LUT_TRSW_UP2, 0x301);
+                }
+        }
+}
+
 /* http://bcm-v4.sipsolutions.net/802.11/PHY/N/classifier */
 static u16 b43_nphy_classifier(struct b43_wldev *dev, u16 mask, u16 val)
 {
@@ -722,7 +770,7 @@ static void b43_nphy_spur_workaround(struct b43_wldev *dev)
 {
         struct b43_phy_n *nphy = dev->phy.n;
 
-        unsigned int channel;
+        u8 channel = nphy->radio_chanspec.channel;
         int tone[2] = { 57, 58 };
         u32 noise[2] = { 0x3FF, 0x3FF };
 
@@ -731,8 +779,6 @@ static void b43_nphy_spur_workaround(struct b43_wldev *dev)
         if (nphy->hang_avoid)
                 b43_nphy_stay_in_carrier_search(dev, 1);
 
-        /* FIXME: channel = radio_chanspec */
-
         if (nphy->gband_spurwar_en) {
                 /* TODO: N PHY Adjust Analog Pfbw (7) */
                 if (channel == 11 && dev->phy.is_40mhz)
@@ -778,6 +824,62 @@ static void b43_nphy_spur_workaround(struct b43_wldev *dev)
                 b43_nphy_stay_in_carrier_search(dev, 0);
 }
 
+/* http://bcm-v4.sipsolutions.net/802.11/PHY/N/AdjustLnaGainTbl */
+static void b43_nphy_adjust_lna_gain_table(struct b43_wldev *dev)
+{
+        struct b43_phy_n *nphy = dev->phy.n;
+
+        u8 i;
+        s16 tmp;
+        u16 data[4];
+        s16 gain[2];
+        u16 minmax[2];
+        u16 lna_gain[4] = { -2, 10, 19, 25 };
+
+        if (nphy->hang_avoid)
+                b43_nphy_stay_in_carrier_search(dev, 1);
+
+        if (nphy->gain_boost) {
+                if (b43_current_band(dev->wl) == IEEE80211_BAND_2GHZ) {
+                        gain[0] = 6;
+                        gain[1] = 6;
+                } else {
+                        tmp = 40370 - 315 * nphy->radio_chanspec.channel;
+                        gain[0] = ((tmp >> 13) + ((tmp >> 12) & 1));
+                        tmp = 23242 - 224 * nphy->radio_chanspec.channel;
+                        gain[1] = ((tmp >> 13) + ((tmp >> 12) & 1));
+                }
+        } else {
+                gain[0] = 0;
+                gain[1] = 0;
+        }
+
+        for (i = 0; i < 2; i++) {
+                if (nphy->elna_gain_config) {
+                        data[0] = 19 + gain[i];
+                        data[1] = 25 + gain[i];
+                        data[2] = 25 + gain[i];
+                        data[3] = 25 + gain[i];
+                } else {
+                        data[0] = lna_gain[0] + gain[i];
+                        data[1] = lna_gain[1] + gain[i];
+                        data[2] = lna_gain[2] + gain[i];
+                        data[3] = lna_gain[3] + gain[i];
+                }
+                b43_ntab_write_bulk(dev, B43_NTAB16(10, 8), 4, data);
+
+                minmax[i] = 23 + gain[i];
+        }
+
+        b43_phy_maskset(dev, B43_NPHY_C1_MINMAX_GAIN, ~B43_NPHY_C1_MINGAIN,
+                                minmax[0] << B43_NPHY_C1_MINGAIN_SHIFT);
+        b43_phy_maskset(dev, B43_NPHY_C2_MINMAX_GAIN, ~B43_NPHY_C2_MINGAIN,
+                                minmax[1] << B43_NPHY_C2_MINGAIN_SHIFT);
+
+        if (nphy->hang_avoid)
+                b43_nphy_stay_in_carrier_search(dev, 0);
+}
+
 /* http://bcm-v4.sipsolutions.net/802.11/PHY/N/WorkaroundsGainCtrl */
 static void b43_nphy_gain_crtl_workarounds(struct b43_wldev *dev)
 {
@@ -862,7 +964,7 @@ static void b43_nphy_gain_crtl_workarounds(struct b43_wldev *dev)
                 b43_phy_write(dev, B43_NPHY_TABLE_DATALO,
                                         (code << 8 | 0x7C));
 
-                /* TODO: b43_nphy_adjust_lna_gain_table(dev); */
+                b43_nphy_adjust_lna_gain_table(dev);
 
                 if (nphy->elna_gain_config) {
                         b43_phy_write(dev, B43_NPHY_TABLE_ADDR, 0x0808);
@@ -1969,12 +2071,12 @@ static void b43_nphy_restore_rssi_cal(struct b43_wldev *dev)
         u16 *rssical_phy_regs = NULL;
 
         if (b43_current_band(dev->wl) == IEEE80211_BAND_2GHZ) {
-                if (!nphy->rssical_chanspec_2G)
+                if (b43_empty_chanspec(&nphy->rssical_chanspec_2G))
                         return;
                 rssical_radio_regs = nphy->rssical_cache.rssical_radio_regs_2G;
                 rssical_phy_regs = nphy->rssical_cache.rssical_phy_regs_2G;
         } else {
-                if (!nphy->rssical_chanspec_5G)
+                if (b43_empty_chanspec(&nphy->rssical_chanspec_5G))
                         return;
                 rssical_radio_regs = nphy->rssical_cache.rssical_radio_regs_5G;
                 rssical_phy_regs = nphy->rssical_cache.rssical_phy_regs_5G;
@@ -2394,7 +2496,7 @@ static void b43_nphy_save_cal(struct b43_wldev *dev)
 
         struct b43_phy_n_iq_comp *rxcal_coeffs = NULL;
         u16 *txcal_radio_regs = NULL;
-        u8 *iqcal_chanspec;
+        struct b43_chanspec *iqcal_chanspec;
         u16 *table = NULL;
 
         if (nphy->hang_avoid)
@@ -2450,12 +2552,12 @@ static void b43_nphy_restore_cal(struct b43_wldev *dev)
         struct b43_phy_n_iq_comp *rxcal_coeffs = NULL;
 
         if (b43_current_band(dev->wl) == IEEE80211_BAND_2GHZ) {
-                if (nphy->iqcal_chanspec_2G == 0)
+                if (b43_empty_chanspec(&nphy->iqcal_chanspec_2G))
                         return;
                 table = nphy->cal_cache.txcal_coeffs_2G;
                 loft = &nphy->cal_cache.txcal_coeffs_2G[5];
         } else {
-                if (nphy->iqcal_chanspec_5G == 0)
+                if (b43_empty_chanspec(&nphy->iqcal_chanspec_5G))
                         return;
                 table = nphy->cal_cache.txcal_coeffs_5G;
                 loft = &nphy->cal_cache.txcal_coeffs_5G[5];
@@ -2700,8 +2802,7 @@ static int b43_nphy_cal_tx_iq_lo(struct b43_wldev *dev,
                         b43_ntab_read_bulk(dev, B43_NTAB16(15, 96), length,
                                                 nphy->txiqlocal_bestc);
                         nphy->txiqlocal_coeffsvalid = true;
-                        /* TODO: Set nphy->txiqlocal_chanspec to
-                                the current channel */
+                        nphy->txiqlocal_chanspec = nphy->radio_chanspec;
                 } else {
                         length = 11;
                         if (dev->phy.rev < 3)
@@ -2736,7 +2837,8 @@ static void b43_nphy_reapply_tx_cal_coeffs(struct b43_wldev *dev)
         u16 buffer[7];
         bool equal = true;
 
-        if (!nphy->txiqlocal_coeffsvalid || 1 /* FIXME */)
+        if (!nphy->txiqlocal_coeffsvalid ||
+            b43_eq_chanspecs(&nphy->txiqlocal_chanspec, &nphy->radio_chanspec))
                 return;
 
         b43_ntab_read_bulk(dev, B43_NTAB16(15, 80), 7, buffer);
@@ -3091,9 +3193,11 @@ int b43_phy_initn(struct b43_wldev *dev)
         do_rssi_cal = false;
         if (phy->rev >= 3) {
                 if (b43_current_band(dev->wl) == IEEE80211_BAND_2GHZ)
-                        do_rssi_cal = (nphy->rssical_chanspec_2G == 0);
+                        do_rssi_cal =
+                                b43_empty_chanspec(&nphy->rssical_chanspec_2G);
                 else
-                        do_rssi_cal = (nphy->rssical_chanspec_5G == 0);
+                        do_rssi_cal =
+                                b43_empty_chanspec(&nphy->rssical_chanspec_5G);
 
                 if (do_rssi_cal)
                         b43_nphy_rssi_cal(dev);
@@ -3105,9 +3209,9 @@ int b43_phy_initn(struct b43_wldev *dev)
 
         if (!((nphy->measure_hold & 0x6) != 0)) {
                 if (b43_current_band(dev->wl) == IEEE80211_BAND_2GHZ)
-                        do_cal = (nphy->iqcal_chanspec_2G == 0);
+                        do_cal = b43_empty_chanspec(&nphy->iqcal_chanspec_2G);
                 else
-                        do_cal = (nphy->iqcal_chanspec_5G == 0);
+                        do_cal = b43_empty_chanspec(&nphy->iqcal_chanspec_5G);
 
                 if (nphy->mute)
                         do_cal = false;
@@ -3116,7 +3220,7 @@ int b43_phy_initn(struct b43_wldev *dev)
                         target = b43_nphy_get_tx_gains(dev);
 
                         if (nphy->antsel_type == 2)
-                                ;/*TODO NPHY Superswitch Init with argument 1*/
+                                b43_nphy_superswitch_init(dev, true);
                         if (nphy->perical != 2) {
                                 b43_nphy_rssi_cal(dev);
                                 if (phy->rev >= 3) {
@@ -3154,6 +3258,129 @@ int b43_phy_initn(struct b43_wldev *dev)
         return 0;
 }
 
+/* http://bcm-v4.sipsolutions.net/802.11/PHY/N/ChanspecSetup */
+static void b43_nphy_chanspec_setup(struct b43_wldev *dev,
+                                const struct b43_nphy_channeltab_entry *e,
+                                struct b43_chanspec chanspec)
+{
+        struct b43_phy *phy = &dev->phy;
+        struct b43_phy_n *nphy = dev->phy.n;
+
+        u16 tmp;
+        u32 tmp32;
+
+        tmp = b43_phy_read(dev, B43_NPHY_BANDCTL) & B43_NPHY_BANDCTL_5GHZ;
+        if (chanspec.b_freq == 1 && tmp == 0) {
+                tmp32 = b43_read32(dev, B43_MMIO_PSM_PHY_HDR);
+                b43_write32(dev, B43_MMIO_PSM_PHY_HDR, tmp32 | 4);
+                b43_phy_set(dev, B43_PHY_B_BBCFG, 0xC000);
+                b43_write32(dev, B43_MMIO_PSM_PHY_HDR, tmp32);
+                b43_phy_set(dev, B43_NPHY_BANDCTL, B43_NPHY_BANDCTL_5GHZ);
+        } else if (chanspec.b_freq == 1) {
+                b43_phy_mask(dev, B43_NPHY_BANDCTL, ~B43_NPHY_BANDCTL_5GHZ);
+                tmp32 = b43_read32(dev, B43_MMIO_PSM_PHY_HDR);
+                b43_write32(dev, B43_MMIO_PSM_PHY_HDR, tmp32 | 4);
+                b43_phy_mask(dev, B43_PHY_B_BBCFG, (u16)~0xC000);
+                b43_write32(dev, B43_MMIO_PSM_PHY_HDR, tmp32);
+        }
+
+        b43_chantab_phy_upload(dev, e);
+
+        tmp = chanspec.channel;
+        if (chanspec.b_freq == 1)
+                tmp |= 0x0100;
+        if (chanspec.b_width == 3)
+                tmp |= 0x0200;
+        b43_shm_write16(dev, B43_SHM_SHARED, 0xA0, tmp);
+
+        if (nphy->radio_chanspec.channel == 14) {
+                b43_nphy_classifier(dev, 2, 0);
+                b43_phy_set(dev, B43_PHY_B_TEST, 0x0800);
+        } else {
+                b43_nphy_classifier(dev, 2, 2);
+                if (chanspec.b_freq == 2)
+                        b43_phy_mask(dev, B43_PHY_B_TEST, ~0x840);
+        }
+
+        if (nphy->txpwrctrl)
+                b43_nphy_tx_power_fix(dev);
+
+        if (dev->phy.rev < 3)
+                b43_nphy_adjust_lna_gain_table(dev);
+
+        b43_nphy_tx_lp_fbw(dev);
+
+        if (dev->phy.rev >= 3 && 0) {
+                /* TODO */
+        }
+
+        b43_phy_write(dev, B43_NPHY_NDATAT_DUP40, 0x3830);
+
+        if (phy->rev >= 3)
+                b43_nphy_spur_workaround(dev);
+}
+
+/* http://bcm-v4.sipsolutions.net/802.11/PHY/N/SetChanspec */
+static int b43_nphy_set_chanspec(struct b43_wldev *dev,
+                                        struct b43_chanspec chanspec)
+{
+        struct b43_phy_n *nphy = dev->phy.n;
+
+        const struct b43_nphy_channeltab_entry *tabent;
+
+        u8 tmp;
+        u8 channel = chanspec.channel;
+
+        if (dev->phy.rev >= 3) {
+                /* TODO */
+        }
+
+        nphy->radio_chanspec = chanspec;
+
+        if (chanspec.b_width != nphy->b_width)
+                ; /* TODO: BMAC BW Set (chanspec.b_width) */
+
+        /* TODO: use defines */
+        if (chanspec.b_width == 3) {
+                if (chanspec.sideband == 2)
+                        b43_phy_set(dev, B43_NPHY_RXCTL,
+                                        B43_NPHY_RXCTL_BSELU20);
+                else
+                        b43_phy_mask(dev, B43_NPHY_RXCTL,
+                                        ~B43_NPHY_RXCTL_BSELU20);
+        }
+
+        if (dev->phy.rev >= 3) {
+                tmp = (chanspec.b_freq == 1) ? 4 : 0;
+                b43_radio_maskset(dev, 0x08, 0xFFFB, tmp);
+                /* TODO: PHY Radio2056 Setup (chan_info_ptr[i]) */
+                /* TODO: N PHY Chanspec Setup (chan_info_ptr[i]) */
+        } else {
+                tabent = b43_nphy_get_chantabent(dev, channel);
+                if (!tabent)
+                        return -ESRCH;
+
+                tmp = (chanspec.b_freq == 1) ? 0x0020 : 0x0050;
+                b43_radio_maskset(dev, B2055_MASTER1, 0xFF8F, tmp);
+                b43_radio_2055_setup(dev, tabent);
+                b43_nphy_chanspec_setup(dev, tabent, chanspec);
+        }
+
+        return 0;
+}
+
+/* Tune the hardware to a new channel */
+static int nphy_channel_switch(struct b43_wldev *dev, unsigned int channel)
+{
+        struct b43_phy_n *nphy = dev->phy.n;
+
+        struct b43_chanspec chanspec;
+        chanspec = nphy->radio_chanspec;
+        chanspec.channel = channel;
+
+        return b43_nphy_set_chanspec(dev, chanspec);
+}
+
 static int b43_nphy_op_allocate(struct b43_wldev *dev)
 {
         struct b43_phy_n *nphy;
@@ -3242,9 +3469,41 @@ static void b43_nphy_op_radio_write(struct b43_wldev *dev, u16 reg, u16 value)
         b43_write16(dev, B43_MMIO_RADIO_DATA_LOW, value);
 }
 
+/* http://bcm-v4.sipsolutions.net/802.11/Radio/Switch%20Radio */
 static void b43_nphy_op_software_rfkill(struct b43_wldev *dev,
                                         bool blocked)
-{//TODO
+{
+        if (b43_read32(dev, B43_MMIO_MACCTL) & B43_MACCTL_ENABLED)
+                b43err(dev->wl, "MAC not suspended\n");
+
+        if (blocked) {
+                b43_phy_mask(dev, B43_NPHY_RFCTL_CMD,
+                                ~B43_NPHY_RFCTL_CMD_CHIP0PU);
+                if (dev->phy.rev >= 3) {
+                        b43_radio_mask(dev, 0x09, ~0x2);
+
+                        b43_radio_write(dev, 0x204D, 0);
+                        b43_radio_write(dev, 0x2053, 0);
+                        b43_radio_write(dev, 0x2058, 0);
+                        b43_radio_write(dev, 0x205E, 0);
+                        b43_radio_mask(dev, 0x2062, ~0xF0);
+                        b43_radio_write(dev, 0x2064, 0);
+
+                        b43_radio_write(dev, 0x304D, 0);
+                        b43_radio_write(dev, 0x3053, 0);
+                        b43_radio_write(dev, 0x3058, 0);
+                        b43_radio_write(dev, 0x305E, 0);
+                        b43_radio_mask(dev, 0x3062, ~0xF0);
+                        b43_radio_write(dev, 0x3064, 0);
+                }
+        } else {
+                if (dev->phy.rev >= 3) {
+                        /* TODO: b43_radio_init2056(dev); */
+                        /* TODO: PHY Set Channel Spec (dev, radio_chanspec) */
+                } else {
+                        b43_radio_init2055(dev);
+                }
+        }
 }
 
 static void b43_nphy_op_switch_analog(struct b43_wldev *dev, bool on)
diff --git a/drivers/net/wireless/b43/phy_n.h b/drivers/net/wireless/b43/phy_n.h
index 403aad3f894f..8b6d570dd0aa 100644
--- a/drivers/net/wireless/b43/phy_n.h
+++ b/drivers/net/wireless/b43/phy_n.h
@@ -711,6 +711,8 @@
 #define B43_NPHY_PAPD_EN1                       B43_PHY_N(0x29B) /* PAPD Enable1 TBD */
 #define B43_NPHY_EPS_TABLE_ADJ1                 B43_PHY_N(0x29C) /* EPS Table Adj1 TBD */
 
+#define B43_PHY_B_BBCFG                         B43_PHY_N_BMODE(0x001) /* BB config */
+#define B43_PHY_B_TEST                          B43_PHY_N_BMODE(0x00A)
 
 
 /* Broadcom 2055 radio registers */
@@ -924,6 +926,13 @@
 
 struct b43_wldev;
 
+struct b43_chanspec {
+        u8 channel;
+        u8 sideband;
+        u8 b_width;
+        u8 b_freq;
+};
+
 struct b43_phy_n_iq_comp {
         s16 a0;
         s16 b0;
@@ -975,7 +984,8 @@ struct b43_phy_n {
         u16 papd_epsilon_offset[2];
         s32 preamble_override;
         u32 bb_mult_save;
-        u16 radio_chanspec;
+        u8 b_width;
+        struct b43_chanspec radio_chanspec;
 
         bool gain_boost;
         bool elna_gain_config;
@@ -991,6 +1001,7 @@ struct b43_phy_n {
         u16 txiqlocal_bestc[11];
         bool txiqlocal_coeffsvalid;
         struct b43_phy_n_txpwrindex txpwrindex[2];
+        struct b43_chanspec txiqlocal_chanspec;
 
         u8 txrx_chain;
         u16 tx_rx_cal_phy_saveregs[11];
@@ -1006,12 +1017,12 @@ struct b43_phy_n {
         bool gband_spurwar_en;
 
         bool ipa2g_on;
-        u8 iqcal_chanspec_2G;
-        u8 rssical_chanspec_2G;
+        struct b43_chanspec iqcal_chanspec_2G;
+        struct b43_chanspec rssical_chanspec_2G;
 
         bool ipa5g_on;
-        u8 iqcal_chanspec_5G;
-        u8 rssical_chanspec_5G;
+        struct b43_chanspec iqcal_chanspec_5G;
+        struct b43_chanspec rssical_chanspec_5G;
 
         struct b43_phy_n_rssical_cache rssical_cache;
         struct b43_phy_n_cal_cache cal_cache;
diff --git a/drivers/net/wireless/b43/tables_nphy.h b/drivers/net/wireless/b43/tables_nphy.h
index 9c1c6ecd3672..b23036f7dc19 100644
--- a/drivers/net/wireless/b43/tables_nphy.h
+++ b/drivers/net/wireless/b43/tables_nphy.h
@@ -4,6 +4,15 @@
 #include <linux/types.h>
 
 
+struct b43_phy_n_sfo_cfg {
+        u16 phy_bw1a;
+        u16 phy_bw2;
+        u16 phy_bw3;
+        u16 phy_bw4;
+        u16 phy_bw5;
+        u16 phy_bw6;
+};
+
 struct b43_nphy_channeltab_entry {
         /* The channel number */
         u8 channel;
diff --git a/drivers/net/wireless/ipw2x00/ipw2100.c b/drivers/net/wireless/ipw2x00/ipw2100.c
index 9b72c45a7748..fe63bf21c67e 100644
--- a/drivers/net/wireless/ipw2x00/ipw2100.c
+++ b/drivers/net/wireless/ipw2x00/ipw2100.c
@@ -6102,7 +6102,7 @@ static const struct net_device_ops ipw2100_netdev_ops = {
         .ndo_validate_addr      = eth_validate_addr,
 };
 
-/* Look into using netdev destructor to shutdown ieee80211? */
+/* Look into using netdev destructor to shutdown libipw? */
 
 static struct net_device *ipw2100_alloc_device(struct pci_dev *pci_dev,
                                                void __iomem * base_addr,
@@ -6112,7 +6112,7 @@ static struct net_device *ipw2100_alloc_device(struct pci_dev *pci_dev,
         struct ipw2100_priv *priv;
         struct net_device *dev;
 
-        dev = alloc_ieee80211(sizeof(struct ipw2100_priv), 0);
+        dev = alloc_libipw(sizeof(struct ipw2100_priv), 0);
         if (!dev)
                 return NULL;
         priv = libipw_priv(dev);
@@ -6425,7 +6425,7 @@ static int ipw2100_pci_init_one(struct pci_dev *pci_dev,
                 sysfs_remove_group(&pci_dev->dev.kobj,
                                    &ipw2100_attribute_group);
 
-                free_ieee80211(dev, 0);
+                free_libipw(dev, 0);
                 pci_set_drvdata(pci_dev, NULL);
         }
 
@@ -6483,10 +6483,10 @@ static void __devexit ipw2100_pci_remove_one(struct pci_dev *pci_dev)
                 if (dev->base_addr)
                         iounmap((void __iomem *)dev->base_addr);
 
-                /* wiphy_unregister needs to be here, before free_ieee80211 */
+                /* wiphy_unregister needs to be here, before free_libipw */
                 wiphy_unregister(priv->ieee->wdev.wiphy);
                 kfree(priv->ieee->bg_band.channels);
-                free_ieee80211(dev, 0);
+                free_libipw(dev, 0);
         }
 
         pci_release_regions(pci_dev);
diff --git a/drivers/net/wireless/ipw2x00/ipw2200.c b/drivers/net/wireless/ipw2x00/ipw2200.c
index 5c7aa1b1eb56..cb3ba134865e 100644
--- a/drivers/net/wireless/ipw2x00/ipw2200.c
+++ b/drivers/net/wireless/ipw2x00/ipw2200.c
@@ -9995,49 +9995,48 @@ static int ipw_wx_sw_reset(struct net_device *dev,
 }
 
 /* Rebase the WE IOCTLs to zero for the handler array */
-#define IW_IOCTL(x) [(x)-SIOCSIWCOMMIT]
 static iw_handler ipw_wx_handlers[] = {
-        IW_IOCTL(SIOCGIWNAME) = (iw_handler) cfg80211_wext_giwname,
-        IW_IOCTL(SIOCSIWFREQ) = ipw_wx_set_freq,
-        IW_IOCTL(SIOCGIWFREQ) = ipw_wx_get_freq,
-        IW_IOCTL(SIOCSIWMODE) = ipw_wx_set_mode,
-        IW_IOCTL(SIOCGIWMODE) = ipw_wx_get_mode,
-        IW_IOCTL(SIOCSIWSENS) = ipw_wx_set_sens,
-        IW_IOCTL(SIOCGIWSENS) = ipw_wx_get_sens,
-        IW_IOCTL(SIOCGIWRANGE) = ipw_wx_get_range,
-        IW_IOCTL(SIOCSIWAP) = ipw_wx_set_wap,
-        IW_IOCTL(SIOCGIWAP) = ipw_wx_get_wap,
-        IW_IOCTL(SIOCSIWSCAN) = ipw_wx_set_scan,
-        IW_IOCTL(SIOCGIWSCAN) = ipw_wx_get_scan,
-        IW_IOCTL(SIOCSIWESSID) = ipw_wx_set_essid,
-        IW_IOCTL(SIOCGIWESSID) = ipw_wx_get_essid,
-        IW_IOCTL(SIOCSIWNICKN) = ipw_wx_set_nick,
-        IW_IOCTL(SIOCGIWNICKN) = ipw_wx_get_nick,
-        IW_IOCTL(SIOCSIWRATE) = ipw_wx_set_rate,
-        IW_IOCTL(SIOCGIWRATE) = ipw_wx_get_rate,
-        IW_IOCTL(SIOCSIWRTS) = ipw_wx_set_rts,
-        IW_IOCTL(SIOCGIWRTS) = ipw_wx_get_rts,
-        IW_IOCTL(SIOCSIWFRAG) = ipw_wx_set_frag,
-        IW_IOCTL(SIOCGIWFRAG) = ipw_wx_get_frag,
-        IW_IOCTL(SIOCSIWTXPOW) = ipw_wx_set_txpow,
-        IW_IOCTL(SIOCGIWTXPOW) = ipw_wx_get_txpow,
-        IW_IOCTL(SIOCSIWRETRY) = ipw_wx_set_retry,
-        IW_IOCTL(SIOCGIWRETRY) = ipw_wx_get_retry,
-        IW_IOCTL(SIOCSIWENCODE) = ipw_wx_set_encode,
-        IW_IOCTL(SIOCGIWENCODE) = ipw_wx_get_encode,
-        IW_IOCTL(SIOCSIWPOWER) = ipw_wx_set_power,
-        IW_IOCTL(SIOCGIWPOWER) = ipw_wx_get_power,
-        IW_IOCTL(SIOCSIWSPY) = iw_handler_set_spy,
-        IW_IOCTL(SIOCGIWSPY) = iw_handler_get_spy,
-        IW_IOCTL(SIOCSIWTHRSPY) = iw_handler_set_thrspy,
-        IW_IOCTL(SIOCGIWTHRSPY) = iw_handler_get_thrspy,
-        IW_IOCTL(SIOCSIWGENIE) = ipw_wx_set_genie,
-        IW_IOCTL(SIOCGIWGENIE) = ipw_wx_get_genie,
-        IW_IOCTL(SIOCSIWMLME) = ipw_wx_set_mlme,
-        IW_IOCTL(SIOCSIWAUTH) = ipw_wx_set_auth,
-        IW_IOCTL(SIOCGIWAUTH) = ipw_wx_get_auth,
-        IW_IOCTL(SIOCSIWENCODEEXT) = ipw_wx_set_encodeext,
-        IW_IOCTL(SIOCGIWENCODEEXT) = ipw_wx_get_encodeext,
+        IW_HANDLER(SIOCGIWNAME, (iw_handler)cfg80211_wext_giwname),
+        IW_HANDLER(SIOCSIWFREQ, ipw_wx_set_freq),
+        IW_HANDLER(SIOCGIWFREQ, ipw_wx_get_freq),
+        IW_HANDLER(SIOCSIWMODE, ipw_wx_set_mode),
+        IW_HANDLER(SIOCGIWMODE, ipw_wx_get_mode),
+        IW_HANDLER(SIOCSIWSENS, ipw_wx_set_sens),
+        IW_HANDLER(SIOCGIWSENS, ipw_wx_get_sens),
+        IW_HANDLER(SIOCGIWRANGE, ipw_wx_get_range),
+        IW_HANDLER(SIOCSIWAP, ipw_wx_set_wap),
+        IW_HANDLER(SIOCGIWAP, ipw_wx_get_wap),
+        IW_HANDLER(SIOCSIWSCAN, ipw_wx_set_scan),
+        IW_HANDLER(SIOCGIWSCAN, ipw_wx_get_scan),
+        IW_HANDLER(SIOCSIWESSID, ipw_wx_set_essid),
+        IW_HANDLER(SIOCGIWESSID, ipw_wx_get_essid),
+        IW_HANDLER(SIOCSIWNICKN, ipw_wx_set_nick),
+        IW_HANDLER(SIOCGIWNICKN, ipw_wx_get_nick),
+        IW_HANDLER(SIOCSIWRATE, ipw_wx_set_rate),
+        IW_HANDLER(SIOCGIWRATE, ipw_wx_get_rate),
+        IW_HANDLER(SIOCSIWRTS, ipw_wx_set_rts),
+        IW_HANDLER(SIOCGIWRTS, ipw_wx_get_rts),
+        IW_HANDLER(SIOCSIWFRAG, ipw_wx_set_frag),
+        IW_HANDLER(SIOCGIWFRAG, ipw_wx_get_frag),
+        IW_HANDLER(SIOCSIWTXPOW, ipw_wx_set_txpow),
+        IW_HANDLER(SIOCGIWTXPOW, ipw_wx_get_txpow),
+        IW_HANDLER(SIOCSIWRETRY, ipw_wx_set_retry),
+        IW_HANDLER(SIOCGIWRETRY, ipw_wx_get_retry),
+        IW_HANDLER(SIOCSIWENCODE, ipw_wx_set_encode),
+        IW_HANDLER(SIOCGIWENCODE, ipw_wx_get_encode),
+        IW_HANDLER(SIOCSIWPOWER, ipw_wx_set_power),
+        IW_HANDLER(SIOCGIWPOWER, ipw_wx_get_power),
+        IW_HANDLER(SIOCSIWSPY, iw_handler_set_spy),
+        IW_HANDLER(SIOCGIWSPY, iw_handler_get_spy),
+        IW_HANDLER(SIOCSIWTHRSPY, iw_handler_set_thrspy),
+        IW_HANDLER(SIOCGIWTHRSPY, iw_handler_get_thrspy),
+        IW_HANDLER(SIOCSIWGENIE, ipw_wx_set_genie),
+        IW_HANDLER(SIOCGIWGENIE, ipw_wx_get_genie),
+        IW_HANDLER(SIOCSIWMLME, ipw_wx_set_mlme),
+        IW_HANDLER(SIOCSIWAUTH, ipw_wx_set_auth),
+        IW_HANDLER(SIOCGIWAUTH, ipw_wx_get_auth),
+        IW_HANDLER(SIOCSIWENCODEEXT, ipw_wx_set_encodeext),
+        IW_HANDLER(SIOCGIWENCODEEXT, ipw_wx_get_encodeext),
 };
 
 enum {
@@ -11666,7 +11665,7 @@ static int ipw_prom_alloc(struct ipw_priv *priv)
         if (priv->prom_net_dev)
                 return -EPERM;
 
-        priv->prom_net_dev = alloc_ieee80211(sizeof(struct ipw_prom_priv), 1);
+        priv->prom_net_dev = alloc_libipw(sizeof(struct ipw_prom_priv), 1);
         if (priv->prom_net_dev == NULL)
                 return -ENOMEM;
 
@@ -11685,7 +11684,7 @@ static int ipw_prom_alloc(struct ipw_priv *priv)
 
         rc = register_netdev(priv->prom_net_dev);
         if (rc) {
-                free_ieee80211(priv->prom_net_dev, 1);
+                free_libipw(priv->prom_net_dev, 1);
                 priv->prom_net_dev = NULL;
                 return rc;
         }
@@ -11699,7 +11698,7 @@ static void ipw_prom_free(struct ipw_priv *priv)
                 return;
 
         unregister_netdev(priv->prom_net_dev);
-        free_ieee80211(priv->prom_net_dev, 1);
+        free_libipw(priv->prom_net_dev, 1);
 
         priv->prom_net_dev = NULL;
 }
@@ -11727,7 +11726,7 @@ static int __devinit ipw_pci_probe(struct pci_dev *pdev,
         struct ipw_priv *priv;
         int i;
 
-        net_dev = alloc_ieee80211(sizeof(struct ipw_priv), 0);
+        net_dev = alloc_libipw(sizeof(struct ipw_priv), 0);
         if (net_dev == NULL) {
                 err = -ENOMEM;
                 goto out;
@@ -11747,7 +11746,7 @@ static int __devinit ipw_pci_probe(struct pci_dev *pdev,
         mutex_init(&priv->mutex);
         if (pci_enable_device(pdev)) {
                 err = -ENODEV;
-                goto out_free_ieee80211;
+                goto out_free_libipw;
         }
 
         pci_set_master(pdev);
@@ -11874,8 +11873,8 @@ static int __devinit ipw_pci_probe(struct pci_dev *pdev,
       out_pci_disable_device:
         pci_disable_device(pdev);
         pci_set_drvdata(pdev, NULL);
-      out_free_ieee80211:
-        free_ieee80211(priv->net_dev, 0);
+      out_free_libipw:
+        free_libipw(priv->net_dev, 0);
       out:
         return err;
 }
@@ -11942,11 +11941,11 @@ static void __devexit ipw_pci_remove(struct pci_dev *pdev)
         pci_release_regions(pdev);
         pci_disable_device(pdev);
         pci_set_drvdata(pdev, NULL);
-        /* wiphy_unregister needs to be here, before free_ieee80211 */
+        /* wiphy_unregister needs to be here, before free_libipw */
         wiphy_unregister(priv->ieee->wdev.wiphy);
         kfree(priv->ieee->a_band.channels);
         kfree(priv->ieee->bg_band.channels);
-        free_ieee80211(priv->net_dev, 0);
+        free_libipw(priv->net_dev, 0);
         free_firmware();
 }
 
diff --git a/drivers/net/wireless/ipw2x00/libipw.h b/drivers/net/wireless/ipw2x00/libipw.h
index a6d5e42647e4..284b0e4cb815 100644
--- a/drivers/net/wireless/ipw2x00/libipw.h
+++ b/drivers/net/wireless/ipw2x00/libipw.h
@@ -64,7 +64,7 @@
 extern u32 libipw_debug_level;
 #define LIBIPW_DEBUG(level, fmt, args...) \
 do { if (libipw_debug_level & (level)) \
-  printk(KERN_DEBUG "ieee80211: %c %s " fmt, \
+  printk(KERN_DEBUG "libipw: %c %s " fmt, \
          in_interrupt() ? 'I' : 'U', __func__ , ## args); } while (0)
 static inline bool libipw_ratelimit_debug(u32 level)
 {
@@ -116,8 +116,8 @@ static inline bool libipw_ratelimit_debug(u32 level)
 #define LIBIPW_DL_RX            (1<<9)
 #define LIBIPW_DL_QOS           (1<<31)
 
-#define LIBIPW_ERROR(f, a...) printk(KERN_ERR "ieee80211: " f, ## a)
-#define LIBIPW_WARNING(f, a...) printk(KERN_WARNING "ieee80211: " f, ## a)
+#define LIBIPW_ERROR(f, a...) printk(KERN_ERR "libipw: " f, ## a)
+#define LIBIPW_WARNING(f, a...) printk(KERN_WARNING "libipw: " f, ## a)
 #define LIBIPW_DEBUG_INFO(f, a...)   LIBIPW_DEBUG(LIBIPW_DL_INFO, f, ## a)
 
 #define LIBIPW_DEBUG_WX(f, a...)     LIBIPW_DEBUG(LIBIPW_DL_WX, f, ## a)
@@ -905,7 +905,7 @@ struct libipw_device {
                                        struct libipw_reassoc_request * req);
 
         /* This must be the last item so that it points to the data
-         * allocated beyond this structure by alloc_ieee80211 */
+         * allocated beyond this structure by alloc_libipw */
         u8 priv[0];
 };
 
@@ -1017,9 +1017,9 @@ static inline int libipw_is_cck_rate(u8 rate)
         return 0;
 }
 
-/* ieee80211.c */
-extern void free_ieee80211(struct net_device *dev, int monitor);
-extern struct net_device *alloc_ieee80211(int sizeof_priv, int monitor);
+/* libipw.c */
+extern void free_libipw(struct net_device *dev, int monitor);
+extern struct net_device *alloc_libipw(int sizeof_priv, int monitor);
 extern int libipw_change_mtu(struct net_device *dev, int new_mtu);
 
 extern void libipw_networks_age(struct libipw_device *ieee,
diff --git a/drivers/net/wireless/ipw2x00/libipw_module.c b/drivers/net/wireless/ipw2x00/libipw_module.c
index 2fa55867bd8b..55965408ff3f 100644
--- a/drivers/net/wireless/ipw2x00/libipw_module.c
+++ b/drivers/net/wireless/ipw2x00/libipw_module.c
@@ -53,7 +53,7 @@
 #include "libipw.h"
 
 #define DRV_DESCRIPTION "802.11 data/management/control stack"
-#define DRV_NAME        "ieee80211"
+#define DRV_NAME        "libipw"
 #define DRV_VERSION     LIBIPW_VERSION
 #define DRV_COPYRIGHT   "Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>"
 
@@ -140,7 +140,7 @@ int libipw_change_mtu(struct net_device *dev, int new_mtu)
 }
 EXPORT_SYMBOL(libipw_change_mtu);
 
-struct net_device *alloc_ieee80211(int sizeof_priv, int monitor)
+struct net_device *alloc_libipw(int sizeof_priv, int monitor)
 {
         struct libipw_device *ieee;
         struct net_device *dev;
@@ -222,8 +222,9 @@ failed_free_netdev:
 failed:
         return NULL;
 }
+EXPORT_SYMBOL(alloc_libipw);
 
-void free_ieee80211(struct net_device *dev, int monitor)
+void free_libipw(struct net_device *dev, int monitor)
 {
         struct libipw_device *ieee = netdev_priv(dev);
 
@@ -237,6 +238,7 @@ void free_ieee80211(struct net_device *dev, int monitor)
 
         free_netdev(dev);
 }
+EXPORT_SYMBOL(free_libipw);
 
 #ifdef CONFIG_LIBIPW_DEBUG
 
@@ -291,7 +293,7 @@ static int __init libipw_init(void)
         struct proc_dir_entry *e;
 
         libipw_debug_level = debug;
-        libipw_proc = proc_mkdir(DRV_NAME, init_net.proc_net);
+        libipw_proc = proc_mkdir("ieee80211", init_net.proc_net);
         if (libipw_proc == NULL) {
                 LIBIPW_ERROR("Unable to create " DRV_NAME
                                 " proc directory\n");
@@ -331,6 +333,3 @@ MODULE_PARM_DESC(debug, "debug output mask");
 
 module_exit(libipw_exit);
 module_init(libipw_init);
-
-EXPORT_SYMBOL(alloc_ieee80211);
-EXPORT_SYMBOL(free_ieee80211);
diff --git a/drivers/net/wireless/iwlwifi/Makefile b/drivers/net/wireless/iwlwifi/Makefile
index 4e378faee650..e31a5ccebea2 100644
--- a/drivers/net/wireless/iwlwifi/Makefile
+++ b/drivers/net/wireless/iwlwifi/Makefile
@@ -9,7 +9,7 @@ CFLAGS_iwl-devtrace.o := -I$(src)
 
 # AGN
 obj-$(CONFIG_IWLAGN)    += iwlagn.o
-iwlagn-objs             := iwl-agn.o iwl-agn-rs.o iwl-agn-led.o
+iwlagn-objs             := iwl-agn.o iwl-agn-rs.o iwl-agn-led.o iwl-agn-ict.o
 
 iwlagn-$(CONFIG_IWL4965) += iwl-4965.o
 iwlagn-$(CONFIG_IWL5000) += iwl-5000.o
diff --git a/drivers/net/wireless/iwlwifi/iwl-1000.c b/drivers/net/wireless/iwlwifi/iwl-1000.c
index 3bf2e6e9b2d9..9e392896005d 100644
--- a/drivers/net/wireless/iwlwifi/iwl-1000.c
+++ b/drivers/net/wireless/iwlwifi/iwl-1000.c
@@ -42,6 +42,7 @@
 #include "iwl-core.h"
 #include "iwl-io.h"
 #include "iwl-sta.h"
+#include "iwl-agn.h"
 #include "iwl-helpers.h"
 #include "iwl-5000-hw.h"
 #include "iwl-agn-led.h"
@@ -211,6 +212,9 @@ static struct iwl_lib_ops iwl1000_lib = {
                 .set_ct_kill = iwl1000_set_ct_threshold,
          },
         .add_bcast_station = iwl_add_bcast_station,
+        .recover_from_tx_stall = iwl_bg_monitor_recover,
+        .check_plcp_health = iwl_good_plcp_health,
+        .check_ack_health = iwl_good_ack_health,
 };
 
 static const struct iwl_ops iwl1000_ops = {
@@ -222,7 +226,7 @@ static const struct iwl_ops iwl1000_ops = {
 };
 
 struct iwl_cfg iwl1000_bgn_cfg = {
-        .name = "1000 Series BGN",
+        .name = "Intel(R) Centrino(R) Wireless-N 1000 BGN",
         .fw_name_pre = IWL1000_FW_PRE,
         .ucode_api_max = IWL1000_UCODE_API_MAX,
         .ucode_api_min = IWL1000_UCODE_API_MIN,
@@ -248,10 +252,11 @@ struct iwl_cfg iwl1000_bgn_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_EXT_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl1000_bg_cfg = {
-        .name = "1000 Series BG",
+        .name = "Intel(R) Centrino(R) Wireless-N 1000 BG",
         .fw_name_pre = IWL1000_FW_PRE,
         .ucode_api_max = IWL1000_UCODE_API_MAX,
         .ucode_api_min = IWL1000_UCODE_API_MIN,
@@ -276,6 +281,7 @@ struct iwl_cfg iwl1000_bg_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_EXT_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 MODULE_FIRMWARE(IWL1000_MODULE_FIRMWARE(IWL1000_UCODE_API_MAX));
diff --git a/drivers/net/wireless/iwlwifi/iwl-3945-hw.h b/drivers/net/wireless/iwlwifi/iwl-3945-hw.h
index 3a876a8ece38..074f42a7dcad 100644
--- a/drivers/net/wireless/iwlwifi/iwl-3945-hw.h
+++ b/drivers/net/wireless/iwlwifi/iwl-3945-hw.h
@@ -78,6 +78,8 @@
 /* RSSI to dBm */
 #define IWL39_RSSI_OFFSET       95
 
+#define IWL_DEFAULT_TX_POWER    0x0F
+
 /*
  * EEPROM related constants, enums, and structures.
  */
diff --git a/drivers/net/wireless/iwlwifi/iwl-3945-rs.c b/drivers/net/wireless/iwlwifi/iwl-3945-rs.c
index 47909f94271e..605aca4c78c8 100644
--- a/drivers/net/wireless/iwlwifi/iwl-3945-rs.c
+++ b/drivers/net/wireless/iwlwifi/iwl-3945-rs.c
@@ -329,16 +329,25 @@ static void iwl3945_collect_tx_data(struct iwl3945_rs_sta *rs_sta,
 
 }
 
-static void rs_rate_init(void *priv_r, struct ieee80211_supported_band *sband,
-                         struct ieee80211_sta *sta, void *priv_sta)
+/*
+ * Called after adding a new station to initialize rate scaling
+ */
+void iwl3945_rs_rate_init(struct iwl_priv *priv, struct ieee80211_sta *sta, u8 sta_id)
 {
-        struct iwl3945_rs_sta *rs_sta = priv_sta;
-        struct iwl_priv *priv = (struct iwl_priv *)priv_r;
+        struct ieee80211_hw *hw = priv->hw;
+        struct ieee80211_conf *conf = &priv->hw->conf;
+        struct iwl3945_sta_priv *psta;
+        struct iwl3945_rs_sta *rs_sta;
+        struct ieee80211_supported_band *sband;
         int i;
 
-        IWL_DEBUG_RATE(priv, "enter\n");
+        IWL_DEBUG_INFO(priv, "enter \n");
+        if (sta_id == priv->hw_params.bcast_sta_id)
+                goto out;
 
-        spin_lock_init(&rs_sta->lock);
+        psta = (struct iwl3945_sta_priv *) sta->drv_priv;
+        rs_sta = &psta->rs_sta;
+        sband = hw->wiphy->bands[conf->channel->band];
 
         rs_sta->priv = priv;
 
@@ -351,9 +360,7 @@ static void rs_rate_init(void *priv_r, struct ieee80211_supported_band *sband,
         rs_sta->last_flush = jiffies;
         rs_sta->flush_time = IWL_RATE_FLUSH;
         rs_sta->last_tx_packets = 0;
-        rs_sta->ibss_sta_added = 0;
 
-        init_timer(&rs_sta->rate_scale_flush);
         rs_sta->rate_scale_flush.data = (unsigned long)rs_sta;
         rs_sta->rate_scale_flush.function = iwl3945_bg_rate_scale_flush;
 
@@ -372,16 +379,18 @@ static void rs_rate_init(void *priv_r, struct ieee80211_supported_band *sband,
                 }
         }
 
-        priv->sta_supp_rates = sta->supp_rates[sband->band];
+        priv->_3945.sta_supp_rates = sta->supp_rates[sband->band];
         /* For 5 GHz band it start at IWL_FIRST_OFDM_RATE */
         if (sband->band == IEEE80211_BAND_5GHZ) {
                 rs_sta->last_txrate_idx += IWL_FIRST_OFDM_RATE;
-                priv->sta_supp_rates = priv->sta_supp_rates <<
+                priv->_3945.sta_supp_rates = priv->_3945.sta_supp_rates <<
                                                 IWL_FIRST_OFDM_RATE;
         }
 
+out:
+        priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
 
-        IWL_DEBUG_RATE(priv, "leave\n");
+        IWL_DEBUG_INFO(priv, "leave\n");
 }
 
 static void *rs_alloc(struct ieee80211_hw *hw, struct dentry *debugfsdir)
@@ -405,6 +414,9 @@ static void *rs_alloc_sta(void *iwl_priv, struct ieee80211_sta *sta, gfp_t gfp)
 
         rs_sta = &psta->rs_sta;
 
+        spin_lock_init(&rs_sta->lock);
+        init_timer(&rs_sta->rate_scale_flush);
+
         IWL_DEBUG_RATE(priv, "leave\n");
 
         return rs_sta;
@@ -413,13 +425,14 @@ static void *rs_alloc_sta(void *iwl_priv, struct ieee80211_sta *sta, gfp_t gfp)
 static void rs_free_sta(void *iwl_priv, struct ieee80211_sta *sta,
                         void *priv_sta)
 {
-        struct iwl3945_sta_priv *psta = (void *) sta->drv_priv;
-        struct iwl3945_rs_sta *rs_sta = &psta->rs_sta;
-        struct iwl_priv *priv __maybe_unused = rs_sta->priv;
+        struct iwl3945_rs_sta *rs_sta = priv_sta;
 
-        IWL_DEBUG_RATE(priv, "enter\n");
+        /*
+         * Be careful not to use any members of iwl3945_rs_sta (like trying
+         * to use iwl_priv to print out debugging) since it may not be fully
+         * initialized at this point.
+         */
         del_timer_sync(&rs_sta->rate_scale_flush);
-        IWL_DEBUG_RATE(priv, "leave\n");
 }
 
 
@@ -458,6 +471,13 @@ static void rs_tx_status(void *priv_rate, struct ieee80211_supported_band *sband
                 return;
         }
 
+        /* Treat uninitialized rate scaling data same as non-existing. */
+        if (!rs_sta->priv) {
+                IWL_DEBUG_RATE(priv, "leave: STA priv data uninitialized!\n");
+                return;
+        }
+
+
         rs_sta->tx_packets++;
 
         scale_rate_index = first_index;
@@ -625,7 +645,6 @@ static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta,
         u32 fail_count;
         s8 scale_action = 0;
         unsigned long flags;
-        struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
         u16 rate_mask = sta ? sta->supp_rates[sband->band] : 0;
         s8 max_rate_idx = -1;
         struct iwl_priv *priv = (struct iwl_priv *)priv_r;
@@ -633,6 +652,12 @@ static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta,
 
         IWL_DEBUG_RATE(priv, "enter\n");
 
+        /* Treat uninitialized rate scaling data same as non-existing. */
+        if (rs_sta && !rs_sta->priv) {
+                IWL_DEBUG_RATE(priv, "Rate scaling information not initialized yet.\n");
+                priv_sta = NULL;
+        }
+
         if (rate_control_send_low(sta, priv_sta, txrc))
                 return;
 
@@ -650,20 +675,6 @@ static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta,
         if (sband->band == IEEE80211_BAND_5GHZ)
                 rate_mask = rate_mask << IWL_FIRST_OFDM_RATE;
 
-        if ((priv->iw_mode == NL80211_IFTYPE_ADHOC) &&
-            !rs_sta->ibss_sta_added) {
-                u8 sta_id = iwl_find_station(priv, hdr->addr1);
-
-                if (sta_id == IWL_INVALID_STATION) {
-                        IWL_DEBUG_RATE(priv, "LQ: ADD station %pM\n",
-                                       hdr->addr1);
-                        sta_id = iwl_add_station(priv, hdr->addr1, false,
-                                CMD_ASYNC, NULL);
-                }
-                if (sta_id != IWL_INVALID_STATION)
-                        rs_sta->ibss_sta_added = 1;
-        }
-
         spin_lock_irqsave(&rs_sta->lock, flags);
 
         /* for recent assoc, choose best rate regarding
@@ -883,12 +894,22 @@ static void iwl3945_remove_debugfs(void *priv, void *priv_sta)
 }
 #endif
 
+/*
+ * Initialization of rate scaling information is done by driver after
+ * the station is added. Since mac80211 calls this function before a
+ * station is added we ignore it.
+ */
+static void rs_rate_init_stub(void *priv_r, struct ieee80211_supported_band *sband,
+                              struct ieee80211_sta *sta, void *priv_sta)
+{
+}
+
 static struct rate_control_ops rs_ops = {
         .module = NULL,
         .name = RS_NAME,
         .tx_status = rs_tx_status,
         .get_rate = rs_get_rate,
-        .rate_init = rs_rate_init,
+        .rate_init = rs_rate_init_stub,
         .alloc = rs_alloc,
         .free = rs_free,
         .alloc_sta = rs_alloc_sta,
@@ -899,7 +920,6 @@ static struct rate_control_ops rs_ops = {
 #endif
 
 };
-
 void iwl3945_rate_scale_init(struct ieee80211_hw *hw, s32 sta_id)
 {
         struct iwl_priv *priv = hw->priv;
@@ -916,6 +936,7 @@ void iwl3945_rate_scale_init(struct ieee80211_hw *hw, s32 sta_id)
         sta = ieee80211_find_sta(priv->vif,
                                  priv->stations[sta_id].sta.sta.addr);
         if (!sta) {
+                IWL_DEBUG_RATE(priv, "Unable to find station to initialize rate scaling.\n");
                 rcu_read_unlock();
                 return;
         }
@@ -946,7 +967,7 @@ void iwl3945_rate_scale_init(struct ieee80211_hw *hw, s32 sta_id)
 
         spin_unlock_irqrestore(&rs_sta->lock, flags);
 
-        rssi = priv->last_rx_rssi;
+        rssi = priv->_3945.last_rx_rssi;
         if (rssi == 0)
                 rssi = IWL_MIN_RSSI_VAL;
 
diff --git a/drivers/net/wireless/iwlwifi/iwl-3945.c b/drivers/net/wireless/iwlwifi/iwl-3945.c
index e0678d921055..3b5889d8d662 100644
--- a/drivers/net/wireless/iwlwifi/iwl-3945.c
+++ b/drivers/net/wireless/iwlwifi/iwl-3945.c
@@ -242,7 +242,7 @@ int iwl3945_rs_next_rate(struct iwl_priv *priv, int rate)
                         next_rate = IWL_RATE_6M_INDEX;
                 break;
         case IEEE80211_BAND_2GHZ:
-                if (!(priv->sta_supp_rates & IWL_OFDM_RATES_MASK) &&
+                if (!(priv->_3945.sta_supp_rates & IWL_OFDM_RATES_MASK) &&
                     iwl_is_associated(priv)) {
                         if (rate == IWL_RATE_11M_INDEX)
                                 next_rate = IWL_RATE_5M_INDEX;
@@ -359,7 +359,7 @@ void iwl3945_hw_rx_statistics(struct iwl_priv *priv,
                      (int)sizeof(struct iwl3945_notif_statistics),
                      le32_to_cpu(pkt->len_n_flags) & FH_RSCSR_FRAME_SIZE_MSK);
 
-        memcpy(&priv->statistics_39, pkt->u.raw, sizeof(priv->statistics_39));
+        memcpy(&priv->_3945.statistics, pkt->u.raw, sizeof(priv->_3945.statistics));
 }
 
 /******************************************************************************
@@ -705,9 +705,10 @@ static void iwl3945_rx_reply_rx(struct iwl_priv *priv,
         iwl_dbg_log_rx_data_frame(priv, le16_to_cpu(rx_hdr->len), header);
 
         if (network_packet) {
-                priv->last_beacon_time = le32_to_cpu(rx_end->beacon_timestamp);
-                priv->last_tsf = le64_to_cpu(rx_end->timestamp);
-                priv->last_rx_rssi = rx_status.signal;
+                priv->_3945.last_beacon_time =
+                        le32_to_cpu(rx_end->beacon_timestamp);
+                priv->_3945.last_tsf = le64_to_cpu(rx_end->timestamp);
+                priv->_3945.last_rx_rssi = rx_status.signal;
                 priv->last_rx_noise = rx_status.noise;
         }
 
@@ -956,7 +957,7 @@ static int iwl3945_tx_reset(struct iwl_priv *priv)
         iwl_write_prph(priv, ALM_SCD_TXF5MF_REG, 0x000005);
 
         iwl_write_direct32(priv, FH39_TSSR_CBB_BASE,
-                             priv->shared_phys);
+                             priv->_3945.shared_phys);
 
         iwl_write_direct32(priv, FH39_TSSR_MSG_CONFIG,
                 FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TXPD_ON |
@@ -1606,7 +1607,7 @@ static int iwl3945_hw_reg_set_new_power(struct iwl_priv *priv,
         int power;
 
         /* Get this chnlgrp's rate-to-max/clip-powers table */
-        clip_pwrs = priv->clip39_groups[ch_info->group_index].clip_powers;
+        clip_pwrs = priv->_3945.clip_groups[ch_info->group_index].clip_powers;
 
         /* Get this channel's rate-to-current-power settings table */
         power_info = ch_info->power_info;
@@ -1732,7 +1733,7 @@ static int iwl3945_hw_reg_comp_txpower_temp(struct iwl_priv *priv)
                 }
 
                 /* Get this chnlgrp's rate-to-max/clip-powers table */
-                clip_pwrs = priv->clip39_groups[ch_info->group_index].clip_powers;
+                clip_pwrs = priv->_3945.clip_groups[ch_info->group_index].clip_powers;
 
                 /* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
                 for (scan_tbl_index = 0;
@@ -1910,6 +1911,8 @@ static int iwl3945_commit_rxon(struct iwl_priv *priv)
                                   "configuration (%d).\n", rc);
                         return rc;
                 }
+                iwl_clear_ucode_stations(priv, false);
+                iwl_restore_stations(priv);
         }
 
         IWL_DEBUG_INFO(priv, "Sending RXON\n"
@@ -1940,7 +1943,10 @@ static int iwl3945_commit_rxon(struct iwl_priv *priv)
 
         memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
 
-        iwl_clear_stations_table(priv);
+        if (!new_assoc) {
+                iwl_clear_ucode_stations(priv, false);
+                iwl_restore_stations(priv);
+        }
 
         /* If we issue a new RXON command which required a tune then we must
          * send a new TXPOWER command or we won't be able to Tx any frames */
@@ -1950,19 +1956,6 @@ static int iwl3945_commit_rxon(struct iwl_priv *priv)
                 return rc;
         }
 
-        /* Add the broadcast address so we can send broadcast frames */
-        priv->cfg->ops->lib->add_bcast_station(priv);
-
-        /* If we have set the ASSOC_MSK and we are in BSS mode then
-         * add the IWL_AP_ID to the station rate table */
-        if (iwl_is_associated(priv) &&
-            (priv->iw_mode == NL80211_IFTYPE_STATION))
-                if (iwl_add_station(priv, priv->active_rxon.bssid_addr,
-                                true, CMD_SYNC, NULL) == IWL_INVALID_STATION) {
-                        IWL_ERR(priv, "Error adding AP address for transmit\n");
-                        return -EIO;
-                }
-
         /* Init the hardware's rate fallback order based on the band */
         rc = iwl3945_init_hw_rate_table(priv);
         if (rc) {
@@ -1997,13 +1990,13 @@ void iwl3945_reg_txpower_periodic(struct iwl_priv *priv)
 
  reschedule:
         queue_delayed_work(priv->workqueue,
-                           &priv->thermal_periodic, REG_RECALIB_PERIOD * HZ);
+                           &priv->_3945.thermal_periodic, REG_RECALIB_PERIOD * HZ);
 }
 
 static void iwl3945_bg_reg_txpower_periodic(struct work_struct *work)
 {
         struct iwl_priv *priv = container_of(work, struct iwl_priv,
-                                             thermal_periodic.work);
+                                             _3945.thermal_periodic.work);
 
         if (test_bit(STATUS_EXIT_PENDING, &priv->status))
                 return;
@@ -2139,7 +2132,7 @@ static void iwl3945_hw_reg_init_channel_groups(struct iwl_priv *priv)
                  *   power peaks, without too much distortion (clipping).
                  */
                 /* we'll fill in this array with h/w max power levels */
-                clip_pwrs = (s8 *) priv->clip39_groups[i].clip_powers;
+                clip_pwrs = (s8 *) priv->_3945.clip_groups[i].clip_powers;
 
                 /* divide factory saturation power by 2 to find -3dB level */
                 satur_pwr = (s8) (group->saturation_power >> 1);
@@ -2223,7 +2216,7 @@ int iwl3945_txpower_set_from_eeprom(struct iwl_priv *priv)
                         iwl3945_hw_reg_get_ch_grp_index(priv, ch_info);
 
                 /* Get this chnlgrp's rate->max/clip-powers table */
-                clip_pwrs = priv->clip39_groups[ch_info->group_index].clip_powers;
+                clip_pwrs = priv->_3945.clip_groups[ch_info->group_index].clip_powers;
 
                 /* calculate power index *adjustment* value according to
                  *  diff between current temperature and factory temperature */
@@ -2331,7 +2324,7 @@ int iwl3945_hw_tx_queue_init(struct iwl_priv *priv, struct iwl_tx_queue *txq)
 {
         int txq_id = txq->q.id;
 
-        struct iwl3945_shared *shared_data = priv->shared_virt;
+        struct iwl3945_shared *shared_data = priv->_3945.shared_virt;
 
         shared_data->tx_base_ptr[txq_id] = cpu_to_le32((u32)txq->q.dma_addr);
 
@@ -2431,7 +2424,7 @@ int iwl3945_init_hw_rate_table(struct iwl_priv *priv)
                 /* If an OFDM rate is used, have it fall back to the
                  * 1M CCK rates */
 
-                if (!(priv->sta_supp_rates & IWL_OFDM_RATES_MASK) &&
+                if (!(priv->_3945.sta_supp_rates & IWL_OFDM_RATES_MASK) &&
                     iwl_is_associated(priv)) {
 
                         index = IWL_FIRST_CCK_RATE;
@@ -2470,10 +2463,11 @@ int iwl3945_hw_set_hw_params(struct iwl_priv *priv)
         memset((void *)&priv->hw_params, 0,
                sizeof(struct iwl_hw_params));
 
-        priv->shared_virt = dma_alloc_coherent(&priv->pci_dev->dev,
-                                               sizeof(struct iwl3945_shared),
-                                               &priv->shared_phys, GFP_KERNEL);
-        if (!priv->shared_virt) {
+        priv->_3945.shared_virt =
+                dma_alloc_coherent(&priv->pci_dev->dev,
+                                   sizeof(struct iwl3945_shared),
+                                   &priv->_3945.shared_phys, GFP_KERNEL);
+        if (!priv->_3945.shared_virt) {
                 IWL_ERR(priv, "failed to allocate pci memory\n");
                 mutex_unlock(&priv->mutex);
                 return -ENOMEM;
@@ -2536,13 +2530,13 @@ void iwl3945_hw_rx_handler_setup(struct iwl_priv *priv)
 
 void iwl3945_hw_setup_deferred_work(struct iwl_priv *priv)
 {
-        INIT_DELAYED_WORK(&priv->thermal_periodic,
+        INIT_DELAYED_WORK(&priv->_3945.thermal_periodic,
                           iwl3945_bg_reg_txpower_periodic);
 }
 
 void iwl3945_hw_cancel_deferred_work(struct iwl_priv *priv)
 {
-        cancel_delayed_work(&priv->thermal_periodic);
+        cancel_delayed_work(&priv->_3945.thermal_periodic);
 }
 
 /* check contents of special bootstrap uCode SRAM */
@@ -2826,6 +2820,7 @@ static struct iwl_cfg iwl3945_bg_cfg = {
         .led_compensation = 64,
         .broken_powersave = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 static struct iwl_cfg iwl3945_abg_cfg = {
@@ -2844,6 +2839,7 @@ static struct iwl_cfg iwl3945_abg_cfg = {
         .led_compensation = 64,
         .broken_powersave = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 DEFINE_PCI_DEVICE_TABLE(iwl3945_hw_card_ids) = {
diff --git a/drivers/net/wireless/iwlwifi/iwl-3945.h b/drivers/net/wireless/iwlwifi/iwl-3945.h
index 452dfd5456c6..b89219573b91 100644
--- a/drivers/net/wireless/iwlwifi/iwl-3945.h
+++ b/drivers/net/wireless/iwlwifi/iwl-3945.h
@@ -95,7 +95,6 @@ struct iwl3945_rs_sta {
         u8 tgg;
         u8 flush_pending;
         u8 start_rate;
-        u8 ibss_sta_added;
         struct timer_list rate_scale_flush;
         struct iwl3945_rate_scale_data win[IWL_RATE_COUNT_3945];
 #ifdef CONFIG_MAC80211_DEBUGFS
diff --git a/drivers/net/wireless/iwlwifi/iwl-4965.c b/drivers/net/wireless/iwlwifi/iwl-4965.c
index 83c52a682622..3297fc7b80bf 100644
--- a/drivers/net/wireless/iwlwifi/iwl-4965.c
+++ b/drivers/net/wireless/iwlwifi/iwl-4965.c
@@ -502,14 +502,14 @@ static void iwl4965_tx_queue_set_status(struct iwl_priv *priv,
                        scd_retry ? "BA" : "AC", txq_id, tx_fifo_id);
 }
 
-static const u16 default_queue_to_tx_fifo[] = {
-        IWL_TX_FIFO_AC3,
-        IWL_TX_FIFO_AC2,
-        IWL_TX_FIFO_AC1,
-        IWL_TX_FIFO_AC0,
+static const s8 default_queue_to_tx_fifo[] = {
+        IWL_TX_FIFO_VO,
+        IWL_TX_FIFO_VI,
+        IWL_TX_FIFO_BE,
+        IWL_TX_FIFO_BK,
         IWL49_CMD_FIFO_NUM,
-        IWL_TX_FIFO_HCCA_1,
-        IWL_TX_FIFO_HCCA_2
+        IWL_TX_FIFO_UNUSED,
+        IWL_TX_FIFO_UNUSED,
 };
 
 static int iwl4965_alive_notify(struct iwl_priv *priv)
@@ -589,9 +589,15 @@ static int iwl4965_alive_notify(struct iwl_priv *priv)
         /* reset to 0 to enable all the queue first */
         priv->txq_ctx_active_msk = 0;
         /* Map each Tx/cmd queue to its corresponding fifo */
+        BUILD_BUG_ON(ARRAY_SIZE(default_queue_to_tx_fifo) != 7);
         for (i = 0; i < ARRAY_SIZE(default_queue_to_tx_fifo); i++) {
                 int ac = default_queue_to_tx_fifo[i];
+
                 iwl_txq_ctx_activate(priv, i);
+
+                if (ac == IWL_TX_FIFO_UNUSED)
+                        continue;
+
                 iwl4965_tx_queue_set_status(priv, &priv->txq[i], ac, 0);
         }
 
@@ -2179,6 +2185,7 @@ static struct iwl_lib_ops iwl4965_lib = {
         .load_ucode = iwl4965_load_bsm,
         .dump_nic_event_log = iwl_dump_nic_event_log,
         .dump_nic_error_log = iwl_dump_nic_error_log,
+        .dump_fh = iwl_dump_fh,
         .set_channel_switch = iwl4965_hw_channel_switch,
         .apm_ops = {
                 .init = iwl_apm_init,
@@ -2212,6 +2219,7 @@ static struct iwl_lib_ops iwl4965_lib = {
                 .set_ct_kill = iwl4965_set_ct_threshold,
         },
         .add_bcast_station = iwl_add_bcast_station,
+        .check_plcp_health = iwl_good_plcp_health,
 };
 
 static const struct iwl_ops iwl4965_ops = {
@@ -2223,7 +2231,7 @@ static const struct iwl_ops iwl4965_ops = {
 };
 
 struct iwl_cfg iwl4965_agn_cfg = {
-        .name = "4965AGN",
+        .name = "Intel(R) Wireless WiFi Link 4965AGN",
         .fw_name_pre = IWL4965_FW_PRE,
         .ucode_api_max = IWL4965_UCODE_API_MAX,
         .ucode_api_min = IWL4965_UCODE_API_MIN,
@@ -2246,6 +2254,7 @@ struct iwl_cfg iwl4965_agn_cfg = {
         .led_compensation = 61,
         .chain_noise_num_beacons = IWL4965_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 /* Module firmware */
diff --git a/drivers/net/wireless/iwlwifi/iwl-5000.c b/drivers/net/wireless/iwlwifi/iwl-5000.c
index e476acb53aa7..2267cad49cbf 100644
--- a/drivers/net/wireless/iwlwifi/iwl-5000.c
+++ b/drivers/net/wireless/iwlwifi/iwl-5000.c
@@ -43,6 +43,7 @@
 #include "iwl-io.h"
 #include "iwl-sta.h"
 #include "iwl-helpers.h"
+#include "iwl-agn.h"
 #include "iwl-agn-led.h"
 #include "iwl-5000-hw.h"
 #include "iwl-6000-hw.h"
@@ -63,14 +64,17 @@
 #define _IWL5150_MODULE_FIRMWARE(api) IWL5150_FW_PRE #api ".ucode"
 #define IWL5150_MODULE_FIRMWARE(api) _IWL5150_MODULE_FIRMWARE(api)
 
-static const u16 iwl5000_default_queue_to_tx_fifo[] = {
-        IWL_TX_FIFO_AC3,
-        IWL_TX_FIFO_AC2,
-        IWL_TX_FIFO_AC1,
-        IWL_TX_FIFO_AC0,
+static const s8 iwl5000_default_queue_to_tx_fifo[] = {
+        IWL_TX_FIFO_VO,
+        IWL_TX_FIFO_VI,
+        IWL_TX_FIFO_BE,
+        IWL_TX_FIFO_BK,
         IWL50_CMD_FIFO_NUM,
-        IWL_TX_FIFO_HCCA_1,
-        IWL_TX_FIFO_HCCA_2
+        IWL_TX_FIFO_UNUSED,
+        IWL_TX_FIFO_UNUSED,
+        IWL_TX_FIFO_UNUSED,
+        IWL_TX_FIFO_UNUSED,
+        IWL_TX_FIFO_UNUSED,
 };
 
 /* NIC configuration for 5000 series */
@@ -540,7 +544,6 @@ void iwl5000_init_alive_start(struct iwl_priv *priv)
                 goto restart;
         }
 
-        iwl_clear_stations_table(priv);
         ret = priv->cfg->ops->lib->alive_notify(priv);
         if (ret) {
                 IWL_WARN(priv,
@@ -579,9 +582,9 @@ static void iwl5000_tx_queue_set_status(struct iwl_priv *priv,
 
         txq->sched_retry = scd_retry;
 
-        IWL_DEBUG_INFO(priv, "%s %s Queue %d on AC %d\n",
+        IWL_DEBUG_INFO(priv, "%s %s Queue %d on FIFO %d\n",
                        active ? "Activate" : "Deactivate",
-                       scd_retry ? "BA" : "AC", txq_id, tx_fifo_id);
+                       scd_retry ? "BA" : "AC/CMD", txq_id, tx_fifo_id);
 }
 
 int iwl5000_alive_notify(struct iwl_priv *priv)
@@ -656,25 +659,21 @@ int iwl5000_alive_notify(struct iwl_priv *priv)
         /* reset to 0 to enable all the queue first */
         priv->txq_ctx_active_msk = 0;
         /* map qos queues to fifos one-to-one */
+        BUILD_BUG_ON(ARRAY_SIZE(iwl5000_default_queue_to_tx_fifo) != 10);
+
         for (i = 0; i < ARRAY_SIZE(iwl5000_default_queue_to_tx_fifo); i++) {
                 int ac = iwl5000_default_queue_to_tx_fifo[i];
+
                 iwl_txq_ctx_activate(priv, i);
+
+                if (ac == IWL_TX_FIFO_UNUSED)
+                        continue;
+
                 iwl5000_tx_queue_set_status(priv, &priv->txq[i], ac, 0);
         }
 
-        /*
-         * TODO - need to initialize these queues and map them to FIFOs
-         * in the loop above, not only mark them as active. We do this
-         * because we want the first aggregation queue to be queue #10,
-         * but do not use 8 or 9 otherwise yet.
-         */
-        iwl_txq_ctx_activate(priv, 7);
-        iwl_txq_ctx_activate(priv, 8);
-        iwl_txq_ctx_activate(priv, 9);
-
         spin_unlock_irqrestore(&priv->lock, flags);
 
-
         iwl_send_wimax_coex(priv);
 
         iwl5000_set_Xtal_calib(priv);
@@ -1500,6 +1499,9 @@ struct iwl_lib_ops iwl5000_lib = {
                 .set_ct_kill = iwl5000_set_ct_threshold,
          },
         .add_bcast_station = iwl_add_bcast_station,
+        .recover_from_tx_stall = iwl_bg_monitor_recover,
+        .check_plcp_health = iwl_good_plcp_health,
+        .check_ack_health = iwl_good_ack_health,
 };
 
 static struct iwl_lib_ops iwl5150_lib = {
@@ -1554,6 +1556,9 @@ static struct iwl_lib_ops iwl5150_lib = {
                 .set_ct_kill = iwl5150_set_ct_threshold,
          },
         .add_bcast_station = iwl_add_bcast_station,
+        .recover_from_tx_stall = iwl_bg_monitor_recover,
+        .check_plcp_health = iwl_good_plcp_health,
+        .check_ack_health = iwl_good_ack_health,
 };
 
 static const struct iwl_ops iwl5000_ops = {
@@ -1580,7 +1585,7 @@ struct iwl_mod_params iwl50_mod_params = {
 
 
 struct iwl_cfg iwl5300_agn_cfg = {
-        .name = "5300AGN",
+        .name = "Intel(R) Ultimate N WiFi Link 5300 AGN",
         .fw_name_pre = IWL5000_FW_PRE,
         .ucode_api_max = IWL5000_UCODE_API_MAX,
         .ucode_api_min = IWL5000_UCODE_API_MIN,
@@ -1603,10 +1608,11 @@ struct iwl_cfg iwl5300_agn_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5100_bgn_cfg = {
-        .name = "5100BGN",
+        .name = "Intel(R) WiFi Link 5100 BGN",
         .fw_name_pre = IWL5000_FW_PRE,
         .ucode_api_max = IWL5000_UCODE_API_MAX,
         .ucode_api_min = IWL5000_UCODE_API_MIN,
@@ -1629,10 +1635,11 @@ struct iwl_cfg iwl5100_bgn_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5100_abg_cfg = {
-        .name = "5100ABG",
+        .name = "Intel(R) WiFi Link 5100 ABG",
         .fw_name_pre = IWL5000_FW_PRE,
         .ucode_api_max = IWL5000_UCODE_API_MAX,
         .ucode_api_min = IWL5000_UCODE_API_MIN,
@@ -1653,10 +1660,11 @@ struct iwl_cfg iwl5100_abg_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5100_agn_cfg = {
-        .name = "5100AGN",
+        .name = "Intel(R) WiFi Link 5100 AGN",
         .fw_name_pre = IWL5000_FW_PRE,
         .ucode_api_max = IWL5000_UCODE_API_MAX,
         .ucode_api_min = IWL5000_UCODE_API_MIN,
@@ -1679,10 +1687,11 @@ struct iwl_cfg iwl5100_agn_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5350_agn_cfg = {
-        .name = "5350AGN",
+        .name = "Intel(R) WiMAX/WiFi Link 5350 AGN",
         .fw_name_pre = IWL5000_FW_PRE,
         .ucode_api_max = IWL5000_UCODE_API_MAX,
         .ucode_api_min = IWL5000_UCODE_API_MIN,
@@ -1705,10 +1714,11 @@ struct iwl_cfg iwl5350_agn_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5150_agn_cfg = {
-        .name = "5150AGN",
+        .name = "Intel(R) WiMAX/WiFi Link 5150 AGN",
         .fw_name_pre = IWL5150_FW_PRE,
         .ucode_api_max = IWL5150_UCODE_API_MAX,
         .ucode_api_min = IWL5150_UCODE_API_MIN,
@@ -1731,10 +1741,11 @@ struct iwl_cfg iwl5150_agn_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl5150_abg_cfg = {
-        .name = "5150ABG",
+        .name = "Intel(R) WiMAX/WiFi Link 5150 ABG",
         .fw_name_pre = IWL5150_FW_PRE,
         .ucode_api_max = IWL5150_UCODE_API_MAX,
         .ucode_api_min = IWL5150_UCODE_API_MIN,
@@ -1755,6 +1766,7 @@ struct iwl_cfg iwl5150_abg_cfg = {
         .chain_noise_num_beacons = IWL_CAL_NUM_BEACONS,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_LONG_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 MODULE_FIRMWARE(IWL5000_MODULE_FIRMWARE(IWL5000_UCODE_API_MAX));
diff --git a/drivers/net/wireless/iwlwifi/iwl-6000.c b/drivers/net/wireless/iwlwifi/iwl-6000.c
index c4844adff92a..d75799946a7e 100644
--- a/drivers/net/wireless/iwlwifi/iwl-6000.c
+++ b/drivers/net/wireless/iwlwifi/iwl-6000.c
@@ -42,6 +42,7 @@
 #include "iwl-core.h"
 #include "iwl-io.h"
 #include "iwl-sta.h"
+#include "iwl-agn.h"
 #include "iwl-helpers.h"
 #include "iwl-5000-hw.h"
 #include "iwl-6000-hw.h"
@@ -277,6 +278,9 @@ static struct iwl_lib_ops iwl6000_lib = {
                 .set_ct_kill = iwl6000_set_ct_threshold,
          },
         .add_bcast_station = iwl_add_bcast_station,
+        .recover_from_tx_stall = iwl_bg_monitor_recover,
+        .check_plcp_health = iwl_good_plcp_health,
+        .check_ack_health = iwl_good_ack_health,
 };
 
 static const struct iwl_ops iwl6000_ops = {
@@ -342,6 +346,9 @@ static struct iwl_lib_ops iwl6050_lib = {
                 .set_calib_version = iwl6050_set_calib_version,
          },
         .add_bcast_station = iwl_add_bcast_station,
+        .recover_from_tx_stall = iwl_bg_monitor_recover,
+        .check_plcp_health = iwl_good_plcp_health,
+        .check_ack_health = iwl_good_ack_health,
 };
 
 static const struct iwl_ops iwl6050_ops = {
@@ -356,7 +363,7 @@ static const struct iwl_ops iwl6050_ops = {
  * "i": Internal configuration, use internal Power Amplifier
  */
 struct iwl_cfg iwl6000i_2agn_cfg = {
-        .name = "6000 Series 2x2 AGN",
+        .name = "Intel(R) Centrino(R) Advanced-N 6200 AGN",
         .fw_name_pre = IWL6000_FW_PRE,
         .ucode_api_max = IWL6000_UCODE_API_MAX,
         .ucode_api_min = IWL6000_UCODE_API_MIN,
@@ -385,10 +392,11 @@ struct iwl_cfg iwl6000i_2agn_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl6000i_2abg_cfg = {
-        .name = "6000 Series 2x2 ABG",
+        .name = "Intel(R) Centrino(R) Advanced-N 6200 ABG",
         .fw_name_pre = IWL6000_FW_PRE,
         .ucode_api_max = IWL6000_UCODE_API_MAX,
         .ucode_api_min = IWL6000_UCODE_API_MIN,
@@ -416,10 +424,11 @@ struct iwl_cfg iwl6000i_2abg_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl6000i_2bg_cfg = {
-        .name = "6000 Series 2x2 BG",
+        .name = "Intel(R) Centrino(R) Advanced-N 6200 BG",
         .fw_name_pre = IWL6000_FW_PRE,
         .ucode_api_max = IWL6000_UCODE_API_MAX,
         .ucode_api_min = IWL6000_UCODE_API_MIN,
@@ -447,10 +456,11 @@ struct iwl_cfg iwl6000i_2bg_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl6050_2agn_cfg = {
-        .name = "6050 Series 2x2 AGN",
+        .name = "Intel(R) Centrino(R) Advanced-N + WiMAX 6250 AGN",
         .fw_name_pre = IWL6050_FW_PRE,
         .ucode_api_max = IWL6050_UCODE_API_MAX,
         .ucode_api_min = IWL6050_UCODE_API_MIN,
@@ -479,10 +489,11 @@ struct iwl_cfg iwl6050_2agn_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1500,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl6050_2abg_cfg = {
-        .name = "6050 Series 2x2 ABG",
+        .name = "Intel(R) Centrino(R) Advanced-N + WiMAX 6250 ABG",
         .fw_name_pre = IWL6050_FW_PRE,
         .ucode_api_max = IWL6050_UCODE_API_MAX,
         .ucode_api_min = IWL6050_UCODE_API_MIN,
@@ -510,10 +521,11 @@ struct iwl_cfg iwl6050_2abg_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1500,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 struct iwl_cfg iwl6000_3agn_cfg = {
-        .name = "6000 Series 3x3 AGN",
+        .name = "Intel(R) Centrino(R) Ultimate-N 6300 AGN",
         .fw_name_pre = IWL6000_FW_PRE,
         .ucode_api_max = IWL6000_UCODE_API_MAX,
         .ucode_api_min = IWL6000_UCODE_API_MIN,
@@ -542,6 +554,7 @@ struct iwl_cfg iwl6000_3agn_cfg = {
         .support_ct_kill_exit = true,
         .plcp_delta_threshold = IWL_MAX_PLCP_ERR_THRESHOLD_DEF,
         .chain_noise_scale = 1000,
+        .monitor_recover_period = IWL_MONITORING_PERIOD,
 };
 
 MODULE_FIRMWARE(IWL6000_MODULE_FIRMWARE(IWL6000_UCODE_API_MAX));
diff --git a/drivers/net/wireless/iwlwifi/iwl-agn-ict.c b/drivers/net/wireless/iwlwifi/iwl-agn-ict.c
new file mode 100644
index 000000000000..4c5395eae956
--- /dev/null
+++ b/drivers/net/wireless/iwlwifi/iwl-agn-ict.c
@@ -0,0 +1,305 @@
+/******************************************************************************
+ *
+ * GPL LICENSE SUMMARY
+ *
+ * Copyright(c) 2008 - 2010 Intel Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
+ * USA
+ *
+ * The full GNU General Public License is included in this distribution
+ * in the file called LICENSE.GPL.
+ *
+ * Contact Information:
+ *  Intel Linux Wireless <ilw@linux.intel.com>
+ * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
+ *****************************************************************************/
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/etherdevice.h>
+#include <linux/sched.h>
+#include <net/mac80211.h>
+
+#include "iwl-dev.h"
+#include "iwl-core.h"
+#include "iwl-agn.h"
+#include "iwl-helpers.h"
+
+#define ICT_COUNT (PAGE_SIZE/sizeof(u32))
+
+/* Free dram table */
+void iwl_free_isr_ict(struct iwl_priv *priv)
+{
+        if (priv->_agn.ict_tbl_vir) {
+                dma_free_coherent(&priv->pci_dev->dev,
+                                  (sizeof(u32) * ICT_COUNT) + PAGE_SIZE,
+                                  priv->_agn.ict_tbl_vir,
+                                  priv->_agn.ict_tbl_dma);
+                priv->_agn.ict_tbl_vir = NULL;
+        }
+}
+
+
+/* allocate dram shared table it is a PAGE_SIZE aligned
+ * also reset all data related to ICT table interrupt.
+ */
+int iwl_alloc_isr_ict(struct iwl_priv *priv)
+{
+
+        if (priv->cfg->use_isr_legacy)
+                return 0;
+        /* allocate shrared data table */
+        priv->_agn.ict_tbl_vir =
+                dma_alloc_coherent(&priv->pci_dev->dev,
+                                   (sizeof(u32) * ICT_COUNT) + PAGE_SIZE,
+                                   &priv->_agn.ict_tbl_dma, GFP_KERNEL);
+        if (!priv->_agn.ict_tbl_vir)
+                return -ENOMEM;
+
+        /* align table to PAGE_SIZE boundry */
+        priv->_agn.aligned_ict_tbl_dma = ALIGN(priv->_agn.ict_tbl_dma, PAGE_SIZE);
+
+        IWL_DEBUG_ISR(priv, "ict dma addr %Lx dma aligned %Lx diff %d\n",
+                             (unsigned long long)priv->_agn.ict_tbl_dma,
+                             (unsigned long long)priv->_agn.aligned_ict_tbl_dma,
+                        (int)(priv->_agn.aligned_ict_tbl_dma - priv->_agn.ict_tbl_dma));
+
+        priv->_agn.ict_tbl =  priv->_agn.ict_tbl_vir +
+                          (priv->_agn.aligned_ict_tbl_dma - priv->_agn.ict_tbl_dma);
+
+        IWL_DEBUG_ISR(priv, "ict vir addr %p vir aligned %p diff %d\n",
+                             priv->_agn.ict_tbl, priv->_agn.ict_tbl_vir,
+                        (int)(priv->_agn.aligned_ict_tbl_dma - priv->_agn.ict_tbl_dma));
+
+        /* reset table and index to all 0 */
+        memset(priv->_agn.ict_tbl_vir,0, (sizeof(u32) * ICT_COUNT) + PAGE_SIZE);
+        priv->_agn.ict_index = 0;
+
+        /* add periodic RX interrupt */
+        priv->inta_mask |= CSR_INT_BIT_RX_PERIODIC;
+        return 0;
+}
+
+/* Device is going up inform it about using ICT interrupt table,
+ * also we need to tell the driver to start using ICT interrupt.
+ */
+int iwl_reset_ict(struct iwl_priv *priv)
+{
+        u32 val;
+        unsigned long flags;
+
+        if (!priv->_agn.ict_tbl_vir)
+                return 0;
+
+        spin_lock_irqsave(&priv->lock, flags);
+        iwl_disable_interrupts(priv);
+
+        memset(&priv->_agn.ict_tbl[0], 0, sizeof(u32) * ICT_COUNT);
+
+        val = priv->_agn.aligned_ict_tbl_dma >> PAGE_SHIFT;
+
+        val |= CSR_DRAM_INT_TBL_ENABLE;
+        val |= CSR_DRAM_INIT_TBL_WRAP_CHECK;
+
+        IWL_DEBUG_ISR(priv, "CSR_DRAM_INT_TBL_REG =0x%X "
+                        "aligned dma address %Lx\n",
+                        val, (unsigned long long)priv->_agn.aligned_ict_tbl_dma);
+
+        iwl_write32(priv, CSR_DRAM_INT_TBL_REG, val);
+        priv->_agn.use_ict = true;
+        priv->_agn.ict_index = 0;
+        iwl_write32(priv, CSR_INT, priv->inta_mask);
+        iwl_enable_interrupts(priv);
+        spin_unlock_irqrestore(&priv->lock, flags);
+
+        return 0;
+}
+
+/* Device is going down disable ict interrupt usage */
+void iwl_disable_ict(struct iwl_priv *priv)
+{
+        unsigned long flags;
+
+        spin_lock_irqsave(&priv->lock, flags);
+        priv->_agn.use_ict = false;
+        spin_unlock_irqrestore(&priv->lock, flags);
+}
+
+static irqreturn_t iwl_isr(int irq, void *data)
+{
+        struct iwl_priv *priv = data;
+        u32 inta, inta_mask;
+#ifdef CONFIG_IWLWIFI_DEBUG
+        u32 inta_fh;
+#endif
+        if (!priv)
+                return IRQ_NONE;
+
+        spin_lock(&priv->lock);
+
+        /* Disable (but don't clear!) interrupts here to avoid
+         *    back-to-back ISRs and sporadic interrupts from our NIC.
+         * If we have something to service, the tasklet will re-enable ints.
+         * If we *don't* have something, we'll re-enable before leaving here. */
+        inta_mask = iwl_read32(priv, CSR_INT_MASK);  /* just for debug */
+        iwl_write32(priv, CSR_INT_MASK, 0x00000000);
+
+        /* Discover which interrupts are active/pending */
+        inta = iwl_read32(priv, CSR_INT);
+
+        /* Ignore interrupt if there's nothing in NIC to service.
+         * This may be due to IRQ shared with another device,
+         * or due to sporadic interrupts thrown from our NIC. */
+        if (!inta) {
+                IWL_DEBUG_ISR(priv, "Ignore interrupt, inta == 0\n");
+                goto none;
+        }
+
+        if ((inta == 0xFFFFFFFF) || ((inta & 0xFFFFFFF0) == 0xa5a5a5a0)) {
+                /* Hardware disappeared. It might have already raised
+                 * an interrupt */
+                IWL_WARN(priv, "HARDWARE GONE?? INTA == 0x%08x\n", inta);
+                goto unplugged;
+        }
+
+#ifdef CONFIG_IWLWIFI_DEBUG
+        if (iwl_get_debug_level(priv) & (IWL_DL_ISR)) {
+                inta_fh = iwl_read32(priv, CSR_FH_INT_STATUS);
+                IWL_DEBUG_ISR(priv, "ISR inta 0x%08x, enabled 0x%08x, "
+                              "fh 0x%08x\n", inta, inta_mask, inta_fh);
+        }
+#endif
+
+        priv->_agn.inta |= inta;
+        /* iwl_irq_tasklet() will service interrupts and re-enable them */
+        if (likely(inta))
+                tasklet_schedule(&priv->irq_tasklet);
+        else if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->_agn.inta)
+                iwl_enable_interrupts(priv);
+
+ unplugged:
+        spin_unlock(&priv->lock);
+        return IRQ_HANDLED;
+
+ none:
+        /* re-enable interrupts here since we don't have anything to service. */
+        /* only Re-enable if diabled by irq  and no schedules tasklet. */
+        if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->_agn.inta)
+                iwl_enable_interrupts(priv);
+
+        spin_unlock(&priv->lock);
+        return IRQ_NONE;
+}
+
+/* interrupt handler using ict table, with this interrupt driver will
+ * stop using INTA register to get device's interrupt, reading this register
+ * is expensive, device will write interrupts in ICT dram table, increment
+ * index then will fire interrupt to driver, driver will OR all ICT table
+ * entries from current index up to table entry with 0 value. the result is
+ * the interrupt we need to service, driver will set the entries back to 0 and
+ * set index.
+ */
+irqreturn_t iwl_isr_ict(int irq, void *data)
+{
+        struct iwl_priv *priv = data;
+        u32 inta, inta_mask;
+        u32 val = 0;
+
+        if (!priv)
+                return IRQ_NONE;
+
+        /* dram interrupt table not set yet,
+         * use legacy interrupt.
+         */
+        if (!priv->_agn.use_ict)
+                return iwl_isr(irq, data);
+
+        spin_lock(&priv->lock);
+
+        /* Disable (but don't clear!) interrupts here to avoid
+         * back-to-back ISRs and sporadic interrupts from our NIC.
+         * If we have something to service, the tasklet will re-enable ints.
+         * If we *don't* have something, we'll re-enable before leaving here.
+         */
+        inta_mask = iwl_read32(priv, CSR_INT_MASK);  /* just for debug */
+        iwl_write32(priv, CSR_INT_MASK, 0x00000000);
+
+
+        /* Ignore interrupt if there's nothing in NIC to service.
+         * This may be due to IRQ shared with another device,
+         * or due to sporadic interrupts thrown from our NIC. */
+        if (!priv->_agn.ict_tbl[priv->_agn.ict_index]) {
+                IWL_DEBUG_ISR(priv, "Ignore interrupt, inta == 0\n");
+                goto none;
+        }
+
+        /* read all entries that not 0 start with ict_index */
+        while (priv->_agn.ict_tbl[priv->_agn.ict_index]) {
+
+                val |= le32_to_cpu(priv->_agn.ict_tbl[priv->_agn.ict_index]);
+                IWL_DEBUG_ISR(priv, "ICT index %d value 0x%08X\n",
+                                priv->_agn.ict_index,
+                                le32_to_cpu(priv->_agn.ict_tbl[priv->_agn.ict_index]));
+                priv->_agn.ict_tbl[priv->_agn.ict_index] = 0;
+                priv->_agn.ict_index = iwl_queue_inc_wrap(priv->_agn.ict_index,
+                                                     ICT_COUNT);
+
+        }
+
+        /* We should not get this value, just ignore it. */
+        if (val == 0xffffffff)
+                val = 0;
+
+        /*
+         * this is a w/a for a h/w bug. the h/w bug may cause the Rx bit
+         * (bit 15 before shifting it to 31) to clear when using interrupt
+         * coalescing. fortunately, bits 18 and 19 stay set when this happens
+         * so we use them to decide on the real state of the Rx bit.
+         * In order words, bit 15 is set if bit 18 or bit 19 are set.
+         */
+        if (val & 0xC0000)
+                val |= 0x8000;
+
+        inta = (0xff & val) | ((0xff00 & val) << 16);
+        IWL_DEBUG_ISR(priv, "ISR inta 0x%08x, enabled 0x%08x ict 0x%08x\n",
+                        inta, inta_mask, val);
+
+        inta &= priv->inta_mask;
+        priv->_agn.inta |= inta;
+
+        /* iwl_irq_tasklet() will service interrupts and re-enable them */
+        if (likely(inta))
+                tasklet_schedule(&priv->irq_tasklet);
+        else if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->_agn.inta) {
+                /* Allow interrupt if was disabled by this handler and
+                 * no tasklet was schedules, We should not enable interrupt,
+                 * tasklet will enable it.
+                 */
+                iwl_enable_interrupts(priv);
+        }
+
+        spin_unlock(&priv->lock);
+        return IRQ_HANDLED;
+
+ none:
+        /* re-enable interrupts here since we don't have anything to service.
+         * only Re-enable if disabled by irq.
+         */
+        if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->_agn.inta)
+                iwl_enable_interrupts(priv);
+
+        spin_unlock(&priv->lock);
+        return IRQ_NONE;
+}
diff --git a/drivers/net/wireless/iwlwifi/iwl-agn-rs.c b/drivers/net/wireless/iwlwifi/iwl-agn-rs.c
index 8bf7c20b9d39..5155b1a027eb 100644
--- a/drivers/net/wireless/iwlwifi/iwl-agn-rs.c
+++ b/drivers/net/wireless/iwlwifi/iwl-agn-rs.c
@@ -597,10 +597,6 @@ static u16 rs_get_supported_rates(struct iwl_lq_sta *lq_sta,
                                   struct ieee80211_hdr *hdr,
                                   enum iwl_table_type rate_type)
 {
-        if (hdr && is_multicast_ether_addr(hdr->addr1) &&
-            lq_sta->active_rate_basic)
-                return lq_sta->active_rate_basic;
-
         if (is_legacy(rate_type)) {
                 return lq_sta->active_legacy_rate;
         } else {
@@ -773,6 +769,15 @@ static void rs_tx_status(void *priv_r, struct ieee80211_supported_band *sband,
 
         IWL_DEBUG_RATE_LIMIT(priv, "get frame ack response, update rate scale window\n");
 
+        /* Treat uninitialized rate scaling data same as non-existing. */
+        if (!lq_sta) {
+                IWL_DEBUG_RATE(priv, "Station rate scaling not created yet.\n");
+                return;
+        } else if (!lq_sta->drv) {
+                IWL_DEBUG_RATE(priv, "Rate scaling not initialized yet.\n");
+                return;
+        }
+
         if (!ieee80211_is_data(hdr->frame_control) ||
             info->flags & IEEE80211_TX_CTL_NO_ACK)
                 return;
@@ -782,10 +787,6 @@ static void rs_tx_status(void *priv_r, struct ieee80211_supported_band *sband,
             !(info->flags & IEEE80211_TX_STAT_AMPDU))
                 return;
 
-        if ((priv->iw_mode == NL80211_IFTYPE_ADHOC) &&
-            !lq_sta->ibss_sta_added)
-                return;
-
         /*
          * Ignore this Tx frame response if its initial rate doesn't match
          * that of latest Link Quality command.  There may be stragglers
@@ -831,7 +832,7 @@ static void rs_tx_status(void *priv_r, struct ieee80211_supported_band *sband,
                 lq_sta->missed_rate_counter++;
                 if (lq_sta->missed_rate_counter > IWL_MISSED_RATE_MAX) {
                         lq_sta->missed_rate_counter = 0;
-                        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC);
+                        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC, false);
                 }
                 /* Regardless, ignore this status info for outdated rate */
                 return;
@@ -1919,7 +1920,7 @@ static u32 rs_update_rate_tbl(struct iwl_priv *priv,
         /* Update uCode's rate table. */
         rate = rate_n_flags_from_tbl(priv, tbl, index, is_green);
         rs_fill_link_cmd(priv, lq_sta, rate);
-        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC);
+        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC, false);
 
         return rate;
 }
@@ -2295,7 +2296,7 @@ lq_update:
                         IWL_DEBUG_RATE(priv, "Switch current  mcs: %X index: %d\n",
                                      tbl->current_rate, index);
                         rs_fill_link_cmd(priv, lq_sta, tbl->current_rate);
-                        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC);
+                        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC, false);
                 } else
                         done_search = 1;
         }
@@ -2344,7 +2345,20 @@ out:
         return;
 }
 
-
+/**
+ * rs_initialize_lq - Initialize a station's hardware rate table
+ *
+ * The uCode's station table contains a table of fallback rates
+ * for automatic fallback during transmission.
+ *
+ * NOTE: This sets up a default set of values.  These will be replaced later
+ *       if the driver's iwl-agn-rs rate scaling algorithm is used, instead of
+ *       rc80211_simple.
+ *
+ * NOTE: Run REPLY_ADD_STA command to set up station table entry, before
+ *       calling this function (which runs REPLY_TX_LINK_QUALITY_CMD,
+ *       which requires station table entry to exist).
+ */
 static void rs_initialize_lq(struct iwl_priv *priv,
                              struct ieee80211_conf *conf,
                              struct ieee80211_sta *sta,
@@ -2363,10 +2377,6 @@ static void rs_initialize_lq(struct iwl_priv *priv,
 
         i = lq_sta->last_txrate_idx;
 
-        if ((lq_sta->lq.sta_id == 0xff) &&
-            (priv->iw_mode == NL80211_IFTYPE_ADHOC))
-                goto out;
-
         valid_tx_ant = priv->hw_params.valid_tx_ant;
 
         if (!lq_sta->search_better_tbl)
@@ -2394,7 +2404,8 @@ static void rs_initialize_lq(struct iwl_priv *priv,
         tbl->current_rate = rate;
         rs_set_expected_tpt_table(lq_sta, tbl);
         rs_fill_link_cmd(NULL, lq_sta, rate);
-        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_ASYNC);
+        priv->stations[lq_sta->lq.sta_id].lq = &lq_sta->lq;
+        iwl_send_lq_cmd(priv, &lq_sta->lq, CMD_SYNC, true);
  out:
         return;
 }
@@ -2406,9 +2417,6 @@ static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta, void *priv_sta,
         struct sk_buff *skb = txrc->skb;
         struct ieee80211_supported_band *sband = txrc->sband;
         struct iwl_priv *priv = (struct iwl_priv *)priv_r;
-        struct ieee80211_conf *conf = &priv->hw->conf;
-        struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap;
-        struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
         struct iwl_lq_sta *lq_sta = priv_sta;
         int rate_idx;
@@ -2426,30 +2434,18 @@ static void rs_get_rate(void *priv_r, struct ieee80211_sta *sta, void *priv_sta,
                         lq_sta->max_rate_idx = -1;
         }
 
+        /* Treat uninitialized rate scaling data same as non-existing. */
+        if (lq_sta && !lq_sta->drv) {
+                IWL_DEBUG_RATE(priv, "Rate scaling not initialized yet.\n");
+                priv_sta = NULL;
+        }
+
         /* Send management frames and NO_ACK data using lowest rate. */
         if (rate_control_send_low(sta, priv_sta, txrc))
                 return;
 
         rate_idx  = lq_sta->last_txrate_idx;
 
-        if ((priv->iw_mode == NL80211_IFTYPE_ADHOC) &&
-            !lq_sta->ibss_sta_added) {
-                u8 sta_id = iwl_find_station(priv, hdr->addr1);
-
-                if (sta_id == IWL_INVALID_STATION) {
-                        IWL_DEBUG_RATE(priv, "LQ: ADD station %pM\n",
-                                       hdr->addr1);
-                        sta_id = iwl_add_station(priv, hdr->addr1,
-                                                false, CMD_ASYNC, ht_cap);
-                }
-                if ((sta_id != IWL_INVALID_STATION)) {
-                        lq_sta->lq.sta_id = sta_id;
-                        lq_sta->lq.rs_table[0].rate_n_flags = 0;
-                        lq_sta->ibss_sta_added = 1;
-                        rs_initialize_lq(priv, conf, sta, lq_sta);
-                }
-        }
-
         if (lq_sta->last_rate_n_flags & RATE_MCS_HT_MSK) {
                 rate_idx -= IWL_FIRST_OFDM_RATE;
                 /* 6M and 9M shared same MCS index */
@@ -2499,16 +2495,25 @@ static void *rs_alloc_sta(void *priv_rate, struct ieee80211_sta *sta,
         return lq_sta;
 }
 
-static void rs_rate_init(void *priv_r, struct ieee80211_supported_band *sband,
-                         struct ieee80211_sta *sta, void *priv_sta)
+/*
+ * Called after adding a new station to initialize rate scaling
+ */
+void iwl_rs_rate_init(struct iwl_priv *priv, struct ieee80211_sta *sta, u8 sta_id)
 {
         int i, j;
-        struct iwl_priv *priv = (struct iwl_priv *)priv_r;
+        struct ieee80211_hw *hw = priv->hw;
         struct ieee80211_conf *conf = &priv->hw->conf;
         struct ieee80211_sta_ht_cap *ht_cap = &sta->ht_cap;
-        struct iwl_lq_sta *lq_sta = priv_sta;
+        struct iwl_station_priv *sta_priv;
+        struct iwl_lq_sta *lq_sta;
+        struct ieee80211_supported_band *sband;
+
+        sta_priv = (struct iwl_station_priv *) sta->drv_priv;
+        lq_sta = &sta_priv->lq_sta;
+        sband = hw->wiphy->bands[conf->channel->band];
+
 
-        lq_sta->lq.sta_id = 0xff;
+        lq_sta->lq.sta_id = sta_id;
 
         for (j = 0; j < LQ_SIZE; j++)
                 for (i = 0; i < IWL_RATE_COUNT; i++)
@@ -2520,39 +2525,18 @@ static void rs_rate_init(void *priv_r, struct ieee80211_supported_band *sband,
                 for (i = 0; i < IWL_RATE_COUNT; i++)
                         rs_rate_scale_clear_window(&lq_sta->lq_info[j].win[i]);
 
-        IWL_DEBUG_RATE(priv, "LQ: *** rate scale station global init ***\n");
+        IWL_DEBUG_RATE(priv, "LQ: *** rate scale station global init for station %d ***\n",
+                       sta_id);
         /* TODO: what is a good starting rate for STA? About middle? Maybe not
          * the lowest or the highest rate.. Could consider using RSSI from
          * previous packets? Need to have IEEE 802.1X auth succeed immediately
          * after assoc.. */
 
-        lq_sta->ibss_sta_added = 0;
-        if (priv->iw_mode == NL80211_IFTYPE_AP) {
-                u8 sta_id = iwl_find_station(priv,
-                                                                sta->addr);
-
-                /* for IBSS the call are from tasklet */
-                IWL_DEBUG_RATE(priv, "LQ: ADD station %pM\n", sta->addr);
-
-                if (sta_id == IWL_INVALID_STATION) {
-                        IWL_DEBUG_RATE(priv, "LQ: ADD station %pM\n", sta->addr);
-                        sta_id = iwl_add_station(priv, sta->addr, false,
-                                                CMD_ASYNC, ht_cap);
-                }
-                if ((sta_id != IWL_INVALID_STATION)) {
-                        lq_sta->lq.sta_id = sta_id;
-                        lq_sta->lq.rs_table[0].rate_n_flags = 0;
-                }
-                /* FIXME: this is w/a remove it later */
-                priv->assoc_station_added = 1;
-        }
-
         lq_sta->is_dup = 0;
         lq_sta->max_rate_idx = -1;
         lq_sta->missed_rate_counter = IWL_MISSED_RATE_MAX;
         lq_sta->is_green = rs_use_green(sta, &priv->current_ht_config);
         lq_sta->active_legacy_rate = priv->active_rate & ~(0x1000);
-        lq_sta->active_rate_basic = priv->active_rate_basic;
         lq_sta->band = priv->band;
         /*
          * active_siso_rate mask includes 9 MBits (bit 5), and CCK (bits 0-3),
@@ -2800,7 +2784,7 @@ static ssize_t rs_sta_dbgfs_scale_table_write(struct file *file,
 
         if (lq_sta->dbg_fixed_rate) {
                 rs_fill_link_cmd(NULL, lq_sta, lq_sta->dbg_fixed_rate);
-                iwl_send_lq_cmd(lq_sta->drv, &lq_sta->lq, CMD_ASYNC);
+                iwl_send_lq_cmd(lq_sta->drv, &lq_sta->lq, CMD_ASYNC, false);
         }
 
         return count;
@@ -2956,12 +2940,8 @@ static ssize_t rs_sta_dbgfs_rate_scale_data_read(struct file *file,
                 desc += sprintf(buff+desc,
                                 "Bit Rate= %d Mb/s\n",
                                 iwl_rates[lq_sta->last_txrate_idx].ieee >> 1);
-        desc += sprintf(buff+desc,
-                        "Signal Level= %d dBm\tNoise Level= %d dBm\n",
-                        priv->last_rx_rssi, priv->last_rx_noise);
-        desc += sprintf(buff+desc,
-                        "Tsf= 0x%llx\tBeacon time= 0x%08X\n",
-                        priv->last_tsf, priv->last_beacon_time);
+        desc += sprintf(buff+desc, "Noise Level= %d dBm\n",
+                        priv->last_rx_noise);
 
         ret = simple_read_from_buffer(user_buf, count, ppos, buff, desc);
         return ret;
@@ -3001,12 +2981,21 @@ static void rs_remove_debugfs(void *priv, void *priv_sta)
 }
 #endif
 
+/*
+ * Initialization of rate scaling information is done by driver after
+ * the station is added. Since mac80211 calls this function before a
+ * station is added we ignore it.
+ */
+static void rs_rate_init_stub(void *priv_r, struct ieee80211_supported_band *sband,
+                         struct ieee80211_sta *sta, void *priv_sta)
+{
+}
 static struct rate_control_ops rs_ops = {
         .module = NULL,
         .name = RS_NAME,
         .tx_status = rs_tx_status,
         .get_rate = rs_get_rate,
-        .rate_init = rs_rate_init,
+        .rate_init = rs_rate_init_stub,
         .alloc = rs_alloc,
         .free = rs_free,
         .alloc_sta = rs_alloc_sta,
diff --git a/drivers/net/wireless/iwlwifi/iwl-agn-rs.h b/drivers/net/wireless/iwlwifi/iwl-agn-rs.h
index e71923961e69..8292f6d48ec6 100644
--- a/drivers/net/wireless/iwlwifi/iwl-agn-rs.h
+++ b/drivers/net/wireless/iwlwifi/iwl-agn-rs.h
@@ -403,7 +403,6 @@ struct iwl_lq_sta {
         u8 is_green;
         u8 is_dup;
         enum ieee80211_band band;
-        u8 ibss_sta_added;
 
         /* The following are bitmaps of rates; IWL_RATE_6M_MASK, etc. */
         u32 supp_rates;
@@ -411,7 +410,6 @@ struct iwl_lq_sta {
         u16 active_siso_rate;
         u16 active_mimo2_rate;
         u16 active_mimo3_rate;
-        u16 active_rate_basic;
         s8 max_rate_idx;     /* Max rate set by user */
         u8 missed_rate_counter;
 
@@ -479,6 +477,12 @@ static inline u8 iwl3945_get_prev_ieee_rate(u8 rate_index)
  */
 extern void iwl3945_rate_scale_init(struct ieee80211_hw *hw, s32 sta_id);
 
+/* Initialize station's rate scaling information after adding station */
+extern void iwl_rs_rate_init(struct iwl_priv *priv,
+                             struct ieee80211_sta *sta, u8 sta_id);
+extern void iwl3945_rs_rate_init(struct iwl_priv *priv,
+                                 struct ieee80211_sta *sta, u8 sta_id);
+
 /**
  * iwl_rate_control_register - Register the rate control algorithm callbacks
  *
diff --git a/drivers/net/wireless/iwlwifi/iwl-agn.c b/drivers/net/wireless/iwlwifi/iwl-agn.c
index e4c2e1e448ad..f43a45d0f1dd 100644
--- a/drivers/net/wireless/iwlwifi/iwl-agn.c
+++ b/drivers/net/wireless/iwlwifi/iwl-agn.c
@@ -54,6 +54,7 @@
 #include "iwl-helpers.h"
 #include "iwl-sta.h"
 #include "iwl-calib.h"
+#include "iwl-agn.h"
 
 
 /******************************************************************************
@@ -143,9 +144,6 @@ int iwl_commit_rxon(struct iwl_priv *priv)
                 return 0;
         }
 
-        /* station table will be cleared */
-        priv->assoc_station_added = 0;
-
         /* If we are currently associated and the new config requires
          * an RXON_ASSOC and the new config wants the associated mask enabled,
          * we must clear the associated from the active configuration
@@ -165,6 +163,8 @@ int iwl_commit_rxon(struct iwl_priv *priv)
                         IWL_ERR(priv, "Error clearing ASSOC_MSK (%d)\n", ret);
                         return ret;
                 }
+                iwl_clear_ucode_stations(priv, false);
+                iwl_restore_stations(priv);
         }
 
         IWL_DEBUG_INFO(priv, "Sending RXON\n"
@@ -178,9 +178,8 @@ int iwl_commit_rxon(struct iwl_priv *priv)
         iwl_set_rxon_hwcrypto(priv, !priv->cfg->mod_params->sw_crypto);
 
         /* Apply the new configuration
-         * RXON unassoc clears the station table in uCode, send it before
-         * we add the bcast station. If assoc bit is set, we will send RXON
-         * after having added the bcast and bssid station.
+         * RXON unassoc clears the station table in uCode so restoration of
+         * stations is needed after it (the RXON command) completes
          */
         if (!new_assoc) {
                 ret = iwl_send_cmd_pdu(priv, REPLY_RXON,
@@ -189,35 +188,14 @@ int iwl_commit_rxon(struct iwl_priv *priv)
                         IWL_ERR(priv, "Error setting new RXON (%d)\n", ret);
                         return ret;
                 }
+                IWL_DEBUG_INFO(priv, "Return from !new_assoc RXON. \n");
                 memcpy(active_rxon, &priv->staging_rxon, sizeof(*active_rxon));
+                iwl_clear_ucode_stations(priv, false);
+                iwl_restore_stations(priv);
         }
 
-        iwl_clear_stations_table(priv);
-
         priv->start_calib = 0;
-
-        /* Add the broadcast address so we can send broadcast frames */
-        priv->cfg->ops->lib->add_bcast_station(priv);
-
-
-        /* If we have set the ASSOC_MSK and we are in BSS mode then
-         * add the IWL_AP_ID to the station rate table */
         if (new_assoc) {
-                if (priv->iw_mode == NL80211_IFTYPE_STATION) {
-                        ret = iwl_rxon_add_station(priv,
-                                           priv->active_rxon.bssid_addr, 1);
-                        if (ret == IWL_INVALID_STATION) {
-                                IWL_ERR(priv,
-                                        "Error adding AP address for TX.\n");
-                                return -EIO;
-                        }
-                        priv->assoc_station_added = 1;
-                        if (priv->default_wep_key &&
-                            iwl_send_static_wepkey_cmd(priv, 0))
-                                IWL_ERR(priv,
-                                        "Could not send WEP static key.\n");
-                }
-
                 /*
                  * allow CTS-to-self if possible for new association.
                  * this is relevant only for 5000 series and up,
@@ -1266,9 +1244,9 @@ static void iwl_irq_tasklet(struct iwl_priv *priv)
          * hardware bugs here by ACKing all the possible interrupts so that
          * interrupt coalescing can still be achieved.
          */
-        iwl_write32(priv, CSR_INT, priv->inta | ~priv->inta_mask);
+        iwl_write32(priv, CSR_INT, priv->_agn.inta | ~priv->inta_mask);
 
-        inta = priv->inta;
+        inta = priv->_agn.inta;
 
 #ifdef CONFIG_IWLWIFI_DEBUG
         if (iwl_get_debug_level(priv) & IWL_DL_ISR) {
@@ -1281,8 +1259,8 @@ static void iwl_irq_tasklet(struct iwl_priv *priv)
 
         spin_unlock_irqrestore(&priv->lock, flags);
 
-        /* saved interrupt in inta variable now we can reset priv->inta */
-        priv->inta = 0;
+        /* saved interrupt in inta variable now we can reset priv->_agn.inta */
+        priv->_agn.inta = 0;
 
         /* Now service all interrupt bits discovered above. */
         if (inta & CSR_INT_BIT_HW_ERR) {
@@ -2094,7 +2072,6 @@ static void iwl_alive_start(struct iwl_priv *priv)
                 goto restart;
         }
 
-        iwl_clear_stations_table(priv);
         ret = priv->cfg->ops->lib->alive_notify(priv);
         if (ret) {
                 IWL_WARN(priv,
@@ -2105,13 +2082,19 @@ static void iwl_alive_start(struct iwl_priv *priv)
         /* After the ALIVE response, we can send host commands to the uCode */
         set_bit(STATUS_ALIVE, &priv->status);
 
+        if (priv->cfg->ops->lib->recover_from_tx_stall) {
+                /* Enable timer to monitor the driver queues */
+                mod_timer(&priv->monitor_recover,
+                        jiffies +
+                        msecs_to_jiffies(priv->cfg->monitor_recover_period));
+        }
+
         if (iwl_is_rfkill(priv))
                 return;
 
         ieee80211_wake_queues(priv->hw);
 
-        priv->active_rate = priv->rates_mask;
-        priv->active_rate_basic = priv->rates_mask & IWL_BASIC_RATES_MASK;
+        priv->active_rate = IWL_RATES_MASK;
 
         /* Configure Tx antenna selection based on H/W config */
         if (priv->cfg->ops->hcmd->set_tx_ant)
@@ -2151,18 +2134,8 @@ static void iwl_alive_start(struct iwl_priv *priv)
         wake_up_interruptible(&priv->wait_command_queue);
 
         iwl_power_update_mode(priv, true);
+        IWL_DEBUG_INFO(priv, "Updated power mode\n");
 
-        /* reassociate for ADHOC mode */
-        if (priv->vif && (priv->iw_mode == NL80211_IFTYPE_ADHOC)) {
-                struct sk_buff *beacon = ieee80211_beacon_get(priv->hw,
-                                                                priv->vif);
-                if (beacon)
-                        iwl_mac_beacon_update(priv->hw, beacon);
-        }
-
-
-        if (test_and_clear_bit(STATUS_MODE_PENDING, &priv->status))
-                iwl_set_mode(priv, priv->iw_mode);
 
         return;
 
@@ -2182,7 +2155,7 @@ static void __iwl_down(struct iwl_priv *priv)
         if (!exit_pending)
                 set_bit(STATUS_EXIT_PENDING, &priv->status);
 
-        iwl_clear_stations_table(priv);
+        iwl_clear_ucode_stations(priv, true);
 
         /* Unblock any waiting calls */
         wake_up_interruptible_all(&priv->wait_command_queue);
@@ -2379,8 +2352,6 @@ static int __iwl_up(struct iwl_priv *priv)
 
         for (i = 0; i < MAX_HW_RESTARTS; i++) {
 
-                iwl_clear_stations_table(priv);
-
                 /* load bootstrap state machine,
                  * load bootstrap program into processor's memory,
                  * prepare to load the "initialize" uCode */
@@ -2521,10 +2492,6 @@ void iwl_post_associate(struct iwl_priv *priv)
                 return;
         }
 
-        IWL_DEBUG_ASSOC(priv, "Associated as %d to: %pM\n",
-                        priv->assoc_id, priv->active_rxon.bssid_addr);
-
-
         if (test_bit(STATUS_EXIT_PENDING, &priv->status))
                 return;
 
@@ -2576,6 +2543,9 @@ void iwl_post_associate(struct iwl_priv *priv)
 
         iwlcore_commit_rxon(priv);
 
+        IWL_DEBUG_ASSOC(priv, "Associated as %d to: %pM\n",
+                        priv->assoc_id, priv->active_rxon.bssid_addr);
+
         switch (priv->iw_mode) {
         case NL80211_IFTYPE_STATION:
                 break;
@@ -2585,7 +2555,7 @@ void iwl_post_associate(struct iwl_priv *priv)
                 /* assume default assoc id */
                 priv->assoc_id = 1;
 
-                iwl_rxon_add_station(priv, priv->bssid, 0);
+                iwl_add_local_station(priv, priv->bssid, true);
                 iwl_send_beacon_cmd(priv);
 
                 break;
@@ -2596,9 +2566,6 @@ void iwl_post_associate(struct iwl_priv *priv)
                 break;
         }
 
-        if (priv->iw_mode == NL80211_IFTYPE_ADHOC)
-                priv->assoc_station_added = 1;
-
         spin_lock_irqsave(&priv->lock, flags);
         iwl_activate_qos(priv, 0);
         spin_unlock_irqrestore(&priv->lock, flags);
@@ -2889,7 +2856,6 @@ static int iwl_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
 
         mutex_lock(&priv->mutex);
         iwl_scan_cancel_timeout(priv, 100);
-        mutex_unlock(&priv->mutex);
 
         /* If we are getting WEP group key and we didn't receive any key mapping
          * so far, we are in legacy wep mode (group key only), otherwise we are
@@ -2925,6 +2891,7 @@ static int iwl_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
                 ret = -EINVAL;
         }
 
+        mutex_unlock(&priv->mutex);
         IWL_DEBUG_MAC80211(priv, "leave\n");
 
         return ret;
@@ -2957,10 +2924,21 @@ static int iwl_mac_ampdu_action(struct ieee80211_hw *hw,
                         return ret;
         case IEEE80211_AMPDU_TX_START:
                 IWL_DEBUG_HT(priv, "start Tx\n");
-                return iwl_tx_agg_start(priv, sta->addr, tid, ssn);
+                ret = iwl_tx_agg_start(priv, sta->addr, tid, ssn);
+                if (ret == 0) {
+                        priv->_agn.agg_tids_count++;
+                        IWL_DEBUG_HT(priv, "priv->_agn.agg_tids_count = %u\n",
+                                     priv->_agn.agg_tids_count);
+                }
+                return ret;
         case IEEE80211_AMPDU_TX_STOP:
                 IWL_DEBUG_HT(priv, "stop Tx\n");
                 ret = iwl_tx_agg_stop(priv, sta->addr, tid);
+                if ((ret == 0) && (priv->_agn.agg_tids_count > 0)) {
+                        priv->_agn.agg_tids_count--;
+                        IWL_DEBUG_HT(priv, "priv->_agn.agg_tids_count = %u\n",
+                                     priv->_agn.agg_tids_count);
+                }
                 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
                         return 0;
                 else
@@ -2997,18 +2975,7 @@ static void iwl_mac_sta_notify(struct ieee80211_hw *hw,
         struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
         int sta_id;
 
-        /*
-         * TODO: We really should use this callback to
-         *       actually maintain the station table in
-         *       the device.
-         */
-
         switch (cmd) {
-        case STA_NOTIFY_ADD:
-                atomic_set(&sta_priv->pending_frames, 0);
-                if (vif->type == NL80211_IFTYPE_AP)
-                        sta_priv->client = true;
-                break;
         case STA_NOTIFY_SLEEP:
                 WARN_ON(!sta_priv->client);
                 sta_priv->asleep = true;
@@ -3029,6 +2996,55 @@ static void iwl_mac_sta_notify(struct ieee80211_hw *hw,
         }
 }
 
+/**
+ * iwl_restore_wepkeys - Restore WEP keys to device
+ */
+static void iwl_restore_wepkeys(struct iwl_priv *priv)
+{
+        mutex_lock(&priv->mutex);
+        if (priv->iw_mode == NL80211_IFTYPE_STATION &&
+            priv->default_wep_key &&
+            iwl_send_static_wepkey_cmd(priv, 0))
+                IWL_ERR(priv, "Could not send WEP static key\n");
+        mutex_unlock(&priv->mutex);
+}
+
+static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
+                              struct ieee80211_vif *vif,
+                              struct ieee80211_sta *sta)
+{
+        struct iwl_priv *priv = hw->priv;
+        struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
+        bool is_ap = priv->iw_mode == NL80211_IFTYPE_STATION;
+        int ret;
+        u8 sta_id;
+
+        IWL_DEBUG_INFO(priv, "received request to add station %pM\n",
+                        sta->addr);
+
+        atomic_set(&sta_priv->pending_frames, 0);
+        if (vif->type == NL80211_IFTYPE_AP)
+                sta_priv->client = true;
+
+        ret = iwl_add_station_common(priv, sta->addr, is_ap, &sta->ht_cap,
+                                     &sta_id);
+        if (ret) {
+                IWL_ERR(priv, "Unable to add station %pM (%d)\n",
+                        sta->addr, ret);
+                /* Should we return success if return code is EEXIST ? */
+                return ret;
+        }
+
+        iwl_restore_wepkeys(priv);
+
+        /* Initialize rate scaling */
+        IWL_DEBUG_INFO(priv, "Initializing rate scaling for station %pM \n",
+                       sta->addr);
+        iwl_rs_rate_init(priv, sta, sta_id);
+
+        return ret;
+}
+
 /*****************************************************************************
  *
  * sysfs attributes
@@ -3129,87 +3145,6 @@ static ssize_t store_tx_power(struct device *d,
 
 static DEVICE_ATTR(tx_power, S_IWUSR | S_IRUGO, show_tx_power, store_tx_power);
 
-static ssize_t show_flags(struct device *d,
-                          struct device_attribute *attr, char *buf)
-{
-        struct iwl_priv *priv = dev_get_drvdata(d);
-
-        return sprintf(buf, "0x%04X\n", priv->active_rxon.flags);
-}
-
-static ssize_t store_flags(struct device *d,
-                           struct device_attribute *attr,
-                           const char *buf, size_t count)
-{
-        struct iwl_priv *priv = dev_get_drvdata(d);
-        unsigned long val;
-        u32 flags;
-        int ret = strict_strtoul(buf, 0, &val);
-        if (ret)
-                return ret;
-        flags = (u32)val;
-
-        mutex_lock(&priv->mutex);
-        if (le32_to_cpu(priv->staging_rxon.flags) != flags) {
-                /* Cancel any currently running scans... */
-                if (iwl_scan_cancel_timeout(priv, 100))
-                        IWL_WARN(priv, "Could not cancel scan.\n");
-                else {
-                        IWL_DEBUG_INFO(priv, "Commit rxon.flags = 0x%04X\n", flags);
-                        priv->staging_rxon.flags = cpu_to_le32(flags);
-                        iwlcore_commit_rxon(priv);
-                }
-        }
-        mutex_unlock(&priv->mutex);
-
-        return count;
-}
-
-static DEVICE_ATTR(flags, S_IWUSR | S_IRUGO, show_flags, store_flags);
-
-static ssize_t show_filter_flags(struct device *d,
-                                 struct device_attribute *attr, char *buf)
-{
-        struct iwl_priv *priv = dev_get_drvdata(d);
-
-        return sprintf(buf, "0x%04X\n",
-                le32_to_cpu(priv->active_rxon.filter_flags));
-}
-
-static ssize_t store_filter_flags(struct device *d,
-                                  struct device_attribute *attr,
-                                  const char *buf, size_t count)
-{
-        struct iwl_priv *priv = dev_get_drvdata(d);
-        unsigned long val;
-        u32 filter_flags;
-        int ret = strict_strtoul(buf, 0, &val);
-        if (ret)
-                return ret;
-        filter_flags = (u32)val;
-
-        mutex_lock(&priv->mutex);
-        if (le32_to_cpu(priv->staging_rxon.filter_flags) != filter_flags) {
-                /* Cancel any currently running scans... */
-                if (iwl_scan_cancel_timeout(priv, 100))
-                        IWL_WARN(priv, "Could not cancel scan.\n");
-                else {
-                        IWL_DEBUG_INFO(priv, "Committing rxon.filter_flags = "
-                                       "0x%04X\n", filter_flags);
-                        priv->staging_rxon.filter_flags =
-                                cpu_to_le32(filter_flags);
-                        iwlcore_commit_rxon(priv);
-                }
-        }
-        mutex_unlock(&priv->mutex);
-
-        return count;
-}
-
-static DEVICE_ATTR(filter_flags, S_IWUSR | S_IRUGO, show_filter_flags,
-                   store_filter_flags);
-
-
 static ssize_t show_statistics(struct device *d,
                                struct device_attribute *attr, char *buf)
 {
@@ -3315,6 +3250,13 @@ static void iwl_setup_deferred_work(struct iwl_priv *priv)
         priv->ucode_trace.data = (unsigned long)priv;
         priv->ucode_trace.function = iwl_bg_ucode_trace;
 
+        if (priv->cfg->ops->lib->recover_from_tx_stall) {
+                init_timer(&priv->monitor_recover);
+                priv->monitor_recover.data = (unsigned long)priv;
+                priv->monitor_recover.function =
+                        priv->cfg->ops->lib->recover_from_tx_stall;
+        }
+
         if (!priv->cfg->use_isr_legacy)
                 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
                         iwl_irq_tasklet, (unsigned long)priv);
@@ -3334,6 +3276,8 @@ static void iwl_cancel_deferred_work(struct iwl_priv *priv)
         cancel_work_sync(&priv->beacon_update);
         del_timer_sync(&priv->statistics_periodic);
         del_timer_sync(&priv->ucode_trace);
+        if (priv->cfg->ops->lib->recover_from_tx_stall)
+                del_timer_sync(&priv->monitor_recover);
 }
 
 static void iwl_init_hw_rates(struct iwl_priv *priv,
@@ -3371,9 +3315,6 @@ static int iwl_init_drv(struct iwl_priv *priv)
         mutex_init(&priv->mutex);
         mutex_init(&priv->sync_cmd_mutex);
 
-        /* Clear the driver's (not device's) station table */
-        iwl_clear_stations_table(priv);
-
         priv->ieee_channels = NULL;
         priv->ieee_rates = NULL;
         priv->band = IEEE80211_BAND_2GHZ;
@@ -3381,6 +3322,7 @@ static int iwl_init_drv(struct iwl_priv *priv)
         priv->iw_mode = NL80211_IFTYPE_STATION;
         priv->current_ht_config.smps = IEEE80211_SMPS_STATIC;
         priv->missed_beacon_threshold = IWL_MISSED_BEACON_THRESHOLD_DEF;
+        priv->_agn.agg_tids_count = 0;
 
         /* initialize force reset */
         priv->force_reset[IWL_RF_RESET].reset_duration =
@@ -3399,7 +3341,6 @@ static int iwl_init_drv(struct iwl_priv *priv)
         priv->qos_data.qos_active = 0;
         priv->qos_data.qos_cap.val = 0;
 
-        priv->rates_mask = IWL_RATES_MASK;
         /* Set the tx_power_user_lmt to the lowest power level
          * this value will get overwritten by channel max power avg
          * from eeprom */
@@ -3435,8 +3376,6 @@ static void iwl_uninit_drv(struct iwl_priv *priv)
 }
 
 static struct attribute *iwl_sysfs_entries[] = {
-        &dev_attr_flags.attr,
-        &dev_attr_filter_flags.attr,
         &dev_attr_statistics.attr,
         &dev_attr_temperature.attr,
         &dev_attr_tx_power.attr,
@@ -3469,6 +3408,8 @@ static struct ieee80211_ops iwl_hw_ops = {
         .ampdu_action = iwl_mac_ampdu_action,
         .hw_scan = iwl_mac_hw_scan,
         .sta_notify = iwl_mac_sta_notify,
+        .sta_add = iwlagn_mac_sta_add,
+        .sta_remove = iwl_mac_sta_remove,
 };
 
 static int iwl_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
@@ -3572,7 +3513,7 @@ static int iwl_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
         iwl_write32(priv, CSR_RESET, CSR_RESET_REG_FLAG_NEVO_RESET);
 
         iwl_hw_detect(priv);
-        IWL_INFO(priv, "Detected Intel Wireless WiFi Link %s REV=0x%X\n",
+        IWL_INFO(priv, "Detected %s, REV=0x%X\n",
                 priv->cfg->name, priv->hw_rev);
 
         /* We disable the RETRY_TIMEOUT register (0x41) to keep
@@ -3753,7 +3694,6 @@ static void __devexit iwl_pci_remove(struct pci_dev *pdev)
                 iwl_rx_queue_free(priv, &priv->rxq);
         iwl_hw_txq_ctx_free(priv);
 
-        iwl_clear_stations_table(priv);
         iwl_eeprom_free(priv);
 
 
diff --git a/drivers/net/wireless/iwlwifi/iwl-agn.h b/drivers/net/wireless/iwlwifi/iwl-agn.h
new file mode 100644
index 000000000000..26eeb586ee00
--- /dev/null
+++ b/drivers/net/wireless/iwlwifi/iwl-agn.h
@@ -0,0 +1,74 @@
+/******************************************************************************
+ *
+ * This file is provided under a dual BSD/GPLv2 license.  When using or
+ * redistributing this file, you may do so under either license.
+ *
+ * GPL LICENSE SUMMARY
+ *
+ * Copyright(c) 2008 - 2010 Intel Corporation. All rights reserved.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of version 2 of the GNU General Public License as
+ * published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
+ * USA
+ *
+ * The full GNU General Public License is included in this distribution
+ * in the file called LICENSE.GPL.
+ *
+ * Contact Information:
+ *  Intel Linux Wireless <ilw@linux.intel.com>
+ * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
+ *
+ * BSD LICENSE
+ *
+ * Copyright(c) 2005 - 2010 Intel Corporation. All rights reserved.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ *  * Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ *  * Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in
+ *    the documentation and/or other materials provided with the
+ *    distribution.
+ *  * Neither the name Intel Corporation nor the names of its
+ *    contributors may be used to endorse or promote products derived
+ *    from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+ * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *****************************************************************************/
+
+#ifndef __iwl_agn_h__
+#define __iwl_agn_h__
+
+#include "iwl-dev.h"
+
+int iwl_reset_ict(struct iwl_priv *priv);
+void iwl_disable_ict(struct iwl_priv *priv);
+int iwl_alloc_isr_ict(struct iwl_priv *priv);
+void iwl_free_isr_ict(struct iwl_priv *priv);
+irqreturn_t iwl_isr_ict(int irq, void *data);
+
+#endif /* __iwl_agn_h__ */
diff --git a/drivers/net/wireless/iwlwifi/iwl-core.c b/drivers/net/wireless/iwlwifi/iwl-core.c
index 112149e9b31e..5180fb24cd38 100644
--- a/drivers/net/wireless/iwlwifi/iwl-core.c
+++ b/drivers/net/wireless/iwlwifi/iwl-core.c
@@ -114,8 +114,6 @@ static struct iwl_wimax_coex_event_entry cu_priorities[COEX_NUM_OF_EVENTS] = {
 u32 iwl_debug_level;
 EXPORT_SYMBOL(iwl_debug_level);
 
-static irqreturn_t iwl_isr(int irq, void *data);
-
 /*
  * Parameter order:
  *   rate, ht rate, prev rate, next rate, prev tgg rate, next tgg rate
@@ -899,23 +897,10 @@ EXPORT_SYMBOL(iwl_full_rxon_required);
 
 u8 iwl_rate_get_lowest_plcp(struct iwl_priv *priv)
 {
-        int i;
-        int rate_mask;
-
-        /* Set rate mask*/
-        if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK)
-                rate_mask = priv->active_rate_basic & IWL_CCK_RATES_MASK;
-        else
-                rate_mask = priv->active_rate_basic & IWL_OFDM_RATES_MASK;
-
-        /* Find lowest valid rate */
-        for (i = IWL_RATE_1M_INDEX; i != IWL_RATE_INVALID;
-                                        i = iwl_rates[i].next_ieee) {
-                if (rate_mask & (1 << i))
-                        return iwl_rates[i].plcp;
-        }
-
-        /* No valid rate was found. Assign the lowest one */
+        /*
+         * Assign the lowest rate -- should really get this from
+         * the beacon skb from mac80211.
+         */
         if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK)
                 return IWL_RATE_1M_PLCP;
         else
@@ -1240,14 +1225,6 @@ void iwl_connection_init_rx_config(struct iwl_priv *priv, int mode)
         if (!ch_info)
                 ch_info = &priv->channel_info[0];
 
-        /*
-         * in some case A channels are all non IBSS
-         * in this case force B/G channel
-         */
-        if ((priv->iw_mode == NL80211_IFTYPE_ADHOC) &&
-            !(is_channel_ibss(ch_info)))
-                ch_info = &priv->channel_info[0];
-
         priv->staging_rxon.channel = cpu_to_le16(ch_info->channel);
         priv->band = ch_info->band;
 
@@ -1282,7 +1259,6 @@ static void iwl_set_rate(struct iwl_priv *priv)
         }
 
         priv->active_rate = 0;
-        priv->active_rate_basic = 0;
 
         for (i = 0; i < hw->n_bitrates; i++) {
                 rate = &(hw->bitrates[i]);
@@ -1290,30 +1266,13 @@ static void iwl_set_rate(struct iwl_priv *priv)
                         priv->active_rate |= (1 << rate->hw_value);
         }
 
-        IWL_DEBUG_RATE(priv, "Set active_rate = %0x, active_rate_basic = %0x\n",
-                       priv->active_rate, priv->active_rate_basic);
+        IWL_DEBUG_RATE(priv, "Set active_rate = %0x\n", priv->active_rate);
 
-        /*
-         * If a basic rate is configured, then use it (adding IWL_RATE_1M_MASK)
-         * otherwise set it to the default of all CCK rates and 6, 12, 24 for
-         * OFDM
-         */
-        if (priv->active_rate_basic & IWL_CCK_BASIC_RATES_MASK)
-                priv->staging_rxon.cck_basic_rates =
-                    ((priv->active_rate_basic &
-                      IWL_CCK_RATES_MASK) >> IWL_FIRST_CCK_RATE) & 0xF;
-        else
-                priv->staging_rxon.cck_basic_rates =
-                    (IWL_CCK_BASIC_RATES_MASK >> IWL_FIRST_CCK_RATE) & 0xF;
-
-        if (priv->active_rate_basic & IWL_OFDM_BASIC_RATES_MASK)
-                priv->staging_rxon.ofdm_basic_rates =
-                    ((priv->active_rate_basic &
-                      (IWL_OFDM_BASIC_RATES_MASK | IWL_RATE_6M_MASK)) >>
-                      IWL_FIRST_OFDM_RATE) & 0xFF;
-        else
-                priv->staging_rxon.ofdm_basic_rates =
-                   (IWL_OFDM_BASIC_RATES_MASK >> IWL_FIRST_OFDM_RATE) & 0xFF;
+        priv->staging_rxon.cck_basic_rates =
+            (IWL_CCK_BASIC_RATES_MASK >> IWL_FIRST_CCK_RATE) & 0xF;
+
+        priv->staging_rxon.ofdm_basic_rates =
+           (IWL_OFDM_BASIC_RATES_MASK >> IWL_FIRST_OFDM_RATE) & 0xFF;
 }
 
 void iwl_rx_csa(struct iwl_priv *priv, struct iwl_rx_mem_buffer *rxb)
@@ -1397,7 +1356,7 @@ void iwl_irq_handle_error(struct iwl_priv *priv)
 }
 EXPORT_SYMBOL(iwl_irq_handle_error);
 
-int iwl_apm_stop_master(struct iwl_priv *priv)
+static int iwl_apm_stop_master(struct iwl_priv *priv)
 {
         int ret = 0;
 
@@ -1413,7 +1372,6 @@ int iwl_apm_stop_master(struct iwl_priv *priv)
 
         return ret;
 }
-EXPORT_SYMBOL(iwl_apm_stop_master);
 
 void iwl_apm_stop(struct iwl_priv *priv)
 {
@@ -1664,277 +1622,6 @@ int iwl_set_tx_power(struct iwl_priv *priv, s8 tx_power, bool force)
 }
 EXPORT_SYMBOL(iwl_set_tx_power);
 
-#define ICT_COUNT (PAGE_SIZE/sizeof(u32))
-
-/* Free dram table */
-void iwl_free_isr_ict(struct iwl_priv *priv)
-{
-        if (priv->ict_tbl_vir) {
-                dma_free_coherent(&priv->pci_dev->dev,
-                                  (sizeof(u32) * ICT_COUNT) + PAGE_SIZE,
-                                  priv->ict_tbl_vir, priv->ict_tbl_dma);
-                priv->ict_tbl_vir = NULL;
-        }
-}
-EXPORT_SYMBOL(iwl_free_isr_ict);
-
-
-/* allocate dram shared table it is a PAGE_SIZE aligned
- * also reset all data related to ICT table interrupt.
- */
-int iwl_alloc_isr_ict(struct iwl_priv *priv)
-{
-
-        if (priv->cfg->use_isr_legacy)
-                return 0;
-        /* allocate shrared data table */
-        priv->ict_tbl_vir = dma_alloc_coherent(&priv->pci_dev->dev,
-                                        (sizeof(u32) * ICT_COUNT) + PAGE_SIZE,
-                                        &priv->ict_tbl_dma, GFP_KERNEL);
-        if (!priv->ict_tbl_vir)
-                return -ENOMEM;
-
-        /* align table to PAGE_SIZE boundry */
-        priv->aligned_ict_tbl_dma = ALIGN(priv->ict_tbl_dma, PAGE_SIZE);
-
-        IWL_DEBUG_ISR(priv, "ict dma addr %Lx dma aligned %Lx diff %d\n",
-                             (unsigned long long)priv->ict_tbl_dma,
-                             (unsigned long long)priv->aligned_ict_tbl_dma,
-                        (int)(priv->aligned_ict_tbl_dma - priv->ict_tbl_dma));
-
-        priv->ict_tbl =  priv->ict_tbl_vir +
-                          (priv->aligned_ict_tbl_dma - priv->ict_tbl_dma);
-
-        IWL_DEBUG_ISR(priv, "ict vir addr %p vir aligned %p diff %d\n",
-                             priv->ict_tbl, priv->ict_tbl_vir,
-                        (int)(priv->aligned_ict_tbl_dma - priv->ict_tbl_dma));
-
-        /* reset table and index to all 0 */
-        memset(priv->ict_tbl_vir,0, (sizeof(u32) * ICT_COUNT) + PAGE_SIZE);
-        priv->ict_index = 0;
-
-        /* add periodic RX interrupt */
-        priv->inta_mask |= CSR_INT_BIT_RX_PERIODIC;
-        return 0;
-}
-EXPORT_SYMBOL(iwl_alloc_isr_ict);
-
-/* Device is going up inform it about using ICT interrupt table,
- * also we need to tell the driver to start using ICT interrupt.
- */
-int iwl_reset_ict(struct iwl_priv *priv)
-{
-        u32 val;
-        unsigned long flags;
-
-        if (!priv->ict_tbl_vir)
-                return 0;
-
-        spin_lock_irqsave(&priv->lock, flags);
-        iwl_disable_interrupts(priv);
-
-        memset(&priv->ict_tbl[0], 0, sizeof(u32) * ICT_COUNT);
-
-        val = priv->aligned_ict_tbl_dma >> PAGE_SHIFT;
-
-        val |= CSR_DRAM_INT_TBL_ENABLE;
-        val |= CSR_DRAM_INIT_TBL_WRAP_CHECK;
-
-        IWL_DEBUG_ISR(priv, "CSR_DRAM_INT_TBL_REG =0x%X "
-                        "aligned dma address %Lx\n",
-                        val, (unsigned long long)priv->aligned_ict_tbl_dma);
-
-        iwl_write32(priv, CSR_DRAM_INT_TBL_REG, val);
-        priv->use_ict = true;
-        priv->ict_index = 0;
-        iwl_write32(priv, CSR_INT, priv->inta_mask);
-        iwl_enable_interrupts(priv);
-        spin_unlock_irqrestore(&priv->lock, flags);
-
-        return 0;
-}
-EXPORT_SYMBOL(iwl_reset_ict);
-
-/* Device is going down disable ict interrupt usage */
-void iwl_disable_ict(struct iwl_priv *priv)
-{
-        unsigned long flags;
-
-        spin_lock_irqsave(&priv->lock, flags);
-        priv->use_ict = false;
-        spin_unlock_irqrestore(&priv->lock, flags);
-}
-EXPORT_SYMBOL(iwl_disable_ict);
-
-/* interrupt handler using ict table, with this interrupt driver will
- * stop using INTA register to get device's interrupt, reading this register
- * is expensive, device will write interrupts in ICT dram table, increment
- * index then will fire interrupt to driver, driver will OR all ICT table
- * entries from current index up to table entry with 0 value. the result is
- * the interrupt we need to service, driver will set the entries back to 0 and
- * set index.
- */
-irqreturn_t iwl_isr_ict(int irq, void *data)
-{
-        struct iwl_priv *priv = data;
-        u32 inta, inta_mask;
-        u32 val = 0;
-
-        if (!priv)
-                return IRQ_NONE;
-
-        /* dram interrupt table not set yet,
-         * use legacy interrupt.
-         */
-        if (!priv->use_ict)
-                return iwl_isr(irq, data);
-
-        spin_lock(&priv->lock);
-
-        /* Disable (but don't clear!) interrupts here to avoid
-         * back-to-back ISRs and sporadic interrupts from our NIC.
-         * If we have something to service, the tasklet will re-enable ints.
-         * If we *don't* have something, we'll re-enable before leaving here.
-         */
-        inta_mask = iwl_read32(priv, CSR_INT_MASK);  /* just for debug */
-        iwl_write32(priv, CSR_INT_MASK, 0x00000000);
-
-
-        /* Ignore interrupt if there's nothing in NIC to service.
-         * This may be due to IRQ shared with another device,
-         * or due to sporadic interrupts thrown from our NIC. */
-        if (!priv->ict_tbl[priv->ict_index]) {
-                IWL_DEBUG_ISR(priv, "Ignore interrupt, inta == 0\n");
-                goto none;
-        }
-
-        /* read all entries that not 0 start with ict_index */
-        while (priv->ict_tbl[priv->ict_index]) {
-
-                val |= le32_to_cpu(priv->ict_tbl[priv->ict_index]);
-                IWL_DEBUG_ISR(priv, "ICT index %d value 0x%08X\n",
-                                priv->ict_index,
-                                le32_to_cpu(priv->ict_tbl[priv->ict_index]));
-                priv->ict_tbl[priv->ict_index] = 0;
-                priv->ict_index = iwl_queue_inc_wrap(priv->ict_index,
-                                                     ICT_COUNT);
-
-        }
-
-        /* We should not get this value, just ignore it. */
-        if (val == 0xffffffff)
-                val = 0;
-
-        /*
-         * this is a w/a for a h/w bug. the h/w bug may cause the Rx bit
-         * (bit 15 before shifting it to 31) to clear when using interrupt
-         * coalescing. fortunately, bits 18 and 19 stay set when this happens
-         * so we use them to decide on the real state of the Rx bit.
-         * In order words, bit 15 is set if bit 18 or bit 19 are set.
-         */
-        if (val & 0xC0000)
-                val |= 0x8000;
-
-        inta = (0xff & val) | ((0xff00 & val) << 16);
-        IWL_DEBUG_ISR(priv, "ISR inta 0x%08x, enabled 0x%08x ict 0x%08x\n",
-                        inta, inta_mask, val);
-
-        inta &= priv->inta_mask;
-        priv->inta |= inta;
-
-        /* iwl_irq_tasklet() will service interrupts and re-enable them */
-        if (likely(inta))
-                tasklet_schedule(&priv->irq_tasklet);
-        else if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->inta) {
-                /* Allow interrupt if was disabled by this handler and
-                 * no tasklet was schedules, We should not enable interrupt,
-                 * tasklet will enable it.
-                 */
-                iwl_enable_interrupts(priv);
-        }
-
-        spin_unlock(&priv->lock);
-        return IRQ_HANDLED;
-
- none:
-        /* re-enable interrupts here since we don't have anything to service.
-         * only Re-enable if disabled by irq.
-         */
-        if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->inta)
-                iwl_enable_interrupts(priv);
-
-        spin_unlock(&priv->lock);
-        return IRQ_NONE;
-}
-EXPORT_SYMBOL(iwl_isr_ict);
-
-
-static irqreturn_t iwl_isr(int irq, void *data)
-{
-        struct iwl_priv *priv = data;
-        u32 inta, inta_mask;
-#ifdef CONFIG_IWLWIFI_DEBUG
-        u32 inta_fh;
-#endif
-        if (!priv)
-                return IRQ_NONE;
-
-        spin_lock(&priv->lock);
-
-        /* Disable (but don't clear!) interrupts here to avoid
-         *    back-to-back ISRs and sporadic interrupts from our NIC.
-         * If we have something to service, the tasklet will re-enable ints.
-         * If we *don't* have something, we'll re-enable before leaving here. */
-        inta_mask = iwl_read32(priv, CSR_INT_MASK);  /* just for debug */
-        iwl_write32(priv, CSR_INT_MASK, 0x00000000);
-
-        /* Discover which interrupts are active/pending */
-        inta = iwl_read32(priv, CSR_INT);
-
-        /* Ignore interrupt if there's nothing in NIC to service.
-         * This may be due to IRQ shared with another device,
-         * or due to sporadic interrupts thrown from our NIC. */
-        if (!inta) {
-                IWL_DEBUG_ISR(priv, "Ignore interrupt, inta == 0\n");
-                goto none;
-        }
-
-        if ((inta == 0xFFFFFFFF) || ((inta & 0xFFFFFFF0) == 0xa5a5a5a0)) {
-                /* Hardware disappeared. It might have already raised
-                 * an interrupt */
-                IWL_WARN(priv, "HARDWARE GONE?? INTA == 0x%08x\n", inta);
-                goto unplugged;
-        }
-
-#ifdef CONFIG_IWLWIFI_DEBUG
-        if (iwl_get_debug_level(priv) & (IWL_DL_ISR)) {
-                inta_fh = iwl_read32(priv, CSR_FH_INT_STATUS);
-                IWL_DEBUG_ISR(priv, "ISR inta 0x%08x, enabled 0x%08x, "
-                              "fh 0x%08x\n", inta, inta_mask, inta_fh);
-        }
-#endif
-
-        priv->inta |= inta;
-        /* iwl_irq_tasklet() will service interrupts and re-enable them */
-        if (likely(inta))
-                tasklet_schedule(&priv->irq_tasklet);
-        else if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->inta)
-                iwl_enable_interrupts(priv);
-
- unplugged:
-        spin_unlock(&priv->lock);
-        return IRQ_HANDLED;
-
- none:
-        /* re-enable interrupts here since we don't have anything to service. */
-        /* only Re-enable if diabled by irq  and no schedules tasklet. */
-        if (test_bit(STATUS_INT_ENABLED, &priv->status) && !priv->inta)
-                iwl_enable_interrupts(priv);
-
-        spin_unlock(&priv->lock);
-        return IRQ_NONE;
-}
-
 irqreturn_t iwl_isr_legacy(int irq, void *data)
 {
         struct iwl_priv *priv = data;
@@ -2564,11 +2251,6 @@ int iwl_mac_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb)
                 return -EIO;
         }
 
-        if (priv->iw_mode != NL80211_IFTYPE_ADHOC) {
-                IWL_DEBUG_MAC80211(priv, "leave - not IBSS\n");
-                return -EIO;
-        }
-
         spin_lock_irqsave(&priv->lock, flags);
 
         if (priv->ibss_beacon)
@@ -2592,43 +2274,19 @@ int iwl_mac_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb)
 }
 EXPORT_SYMBOL(iwl_mac_beacon_update);
 
-int iwl_set_mode(struct iwl_priv *priv, int mode)
+static int iwl_set_mode(struct iwl_priv *priv, struct ieee80211_vif *vif)
 {
-        if (mode == NL80211_IFTYPE_ADHOC) {
-                const struct iwl_channel_info *ch_info;
-
-                ch_info = iwl_get_channel_info(priv,
-                        priv->band,
-                        le16_to_cpu(priv->staging_rxon.channel));
-
-                if (!ch_info || !is_channel_ibss(ch_info)) {
-                        IWL_ERR(priv, "channel %d not IBSS channel\n",
-                                  le16_to_cpu(priv->staging_rxon.channel));
-                        return -EINVAL;
-                }
-        }
-
-        iwl_connection_init_rx_config(priv, mode);
+        iwl_connection_init_rx_config(priv, vif->type);
 
         if (priv->cfg->ops->hcmd->set_rxon_chain)
                 priv->cfg->ops->hcmd->set_rxon_chain(priv);
 
         memcpy(priv->staging_rxon.node_addr, priv->mac_addr, ETH_ALEN);
 
-        iwl_clear_stations_table(priv);
-
-        /* dont commit rxon if rf-kill is on*/
-        if (!iwl_is_ready_rf(priv))
-                return -EAGAIN;
-
-        iwlcore_commit_rxon(priv);
-
-        return 0;
+        return iwlcore_commit_rxon(priv);
 }
-EXPORT_SYMBOL(iwl_set_mode);
 
-int iwl_mac_add_interface(struct ieee80211_hw *hw,
-                                 struct ieee80211_vif *vif)
+int iwl_mac_add_interface(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
 {
         struct iwl_priv *priv = hw->priv;
         int err = 0;
@@ -2637,6 +2295,11 @@ int iwl_mac_add_interface(struct ieee80211_hw *hw,
 
         mutex_lock(&priv->mutex);
 
+        if (WARN_ON(!iwl_is_ready_rf(priv))) {
+                err = -EINVAL;
+                goto out;
+        }
+
         if (priv->vif) {
                 IWL_DEBUG_MAC80211(priv, "leave - vif != NULL\n");
                 err = -EOPNOTSUPP;
@@ -2646,15 +2309,21 @@ int iwl_mac_add_interface(struct ieee80211_hw *hw,
         priv->vif = vif;
         priv->iw_mode = vif->type;
 
-        if (vif->addr) {
-                IWL_DEBUG_MAC80211(priv, "Set %pM\n", vif->addr);
-                memcpy(priv->mac_addr, vif->addr, ETH_ALEN);
-        }
+        IWL_DEBUG_MAC80211(priv, "Set %pM\n", vif->addr);
+        memcpy(priv->mac_addr, vif->addr, ETH_ALEN);
 
-        if (iwl_set_mode(priv, vif->type) == -EAGAIN)
-                /* we are not ready, will run again when ready */
-                set_bit(STATUS_MODE_PENDING, &priv->status);
+        err = iwl_set_mode(priv, vif);
+        if (err)
+                goto out_err;
 
+        /* Add the broadcast address so we can send broadcast frames */
+        priv->cfg->ops->lib->add_bcast_station(priv);
+
+        goto out;
+
+ out_err:
+        priv->vif = NULL;
+        priv->iw_mode = NL80211_IFTYPE_STATION;
  out:
         mutex_unlock(&priv->mutex);
 
@@ -2664,7 +2333,7 @@ int iwl_mac_add_interface(struct ieee80211_hw *hw,
 EXPORT_SYMBOL(iwl_mac_add_interface);
 
 void iwl_mac_remove_interface(struct ieee80211_hw *hw,
-                                     struct ieee80211_vif *vif)
+                              struct ieee80211_vif *vif)
 {
         struct iwl_priv *priv = hw->priv;
 
@@ -2672,6 +2341,8 @@ void iwl_mac_remove_interface(struct ieee80211_hw *hw,
 
         mutex_lock(&priv->mutex);
 
+        iwl_clear_ucode_stations(priv, true);
+
         if (iwl_is_ready_rf(priv)) {
                 iwl_scan_cancel_timeout(priv, 100);
                 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
@@ -2748,15 +2419,6 @@ int iwl_mac_config(struct ieee80211_hw *hw, u32 changed)
                         goto set_ch_out;
                 }
 
-                if (priv->iw_mode == NL80211_IFTYPE_ADHOC &&
-                        !is_channel_ibss(ch_info)) {
-                        IWL_ERR(priv, "channel %d in band %d not "
-                                "IBSS channel\n",
-                                conf->channel->hw_value, conf->channel->band);
-                        ret = -EINVAL;
-                        goto set_ch_out;
-                }
-
                 spin_lock_irqsave(&priv->lock, flags);
 
                 /* Configure HT40 channels */
@@ -2868,7 +2530,6 @@ void iwl_mac_reset_tsf(struct ieee80211_hw *hw)
         spin_lock_irqsave(&priv->lock, flags);
         priv->assoc_id = 0;
         priv->assoc_capability = 0;
-        priv->assoc_station_added = 0;
 
         /* new association get rid of ibss beacon skb */
         if (priv->ibss_beacon)
@@ -2878,8 +2539,6 @@ void iwl_mac_reset_tsf(struct ieee80211_hw *hw)
 
         priv->beacon_int = priv->vif->bss_conf.beacon_int;
         priv->timestamp = 0;
-        if ((priv->iw_mode == NL80211_IFTYPE_STATION))
-                priv->beacon_int = 0;
 
         spin_unlock_irqrestore(&priv->lock, flags);
 
@@ -2892,17 +2551,9 @@ void iwl_mac_reset_tsf(struct ieee80211_hw *hw)
         /* we are restarting association process
          * clear RXON_FILTER_ASSOC_MSK bit
          */
-        if (priv->iw_mode != NL80211_IFTYPE_AP) {
-                iwl_scan_cancel_timeout(priv, 100);
-                priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
-                iwlcore_commit_rxon(priv);
-        }
-
-        if (priv->iw_mode != NL80211_IFTYPE_ADHOC) {
-                IWL_DEBUG_MAC80211(priv, "leave - not in IBSS\n");
-                mutex_unlock(&priv->mutex);
-                return;
-        }
+        iwl_scan_cancel_timeout(priv, 100);
+        priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
+        iwlcore_commit_rxon(priv);
 
         iwl_set_rate(priv);
 
@@ -3400,6 +3051,99 @@ int iwl_force_reset(struct iwl_priv *priv, int mode)
         }
         return 0;
 }
+EXPORT_SYMBOL(iwl_force_reset);
+
+/**
+ * iwl_bg_monitor_recover - Timer callback to check for stuck queue and recover
+ *
+ * During normal condition (no queue is stuck), the timer is continually set to
+ * execute every monitor_recover_period milliseconds after the last timer
+ * expired.  When the queue read_ptr is at the same place, the timer is
+ * shorten to 100mSecs.  This is
+ *      1) to reduce the chance that the read_ptr may wrap around (not stuck)
+ *      2) to detect the stuck queues quicker before the station and AP can
+ *      disassociate each other.
+ *
+ * This function monitors all the tx queues and recover from it if any
+ * of the queues are stuck.
+ * 1. It first check the cmd queue for stuck conditions.  If it is stuck,
+ *      it will recover by resetting the firmware and return.
+ * 2. Then, it checks for station association.  If it associates it will check
+ *      other queues.  If any queue is stuck, it will recover by resetting
+ *      the firmware.
+ * Note: It the number of times the queue read_ptr to be at the same place to
+ *      be MAX_REPEAT+1 in order to consider to be stuck.
+ */
+/*
+ * The maximum number of times the read pointer of the tx queue at the
+ * same place without considering to be stuck.
+ */
+#define MAX_REPEAT      (2)
+static int iwl_check_stuck_queue(struct iwl_priv *priv, int cnt)
+{
+        struct iwl_tx_queue *txq;
+        struct iwl_queue *q;
+
+        txq = &priv->txq[cnt];
+        q = &txq->q;
+        /* queue is empty, skip */
+        if (q->read_ptr != q->write_ptr) {
+                if (q->read_ptr == q->last_read_ptr) {
+                        /* a queue has not been read from last time */
+                        if (q->repeat_same_read_ptr > MAX_REPEAT) {
+                                IWL_ERR(priv,
+                                        "queue %d stuck %d time. Fw reload.\n",
+                                        q->id, q->repeat_same_read_ptr);
+                                q->repeat_same_read_ptr = 0;
+                                iwl_force_reset(priv, IWL_FW_RESET);
+                        } else {
+                                q->repeat_same_read_ptr++;
+                                IWL_DEBUG_RADIO(priv,
+                                                "queue %d, not read %d time\n",
+                                                q->id,
+                                                q->repeat_same_read_ptr);
+                                mod_timer(&priv->monitor_recover, jiffies +
+                                        msecs_to_jiffies(IWL_ONE_HUNDRED_MSECS));
+                        }
+                        return 1;
+                } else {
+                        q->last_read_ptr = q->read_ptr;
+                        q->repeat_same_read_ptr = 0;
+                }
+        }
+        return 0;
+}
+
+void iwl_bg_monitor_recover(unsigned long data)
+{
+        struct iwl_priv *priv = (struct iwl_priv *)data;
+        int cnt;
+
+        if (test_bit(STATUS_EXIT_PENDING, &priv->status))
+                return;
+
+        /* monitor and check for stuck cmd queue */
+        if (iwl_check_stuck_queue(priv, IWL_CMD_QUEUE_NUM))
+                return;
+
+        /* monitor and check for other stuck queues */
+        if (iwl_is_associated(priv)) {
+                for (cnt = 0; cnt < priv->hw_params.max_txq_num; cnt++) {
+                        /* skip as we already checked the command queue */
+                        if (cnt == IWL_CMD_QUEUE_NUM)
+                                continue;
+                        if (iwl_check_stuck_queue(priv, cnt))
+                                return;
+                }
+        }
+        /*
+         * Reschedule the timer to occur in
+         * priv->cfg->monitor_recover_period
+         */
+        mod_timer(&priv->monitor_recover,
+                jiffies + msecs_to_jiffies(priv->cfg->monitor_recover_period));
+}
+EXPORT_SYMBOL(iwl_bg_monitor_recover);
 
 #ifdef CONFIG_PM
 
diff --git a/drivers/net/wireless/iwlwifi/iwl-core.h b/drivers/net/wireless/iwlwifi/iwl-core.h
index 4ef7739f9e8e..b3e698b576e1 100644
--- a/drivers/net/wireless/iwlwifi/iwl-core.h
+++ b/drivers/net/wireless/iwlwifi/iwl-core.h
@@ -191,6 +191,14 @@ struct iwl_lib_ops {
         struct iwl_temp_ops temp_ops;
         /* station management */
         void (*add_bcast_station)(struct iwl_priv *priv);
+        /* recover from tx queue stall */
+        void (*recover_from_tx_stall)(unsigned long data);
+        /* check for plcp health */
+        bool (*check_plcp_health)(struct iwl_priv *priv,
+                                        struct iwl_rx_packet *pkt);
+        /* check for ack health */
+        bool (*check_ack_health)(struct iwl_priv *priv,
+                                        struct iwl_rx_packet *pkt);
 };
 
 struct iwl_led_ops {
@@ -295,6 +303,8 @@ struct iwl_cfg {
         const bool support_wimax_coexist;
         u8 plcp_delta_threshold;
         s32 chain_noise_scale;
+        /* timer period for monitor the driver queues */
+        u32 monitor_recover_period;
 };
 
 /***************************
@@ -336,7 +346,6 @@ void iwl_bss_info_changed(struct ieee80211_hw *hw,
                                      u32 changes);
 int iwl_mac_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb);
 int iwl_commit_rxon(struct iwl_priv *priv);
-int iwl_set_mode(struct iwl_priv *priv, int mode);
 int iwl_mac_add_interface(struct ieee80211_hw *hw,
                           struct ieee80211_vif *vif);
 void iwl_mac_remove_interface(struct ieee80211_hw *hw,
@@ -431,6 +440,10 @@ void iwl_rx_missed_beacon_notif(struct iwl_priv *priv,
                                struct iwl_rx_mem_buffer *rxb);
 void iwl_rx_spectrum_measure_notif(struct iwl_priv *priv,
                                           struct iwl_rx_mem_buffer *rxb);
+bool iwl_good_plcp_health(struct iwl_priv *priv,
+                                 struct iwl_rx_packet *pkt);
+bool iwl_good_ack_health(struct iwl_priv *priv,
+                                 struct iwl_rx_packet *pkt);
 void iwl_rx_statistics(struct iwl_priv *priv,
                               struct iwl_rx_mem_buffer *rxb);
 void iwl_reply_statistics(struct iwl_priv *priv,
@@ -560,11 +573,6 @@ int iwl_send_card_state(struct iwl_priv *priv, u32 flags,
  * PCI                                               *
  *****************************************************/
 irqreturn_t iwl_isr_legacy(int irq, void *data);
-int iwl_reset_ict(struct iwl_priv *priv);
-void iwl_disable_ict(struct iwl_priv *priv);
-int iwl_alloc_isr_ict(struct iwl_priv *priv);
-void iwl_free_isr_ict(struct iwl_priv *priv);
-irqreturn_t iwl_isr_ict(int irq, void *data);
 
 static inline u16 iwl_pcie_link_ctl(struct iwl_priv *priv)
 {
@@ -574,6 +582,9 @@ static inline u16 iwl_pcie_link_ctl(struct iwl_priv *priv)
         pci_read_config_word(priv->pci_dev, pos + PCI_EXP_LNKCTL, &pci_lnk_ctl);
         return pci_lnk_ctl;
 }
+
+void iwl_bg_monitor_recover(unsigned long data);
+
 #ifdef CONFIG_PM
 int iwl_pci_suspend(struct pci_dev *pdev, pm_message_t state);
 int iwl_pci_resume(struct pci_dev *pdev);
@@ -622,7 +633,6 @@ void iwlcore_free_geos(struct iwl_priv *priv);
 #define STATUS_SCAN_HW          15
 #define STATUS_POWER_PMI        16
 #define STATUS_FW_ERROR         17
-#define STATUS_MODE_PENDING     18
 
 
 static inline int iwl_is_ready(struct iwl_priv *priv)
@@ -674,7 +684,7 @@ extern int iwl_send_statistics_request(struct iwl_priv *priv,
                                        u8 flags, bool clear);
 extern int iwl_verify_ucode(struct iwl_priv *priv);
 extern int iwl_send_lq_cmd(struct iwl_priv *priv,
-                struct iwl_link_quality_cmd *lq, u8 flags);
+                struct iwl_link_quality_cmd *lq, u8 flags, bool init);
 extern void iwl_rx_reply_rx(struct iwl_priv *priv,
                 struct iwl_rx_mem_buffer *rxb);
 extern void iwl_rx_reply_rx_phy(struct iwl_priv *priv,
@@ -682,7 +692,6 @@ extern void iwl_rx_reply_rx_phy(struct iwl_priv *priv,
 void iwl_rx_reply_compressed_ba(struct iwl_priv *priv,
                                            struct iwl_rx_mem_buffer *rxb);
 void iwl_apm_stop(struct iwl_priv *priv);
-int iwl_apm_stop_master(struct iwl_priv *priv);
 int iwl_apm_init(struct iwl_priv *priv);
 
 void iwl_setup_rxon_timing(struct iwl_priv *priv);
diff --git a/drivers/net/wireless/iwlwifi/iwl-debugfs.c b/drivers/net/wireless/iwlwifi/iwl-debugfs.c
index 7bf44f146799..5f5820249a29 100644
--- a/drivers/net/wireless/iwlwifi/iwl-debugfs.c
+++ b/drivers/net/wireless/iwlwifi/iwl-debugfs.c
@@ -560,8 +560,6 @@ static ssize_t iwl_dbgfs_status_read(struct file *file,
                 test_bit(STATUS_POWER_PMI, &priv->status));
         pos += scnprintf(buf + pos, bufsz - pos, "STATUS_FW_ERROR:\t %d\n",
                 test_bit(STATUS_FW_ERROR, &priv->status));
-        pos += scnprintf(buf + pos, bufsz - pos, "STATUS_MODE_PENDING:\t %d\n",
-                test_bit(STATUS_MODE_PENDING, &priv->status));
         return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
@@ -660,7 +658,6 @@ static ssize_t iwl_dbgfs_qos_read(struct file *file, char __user *user_buf,
         int pos = 0, i;
         char buf[256];
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         for (i = 0; i < AC_NUM; i++) {
                 pos += scnprintf(buf + pos, bufsz - pos,
@@ -672,8 +669,7 @@ static ssize_t iwl_dbgfs_qos_read(struct file *file, char __user *user_buf,
                                 priv->qos_data.def_qos_parm.ac[i].aifsn,
                                 priv->qos_data.def_qos_parm.ac[i].edca_txop);
         }
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_led_read(struct file *file, char __user *user_buf,
@@ -683,7 +679,6 @@ static ssize_t iwl_dbgfs_led_read(struct file *file, char __user *user_buf,
         int pos = 0;
         char buf[256];
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos,
                          "allow blinking: %s\n",
@@ -697,8 +692,7 @@ static ssize_t iwl_dbgfs_led_read(struct file *file, char __user *user_buf,
                                  priv->last_blink_time);
         }
 
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_thermal_throttling_read(struct file *file,
@@ -711,7 +705,6 @@ static ssize_t iwl_dbgfs_thermal_throttling_read(struct file *file,
         char buf[100];
         int pos = 0;
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos,
                         "Thermal Throttling Mode: %s\n",
@@ -731,8 +724,7 @@ static ssize_t iwl_dbgfs_thermal_throttling_read(struct file *file,
                                 "HT mode: %d\n",
                                 restriction->is_ht);
         }
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_disable_ht40_write(struct file *file,
@@ -769,13 +761,11 @@ static ssize_t iwl_dbgfs_disable_ht40_read(struct file *file,
         char buf[100];
         int pos = 0;
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos,
                         "11n 40MHz Mode: %s\n",
                         priv->disable_ht40 ? "Disabled" : "Enabled");
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_sleep_level_override_write(struct file *file,
@@ -2051,7 +2041,6 @@ static ssize_t iwl_dbgfs_ucode_tracing_read(struct file *file,
         int pos = 0;
         char buf[128];
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos, "ucode trace timer is %s\n",
                         priv->event_log.ucode_trace ? "On" : "Off");
@@ -2062,8 +2051,7 @@ static ssize_t iwl_dbgfs_ucode_tracing_read(struct file *file,
         pos += scnprintf(buf + pos, bufsz - pos, "wraps_more_count:\t\t %u\n",
                         priv->event_log.wraps_more_count);
 
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_ucode_tracing_write(struct file *file,
@@ -2095,6 +2083,31 @@ static ssize_t iwl_dbgfs_ucode_tracing_write(struct file *file,
         return count;
 }
 
+static ssize_t iwl_dbgfs_rxon_flags_read(struct file *file,
+                                         char __user *user_buf,
+                                         size_t count, loff_t *ppos) {
+
+        struct iwl_priv *priv = (struct iwl_priv *)file->private_data;
+        int len = 0;
+        char buf[20];
+
+        len = sprintf(buf, "0x%04X\n", le32_to_cpu(priv->active_rxon.flags));
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
+static ssize_t iwl_dbgfs_rxon_filter_flags_read(struct file *file,
+                                                char __user *user_buf,
+                                                size_t count, loff_t *ppos) {
+
+        struct iwl_priv *priv = (struct iwl_priv *)file->private_data;
+        int len = 0;
+        char buf[20];
+
+        len = sprintf(buf, "0x%04X\n",
+                      le32_to_cpu(priv->active_rxon.filter_flags));
+        return simple_read_from_buffer(user_buf, count, ppos, buf, len);
+}
+
 static ssize_t iwl_dbgfs_fh_reg_read(struct file *file,
                                          char __user *user_buf,
                                          size_t count, loff_t *ppos)
@@ -2124,13 +2137,11 @@ static ssize_t iwl_dbgfs_missed_beacon_read(struct file *file,
         int pos = 0;
         char buf[12];
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos, "%d\n",
                         priv->missed_beacon_threshold);
 
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_missed_beacon_write(struct file *file,
@@ -2159,27 +2170,6 @@ static ssize_t iwl_dbgfs_missed_beacon_write(struct file *file,
         return count;
 }
 
-static ssize_t iwl_dbgfs_internal_scan_write(struct file *file,
-                                         const char __user *user_buf,
-                                         size_t count, loff_t *ppos)
-{
-        struct iwl_priv *priv = file->private_data;
-        char buf[8];
-        int buf_size;
-        int scan;
-
-        memset(buf, 0, sizeof(buf));
-        buf_size = min(count, sizeof(buf) -  1);
-        if (copy_from_user(buf, user_buf, buf_size))
-                return -EFAULT;
-        if (sscanf(buf, "%d", &scan) != 1)
-                return -EINVAL;
-
-        iwl_internal_short_hw_scan(priv);
-
-        return count;
-}
-
 static ssize_t iwl_dbgfs_plcp_delta_read(struct file *file,
                                         char __user *user_buf,
                                         size_t count, loff_t *ppos) {
@@ -2188,13 +2178,11 @@ static ssize_t iwl_dbgfs_plcp_delta_read(struct file *file,
         int pos = 0;
         char buf[12];
         const size_t bufsz = sizeof(buf);
-        ssize_t ret;
 
         pos += scnprintf(buf + pos, bufsz - pos, "%u\n",
                         priv->cfg->plcp_delta_threshold);
 
-        ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
-        return ret;
+        return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
 }
 
 static ssize_t iwl_dbgfs_plcp_delta_write(struct file *file,
@@ -2295,9 +2283,10 @@ DEBUGFS_WRITE_FILE_OPS(csr);
 DEBUGFS_READ_WRITE_FILE_OPS(ucode_tracing);
 DEBUGFS_READ_FILE_OPS(fh_reg);
 DEBUGFS_READ_WRITE_FILE_OPS(missed_beacon);
-DEBUGFS_WRITE_FILE_OPS(internal_scan);
 DEBUGFS_READ_WRITE_FILE_OPS(plcp_delta);
 DEBUGFS_READ_WRITE_FILE_OPS(force_reset);
+DEBUGFS_READ_FILE_OPS(rxon_flags);
+DEBUGFS_READ_FILE_OPS(rxon_filter_flags);
 
 /*
  * Create the debugfs files and directories
@@ -2349,7 +2338,6 @@ int iwl_dbgfs_register(struct iwl_priv *priv, const char *name)
         DEBUGFS_ADD_FILE(csr, dir_debug, S_IWUSR);
         DEBUGFS_ADD_FILE(fh_reg, dir_debug, S_IRUSR);
         DEBUGFS_ADD_FILE(missed_beacon, dir_debug, S_IWUSR);
-        DEBUGFS_ADD_FILE(internal_scan, dir_debug, S_IWUSR);
         DEBUGFS_ADD_FILE(plcp_delta, dir_debug, S_IWUSR | S_IRUSR);
         DEBUGFS_ADD_FILE(force_reset, dir_debug, S_IWUSR | S_IRUSR);
         if ((priv->hw_rev & CSR_HW_REV_TYPE_MSK) != CSR_HW_REV_TYPE_3945) {
@@ -2360,6 +2348,8 @@ int iwl_dbgfs_register(struct iwl_priv *priv, const char *name)
                 DEBUGFS_ADD_FILE(chain_noise, dir_debug, S_IRUSR);
                 DEBUGFS_ADD_FILE(ucode_tracing, dir_debug, S_IWUSR | S_IRUSR);
         }
+        DEBUGFS_ADD_FILE(rxon_flags, dir_debug, S_IWUSR);
+        DEBUGFS_ADD_FILE(rxon_filter_flags, dir_debug, S_IWUSR);
         DEBUGFS_ADD_BOOL(disable_sensitivity, dir_rf, &priv->disable_sens_cal);
         DEBUGFS_ADD_BOOL(disable_chain_noise, dir_rf,
                          &priv->disable_chain_noise_cal);
diff --git a/drivers/net/wireless/iwlwifi/iwl-dev.h b/drivers/net/wireless/iwlwifi/iwl-dev.h
index 6054c5fba0c1..e847e6197a3d 100644
--- a/drivers/net/wireless/iwlwifi/iwl-dev.h
+++ b/drivers/net/wireless/iwlwifi/iwl-dev.h
@@ -183,6 +183,10 @@ struct iwl_queue {
         int n_bd;              /* number of BDs in this queue */
         int write_ptr;       /* 1-st empty entry (index) host_w*/
         int read_ptr;         /* last used entry (index) host_r*/
+        /* use for monitoring and recovering the stuck queue */
+        int last_read_ptr;      /* storing the last read_ptr */
+        /* number of time read_ptr and last_read_ptr are the same */
+        u8 repeat_same_read_ptr;
         dma_addr_t dma_addr;   /* physical addr for BD's */
         int n_window;          /* safe queue window */
         u32 id;
@@ -304,13 +308,11 @@ struct iwl_channel_info {
         struct iwl3945_scan_power_info scan_pwr_info[IWL_NUM_SCAN_RATES];
 };
 
-#define IWL_TX_FIFO_AC0 0
-#define IWL_TX_FIFO_AC1 1
-#define IWL_TX_FIFO_AC2 2
-#define IWL_TX_FIFO_AC3 3
-#define IWL_TX_FIFO_HCCA_1      5
-#define IWL_TX_FIFO_HCCA_2      6
-#define IWL_TX_FIFO_NONE        7
+#define IWL_TX_FIFO_BK          0
+#define IWL_TX_FIFO_BE          1
+#define IWL_TX_FIFO_VI          2
+#define IWL_TX_FIFO_VO          3
+#define IWL_TX_FIFO_UNUSED      -1
 
 /* Minimum number of queues. MAX_NUM is defined in hw specific files.
  * Set the minimum to accommodate the 4 standard TX queues, 1 command
@@ -546,11 +548,18 @@ struct iwl_qos_info {
         struct iwl_qosparam_cmd def_qos_parm;
 };
 
+/*
+ * Structure should be accessed with sta_lock held. When station addition
+ * is in progress (IWL_STA_UCODE_INPROGRESS) it is possible to access only
+ * the commands (iwl_addsta_cmd and iwl_link_quality_cmd) without sta_lock
+ * held.
+ */
 struct iwl_station_entry {
         struct iwl_addsta_cmd sta;
         struct iwl_tid_data tid[MAX_TID_COUNT];
         u8 used;
         struct iwl_hw_key keyinfo;
+        struct iwl_link_quality_cmd *lq;
 };
 
 /*
@@ -1039,6 +1048,11 @@ struct iwl_event_log {
 #define IWL_DELAY_NEXT_FORCE_RF_RESET  (HZ*3)
 #define IWL_DELAY_NEXT_FORCE_FW_RELOAD (HZ*5)
 
+/* timer constants use to monitor and recover stuck tx queues in mSecs */
+#define IWL_MONITORING_PERIOD  (1000)
+#define IWL_ONE_HUNDRED_MSECS   (100)
+#define IWL_SIXTY_SECS          (60000)
+
 enum iwl_reset {
         IWL_RF_RESET = 0,
         IWL_FW_RESET,
@@ -1092,10 +1106,6 @@ struct iwl_priv {
         struct iwl_channel_info *channel_info;  /* channel info array */
         u8 channel_count;       /* # of channels */
 
-        /* each calibration channel group in the EEPROM has a derived
-         * clip setting for each rate. 3945 only.*/
-        const struct iwl3945_clip_group clip39_groups[5];
-
         /* thermal calibration */
         s32 temperature;        /* degrees Kelvin */
         s32 last_temperature;
@@ -1168,9 +1178,7 @@ struct iwl_priv {
         u64 led_tpt;
 
         u16 active_rate;
-        u16 active_rate_basic;
 
-        u8 assoc_station_added;
         u8 start_calib;
         struct iwl_sensitivity_data sensitivity_data;
         struct iwl_chain_noise_data chain_noise_data;
@@ -1197,7 +1205,6 @@ struct iwl_priv {
 
         unsigned long status;
 
-        int last_rx_rssi;       /* From Rx packet statistics */
         int last_rx_noise;      /* From beacon statistics */
 
         /* counts mgmt, ctl, and data packets */
@@ -1218,8 +1225,6 @@ struct iwl_priv {
 #endif
 
         /* context information */
-        u16 rates_mask;
-
         u8 bssid[ETH_ALEN];
         u16 rts_threshold;
         u8 mac_addr[ETH_ALEN];
@@ -1228,7 +1233,7 @@ struct iwl_priv {
         spinlock_t sta_lock;
         int num_stations;
         struct iwl_station_entry stations[IWL_STATION_COUNT];
-        struct iwl_wep_key wep_keys[WEP_KEYS_MAX];
+        struct iwl_wep_key wep_keys[WEP_KEYS_MAX]; /* protected by mutex */
         u8 default_wep_key;
         u8 key_mapping_key;
         unsigned long ucode_key_table;
@@ -1244,10 +1249,6 @@ struct iwl_priv {
 
         u8 mac80211_registered;
 
-        /* Rx'd packet timing information */
-        u32 last_beacon_time;
-        u64 last_tsf;
-
         /* eeprom -- this is in the card's little endian byte order */
         u8 *eeprom;
         int    nvm_device_type;
@@ -1262,20 +1263,53 @@ struct iwl_priv {
         u16 beacon_int;
         struct ieee80211_vif *vif;
 
-        /*Added for 3945 */
-        void *shared_virt;
-        dma_addr_t shared_phys;
-        /*End*/
-        struct iwl_hw_params hw_params;
+        union {
+#if defined(CONFIG_IWL3945) || defined(CONFIG_IWL3945_MODULE)
+                struct {
+                        void *shared_virt;
+                        dma_addr_t shared_phys;
+
+                        struct delayed_work thermal_periodic;
+                        struct delayed_work rfkill_poll;
+
+                        struct iwl3945_notif_statistics statistics;
+
+                        u32 sta_supp_rates;
+                        int last_rx_rssi;       /* From Rx packet statistics */
 
-        /* INT ICT Table */
-        __le32 *ict_tbl;
-        dma_addr_t ict_tbl_dma;
-        dma_addr_t aligned_ict_tbl_dma;
-        int ict_index;
-        void *ict_tbl_vir;
-        u32 inta;
-        bool use_ict;
+                        /* Rx'd packet timing information */
+                        u32 last_beacon_time;
+                        u64 last_tsf;
+
+                        /*
+                         * each calibration channel group in the
+                         * EEPROM has a derived clip setting for
+                         * each rate.
+                         */
+                        const struct iwl3945_clip_group clip_groups[5];
+
+                } _3945;
+#endif
+#if defined(CONFIG_IWLAGN) || defined(CONFIG_IWLAGN_MODULE)
+                struct {
+                        /* INT ICT Table */
+                        __le32 *ict_tbl;
+                        void *ict_tbl_vir;
+                        dma_addr_t ict_tbl_dma;
+                        dma_addr_t aligned_ict_tbl_dma;
+                        int ict_index;
+                        u32 inta;
+                        bool use_ict;
+                        /*
+                         * reporting the number of tids has AGG on. 0 means
+                         * no AGGREGATION
+                         */
+                        u8 agg_tids_count;
+                } _agn;
+#endif
+        };
+
+        struct iwl_hw_params hw_params;
 
         u32 inta_mask;
         /* Current association information needed to configure the
@@ -1303,10 +1337,6 @@ struct iwl_priv {
         struct delayed_work alive_start;
         struct delayed_work scan_check;
 
-        /*For 3945 only*/
-        struct delayed_work thermal_periodic;
-        struct delayed_work rfkill_poll;
-
         /* TX Power */
         s8 tx_power_user_lmt;
         s8 tx_power_device_lmt;
@@ -1338,13 +1368,8 @@ struct iwl_priv {
         struct work_struct run_time_calib_work;
         struct timer_list statistics_periodic;
         struct timer_list ucode_trace;
+        struct timer_list monitor_recover;
         bool hw_ready;
-        /*For 3945*/
-#define IWL_DEFAULT_TX_POWER 0x0F
-
-        struct iwl3945_notif_statistics statistics_39;
-
-        u32 sta_supp_rates;
 
         struct iwl_event_log event_log;
 }; /*iwl_priv */
diff --git a/drivers/net/wireless/iwlwifi/iwl-helpers.h b/drivers/net/wireless/iwlwifi/iwl-helpers.h
index 51a67fb2e185..3ff6b9d25a10 100644
--- a/drivers/net/wireless/iwlwifi/iwl-helpers.h
+++ b/drivers/net/wireless/iwlwifi/iwl-helpers.h
@@ -31,6 +31,9 @@
 #define __iwl_helpers_h__
 
 #include <linux/ctype.h>
+#include <net/mac80211.h>
+
+#include "iwl-io.h"
 
 #define IWL_MASK(lo, hi) ((1 << (hi)) | ((1 << (hi)) - (1 << (lo))))
 
diff --git a/drivers/net/wireless/iwlwifi/iwl-prph.h b/drivers/net/wireless/iwlwifi/iwl-prph.h
index d2d2a9174900..5944de7a98a2 100644
--- a/drivers/net/wireless/iwlwifi/iwl-prph.h
+++ b/drivers/net/wireless/iwlwifi/iwl-prph.h
@@ -254,7 +254,7 @@
  * device.  A queue maps to only one (selectable by driver) Tx DMA channel,
  * but one DMA channel may take input from several queues.
  *
- * Tx DMA channels have dedicated purposes.  For 4965, they are used as follows
+ * Tx DMA FIFOs have dedicated purposes.  For 4965, they are used as follows
  * (cf. default_queue_to_tx_fifo in iwl-4965.c):
  *
  * 0 -- EDCA BK (background) frames, lowest priority
@@ -262,20 +262,20 @@
  * 2 -- EDCA VI (video) frames, higher priority
  * 3 -- EDCA VO (voice) and management frames, highest priority
  * 4 -- Commands (e.g. RXON, etc.)
- * 5 -- HCCA short frames
- * 6 -- HCCA long frames
+ * 5 -- unused (HCCA)
+ * 6 -- unused (HCCA)
  * 7 -- not used by driver (device-internal only)
  *
- * For 5000 series and up, they are used slightly differently
+ * For 5000 series and up, they are used differently
  * (cf. iwl5000_default_queue_to_tx_fifo in iwl-5000.c):
  *
  * 0 -- EDCA BK (background) frames, lowest priority
  * 1 -- EDCA BE (best effort) frames, normal priority
  * 2 -- EDCA VI (video) frames, higher priority
  * 3 -- EDCA VO (voice) and management frames, highest priority
- * 4 -- (TBD)
- * 5 -- HCCA short frames
- * 6 -- HCCA long frames
+ * 4 -- unused
+ * 5 -- unused
+ * 6 -- unused
  * 7 -- Commands
  *
  * Driver should normally map queues 0-6 to Tx DMA/FIFO channels 0-6.
diff --git a/drivers/net/wireless/iwlwifi/iwl-rx.c b/drivers/net/wireless/iwlwifi/iwl-rx.c
index df257bc15f49..2fa30dfb7c59 100644
--- a/drivers/net/wireless/iwlwifi/iwl-rx.c
+++ b/drivers/net/wireless/iwlwifi/iwl-rx.c
@@ -616,29 +616,77 @@ static void iwl_accumulative_statistics(struct iwl_priv *priv,
 
 #define REG_RECALIB_PERIOD (60)
 
-#define PLCP_MSG "plcp_err exceeded %u, %u, %u, %u, %u, %d, %u mSecs\n"
-void iwl_rx_statistics(struct iwl_priv *priv,
-                              struct iwl_rx_mem_buffer *rxb)
+/* the threshold ratio of actual_ack_cnt to expected_ack_cnt in percent */
+#define ACK_CNT_RATIO (50)
+#define BA_TIMEOUT_CNT (5)
+#define BA_TIMEOUT_MAX (16)
+
+#if defined(CONFIG_IWLAGN) || defined(CONFIG_IWLAGN_MODULE)
+/**
+ * iwl_good_ack_health - checks for ACK count ratios, BA timeout retries.
+ *
+ * When the ACK count ratio is 0 and aggregated BA timeout retries exceeding
+ * the BA_TIMEOUT_MAX, reload firmware and bring system back to normal
+ * operation state.
+ */
+bool iwl_good_ack_health(struct iwl_priv *priv,
+                                struct iwl_rx_packet *pkt)
 {
-        int change;
-        struct iwl_rx_packet *pkt = rxb_addr(rxb);
+        bool rc = true;
+        int actual_ack_cnt_delta, expected_ack_cnt_delta;
+        int ba_timeout_delta;
+
+        actual_ack_cnt_delta =
+                le32_to_cpu(pkt->u.stats.tx.actual_ack_cnt) -
+                le32_to_cpu(priv->statistics.tx.actual_ack_cnt);
+        expected_ack_cnt_delta =
+                le32_to_cpu(pkt->u.stats.tx.expected_ack_cnt) -
+                le32_to_cpu(priv->statistics.tx.expected_ack_cnt);
+        ba_timeout_delta =
+                le32_to_cpu(pkt->u.stats.tx.agg.ba_timeout) -
+                le32_to_cpu(priv->statistics.tx.agg.ba_timeout);
+        if ((priv->_agn.agg_tids_count > 0) &&
+            (expected_ack_cnt_delta > 0) &&
+            (((actual_ack_cnt_delta * 100) / expected_ack_cnt_delta)
+                < ACK_CNT_RATIO) &&
+            (ba_timeout_delta > BA_TIMEOUT_CNT)) {
+                IWL_DEBUG_RADIO(priv, "actual_ack_cnt delta = %d,"
+                                " expected_ack_cnt = %d\n",
+                                actual_ack_cnt_delta, expected_ack_cnt_delta);
+
+#ifdef CONFIG_IWLWIFI_DEBUG
+                IWL_DEBUG_RADIO(priv, "rx_detected_cnt delta = %d\n",
+                                priv->delta_statistics.tx.rx_detected_cnt);
+                IWL_DEBUG_RADIO(priv,
+                                "ack_or_ba_timeout_collision delta = %d\n",
+                                priv->delta_statistics.tx.
+                                ack_or_ba_timeout_collision);
+#endif
+                IWL_DEBUG_RADIO(priv, "agg ba_timeout delta = %d\n",
+                                ba_timeout_delta);
+                if (!actual_ack_cnt_delta &&
+                    (ba_timeout_delta >= BA_TIMEOUT_MAX))
+                        rc = false;
+        }
+        return rc;
+}
+EXPORT_SYMBOL(iwl_good_ack_health);
+#endif
+
+/**
+ * iwl_good_plcp_health - checks for plcp error.
+ *
+ * When the plcp error is exceeding the thresholds, reset the radio
+ * to improve the throughput.
+ */
+bool iwl_good_plcp_health(struct iwl_priv *priv,
+                                struct iwl_rx_packet *pkt)
+{
+        bool rc = true;
         int combined_plcp_delta;
         unsigned int plcp_msec;
         unsigned long plcp_received_jiffies;
 
-        IWL_DEBUG_RX(priv, "Statistics notification received (%d vs %d).\n",
-                     (int)sizeof(priv->statistics),
-                     le32_to_cpu(pkt->len_n_flags) & FH_RSCSR_FRAME_SIZE_MSK);
-
-        change = ((priv->statistics.general.temperature !=
-                   pkt->u.stats.general.temperature) ||
-                  ((priv->statistics.flag &
-                    STATISTICS_REPLY_FLG_HT40_MODE_MSK) !=
-                   (pkt->u.stats.flag & STATISTICS_REPLY_FLG_HT40_MODE_MSK)));
-
-#ifdef CONFIG_IWLWIFI_DEBUG
-        iwl_accumulative_statistics(priv, (__le32 *)&pkt->u.stats);
-#endif
         /*
          * check for plcp_err and trigger radio reset if it exceeds
          * the plcp error threshold plcp_delta.
@@ -659,11 +707,11 @@ void iwl_rx_statistics(struct iwl_priv *priv,
                         le32_to_cpu(priv->statistics.rx.ofdm_ht.plcp_err));
 
                 if ((combined_plcp_delta > 0) &&
-                        ((combined_plcp_delta * 100) / plcp_msec) >
+                    ((combined_plcp_delta * 100) / plcp_msec) >
                         priv->cfg->plcp_delta_threshold) {
                         /*
-                         * if plcp_err exceed the threshold, the following
-                         * data is printed in csv format:
+                         * if plcp_err exceed the threshold,
+                         * the following data is printed in csv format:
                          *    Text: plcp_err exceeded %d,
                          *    Received ofdm.plcp_err,
                          *    Current ofdm.plcp_err,
@@ -672,22 +720,73 @@ void iwl_rx_statistics(struct iwl_priv *priv,
                          *    combined_plcp_delta,
                          *    plcp_msec
                          */
-                        IWL_DEBUG_RADIO(priv, PLCP_MSG,
+                        IWL_DEBUG_RADIO(priv, "plcp_err exceeded %u, "
+                                "%u, %u, %u, %u, %d, %u mSecs\n",
                                 priv->cfg->plcp_delta_threshold,
                                 le32_to_cpu(pkt->u.stats.rx.ofdm.plcp_err),
                                 le32_to_cpu(priv->statistics.rx.ofdm.plcp_err),
                                 le32_to_cpu(pkt->u.stats.rx.ofdm_ht.plcp_err),
                                 le32_to_cpu(
-                                        priv->statistics.rx.ofdm_ht.plcp_err),
+                                  priv->statistics.rx.ofdm_ht.plcp_err),
                                 combined_plcp_delta, plcp_msec);
+                        rc = false;
+                }
+        }
+        return rc;
+}
+EXPORT_SYMBOL(iwl_good_plcp_health);
 
-                        /*
-                         * Reset the RF radio due to the high plcp
-                         * error rate
-                         */
-                        iwl_force_reset(priv, IWL_RF_RESET);
+static void iwl_recover_from_statistics(struct iwl_priv *priv,
+                                struct iwl_rx_packet *pkt)
+{
+        if (test_bit(STATUS_EXIT_PENDING, &priv->status))
+                return;
+        if (iwl_is_associated(priv)) {
+                if (priv->cfg->ops->lib->check_ack_health) {
+                        if (!priv->cfg->ops->lib->check_ack_health(
+                            priv, pkt)) {
+                                /*
+                                 * low ack count detected
+                                 * restart Firmware
+                                 */
+                                IWL_ERR(priv, "low ack count detected, "
+                                        "restart firmware\n");
+                                iwl_force_reset(priv, IWL_FW_RESET);
+                        }
+                } else if (priv->cfg->ops->lib->check_plcp_health) {
+                        if (!priv->cfg->ops->lib->check_plcp_health(
+                            priv, pkt)) {
+                                /*
+                                 * high plcp error detected
+                                 * reset Radio
+                                 */
+                                iwl_force_reset(priv, IWL_RF_RESET);
+                        }
                 }
         }
+}
+
+void iwl_rx_statistics(struct iwl_priv *priv,
+                              struct iwl_rx_mem_buffer *rxb)
+{
+        int change;
+        struct iwl_rx_packet *pkt = rxb_addr(rxb);
+
+
+        IWL_DEBUG_RX(priv, "Statistics notification received (%d vs %d).\n",
+                     (int)sizeof(priv->statistics),
+                     le32_to_cpu(pkt->len_n_flags) & FH_RSCSR_FRAME_SIZE_MSK);
+
+        change = ((priv->statistics.general.temperature !=
+                   pkt->u.stats.general.temperature) ||
+                  ((priv->statistics.flag &
+                    STATISTICS_REPLY_FLG_HT40_MODE_MSK) !=
+                   (pkt->u.stats.flag & STATISTICS_REPLY_FLG_HT40_MODE_MSK)));
+
+#ifdef CONFIG_IWLWIFI_DEBUG
+        iwl_accumulative_statistics(priv, (__le32 *)&pkt->u.stats);
+#endif
+        iwl_recover_from_statistics(priv, pkt);
 
         memcpy(&priv->statistics, &pkt->u.stats, sizeof(priv->statistics));
 
@@ -1036,24 +1135,6 @@ static void iwl_pass_packet_to_mac80211(struct iwl_priv *priv,
         rxb->page = NULL;
 }
 
-/* This is necessary only for a number of statistics, see the caller. */
-static int iwl_is_network_packet(struct iwl_priv *priv,
-                struct ieee80211_hdr *header)
-{
-        /* Filter incoming packets to determine if they are targeted toward
-         * this network, discarding packets coming from ourselves */
-        switch (priv->iw_mode) {
-        case NL80211_IFTYPE_ADHOC: /* Header: Dest. | Source    | BSSID */
-                /* packets to our IBSS update information */
-                return !compare_ether_addr(header->addr3, priv->bssid);
-        case NL80211_IFTYPE_STATION: /* Header: Dest. | AP{BSSID} | Source */
-                /* packets to our IBSS update information */
-                return !compare_ether_addr(header->addr2, priv->bssid);
-        default:
-                return 1;
-        }
-}
-
 /* Called for REPLY_RX (legacy ABG frames), or
  * REPLY_RX_MPDU_CMD (HT high-throughput N frames). */
 void iwl_rx_reply_rx(struct iwl_priv *priv,
@@ -1190,12 +1271,6 @@ void iwl_rx_reply_rx(struct iwl_priv *priv,
         if (rate_n_flags & RATE_MCS_SGI_MSK)
                 rx_status.flag |= RX_FLAG_SHORT_GI;
 
-        if (iwl_is_network_packet(priv, header)) {
-                priv->last_rx_rssi = rx_status.signal;
-                priv->last_beacon_time =  priv->ucode_beacon_time;
-                priv->last_tsf = le64_to_cpu(phy_res->timestamp);
-        }
-
         iwl_pass_packet_to_mac80211(priv, header, len, ampdu_status,
                                     rxb, &rx_status);
 }
diff --git a/drivers/net/wireless/iwlwifi/iwl-scan.c b/drivers/net/wireless/iwlwifi/iwl-scan.c
index bd2f7c420563..84b19b12ff03 100644
--- a/drivers/net/wireless/iwlwifi/iwl-scan.c
+++ b/drivers/net/wireless/iwlwifi/iwl-scan.c
@@ -580,7 +580,6 @@ int iwl_internal_short_hw_scan(struct iwl_priv *priv)
 out:
         return ret;
 }
-EXPORT_SYMBOL(iwl_internal_short_hw_scan);
 
 #define IWL_SCAN_CHECK_WATCHDOG (7 * HZ)
 
@@ -665,7 +664,6 @@ static void iwl_bg_request_scan(struct work_struct *data)
         };
         struct iwl_scan_cmd *scan;
         struct ieee80211_conf *conf = NULL;
-        int ret = 0;
         u32 rate_flags = 0;
         u16 cmd_len;
         u16 rx_chain = 0;
@@ -698,7 +696,6 @@ static void iwl_bg_request_scan(struct work_struct *data)
         if (test_bit(STATUS_SCAN_HW, &priv->status)) {
                 IWL_DEBUG_INFO(priv, "Multiple concurrent scan requests in parallel. "
                                "Ignoring second request.\n");
-                ret = -EIO;
                 goto done;
         }
 
@@ -731,7 +728,8 @@ static void iwl_bg_request_scan(struct work_struct *data)
                 priv->scan = kmalloc(sizeof(struct iwl_scan_cmd) +
                                      IWL_MAX_SCAN_SIZE, GFP_KERNEL);
                 if (!priv->scan) {
-                        ret = -ENOMEM;
+                        IWL_DEBUG_SCAN(priv,
+                                       "fail to allocate memory for scan\n");
                         goto done;
                 }
         }
@@ -892,8 +890,7 @@ static void iwl_bg_request_scan(struct work_struct *data)
         scan->len = cpu_to_le16(cmd.len);
 
         set_bit(STATUS_SCAN_HW, &priv->status);
-        ret = iwl_send_cmd_sync(priv, &cmd);
-        if (ret)
+        if (iwl_send_cmd_sync(priv, &cmd))
                 goto done;
 
         queue_delayed_work(priv->workqueue, &priv->scan_check,
diff --git a/drivers/net/wireless/iwlwifi/iwl-sta.c b/drivers/net/wireless/iwlwifi/iwl-sta.c
index 4a6686fa6b36..d401b6f226f9 100644
--- a/drivers/net/wireless/iwlwifi/iwl-sta.c
+++ b/drivers/net/wireless/iwlwifi/iwl-sta.c
@@ -29,14 +29,12 @@
 
 #include <net/mac80211.h>
 #include <linux/etherdevice.h>
+#include <linux/sched.h>
 
 #include "iwl-dev.h"
 #include "iwl-core.h"
 #include "iwl-sta.h"
 
-#define IWL_STA_DRIVER_ACTIVE BIT(0) /* driver entry is active */
-#define IWL_STA_UCODE_ACTIVE  BIT(1) /* ucode entry is active */
-
 u8 iwl_find_station(struct iwl_priv *priv, const u8 *addr)
 {
         int i;
@@ -64,6 +62,19 @@ u8 iwl_find_station(struct iwl_priv *priv, const u8 *addr)
                               addr, priv->num_stations);
 
  out:
+        /*
+         * It may be possible that more commands interacting with stations
+         * arrive before we completed processing the adding of
+         * station
+         */
+        if (ret != IWL_INVALID_STATION &&
+            (!(priv->stations[ret].used & IWL_STA_UCODE_ACTIVE) ||
+             ((priv->stations[ret].used & IWL_STA_UCODE_ACTIVE) &&
+              (priv->stations[ret].used & IWL_STA_UCODE_INPROGRESS)))) {
+                IWL_ERR(priv, "Requested station info for sta %d before ready. \n",
+                        ret);
+                ret = IWL_INVALID_STATION;
+        }
         spin_unlock_irqrestore(&priv->sta_lock, flags);
         return ret;
 }
@@ -158,13 +169,6 @@ static void iwl_process_add_sta_resp(struct iwl_priv *priv,
                        priv->stations[sta_id].sta.mode ==
                        STA_CONTROL_MODIFY_MSK ? "Modified" : "Added",
                        addsta->sta.addr);
-
-        /*
-         * Determine if we wanted to modify or add a station,
-         * if adding a station succeeded we have some more initialization
-         * to do when using station notification. TODO
-         */
-
         spin_unlock_irqrestore(&priv->sta_lock, flags);
 }
 
@@ -190,6 +194,10 @@ int iwl_send_add_sta(struct iwl_priv *priv,
                 .flags = flags,
                 .data = data,
         };
+        u8 sta_id = sta->sta.sta_id;
+
+        IWL_DEBUG_INFO(priv, "Adding sta %u (%pM) %ssynchronously\n",
+                       sta_id, sta->sta.addr, flags & CMD_ASYNC ?  "a" : "");
 
         if (flags & CMD_ASYNC)
                 cmd.callback = iwl_add_sta_callback;
@@ -263,18 +271,19 @@ static void iwl_set_ht_add_station(struct iwl_priv *priv, u8 index,
 }
 
 /**
- * iwl_add_station - Add station to tables in driver and device
+ * iwl_prep_station - Prepare station information for addition
+ *
+ * should be called with sta_lock held
  */
-u8 iwl_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap, u8 flags,
-                struct ieee80211_sta_ht_cap *ht_info)
+static u8 iwl_prep_station(struct iwl_priv *priv, const u8 *addr,
+                           bool is_ap,
+                           struct ieee80211_sta_ht_cap *ht_info)
 {
         struct iwl_station_entry *station;
-        unsigned long flags_spin;
         int i;
-        int sta_id = IWL_INVALID_STATION;
+        u8 sta_id = IWL_INVALID_STATION;
         u16 rate;
 
-        spin_lock_irqsave(&priv->sta_lock, flags_spin);
         if (is_ap)
                 sta_id = IWL_AP_ID;
         else if (is_broadcast_ether_addr(addr))
@@ -292,20 +301,32 @@ u8 iwl_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap, u8 flags,
                                 sta_id = i;
                 }
 
-        /* These two conditions have the same outcome, but keep them separate
-           since they have different meanings */
-        if (unlikely(sta_id == IWL_INVALID_STATION)) {
-                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+        /*
+         * These two conditions have the same outcome, but keep them
+         * separate
+         */
+        if (unlikely(sta_id == IWL_INVALID_STATION))
+                return sta_id;
+
+        /*
+         * uCode is not able to deal with multiple requests to add a
+         * station. Keep track if one is in progress so that we do not send
+         * another.
+         */
+        if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
+                IWL_DEBUG_INFO(priv, "STA %d already in process of being added.\n",
+                                sta_id);
                 return sta_id;
         }
 
-        if (priv->stations[sta_id].used &&
+        if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
+            (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE) &&
             !compare_ether_addr(priv->stations[sta_id].sta.sta.addr, addr)) {
-                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not adding again.\n",
+                                sta_id, addr);
                 return sta_id;
         }
 
-
         station = &priv->stations[sta_id];
         station->used = IWL_STA_DRIVER_ACTIVE;
         IWL_DEBUG_ASSOC(priv, "Add STA to driver ID %d: %pM\n",
@@ -330,86 +351,185 @@ u8 iwl_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap, u8 flags,
         /* Turn on both antennas for the station... */
         station->sta.rate_n_flags = cpu_to_le16(rate | RATE_MCS_ANT_AB_MSK);
 
+        return sta_id;
+
+}
+
+#define STA_WAIT_TIMEOUT (HZ/2)
+
+/**
+ * iwl_add_station_common -
+ */
+int iwl_add_station_common(struct iwl_priv *priv, const u8 *addr,
+                                  bool is_ap,
+                                  struct ieee80211_sta_ht_cap *ht_info,
+                                  u8 *sta_id_r)
+{
+        struct iwl_station_entry *station;
+        unsigned long flags_spin;
+        int ret = 0;
+        u8 sta_id;
+
+        *sta_id_r = 0;
+        spin_lock_irqsave(&priv->sta_lock, flags_spin);
+        sta_id = iwl_prep_station(priv, addr, is_ap, ht_info);
+        if (sta_id == IWL_INVALID_STATION) {
+                IWL_ERR(priv, "Unable to prepare station %pM for addition\n",
+                        addr);
+                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                return -EINVAL;
+        }
+
+        /*
+         * uCode is not able to deal with multiple requests to add a
+         * station. Keep track if one is in progress so that we do not send
+         * another.
+         */
+        if (priv->stations[sta_id].used & IWL_STA_UCODE_INPROGRESS) {
+                IWL_DEBUG_INFO(priv, "STA %d already in process of being added.\n",
+                               sta_id);
+                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                return -EEXIST;
+        }
+
+        if ((priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE) &&
+            (priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
+                IWL_DEBUG_ASSOC(priv, "STA %d (%pM) already added, not adding again.\n",
+                                sta_id, addr);
+                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                return -EEXIST;
+        }
+
+        priv->stations[sta_id].used |= IWL_STA_UCODE_INPROGRESS;
+        station = &priv->stations[sta_id];
         spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
 
         /* Add station to device's station table */
-        iwl_send_add_sta(priv, &station->sta, flags);
-        return sta_id;
-
+        ret = iwl_send_add_sta(priv, &station->sta, CMD_SYNC);
+        if (ret) {
+                IWL_ERR(priv, "Adding station %pM failed.\n", station->sta.sta.addr);
+                spin_lock_irqsave(&priv->sta_lock, flags_spin);
+                priv->stations[sta_id].used &= ~IWL_STA_DRIVER_ACTIVE;
+                priv->stations[sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+        }
+        *sta_id_r = sta_id;
+        return ret;
 }
-EXPORT_SYMBOL(iwl_add_station);
+EXPORT_SYMBOL(iwl_add_station_common);
 
-static void iwl_sta_ucode_deactivate(struct iwl_priv *priv, const u8 *addr)
+static void iwl_sta_init_lq(struct iwl_priv *priv, const u8 *addr, bool is_ap)
 {
-        unsigned long flags;
-        u8 sta_id = iwl_find_station(priv, addr);
+        int i, r;
+        struct iwl_link_quality_cmd link_cmd = {
+                .reserved1 = 0,
+        };
+        u32 rate_flags;
 
-        BUG_ON(sta_id == IWL_INVALID_STATION);
+        /* Set up the rate scaling to start at selected rate, fall back
+         * all the way down to 1M in IEEE order, and then spin on 1M */
+        if (is_ap)
+                r = IWL_RATE_54M_INDEX;
+        else if (priv->band == IEEE80211_BAND_5GHZ)
+                r = IWL_RATE_6M_INDEX;
+        else
+                r = IWL_RATE_1M_INDEX;
 
-        IWL_DEBUG_ASSOC(priv, "Removed STA from Ucode: %pM\n", addr);
+        for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) {
+                rate_flags = 0;
+                if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE)
+                        rate_flags |= RATE_MCS_CCK_MSK;
 
-        spin_lock_irqsave(&priv->sta_lock, flags);
+                rate_flags |= first_antenna(priv->hw_params.valid_tx_ant) <<
+                                RATE_MCS_ANT_POS;
 
-        /* Ucode must be active and driver must be non active */
-        if (priv->stations[sta_id].used != IWL_STA_UCODE_ACTIVE)
-                IWL_ERR(priv, "removed non active STA %d\n", sta_id);
+                link_cmd.rs_table[i].rate_n_flags =
+                        iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags);
+                r = iwl_get_prev_ieee_rate(r);
+        }
 
-        priv->stations[sta_id].used &= ~IWL_STA_UCODE_ACTIVE;
+        link_cmd.general_params.single_stream_ant_msk =
+                                first_antenna(priv->hw_params.valid_tx_ant);
+        link_cmd.general_params.dual_stream_ant_msk = 3;
+        link_cmd.agg_params.agg_dis_start_th = LINK_QUAL_AGG_DISABLE_START_DEF;
+        link_cmd.agg_params.agg_time_limit =
+                cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF);
 
-        memset(&priv->stations[sta_id], 0, sizeof(struct iwl_station_entry));
-        spin_unlock_irqrestore(&priv->sta_lock, flags);
+        /* Update the rate scaling for control frame Tx to AP */
+        link_cmd.sta_id = is_ap ? IWL_AP_ID : priv->hw_params.bcast_sta_id;
+
+        iwl_send_cmd_pdu(priv, REPLY_TX_LINK_QUALITY_CMD,
+                               sizeof(link_cmd), &link_cmd);
 }
 
-static void iwl_remove_sta_callback(struct iwl_priv *priv,
-                                    struct iwl_device_cmd *cmd,
-                                    struct iwl_rx_packet *pkt)
+/*
+ * iwl_add_local_stations - Add stations not requested by mac80211
+ *
+ * This will be either the broadcast station or the bssid station needed by
+ * ad-hoc.
+ *
+ * Function sleeps.
+ */
+int iwl_add_local_station(struct iwl_priv *priv, const u8 *addr, bool init_rs)
 {
-        struct iwl_rem_sta_cmd *rm_sta =
-                        (struct iwl_rem_sta_cmd *)cmd->cmd.payload;
-        const u8 *addr = rm_sta->addr;
+        int ret;
+        u8 sta_id;
 
-        if (pkt->hdr.flags & IWL_CMD_FAILED_MSK) {
-                IWL_ERR(priv, "Bad return from REPLY_REMOVE_STA (0x%08X)\n",
-                pkt->hdr.flags);
-                return;
+        ret = iwl_add_station_common(priv, addr, 0, NULL, &sta_id);
+        if (ret) {
+                IWL_ERR(priv, "Unable to add station %pM\n", addr);
+                return ret;
         }
 
-        switch (pkt->u.rem_sta.status) {
-        case REM_STA_SUCCESS_MSK:
-                iwl_sta_ucode_deactivate(priv, addr);
-                break;
-        default:
-                IWL_ERR(priv, "REPLY_REMOVE_STA failed\n");
-                break;
-        }
+        if (init_rs)
+                /* Set up default rate scaling table in device's station table */
+                iwl_sta_init_lq(priv, addr, false);
+        return 0;
+}
+EXPORT_SYMBOL(iwl_add_local_station);
+
+/**
+ * iwl_sta_ucode_deactivate - deactivate ucode status for a station
+ *
+ * priv->sta_lock must be held
+ */
+static void iwl_sta_ucode_deactivate(struct iwl_priv *priv, u8 sta_id)
+{
+        /* Ucode must be active and driver must be non active */
+        if (priv->stations[sta_id].used != IWL_STA_UCODE_ACTIVE)
+                IWL_ERR(priv, "removed non active STA %u\n", sta_id);
+
+        priv->stations[sta_id].used &= ~IWL_STA_UCODE_ACTIVE;
+
+        memset(&priv->stations[sta_id], 0, sizeof(struct iwl_station_entry));
+        IWL_DEBUG_ASSOC(priv, "Removed STA %u\n", sta_id);
 }
 
-static int iwl_send_remove_station(struct iwl_priv *priv, const u8 *addr,
-                                   u8 flags)
+static int iwl_send_remove_station(struct iwl_priv *priv,
+                                   struct iwl_station_entry *station)
 {
         struct iwl_rx_packet *pkt;
         int ret;
 
+        unsigned long flags_spin;
         struct iwl_rem_sta_cmd rm_sta_cmd;
 
         struct iwl_host_cmd cmd = {
                 .id = REPLY_REMOVE_STA,
                 .len = sizeof(struct iwl_rem_sta_cmd),
-                .flags = flags,
+                .flags = CMD_SYNC,
                 .data = &rm_sta_cmd,
         };
 
         memset(&rm_sta_cmd, 0, sizeof(rm_sta_cmd));
         rm_sta_cmd.num_sta = 1;
-        memcpy(&rm_sta_cmd.addr, addr , ETH_ALEN);
+        memcpy(&rm_sta_cmd.addr, &station->sta.sta.addr , ETH_ALEN);
+
+        cmd.flags |= CMD_WANT_SKB;
 
-        if (flags & CMD_ASYNC)
-                cmd.callback = iwl_remove_sta_callback;
-        else
-                cmd.flags |= CMD_WANT_SKB;
         ret = iwl_send_cmd(priv, &cmd);
 
-        if (ret || (flags & CMD_ASYNC))
+        if (ret)
                 return ret;
 
         pkt = (struct iwl_rx_packet *)cmd.reply_page;
@@ -422,7 +542,9 @@ static int iwl_send_remove_station(struct iwl_priv *priv, const u8 *addr,
         if (!ret) {
                 switch (pkt->u.rem_sta.status) {
                 case REM_STA_SUCCESS_MSK:
-                        iwl_sta_ucode_deactivate(priv, addr);
+                        spin_lock_irqsave(&priv->sta_lock, flags_spin);
+                        iwl_sta_ucode_deactivate(priv, station->sta.sta.sta_id);
+                        spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
                         IWL_DEBUG_ASSOC(priv, "REPLY_REMOVE_STA PASSED\n");
                         break;
                 default:
@@ -439,23 +561,35 @@ static int iwl_send_remove_station(struct iwl_priv *priv, const u8 *addr,
 /**
  * iwl_remove_station - Remove driver's knowledge of station.
  */
-int iwl_remove_station(struct iwl_priv *priv, const u8 *addr, bool is_ap)
+static int iwl_remove_station(struct iwl_priv *priv, struct ieee80211_sta *sta)
 {
         int sta_id = IWL_INVALID_STATION;
         int i, ret = -EINVAL;
         unsigned long flags;
+        bool is_ap = priv->iw_mode == NL80211_IFTYPE_STATION;
+        struct iwl_station_entry *station;
+
+        if (!iwl_is_ready(priv)) {
+                IWL_DEBUG_INFO(priv,
+                        "Unable to remove station %pM, device not ready. \n",
+                        sta->addr);
+                /*
+                 * It is typical for stations to be removed when we are
+                 * going down. Return success since device will be down
+                 * soon anyway
+                 */
+                return 0;
+        }
 
         spin_lock_irqsave(&priv->sta_lock, flags);
 
         if (is_ap)
                 sta_id = IWL_AP_ID;
-        else if (is_broadcast_ether_addr(addr))
-                sta_id = priv->hw_params.bcast_sta_id;
         else
                 for (i = IWL_STA_ID; i < priv->hw_params.max_stations; i++)
                         if (priv->stations[i].used &&
                             !compare_ether_addr(priv->stations[i].sta.sta.addr,
-                                                addr)) {
+                                                sta->addr)) {
                                 sta_id = i;
                                 break;
                         }
@@ -464,17 +598,17 @@ int iwl_remove_station(struct iwl_priv *priv, const u8 *addr, bool is_ap)
                 goto out;
 
         IWL_DEBUG_ASSOC(priv, "Removing STA from driver:%d  %pM\n",
-                sta_id, addr);
+                sta_id, sta->addr);
 
         if (!(priv->stations[sta_id].used & IWL_STA_DRIVER_ACTIVE)) {
-                IWL_ERR(priv, "Removing %pM but non DRIVER active\n",
-                                addr);
+                IWL_DEBUG_INFO(priv, "Removing %pM but non DRIVER active\n",
+                                sta->addr);
                 goto out;
         }
 
         if (!(priv->stations[sta_id].used & IWL_STA_UCODE_ACTIVE)) {
-                IWL_ERR(priv, "Removing %pM but non UCODE active\n",
-                                addr);
+                IWL_DEBUG_INFO(priv, "Removing %pM but non UCODE active\n",
+                                sta->addr);
                 goto out;
         }
 
@@ -485,9 +619,10 @@ int iwl_remove_station(struct iwl_priv *priv, const u8 *addr, bool is_ap)
 
         BUG_ON(priv->num_stations < 0);
 
+        station = &priv->stations[sta_id];
         spin_unlock_irqrestore(&priv->sta_lock, flags);
 
-        ret = iwl_send_remove_station(priv, addr, CMD_ASYNC);
+        ret = iwl_send_remove_station(priv, station);
         return ret;
 out:
         spin_unlock_irqrestore(&priv->sta_lock, flags);
@@ -495,37 +630,122 @@ out:
 }
 
 /**
- * iwl_clear_stations_table - Clear the driver's station table
- *
- * NOTE:  This does not clear or otherwise alter the device's station table.
+ * iwl_clear_ucode_stations() - clear entire station table driver and/or ucode
+ * @priv:
+ * @force: If set then the uCode station table needs to be cleared here. If
+ *         not set then the uCode station table has already been cleared,
+ *         for example after sending it a RXON command without ASSOC bit
+ *         set, and we just need to change driver state here.
  */
-void iwl_clear_stations_table(struct iwl_priv *priv)
+void iwl_clear_ucode_stations(struct iwl_priv *priv, bool force)
 {
-        unsigned long flags;
         int i;
+        unsigned long flags_spin;
+        bool cleared = false;
+
+        IWL_DEBUG_INFO(priv, "Clearing ucode stations in driver%s\n",
+                        force ? " and ucode" : "");
+
+        if (force) {
+                if (!iwl_is_ready(priv)) {
+                        /*
+                         * If device is not ready at this point the station
+                         * table is likely already empty (uCode not ready
+                         * to receive station requests) or will soon be
+                         * due to interface going down.
+                         */
+                        IWL_DEBUG_INFO(priv, "Unable to remove stations from device - device not ready\n");
+                } else {
+                        iwl_send_cmd_pdu_async(priv, REPLY_REMOVE_ALL_STA, 0, NULL, NULL);
+                }
+        }
 
-        spin_lock_irqsave(&priv->sta_lock, flags);
+        spin_lock_irqsave(&priv->sta_lock, flags_spin);
+        if (force) {
+                IWL_DEBUG_INFO(priv, "Clearing all station information in driver\n");
+                priv->num_stations = 0;
+                memset(priv->stations, 0, sizeof(priv->stations));
+        } else {
+                for (i = 0; i < priv->hw_params.max_stations; i++) {
+                        if (priv->stations[i].used & IWL_STA_UCODE_ACTIVE) {
+                                IWL_DEBUG_INFO(priv, "Clearing ucode active for station %d \n", i);
+                                priv->stations[i].used &= ~IWL_STA_UCODE_ACTIVE;
+                                cleared = true;
+                        }
+                }
+        }
+        spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
 
-        if (iwl_is_alive(priv) &&
-           !test_bit(STATUS_EXIT_PENDING, &priv->status) &&
-           iwl_send_cmd_pdu_async(priv, REPLY_REMOVE_ALL_STA, 0, NULL, NULL))
-                IWL_ERR(priv, "Couldn't clear the station table\n");
+        if (!cleared)
+                IWL_DEBUG_INFO(priv, "No active stations found to be cleared\n");
+}
+EXPORT_SYMBOL(iwl_clear_ucode_stations);
+
+/**
+ * iwl_restore_stations() - Restore driver known stations to device
+ *
+ * All stations considered active by driver, but not present in ucode, is
+ * restored.
+ *
+ * Function sleeps.
+ */
+void iwl_restore_stations(struct iwl_priv *priv)
+{
+        struct iwl_station_entry *station;
+        unsigned long flags_spin;
+        int i;
+        bool found = false;
+        int ret;
 
-        priv->num_stations = 0;
-        memset(priv->stations, 0, sizeof(priv->stations));
+        if (!iwl_is_ready(priv)) {
+                IWL_DEBUG_INFO(priv, "Not ready yet, not restoring any stations.\n");
+                return;
+        }
 
-        /* clean ucode key table bit map */
-        priv->ucode_key_table = 0;
+        IWL_DEBUG_ASSOC(priv, "Restoring all known stations ... start.\n");
+        spin_lock_irqsave(&priv->sta_lock, flags_spin);
+        for (i = 0; i < priv->hw_params.max_stations; i++) {
+                if ((priv->stations[i].used & IWL_STA_DRIVER_ACTIVE) &&
+                            !(priv->stations[i].used & IWL_STA_UCODE_ACTIVE)) {
+                        IWL_DEBUG_ASSOC(priv, "Restoring sta %pM\n",
+                                        priv->stations[i].sta.sta.addr);
+                        priv->stations[i].sta.mode = 0;
+                        priv->stations[i].used |= IWL_STA_UCODE_INPROGRESS;
+                        found = true;
+                }
+        }
 
-        /* keep track of static keys */
-        for (i = 0; i < WEP_KEYS_MAX ; i++) {
-                if (priv->wep_keys[i].key_size)
-                        set_bit(i, &priv->ucode_key_table);
+        for (i = 0; i < priv->hw_params.max_stations; i++) {
+                if ((priv->stations[i].used & IWL_STA_UCODE_INPROGRESS)) {
+                        spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                        station = &priv->stations[i];
+                        ret = iwl_send_add_sta(priv, &priv->stations[i].sta, CMD_SYNC);
+                        if (ret) {
+                                IWL_ERR(priv, "Adding station %pM failed.\n",
+                                        station->sta.sta.addr);
+                                spin_lock_irqsave(&priv->sta_lock, flags_spin);
+                                priv->stations[i].used &= ~IWL_STA_DRIVER_ACTIVE;
+                                priv->stations[i].used &= ~IWL_STA_UCODE_INPROGRESS;
+                                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+                        }
+                        /*
+                         * Rate scaling has already been initialized, send
+                         * current LQ command
+                         */
+                        if (station->lq)
+                                iwl_send_lq_cmd(priv, station->lq, CMD_SYNC, true);
+                        spin_lock_irqsave(&priv->sta_lock, flags_spin);
+                        priv->stations[i].used &= ~IWL_STA_UCODE_INPROGRESS;
+                }
         }
 
-        spin_unlock_irqrestore(&priv->sta_lock, flags);
+        spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+        if (!found)
+                IWL_DEBUG_INFO(priv, "Restoring all known stations .... no stations to be restored.\n");
+        else
+                IWL_DEBUG_INFO(priv, "Restoring all known stations .... complete.\n");
 }
-EXPORT_SYMBOL(iwl_clear_stations_table);
+EXPORT_SYMBOL(iwl_restore_stations);
 
 int iwl_get_free_ucode_key_index(struct iwl_priv *priv)
 {
@@ -549,9 +769,11 @@ int iwl_send_static_wepkey_cmd(struct iwl_priv *priv, u8 send_if_empty)
         struct iwl_host_cmd cmd = {
                 .id = REPLY_WEPKEY,
                 .data = wep_cmd,
-                .flags = CMD_ASYNC,
+                .flags = CMD_SYNC,
         };
 
+        might_sleep();
+
         memset(wep_cmd, 0, cmd_size +
                         (sizeof(struct iwl_wep_key) * WEP_KEYS_MAX));
 
@@ -587,9 +809,9 @@ int iwl_remove_default_wep_key(struct iwl_priv *priv,
                                struct ieee80211_key_conf *keyconf)
 {
         int ret;
-        unsigned long flags;
 
-        spin_lock_irqsave(&priv->sta_lock, flags);
+        WARN_ON(!mutex_is_locked(&priv->mutex));
+
         IWL_DEBUG_WEP(priv, "Removing default WEP key: idx=%d\n",
                       keyconf->keyidx);
 
@@ -601,13 +823,12 @@ int iwl_remove_default_wep_key(struct iwl_priv *priv,
         memset(&priv->wep_keys[keyconf->keyidx], 0, sizeof(priv->wep_keys[0]));
         if (iwl_is_rfkill(priv)) {
                 IWL_DEBUG_WEP(priv, "Not sending REPLY_WEPKEY command due to RFKILL.\n");
-                spin_unlock_irqrestore(&priv->sta_lock, flags);
+                /* but keys in device are clear anyway so return success */
                 return 0;
         }
         ret = iwl_send_static_wepkey_cmd(priv, 1);
         IWL_DEBUG_WEP(priv, "Remove default WEP key: idx=%d ret=%d\n",
                       keyconf->keyidx, ret);
-        spin_unlock_irqrestore(&priv->sta_lock, flags);
 
         return ret;
 }
@@ -617,7 +838,8 @@ int iwl_set_default_wep_key(struct iwl_priv *priv,
                             struct ieee80211_key_conf *keyconf)
 {
         int ret;
-        unsigned long flags;
+
+        WARN_ON(!mutex_is_locked(&priv->mutex));
 
         if (keyconf->keylen != WEP_KEY_LEN_128 &&
             keyconf->keylen != WEP_KEY_LEN_64) {
@@ -629,12 +851,11 @@ int iwl_set_default_wep_key(struct iwl_priv *priv,
         keyconf->hw_key_idx = HW_KEY_DEFAULT;
         priv->stations[IWL_AP_ID].keyinfo.alg = ALG_WEP;
 
-        spin_lock_irqsave(&priv->sta_lock, flags);
         priv->default_wep_key++;
 
         if (test_and_set_bit(keyconf->keyidx, &priv->ucode_key_table))
                 IWL_ERR(priv, "index %d already used in uCode key table.\n",
-                        keyconf->keyidx);
+                          keyconf->keyidx);
 
         priv->wep_keys[keyconf->keyidx].key_size = keyconf->keylen;
         memcpy(&priv->wep_keys[keyconf->keyidx].key, &keyconf->key,
@@ -643,7 +864,6 @@ int iwl_set_default_wep_key(struct iwl_priv *priv,
         ret = iwl_send_static_wepkey_cmd(priv, 0);
         IWL_DEBUG_WEP(priv, "Set default WEP key: len=%d idx=%d ret=%d\n",
                 keyconf->keylen, keyconf->keyidx, ret);
-        spin_unlock_irqrestore(&priv->sta_lock, flags);
 
         return ret;
 }
@@ -948,9 +1168,22 @@ static inline void iwl_dump_lq_cmd(struct iwl_priv *priv,
 }
 #endif
 
+/**
+ * iwl_send_lq_cmd() - Send link quality command
+ * @init: This command is sent as part of station initialization right
+ *        after station has been added.
+ *
+ * The link quality command is sent as the last step of station creation.
+ * This is the special case in which init is set and we call a callback in
+ * this case to clear the state indicating that station creation is in
+ * progress.
+ */
 int iwl_send_lq_cmd(struct iwl_priv *priv,
-                    struct iwl_link_quality_cmd *lq, u8 flags)
+                    struct iwl_link_quality_cmd *lq, u8 flags, bool init)
 {
+        int ret = 0;
+        unsigned long flags_spin;
+
         struct iwl_host_cmd cmd = {
                 .id = REPLY_TX_LINK_QUALITY_CMD,
                 .len = sizeof(struct iwl_link_quality_cmd),
@@ -966,167 +1199,31 @@ int iwl_send_lq_cmd(struct iwl_priv *priv,
                 lq->sta_id = IWL_AP_ID;
 
         iwl_dump_lq_cmd(priv, lq);
+        BUG_ON(init && (cmd.flags & CMD_ASYNC));
 
-        if (iwl_is_associated(priv) && priv->assoc_station_added)
-                return  iwl_send_cmd(priv, &cmd);
+        iwl_dump_lq_cmd(priv, lq);
+        ret = iwl_send_cmd(priv, &cmd);
+        if (ret || (cmd.flags & CMD_ASYNC))
+                return ret;
 
+        if (init) {
+                IWL_DEBUG_INFO(priv, "init LQ command complete, clearing sta addition status for sta %d \n",
+                               lq->sta_id);
+                spin_lock_irqsave(&priv->sta_lock, flags_spin);
+                priv->stations[lq->sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+                spin_unlock_irqrestore(&priv->sta_lock, flags_spin);
+        }
         return 0;
 }
 EXPORT_SYMBOL(iwl_send_lq_cmd);
 
 /**
- * iwl_sta_init_lq - Initialize a station's hardware rate table
- *
- * The uCode's station table contains a table of fallback rates
- * for automatic fallback during transmission.
- *
- * NOTE: This sets up a default set of values.  These will be replaced later
- *       if the driver's iwl-agn-rs rate scaling algorithm is used, instead of
- *       rc80211_simple.
- *
- * NOTE: Run REPLY_ADD_STA command to set up station table entry, before
- *       calling this function (which runs REPLY_TX_LINK_QUALITY_CMD,
- *       which requires station table entry to exist).
- */
-static void iwl_sta_init_lq(struct iwl_priv *priv, const u8 *addr, bool is_ap)
-{
-        int i, r;
-        struct iwl_link_quality_cmd link_cmd = {
-                .reserved1 = 0,
-        };
-        u32 rate_flags;
-
-        /* Set up the rate scaling to start at selected rate, fall back
-         * all the way down to 1M in IEEE order, and then spin on 1M */
-        if (is_ap)
-                r = IWL_RATE_54M_INDEX;
-        else if (priv->band == IEEE80211_BAND_5GHZ)
-                r = IWL_RATE_6M_INDEX;
-        else
-                r = IWL_RATE_1M_INDEX;
-
-        for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) {
-                rate_flags = 0;
-                if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE)
-                        rate_flags |= RATE_MCS_CCK_MSK;
-
-                rate_flags |= first_antenna(priv->hw_params.valid_tx_ant) <<
-                                RATE_MCS_ANT_POS;
-
-                link_cmd.rs_table[i].rate_n_flags =
-                        iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags);
-                r = iwl_get_prev_ieee_rate(r);
-        }
-
-        link_cmd.general_params.single_stream_ant_msk =
-                                first_antenna(priv->hw_params.valid_tx_ant);
-        link_cmd.general_params.dual_stream_ant_msk = 3;
-        link_cmd.agg_params.agg_dis_start_th = LINK_QUAL_AGG_DISABLE_START_DEF;
-        link_cmd.agg_params.agg_time_limit =
-                cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF);
-
-        /* Update the rate scaling for control frame Tx to AP */
-        link_cmd.sta_id = is_ap ? IWL_AP_ID : priv->hw_params.bcast_sta_id;
-
-        iwl_send_cmd_pdu_async(priv, REPLY_TX_LINK_QUALITY_CMD,
-                               sizeof(link_cmd), &link_cmd, NULL);
-}
-
-/**
- * iwl_rxon_add_station - add station into station table.
- *
- * there is only one AP station with id= IWL_AP_ID
- * NOTE: mutex must be held before calling this function
- */
-int iwl_rxon_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap)
-{
-        struct ieee80211_sta *sta;
-        struct ieee80211_sta_ht_cap ht_config;
-        struct ieee80211_sta_ht_cap *cur_ht_config = NULL;
-        u8 sta_id;
-
-        /*
-         * Set HT capabilities. It is ok to set this struct even if not using
-         * HT config: the priv->current_ht_config.is_ht flag will just be false
-         */
-        rcu_read_lock();
-        sta = ieee80211_find_sta(priv->vif, addr);
-        if (sta) {
-                memcpy(&ht_config, &sta->ht_cap, sizeof(ht_config));
-                cur_ht_config = &ht_config;
-        }
-        rcu_read_unlock();
-
-        /* Add station to device's station table */
-        sta_id = iwl_add_station(priv, addr, is_ap, CMD_SYNC, cur_ht_config);
-
-        /* Set up default rate scaling table in device's station table */
-        iwl_sta_init_lq(priv, addr, is_ap);
-
-        return sta_id;
-}
-EXPORT_SYMBOL(iwl_rxon_add_station);
-
-/**
- * iwl_sta_init_bcast_lq - Initialize a bcast station's hardware rate table
- *
- * NOTE: Run REPLY_ADD_STA command to set up station table entry, before
- *       calling this function (which runs REPLY_TX_LINK_QUALITY_CMD,
- *       which requires station table entry to exist).
- */
-static void iwl_sta_init_bcast_lq(struct iwl_priv *priv)
-{
-        int i, r;
-        struct iwl_link_quality_cmd link_cmd = {
-                .reserved1 = 0,
-        };
-        u32 rate_flags;
-
-        /* Set up the rate scaling to start at selected rate, fall back
-         * all the way down to 1M in IEEE order, and then spin on 1M */
-        if (priv->band == IEEE80211_BAND_5GHZ)
-                r = IWL_RATE_6M_INDEX;
-        else
-                r = IWL_RATE_1M_INDEX;
-
-        for (i = 0; i < LINK_QUAL_MAX_RETRY_NUM; i++) {
-                rate_flags = 0;
-                if (r >= IWL_FIRST_CCK_RATE && r <= IWL_LAST_CCK_RATE)
-                        rate_flags |= RATE_MCS_CCK_MSK;
-
-                rate_flags |= first_antenna(priv->hw_params.valid_tx_ant) <<
-                                RATE_MCS_ANT_POS;
-
-                link_cmd.rs_table[i].rate_n_flags =
-                        iwl_hw_set_rate_n_flags(iwl_rates[r].plcp, rate_flags);
-                r = iwl_get_prev_ieee_rate(r);
-        }
-
-        link_cmd.general_params.single_stream_ant_msk =
-                                first_antenna(priv->hw_params.valid_tx_ant);
-        link_cmd.general_params.dual_stream_ant_msk = 3;
-        link_cmd.agg_params.agg_dis_start_th = LINK_QUAL_AGG_DISABLE_START_DEF;
-        link_cmd.agg_params.agg_time_limit =
-                cpu_to_le16(LINK_QUAL_AGG_TIME_LIMIT_DEF);
-
-        /* Update the rate scaling for control frame Tx to AP */
-        link_cmd.sta_id = priv->hw_params.bcast_sta_id;
-
-        iwl_send_cmd_pdu_async(priv, REPLY_TX_LINK_QUALITY_CMD,
-                               sizeof(link_cmd), &link_cmd, NULL);
-}
-
-
-/**
  * iwl_add_bcast_station - add broadcast station into station table.
  */
 void iwl_add_bcast_station(struct iwl_priv *priv)
 {
         IWL_DEBUG_INFO(priv, "Adding broadcast station to station table\n");
-        iwl_add_station(priv, iwl_bcast_addr, false, CMD_SYNC, NULL);
-
-        /* Set up default rate scaling table in device's station table */
-        iwl_sta_init_bcast_lq(priv);
+        iwl_add_local_station(priv, iwl_bcast_addr, true);
 }
 EXPORT_SYMBOL(iwl_add_bcast_station);
 
@@ -1136,7 +1233,14 @@ EXPORT_SYMBOL(iwl_add_bcast_station);
 void iwl3945_add_bcast_station(struct iwl_priv *priv)
 {
         IWL_DEBUG_INFO(priv, "Adding broadcast station to station table\n");
-        iwl_add_station(priv, iwl_bcast_addr, false, CMD_SYNC, NULL);
+        iwl_add_local_station(priv, iwl_bcast_addr, false);
+        /*
+         * It is assumed that when station is added more initialization
+         * needs to be done, but for 3945 it is not the case and we can
+         * just release station table access right here.
+         */
+        priv->stations[priv->hw_params.bcast_sta_id].used &= ~IWL_STA_UCODE_INPROGRESS;
+
 }
 EXPORT_SYMBOL(iwl3945_add_bcast_station);
 
@@ -1159,6 +1263,13 @@ int iwl_get_sta_id(struct iwl_priv *priv, struct ieee80211_hdr *hdr)
         /* If we are a client station in a BSS network, use the special
          * AP station entry (that's the only station we communicate with) */
         case NL80211_IFTYPE_STATION:
+                /*
+                 * If addition of station not complete yet, which means
+                 * that rate scaling has not been initialized, then return
+                 * the broadcast station.
+                 */
+                if (!(priv->stations[IWL_AP_ID].used & IWL_STA_UCODE_ACTIVE))
+                        return priv->hw_params.bcast_sta_id;
                 return IWL_AP_ID;
 
         /* If we are an AP, then find the station, or use BCAST */
@@ -1175,13 +1286,6 @@ int iwl_get_sta_id(struct iwl_priv *priv, struct ieee80211_hdr *hdr)
                 if (sta_id != IWL_INVALID_STATION)
                         return sta_id;
 
-                /* Create new station table entry */
-                sta_id = iwl_add_station(priv, hdr->addr1, false,
-                                        CMD_ASYNC, NULL);
-
-                if (sta_id != IWL_INVALID_STATION)
-                        return sta_id;
-
                 IWL_DEBUG_DROP(priv, "Station %pM not in station map. "
                                "Defaulting to broadcast...\n",
                                hdr->addr1);
@@ -1291,3 +1395,19 @@ void iwl_sta_modify_sleep_tx_count(struct iwl_priv *priv, int sta_id, int cnt)
 
         iwl_send_add_sta(priv, &priv->stations[sta_id].sta, CMD_ASYNC);
 }
+
+int iwl_mac_sta_remove(struct ieee80211_hw *hw,
+                               struct ieee80211_vif *vif,
+                               struct ieee80211_sta *sta)
+{
+        int ret;
+        struct iwl_priv *priv = hw->priv;
+        IWL_DEBUG_INFO(priv, "received request to remove station %pM\n",
+                        sta->addr);
+        ret = iwl_remove_station(priv, sta);
+        if (ret)
+                IWL_ERR(priv, "Error removing station %pM\n",
+                        sta->addr);
+        return ret;
+}
+EXPORT_SYMBOL(iwl_mac_sta_remove);
diff --git a/drivers/net/wireless/iwlwifi/iwl-sta.h b/drivers/net/wireless/iwlwifi/iwl-sta.h
index 2dc35fe28f56..87a34997a758 100644
--- a/drivers/net/wireless/iwlwifi/iwl-sta.h
+++ b/drivers/net/wireless/iwlwifi/iwl-sta.h
@@ -32,6 +32,12 @@
 #define HW_KEY_DYNAMIC 0
 #define HW_KEY_DEFAULT 1
 
+#define IWL_STA_DRIVER_ACTIVE BIT(0) /* driver entry is active */
+#define IWL_STA_UCODE_ACTIVE  BIT(1) /* ucode entry is active */
+#define IWL_STA_UCODE_INPROGRESS  BIT(2) /* ucode entry is in process of
+                                            being activated */
+
+
 /**
  * iwl_find_station - Find station id for a given BSSID
  * @bssid: MAC address of station ID to find
@@ -51,18 +57,22 @@ void iwl_update_tkip_key(struct iwl_priv *priv,
                         struct ieee80211_key_conf *keyconf,
                         const u8 *addr, u32 iv32, u16 *phase1key);
 
-int iwl_rxon_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap);
 void iwl_add_bcast_station(struct iwl_priv *priv);
 void iwl3945_add_bcast_station(struct iwl_priv *priv);
-int iwl_remove_station(struct iwl_priv *priv, const u8 *addr, bool is_ap);
-void iwl_clear_stations_table(struct iwl_priv *priv);
+void iwl_restore_stations(struct iwl_priv *priv);
+void iwl_clear_ucode_stations(struct iwl_priv *priv, bool force);
 int iwl_get_free_ucode_key_index(struct iwl_priv *priv);
 int iwl_get_sta_id(struct iwl_priv *priv, struct ieee80211_hdr *hdr);
 int iwl_get_ra_sta_id(struct iwl_priv *priv, struct ieee80211_hdr *hdr);
 int iwl_send_add_sta(struct iwl_priv *priv,
                      struct iwl_addsta_cmd *sta, u8 flags);
-u8 iwl_add_station(struct iwl_priv *priv, const u8 *addr, bool is_ap, u8 flags,
-                        struct ieee80211_sta_ht_cap *ht_info);
+int iwl_add_local_station(struct iwl_priv *priv, const u8 *addr, bool init_rs);
+int iwl_add_station_common(struct iwl_priv *priv, const u8 *addr,
+                                  bool is_ap,
+                                  struct ieee80211_sta_ht_cap *ht_info,
+                                  u8 *sta_id_r);
+int iwl_mac_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
+                       struct ieee80211_sta *sta);
 void iwl_sta_tx_modify_enable_tid(struct iwl_priv *priv, int sta_id, int tid);
 int iwl_sta_rx_agg_start(struct iwl_priv *priv,
                          const u8 *addr, int tid, u16 ssn);
diff --git a/drivers/net/wireless/iwlwifi/iwl-tx.c b/drivers/net/wireless/iwlwifi/iwl-tx.c
index 8c12311dbb0a..1e481f3fcabf 100644
--- a/drivers/net/wireless/iwlwifi/iwl-tx.c
+++ b/drivers/net/wireless/iwlwifi/iwl-tx.c
@@ -37,26 +37,63 @@
 #include "iwl-io.h"
 #include "iwl-helpers.h"
 
-static const u16 default_tid_to_tx_fifo[] = {
-        IWL_TX_FIFO_AC1,
-        IWL_TX_FIFO_AC0,
-        IWL_TX_FIFO_AC0,
-        IWL_TX_FIFO_AC1,
-        IWL_TX_FIFO_AC2,
-        IWL_TX_FIFO_AC2,
-        IWL_TX_FIFO_AC3,
-        IWL_TX_FIFO_AC3,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_NONE,
-        IWL_TX_FIFO_AC3
+/*
+ * mac80211 queues, ACs, hardware queues, FIFOs.
+ *
+ * Cf. http://wireless.kernel.org/en/developers/Documentation/mac80211/queues
+ *
+ * Mac80211 uses the following numbers, which we get as from it
+ * by way of skb_get_queue_mapping(skb):
+ *
+ *      VO      0
+ *      VI      1
+ *      BE      2
+ *      BK      3
+ *
+ *
+ * Regular (not A-MPDU) frames are put into hardware queues corresponding
+ * to the FIFOs, see comments in iwl-prph.h. Aggregated frames get their
+ * own queue per aggregation session (RA/TID combination), such queues are
+ * set up to map into FIFOs too, for which we need an AC->FIFO mapping. In
+ * order to map frames to the right queue, we also need an AC->hw queue
+ * mapping. This is implemented here.
+ *
+ * Due to the way hw queues are set up (by the hw specific modules like
+ * iwl-4965.c, iwl-5000.c etc.), the AC->hw queue mapping is the identity
+ * mapping.
+ */
+
+static const u8 tid_to_ac[] = {
+        /* this matches the mac80211 numbers */
+        2, 3, 3, 2, 1, 1, 0, 0
+};
+
+static const u8 ac_to_fifo[] = {
+        IWL_TX_FIFO_VO,
+        IWL_TX_FIFO_VI,
+        IWL_TX_FIFO_BE,
+        IWL_TX_FIFO_BK,
 };
 
+static inline int get_fifo_from_ac(u8 ac)
+{
+        return ac_to_fifo[ac];
+}
+
+static inline int get_queue_from_ac(u16 ac)
+{
+        return ac;
+}
+
+static inline int get_fifo_from_tid(u16 tid)
+{
+        if (likely(tid < ARRAY_SIZE(tid_to_ac)))
+                return get_fifo_from_ac(tid_to_ac[tid]);
+
+        /* no support for TIDs 8-15 yet */
+        return -EINVAL;
+}
+
 static inline int iwl_alloc_dma_ptr(struct iwl_priv *priv,
                                     struct iwl_dma_ptr *ptr, size_t size)
 {
@@ -285,6 +322,8 @@ static int iwl_queue_init(struct iwl_priv *priv, struct iwl_queue *q,
                 q->high_mark = 2;
 
         q->write_ptr = q->read_ptr = 0;
+        q->last_read_ptr = 0;
+        q->repeat_same_read_ptr = 0;
 
         return 0;
 }
@@ -591,13 +630,12 @@ static void iwl_tx_cmd_build_basic(struct iwl_priv *priv,
         tx_cmd->next_frame_len = 0;
 }
 
-#define RTS_HCCA_RETRY_LIMIT            3
 #define RTS_DFAULT_RETRY_LIMIT          60
 
 static void iwl_tx_cmd_build_rate(struct iwl_priv *priv,
                               struct iwl_tx_cmd *tx_cmd,
                               struct ieee80211_tx_info *info,
-                              __le16 fc, int is_hcca)
+                              __le16 fc)
 {
         u32 rate_flags;
         int rate_idx;
@@ -613,8 +651,7 @@ static void iwl_tx_cmd_build_rate(struct iwl_priv *priv,
         tx_cmd->data_retry_limit = data_retry_limit;
 
         /* Set retry limit on RTS packets */
-        rts_retry_limit = (is_hcca) ?  RTS_HCCA_RETRY_LIMIT :
-                RTS_DFAULT_RETRY_LIMIT;
+        rts_retry_limit = RTS_DFAULT_RETRY_LIMIT;
         if (data_retry_limit < rts_retry_limit)
                 rts_retry_limit = data_retry_limit;
         tx_cmd->rts_retry_limit = rts_retry_limit;
@@ -761,16 +798,6 @@ int iwl_tx_skb(struct iwl_priv *priv, struct sk_buff *skb)
                 IWL_DEBUG_TX(priv, "Sending REASSOC frame\n");
 #endif
 
-        /* drop all non-injected data frame if we are not associated */
-        if (ieee80211_is_data(fc) &&
-            !(info->flags & IEEE80211_TX_CTL_INJECTED) &&
-            (!iwl_is_associated(priv) ||
-             ((priv->iw_mode == NL80211_IFTYPE_STATION) && !priv->assoc_id) ||
-             !priv->assoc_station_added)) {
-                IWL_DEBUG_DROP(priv, "Dropping - !iwl_is_associated\n");
-                goto drop_unlock;
-        }
-
         hdr_len = ieee80211_hdrlen(fc);
 
         /* Find (or create) index into station table for destination station */
@@ -804,7 +831,7 @@ int iwl_tx_skb(struct iwl_priv *priv, struct sk_buff *skb)
                 iwl_sta_modify_sleep_tx_count(priv, sta_id, 1);
         }
 
-        txq_id = skb_get_queue_mapping(skb);
+        txq_id = get_queue_from_ac(skb_get_queue_mapping(skb));
         if (ieee80211_is_data_qos(fc)) {
                 qc = ieee80211_get_qos_ctl(hdr);
                 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
@@ -869,8 +896,7 @@ int iwl_tx_skb(struct iwl_priv *priv, struct sk_buff *skb)
         iwl_tx_cmd_build_basic(priv, tx_cmd, info, hdr, sta_id);
         iwl_dbg_log_tx_data_frame(priv, len, hdr);
 
-        /* set is_hcca to 0; it probably will never be implemented */
-        iwl_tx_cmd_build_rate(priv, tx_cmd, info, fc, 0);
+        iwl_tx_cmd_build_rate(priv, tx_cmd, info, fc);
 
         iwl_update_stats(priv, true, fc, len);
         /*
@@ -1270,7 +1296,7 @@ EXPORT_SYMBOL(iwl_tx_cmd_complete);
  * Find first available (lowest unused) Tx Queue, mark it "active".
  * Called only when finding queue for aggregation.
  * Should never return anything < 7, because they should already
- * be in use as EDCA AC (0-3), Command (4), HCCA (5, 6).
+ * be in use as EDCA AC (0-3), Command (4), reserved (5, 6)
  */
 static int iwl_txq_ctx_activate_free(struct iwl_priv *priv)
 {
@@ -1291,10 +1317,9 @@ int iwl_tx_agg_start(struct iwl_priv *priv, const u8 *ra, u16 tid, u16 *ssn)
         unsigned long flags;
         struct iwl_tid_data *tid_data;
 
-        if (likely(tid < ARRAY_SIZE(default_tid_to_tx_fifo)))
-                tx_fifo = default_tid_to_tx_fifo[tid];
-        else
-                return -EINVAL;
+        tx_fifo = get_fifo_from_tid(tid);
+        if (unlikely(tx_fifo < 0))
+                return tx_fifo;
 
         IWL_WARN(priv, "%s on ra = %pM tid = %d\n",
                         __func__, ra, tid);
@@ -1355,13 +1380,9 @@ int iwl_tx_agg_stop(struct iwl_priv *priv , const u8 *ra, u16 tid)
                 return -EINVAL;
         }
 
-        if (unlikely(tid >= MAX_TID_COUNT))
-                return -EINVAL;
-
-        if (likely(tid < ARRAY_SIZE(default_tid_to_tx_fifo)))
-                tx_fifo_id = default_tid_to_tx_fifo[tid];
-        else
-                return -EINVAL;
+        tx_fifo_id = get_fifo_from_tid(tid);
+        if (unlikely(tx_fifo_id < 0))
+                return tx_fifo_id;
 
         sta_id = iwl_find_station(priv, ra);
 
@@ -1429,7 +1450,7 @@ int iwl_txq_check_empty(struct iwl_priv *priv, int sta_id, u8 tid, int txq_id)
                 if ((txq_id  == tid_data->agg.txq_id) &&
                     (q->read_ptr == q->write_ptr)) {
                         u16 ssn = SEQ_TO_SN(tid_data->seq_number);
-                        int tx_fifo = default_tid_to_tx_fifo[tid];
+                        int tx_fifo = get_fifo_from_tid(tid);
                         IWL_DEBUG_HT(priv, "HW queue empty: continue DELBA flow\n");
                         priv->cfg->ops->lib->txq_agg_disable(priv, txq_id,
                                                              ssn, tx_fifo);
diff --git a/drivers/net/wireless/iwlwifi/iwl3945-base.c b/drivers/net/wireless/iwlwifi/iwl3945-base.c
index e276f2a4e835..64f150b19771 100644
--- a/drivers/net/wireless/iwlwifi/iwl3945-base.c
+++ b/drivers/net/wireless/iwlwifi/iwl3945-base.c
@@ -351,11 +351,11 @@ static int iwl3945_send_beacon_cmd(struct iwl_priv *priv)
 
 static void iwl3945_unset_hw_params(struct iwl_priv *priv)
 {
-        if (priv->shared_virt)
+        if (priv->_3945.shared_virt)
                 dma_free_coherent(&priv->pci_dev->dev,
                                   sizeof(struct iwl3945_shared),
-                                  priv->shared_virt,
-                                  priv->shared_phys);
+                                  priv->_3945.shared_virt,
+                                  priv->_3945.shared_phys);
 }
 
 static void iwl3945_build_tx_cmd_hwcrypto(struct iwl_priv *priv,
@@ -504,15 +504,6 @@ static int iwl3945_tx_skb(struct iwl_priv *priv, struct sk_buff *skb)
                 IWL_DEBUG_TX(priv, "Sending REASSOC frame\n");
 #endif
 
-        /* drop all non-injected data frame if we are not associated */
-        if (ieee80211_is_data(fc) &&
-            !(info->flags & IEEE80211_TX_CTL_INJECTED) &&
-            (!iwl_is_associated(priv) ||
-             ((priv->iw_mode == NL80211_IFTYPE_STATION) && !priv->assoc_id))) {
-                IWL_DEBUG_DROP(priv, "Dropping - !iwl_is_associated\n");
-                goto drop_unlock;
-        }
-
         spin_unlock_irqrestore(&priv->lock, flags);
 
         hdr_len = ieee80211_hdrlen(fc);
@@ -753,7 +744,7 @@ static int iwl3945_get_measurement(struct iwl_priv *priv,
         if (iwl_is_associated(priv))
                 add_time =
                     iwl3945_usecs_to_beacons(
-                        le64_to_cpu(params->start_time) - priv->last_tsf,
+                        le64_to_cpu(params->start_time) - priv->_3945.last_tsf,
                         le16_to_cpu(priv->rxon_timing.beacon_interval));
 
         memset(&spectrum, 0, sizeof(spectrum));
@@ -767,7 +758,7 @@ static int iwl3945_get_measurement(struct iwl_priv *priv,
 
         if (iwl_is_associated(priv))
                 spectrum.start_time =
-                    iwl3945_add_beacon_time(priv->last_beacon_time,
+                    iwl3945_add_beacon_time(priv->_3945.last_beacon_time,
                                 add_time,
                                 le16_to_cpu(priv->rxon_timing.beacon_interval));
         else
@@ -2489,8 +2480,6 @@ static void iwl3945_alive_start(struct iwl_priv *priv)
                 goto restart;
         }
 
-        iwl_clear_stations_table(priv);
-
         rfkill = iwl_read_prph(priv, APMG_RFKILL_REG);
         IWL_DEBUG_INFO(priv, "RFKILL status: 0x%x\n", rfkill);
 
@@ -2512,13 +2501,19 @@ static void iwl3945_alive_start(struct iwl_priv *priv)
         /* After the ALIVE response, we can send commands to 3945 uCode */
         set_bit(STATUS_ALIVE, &priv->status);
 
+        if (priv->cfg->ops->lib->recover_from_tx_stall) {
+                /* Enable timer to monitor the driver queues */
+                mod_timer(&priv->monitor_recover,
+                        jiffies +
+                        msecs_to_jiffies(priv->cfg->monitor_recover_period));
+        }
+
         if (iwl_is_rfkill(priv))
                 return;
 
         ieee80211_wake_queues(priv->hw);
 
-        priv->active_rate = priv->rates_mask;
-        priv->active_rate_basic = priv->rates_mask & IWL_BASIC_RATES_MASK;
+        priv->active_rate = IWL_RATES_MASK;
 
         iwl_power_update_mode(priv, true);
 
@@ -2547,17 +2542,6 @@ static void iwl3945_alive_start(struct iwl_priv *priv)
         set_bit(STATUS_READY, &priv->status);
         wake_up_interruptible(&priv->wait_command_queue);
 
-        /* reassociate for ADHOC mode */
-        if (priv->vif && (priv->iw_mode == NL80211_IFTYPE_ADHOC)) {
-                struct sk_buff *beacon = ieee80211_beacon_get(priv->hw,
-                                                                priv->vif);
-                if (beacon)
-                        iwl_mac_beacon_update(priv->hw, beacon);
-        }
-
-        if (test_and_clear_bit(STATUS_MODE_PENDING, &priv->status))
-                iwl_set_mode(priv, priv->iw_mode);
-
         return;
 
  restart:
@@ -2579,7 +2563,8 @@ static void __iwl3945_down(struct iwl_priv *priv)
         if (!exit_pending)
                 set_bit(STATUS_EXIT_PENDING, &priv->status);
 
-        iwl_clear_stations_table(priv);
+        /* Station information will now be cleared in device */
+        iwl_clear_ucode_stations(priv, true);
 
         /* Unblock any waiting calls */
         wake_up_interruptible_all(&priv->wait_command_queue);
@@ -2713,12 +2698,10 @@ static int __iwl3945_up(struct iwl_priv *priv)
 
         for (i = 0; i < MAX_HW_RESTARTS; i++) {
 
-                iwl_clear_stations_table(priv);
-
                 /* load bootstrap state machine,
                  * load bootstrap program into processor's memory,
                  * prepare to load the "initialize" uCode */
-                priv->cfg->ops->lib->load_ucode(priv);
+                rc = priv->cfg->ops->lib->load_ucode(priv);
 
                 if (rc) {
                         IWL_ERR(priv,
@@ -2786,7 +2769,7 @@ static void iwl3945_bg_alive_start(struct work_struct *data)
 static void iwl3945_rfkill_poll(struct work_struct *data)
 {
         struct iwl_priv *priv =
-            container_of(data, struct iwl_priv, rfkill_poll.work);
+            container_of(data, struct iwl_priv, _3945.rfkill_poll.work);
         bool old_rfkill = test_bit(STATUS_RF_KILL_HW, &priv->status);
         bool new_rfkill = !(iwl_read32(priv, CSR_GP_CNTRL)
                         & CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW);
@@ -2805,7 +2788,7 @@ static void iwl3945_rfkill_poll(struct work_struct *data)
 
         /* Keep this running, even if radio now enabled.  This will be
          * cancelled in mac_start() if system decides to start again */
-        queue_delayed_work(priv->workqueue, &priv->rfkill_poll,
+        queue_delayed_work(priv->workqueue, &priv->_3945.rfkill_poll,
                            round_jiffies_relative(2 * HZ));
 
 }
@@ -2820,7 +2803,6 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
                 .len = sizeof(struct iwl3945_scan_cmd),
                 .flags = CMD_SIZE_HUGE,
         };
-        int rc = 0;
         struct iwl3945_scan_cmd *scan;
         struct ieee80211_conf *conf = NULL;
         u8 n_probes = 0;
@@ -2848,7 +2830,6 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
         if (test_bit(STATUS_SCAN_HW, &priv->status)) {
                 IWL_DEBUG_INFO(priv, "Multiple concurrent scan requests  "
                                 "Ignoring second request.\n");
-                rc = -EIO;
                 goto done;
         }
 
@@ -2883,7 +2864,7 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
                 priv->scan = kmalloc(sizeof(struct iwl3945_scan_cmd) +
                                      IWL_MAX_SCAN_SIZE, GFP_KERNEL);
                 if (!priv->scan) {
-                        rc = -ENOMEM;
+                        IWL_DEBUG_SCAN(priv, "Fail to allocate scan memory\n");
                         goto done;
                 }
         }
@@ -2926,7 +2907,9 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
                                scan_suspend_time, interval);
         }
 
-        if (priv->scan_request->n_ssids) {
+        if (priv->is_internal_short_scan) {
+                IWL_DEBUG_SCAN(priv, "Start internal passive scan.\n");
+        } else if (priv->scan_request->n_ssids) {
                 int i, p = 0;
                 IWL_DEBUG_SCAN(priv, "Kicking off active scan\n");
                 for (i = 0; i < priv->scan_request->n_ssids; i++) {
@@ -2973,13 +2956,20 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
                 goto done;
         }
 
-        scan->tx_cmd.len = cpu_to_le16(
+        if (!priv->is_internal_short_scan) {
+                scan->tx_cmd.len = cpu_to_le16(
                         iwl_fill_probe_req(priv,
                                 (struct ieee80211_mgmt *)scan->data,
                                 priv->scan_request->ie,
                                 priv->scan_request->ie_len,
                                 IWL_MAX_SCAN_SIZE - sizeof(*scan)));
-
+        } else {
+                scan->tx_cmd.len = cpu_to_le16(
+                        iwl_fill_probe_req(priv,
+                                (struct ieee80211_mgmt *)scan->data,
+                                NULL, 0,
+                                IWL_MAX_SCAN_SIZE - sizeof(*scan)));
+        }
         /* select Rx antennas */
         scan->flags |= iwl3945_get_antenna_flags(priv);
 
@@ -3001,8 +2991,7 @@ static void iwl3945_bg_request_scan(struct work_struct *data)
         scan->len = cpu_to_le16(cmd.len);
 
         set_bit(STATUS_SCAN_HW, &priv->status);
-        rc = iwl_send_cmd_sync(priv, &cmd);
-        if (rc)
+        if (iwl_send_cmd_sync(priv, &cmd))
                 goto done;
 
         queue_delayed_work(priv->workqueue, &priv->scan_check,
@@ -3134,12 +3123,13 @@ void iwl3945_post_associate(struct iwl_priv *priv)
         case NL80211_IFTYPE_ADHOC:
 
                 priv->assoc_id = 1;
-                iwl_add_station(priv, priv->bssid, 0, CMD_SYNC, NULL);
+                iwl_add_local_station(priv, priv->bssid, false);
                 iwl3945_sync_sta(priv, IWL_STA_ID,
-                                 (priv->band == IEEE80211_BAND_5GHZ) ?
-                                 IWL_RATE_6M_PLCP : IWL_RATE_1M_PLCP,
+                                (priv->band == IEEE80211_BAND_5GHZ) ?
+                                IWL_RATE_6M_PLCP : IWL_RATE_1M_PLCP,
                                  CMD_ASYNC);
                 iwl3945_rate_scale_init(priv->hw, IWL_STA_ID);
+
                 iwl3945_send_beacon_cmd(priv);
 
                 break;
@@ -3212,7 +3202,7 @@ static int iwl3945_mac_start(struct ieee80211_hw *hw)
 
         /* ucode is running and will send rfkill notifications,
          * no need to poll the killswitch state anymore */
-        cancel_delayed_work(&priv->rfkill_poll);
+        cancel_delayed_work(&priv->_3945.rfkill_poll);
 
         iwl_led_start(priv);
 
@@ -3253,7 +3243,7 @@ static void iwl3945_mac_stop(struct ieee80211_hw *hw)
         flush_workqueue(priv->workqueue);
 
         /* start polling the killswitch state again */
-        queue_delayed_work(priv->workqueue, &priv->rfkill_poll,
+        queue_delayed_work(priv->workqueue, &priv->_3945.rfkill_poll,
                            round_jiffies_relative(2 * HZ));
 
         IWL_DEBUG_MAC80211(priv, "leave\n");
@@ -3324,7 +3314,7 @@ void iwl3945_config_ap(struct iwl_priv *priv)
                 /* restore RXON assoc */
                 priv->staging_rxon.filter_flags |= RXON_FILTER_ASSOC_MSK;
                 iwlcore_commit_rxon(priv);
-                iwl_add_station(priv, iwl_bcast_addr, 0, CMD_SYNC, NULL);
+                iwl_add_local_station(priv, iwl_bcast_addr, false);
         }
         iwl3945_send_beacon_cmd(priv);
 
@@ -3365,7 +3355,6 @@ static int iwl3945_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
 
         mutex_lock(&priv->mutex);
         iwl_scan_cancel_timeout(priv, 100);
-        mutex_unlock(&priv->mutex);
 
         switch (cmd) {
         case SET_KEY:
@@ -3386,11 +3375,44 @@ static int iwl3945_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
                 ret = -EINVAL;
         }
 
+        mutex_unlock(&priv->mutex);
         IWL_DEBUG_MAC80211(priv, "leave\n");
 
         return ret;
 }
 
+static int iwl3945_mac_sta_add(struct ieee80211_hw *hw,
+                               struct ieee80211_vif *vif,
+                               struct ieee80211_sta *sta)
+{
+        struct iwl_priv *priv = hw->priv;
+        int ret;
+        bool is_ap = priv->iw_mode == NL80211_IFTYPE_STATION;
+        u8 sta_id;
+
+        IWL_DEBUG_INFO(priv, "received request to add station %pM\n",
+                        sta->addr);
+
+        ret = iwl_add_station_common(priv, sta->addr, is_ap, &sta->ht_cap,
+                                     &sta_id);
+        if (ret) {
+                IWL_ERR(priv, "Unable to add station %pM (%d)\n",
+                        sta->addr, ret);
+                /* Should we return success if return code is EEXIST ? */
+                return ret;
+        }
+
+        /* Initialize rate scaling */
+        IWL_DEBUG_INFO(priv, "Initializing rate scaling for station %pM \n",
+                       sta->addr);
+        iwl3945_rs_rate_init(priv, sta, sta_id);
+
+        return 0;
+
+
+
+        return ret;
+}
 /*****************************************************************************
  *
  * sysfs attributes
@@ -3590,7 +3612,7 @@ static ssize_t store_measurement(struct device *d,
         struct iwl_priv *priv = dev_get_drvdata(d);
         struct ieee80211_measurement_params params = {
                 .channel = le16_to_cpu(priv->active_rxon.channel),
-                .start_time = cpu_to_le64(priv->last_tsf),
+                .start_time = cpu_to_le64(priv->_3945.last_tsf),
                 .duration = cpu_to_le16(1),
         };
         u8 type = IWL_MEASURE_BASIC;
@@ -3660,7 +3682,7 @@ static ssize_t show_statistics(struct device *d,
         struct iwl_priv *priv = dev_get_drvdata(d);
         u32 size = sizeof(struct iwl3945_notif_statistics);
         u32 len = 0, ofs = 0;
-        u8 *data = (u8 *)&priv->statistics_39;
+        u8 *data = (u8 *)&priv->_3945.statistics;
         int rc = 0;
 
         if (!iwl_is_alive(priv))
@@ -3773,7 +3795,7 @@ static void iwl3945_setup_deferred_work(struct iwl_priv *priv)
         INIT_WORK(&priv->beacon_update, iwl3945_bg_beacon_update);
         INIT_DELAYED_WORK(&priv->init_alive_start, iwl3945_bg_init_alive_start);
         INIT_DELAYED_WORK(&priv->alive_start, iwl3945_bg_alive_start);
-        INIT_DELAYED_WORK(&priv->rfkill_poll, iwl3945_rfkill_poll);
+        INIT_DELAYED_WORK(&priv->_3945.rfkill_poll, iwl3945_rfkill_poll);
         INIT_WORK(&priv->scan_completed, iwl_bg_scan_completed);
         INIT_WORK(&priv->request_scan, iwl3945_bg_request_scan);
         INIT_WORK(&priv->abort_scan, iwl_bg_abort_scan);
@@ -3781,6 +3803,13 @@ static void iwl3945_setup_deferred_work(struct iwl_priv *priv)
 
         iwl3945_hw_setup_deferred_work(priv);
 
+        if (priv->cfg->ops->lib->recover_from_tx_stall) {
+                init_timer(&priv->monitor_recover);
+                priv->monitor_recover.data = (unsigned long)priv;
+                priv->monitor_recover.function =
+                        priv->cfg->ops->lib->recover_from_tx_stall;
+        }
+
         tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
                      iwl3945_irq_tasklet, (unsigned long)priv);
 }
@@ -3793,6 +3822,8 @@ static void iwl3945_cancel_deferred_work(struct iwl_priv *priv)
         cancel_delayed_work(&priv->scan_check);
         cancel_delayed_work(&priv->alive_start);
         cancel_work_sync(&priv->beacon_update);
+        if (priv->cfg->ops->lib->recover_from_tx_stall)
+                del_timer_sync(&priv->monitor_recover);
 }
 
 static struct attribute *iwl3945_sysfs_entries[] = {
@@ -3830,7 +3861,9 @@ static struct ieee80211_ops iwl3945_hw_ops = {
         .conf_tx = iwl_mac_conf_tx,
         .reset_tsf = iwl_mac_reset_tsf,
         .bss_info_changed = iwl_bss_info_changed,
-        .hw_scan = iwl_mac_hw_scan
+        .hw_scan = iwl_mac_hw_scan,
+        .sta_add = iwl3945_mac_sta_add,
+        .sta_remove = iwl_mac_sta_remove,
 };
 
 static int iwl3945_init_drv(struct iwl_priv *priv)
@@ -3849,9 +3882,6 @@ static int iwl3945_init_drv(struct iwl_priv *priv)
         mutex_init(&priv->mutex);
         mutex_init(&priv->sync_cmd_mutex);
 
-        /* Clear the driver's (not device's) station table */
-        iwl_clear_stations_table(priv);
-
         priv->ieee_channels = NULL;
         priv->ieee_rates = NULL;
         priv->band = IEEE80211_BAND_2GHZ;
@@ -3864,7 +3894,6 @@ static int iwl3945_init_drv(struct iwl_priv *priv)
         priv->qos_data.qos_active = 0;
         priv->qos_data.qos_cap.val = 0;
 
-        priv->rates_mask = IWL_RATES_MASK;
         priv->tx_power_user_lmt = IWL_DEFAULT_TX_POWER;
 
         if (eeprom->version < EEPROM_3945_EEPROM_VERSION) {
@@ -4129,7 +4158,7 @@ static int iwl3945_pci_probe(struct pci_dev *pdev, const struct pci_device_id *e
                 IWL_ERR(priv, "failed to create debugfs files. Ignoring error: %d\n", err);
 
         /* Start monitoring the killswitch */
-        queue_delayed_work(priv->workqueue, &priv->rfkill_poll,
+        queue_delayed_work(priv->workqueue, &priv->_3945.rfkill_poll,
                            2 * HZ);
 
         return 0;
@@ -4203,7 +4232,7 @@ static void __devexit iwl3945_pci_remove(struct pci_dev *pdev)
 
         sysfs_remove_group(&pdev->dev.kobj, &iwl3945_attribute_group);
 
-        cancel_delayed_work_sync(&priv->rfkill_poll);
+        cancel_delayed_work_sync(&priv->_3945.rfkill_poll);
 
         iwl3945_dealloc_ucode_pci(priv);
 
@@ -4212,7 +4241,6 @@ static void __devexit iwl3945_pci_remove(struct pci_dev *pdev)
         iwl3945_hw_txq_ctx_free(priv);
 
         iwl3945_unset_hw_params(priv);
-        iwl_clear_stations_table(priv);
 
         /*netif_stop_queue(dev); */
         flush_workqueue(priv->workqueue);
diff --git a/drivers/net/wireless/iwmc3200wifi/Kconfig b/drivers/net/wireless/iwmc3200wifi/Kconfig
index b9d34a766964..03f998d098c5 100644
--- a/drivers/net/wireless/iwmc3200wifi/Kconfig
+++ b/drivers/net/wireless/iwmc3200wifi/Kconfig
@@ -17,7 +17,7 @@ config IWM
 config IWM_DEBUG
         bool "Enable full debugging output in iwmc3200wifi"
         depends on IWM && DEBUG_FS
-        ---help---
+        help
           This option will enable debug tracing and setting for iwm
 
           You can set the debug level and module through debugfs. By
@@ -30,3 +30,10 @@ config IWM_DEBUG
           Or, if you want the full debug, for all modules:
           echo 0xff > /sys/kernel/debug/iwm/phyN/debug/level
           echo 0xff > /sys/kernel/debug/iwm/phyN/debug/modules
+
+config IWM_TRACING
+        bool "Enable event tracing for iwmc3200wifi"
+        depends on IWM && EVENT_TRACING
+        help
+          Say Y here to trace all the commands and responses between
+          the driver and firmware (including TX/RX frames) with ftrace.
diff --git a/drivers/net/wireless/iwmc3200wifi/Makefile b/drivers/net/wireless/iwmc3200wifi/Makefile
index d34291b652d3..aeed5cd80819 100644
--- a/drivers/net/wireless/iwmc3200wifi/Makefile
+++ b/drivers/net/wireless/iwmc3200wifi/Makefile
@@ -3,3 +3,6 @@ iwmc3200wifi-objs += main.o netdev.o rx.o tx.o sdio.o hal.o fw.o
 iwmc3200wifi-objs += commands.o cfg80211.o eeprom.o
 
 iwmc3200wifi-$(CONFIG_IWM_DEBUG) += debugfs.o
+iwmc3200wifi-$(CONFIG_IWM_TRACING) += trace.o
+
+CFLAGS_trace.o := -I$(src)
diff --git a/drivers/net/wireless/iwmc3200wifi/cfg80211.c b/drivers/net/wireless/iwmc3200wifi/cfg80211.c
index 7c4f44a9c3e6..fc239a32cb6b 100644
--- a/drivers/net/wireless/iwmc3200wifi/cfg80211.c
+++ b/drivers/net/wireless/iwmc3200wifi/cfg80211.c
@@ -263,7 +263,7 @@ static int iwm_cfg80211_get_station(struct wiphy *wiphy,
 int iwm_cfg80211_inform_bss(struct iwm_priv *iwm)
 {
         struct wiphy *wiphy = iwm_to_wiphy(iwm);
-        struct iwm_bss_info *bss, *next;
+        struct iwm_bss_info *bss;
         struct iwm_umac_notif_bss_info *umac_bss;
         struct ieee80211_mgmt *mgmt;
         struct ieee80211_channel *channel;
@@ -271,7 +271,7 @@ int iwm_cfg80211_inform_bss(struct iwm_priv *iwm)
         s32 signal;
         int freq;
 
-        list_for_each_entry_safe(bss, next, &iwm->bss_list, node) {
+        list_for_each_entry(bss, &iwm->bss_list, node) {
                 umac_bss = bss->bss;
                 mgmt = (struct ieee80211_mgmt *)(umac_bss->frame_buf);
 
@@ -725,23 +725,26 @@ static int iwm_cfg80211_set_power_mgmt(struct wiphy *wiphy,
                                        CFG_POWER_INDEX, iwm->conf.power_index);
 }
 
-int iwm_cfg80211_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
-                           struct cfg80211_pmksa *pmksa)
+static int iwm_cfg80211_set_pmksa(struct wiphy *wiphy,
+                                  struct net_device *netdev,
+                                  struct cfg80211_pmksa *pmksa)
 {
         struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
 
         return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_ADD);
 }
 
-int iwm_cfg80211_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
-                           struct cfg80211_pmksa *pmksa)
+static int iwm_cfg80211_del_pmksa(struct wiphy *wiphy,
+                                  struct net_device *netdev,
+                                  struct cfg80211_pmksa *pmksa)
 {
         struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
 
         return iwm_send_pmkid_update(iwm, pmksa, IWM_CMD_PMKID_DEL);
 }
 
-int iwm_cfg80211_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
+static int iwm_cfg80211_flush_pmksa(struct wiphy *wiphy,
+                                    struct net_device *netdev)
 {
         struct iwm_priv *iwm = wiphy_to_iwm(wiphy);
         struct cfg80211_pmksa pmksa;
diff --git a/drivers/net/wireless/iwmc3200wifi/commands.c b/drivers/net/wireless/iwmc3200wifi/commands.c
index 1e41ad0fcad5..b5cbd2bfd52a 100644
--- a/drivers/net/wireless/iwmc3200wifi/commands.c
+++ b/drivers/net/wireless/iwmc3200wifi/commands.c
@@ -506,7 +506,7 @@ static int iwm_target_read(struct iwm_priv *iwm, __le32 address,
                 return ret;
         }
 
-        /* When succeding, the send_target routine returns the seq number */
+        /* When succeeding, the send_target routine returns the seq number */
         seq_num = ret;
 
         ret = wait_event_interruptible_timeout(iwm->nonwifi_queue,
@@ -781,10 +781,9 @@ int iwm_send_mlme_profile(struct iwm_priv *iwm)
         return 0;
 }
 
-int iwm_invalidate_mlme_profile(struct iwm_priv *iwm)
+int __iwm_invalidate_mlme_profile(struct iwm_priv *iwm)
 {
         struct iwm_umac_invalidate_profile invalid;
-        int ret;
 
         invalid.hdr.oid = UMAC_WIFI_IF_CMD_INVALIDATE_PROFILE;
         invalid.hdr.buf_size =
@@ -793,7 +792,14 @@ int iwm_invalidate_mlme_profile(struct iwm_priv *iwm)
 
         invalid.reason = WLAN_REASON_UNSPECIFIED;
 
-        ret = iwm_send_wifi_if_cmd(iwm, &invalid, sizeof(invalid), 1);
+        return iwm_send_wifi_if_cmd(iwm, &invalid, sizeof(invalid), 1);
+}
+
+int iwm_invalidate_mlme_profile(struct iwm_priv *iwm)
+{
+        int ret;
+
+        ret = __iwm_invalidate_mlme_profile(iwm);
         if (ret)
                 return ret;
 
diff --git a/drivers/net/wireless/iwmc3200wifi/commands.h b/drivers/net/wireless/iwmc3200wifi/commands.h
index 3dfd9f0e9003..7e16bcf59978 100644
--- a/drivers/net/wireless/iwmc3200wifi/commands.h
+++ b/drivers/net/wireless/iwmc3200wifi/commands.h
@@ -488,6 +488,7 @@ int iwm_umac_set_config_var(struct iwm_priv *iwm, u16 key,
                             void *payload, u16 payload_size);
 int iwm_send_umac_config(struct iwm_priv *iwm, __le32 reset_flags);
 int iwm_send_mlme_profile(struct iwm_priv *iwm);
+int __iwm_invalidate_mlme_profile(struct iwm_priv *iwm);
 int iwm_invalidate_mlme_profile(struct iwm_priv *iwm);
 int iwm_send_packet(struct iwm_priv *iwm, struct sk_buff *skb, int pool_id);
 int iwm_set_tx_key(struct iwm_priv *iwm, u8 key_idx);
diff --git a/drivers/net/wireless/iwmc3200wifi/debugfs.c b/drivers/net/wireless/iwmc3200wifi/debugfs.c
index c29c994de0e2..5b75a0ddac1c 100644
--- a/drivers/net/wireless/iwmc3200wifi/debugfs.c
+++ b/drivers/net/wireless/iwmc3200wifi/debugfs.c
@@ -265,7 +265,7 @@ static ssize_t iwm_debugfs_rx_ticket_read(struct file *filp,
                                           size_t count, loff_t *ppos)
 {
         struct iwm_priv *iwm = filp->private_data;
-        struct iwm_rx_ticket_node *ticket, *next;
+        struct iwm_rx_ticket_node *ticket;
         char *buf;
         int buf_len = 4096, i;
         size_t len = 0;
@@ -280,7 +280,8 @@ static ssize_t iwm_debugfs_rx_ticket_read(struct file *filp,
         if (!buf)
                 return -ENOMEM;
 
-        list_for_each_entry_safe(ticket, next, &iwm->rx_tickets, node) {
+        spin_lock(&iwm->ticket_lock);
+        list_for_each_entry(ticket, &iwm->rx_tickets, node) {
                 len += snprintf(buf + len, buf_len - len, "Ticket #%d\n",
                                 ticket->ticket->id);
                 len += snprintf(buf + len, buf_len - len, "\taction: 0x%x\n",
@@ -288,14 +289,17 @@ static ssize_t iwm_debugfs_rx_ticket_read(struct file *filp,
                 len += snprintf(buf + len, buf_len - len, "\tflags:  0x%x\n",
                                 ticket->ticket->flags);
         }
+        spin_unlock(&iwm->ticket_lock);
 
         for (i = 0; i < IWM_RX_ID_HASH; i++) {
-                struct iwm_rx_packet *packet, *nxt;
+                struct iwm_rx_packet *packet;
                 struct list_head *pkt_list = &iwm->rx_packets[i];
+
                 if (!list_empty(pkt_list)) {
                         len += snprintf(buf + len, buf_len - len,
                                         "Packet hash #%d\n", i);
-                        list_for_each_entry_safe(packet, nxt, pkt_list, node) {
+                        spin_lock(&iwm->packet_lock[i]);
+                        list_for_each_entry(packet, pkt_list, node) {
                                 len += snprintf(buf + len, buf_len - len,
                                                 "\tPacket id:     %d\n",
                                                 packet->id);
@@ -303,6 +307,7 @@ static ssize_t iwm_debugfs_rx_ticket_read(struct file *filp,
                                                 "\tPacket length: %lu\n",
                                                 packet->pkt_size);
                         }
+                        spin_unlock(&iwm->packet_lock[i]);
                 }
         }
 
diff --git a/drivers/net/wireless/iwmc3200wifi/hal.c b/drivers/net/wireless/iwmc3200wifi/hal.c
index d13c8853ee82..373b5b5001d2 100644
--- a/drivers/net/wireless/iwmc3200wifi/hal.c
+++ b/drivers/net/wireless/iwmc3200wifi/hal.c
@@ -104,6 +104,7 @@
 #include "hal.h"
 #include "umac.h"
 #include "debug.h"
+#include "trace.h"
 
 static int iwm_nonwifi_cmd_init(struct iwm_priv *iwm,
                                 struct iwm_nonwifi_cmd *cmd,
@@ -206,9 +207,9 @@ void iwm_cmd_flush(struct iwm_priv *iwm)
 
 struct iwm_wifi_cmd *iwm_get_pending_wifi_cmd(struct iwm_priv *iwm, u16 seq_num)
 {
-        struct iwm_wifi_cmd *cmd, *next;
+        struct iwm_wifi_cmd *cmd;
 
-        list_for_each_entry_safe(cmd, next, &iwm->wifi_pending_cmd, pending)
+        list_for_each_entry(cmd, &iwm->wifi_pending_cmd, pending)
                 if (cmd->seq_num == seq_num) {
                         list_del(&cmd->pending);
                         return cmd;
@@ -217,12 +218,12 @@ struct iwm_wifi_cmd *iwm_get_pending_wifi_cmd(struct iwm_priv *iwm, u16 seq_num)
         return NULL;
 }
 
-struct iwm_nonwifi_cmd *
-iwm_get_pending_nonwifi_cmd(struct iwm_priv *iwm, u8 seq_num, u8 cmd_opcode)
+struct iwm_nonwifi_cmd *iwm_get_pending_nonwifi_cmd(struct iwm_priv *iwm,
+                                                    u8 seq_num, u8 cmd_opcode)
 {
-        struct iwm_nonwifi_cmd *cmd, *next;
+        struct iwm_nonwifi_cmd *cmd;
 
-        list_for_each_entry_safe(cmd, next, &iwm->nonwifi_pending_cmd, pending)
+        list_for_each_entry(cmd, &iwm->nonwifi_pending_cmd, pending)
                 if ((cmd->seq_num == seq_num) &&
                     (cmd->udma_cmd.opcode == cmd_opcode) &&
                     (cmd->resp_received)) {
@@ -276,6 +277,7 @@ static int iwm_send_udma_nonwifi_cmd(struct iwm_priv *iwm,
                     udma_cmd->handle_by_hw, cmd->seq_num, udma_cmd->addr,
                     udma_cmd->op1_sz, udma_cmd->op2);
 
+        trace_iwm_tx_nonwifi_cmd(iwm, udma_hdr);
         return iwm_bus_send_chunk(iwm, buf->start, buf->len);
 }
 
@@ -362,6 +364,7 @@ static int iwm_send_udma_wifi_cmd(struct iwm_priv *iwm,
                 return ret;
         }
 
+        trace_iwm_tx_wifi_cmd(iwm, umac_hdr);
         return iwm_bus_send_chunk(iwm, buf->start, buf->len);
 }
 
diff --git a/drivers/net/wireless/iwmc3200wifi/hal.h b/drivers/net/wireless/iwmc3200wifi/hal.h
index 0adfdc85765d..c20936d9b6b7 100644
--- a/drivers/net/wireless/iwmc3200wifi/hal.h
+++ b/drivers/net/wireless/iwmc3200wifi/hal.h
@@ -75,7 +75,8 @@ do {									  \
 
 
 /* UDMA IN OP CODE -- cmd bits [3:0] */
-#define UDMA_IN_OPCODE_MASK                     0xF
+#define UDMA_HDI_IN_NW_CMD_OPCODE_POS           0
+#define UDMA_HDI_IN_NW_CMD_OPCODE_SEED          0xF
 
 #define UDMA_IN_OPCODE_GENERAL_RESP             0x0
 #define UDMA_IN_OPCODE_READ_RESP                0x1
@@ -130,7 +131,7 @@ do {									  \
 #define IWM_MAX_WIFI_CMD_BUFF_SIZE      (IWM_SDIO_FW_MAX_CHUNK_SIZE - \
                                          IWM_MAX_WIFI_HEADERS_SIZE)
 
-#define IWM_HAL_CONCATENATE_BUF_SIZE    8192
+#define IWM_HAL_CONCATENATE_BUF_SIZE    (32 * 1024)
 
 struct iwm_wifi_cmd_buff {
         u16 len;
diff --git a/drivers/net/wireless/iwmc3200wifi/iwm.h b/drivers/net/wireless/iwmc3200wifi/iwm.h
index 79ffa3b98d73..13266c3842f8 100644
--- a/drivers/net/wireless/iwmc3200wifi/iwm.h
+++ b/drivers/net/wireless/iwmc3200wifi/iwm.h
@@ -48,6 +48,7 @@
 #include "umac.h"
 #include "lmac.h"
 #include "eeprom.h"
+#include "trace.h"
 
 #define IWM_COPYRIGHT "Copyright(c) 2009 Intel Corporation"
 #define IWM_AUTHOR "<ilw@linux.intel.com>"
@@ -268,7 +269,9 @@ struct iwm_priv {
 
         struct sk_buff_head rx_list;
         struct list_head rx_tickets;
+        spinlock_t ticket_lock;
         struct list_head rx_packets[IWM_RX_ID_HASH];
+        spinlock_t packet_lock[IWM_RX_ID_HASH];
         struct workqueue_struct *rx_wq;
         struct work_struct rx_worker;
 
diff --git a/drivers/net/wireless/iwmc3200wifi/main.c b/drivers/net/wireless/iwmc3200wifi/main.c
index 7f34d6dd3c41..3a3510a6223a 100644
--- a/drivers/net/wireless/iwmc3200wifi/main.c
+++ b/drivers/net/wireless/iwmc3200wifi/main.c
@@ -276,8 +276,11 @@ int iwm_priv_init(struct iwm_priv *iwm)
 
         skb_queue_head_init(&iwm->rx_list);
         INIT_LIST_HEAD(&iwm->rx_tickets);
-        for (i = 0; i < IWM_RX_ID_HASH; i++)
+        spin_lock_init(&iwm->ticket_lock);
+        for (i = 0; i < IWM_RX_ID_HASH; i++) {
                 INIT_LIST_HEAD(&iwm->rx_packets[i]);
+                spin_lock_init(&iwm->packet_lock[i]);
+        }
 
         INIT_WORK(&iwm->rx_worker, iwm_rx_worker);
 
@@ -423,9 +426,9 @@ int iwm_notif_send(struct iwm_priv *iwm, struct iwm_wifi_cmd *cmd,
 static struct iwm_notif *iwm_notif_find(struct iwm_priv *iwm, u32 cmd,
                                         u8 source)
 {
-        struct iwm_notif *notif, *next;
+        struct iwm_notif *notif;
 
-        list_for_each_entry_safe(notif, next, &iwm->pending_notif, pending) {
+        list_for_each_entry(notif, &iwm->pending_notif, pending) {
                 if ((notif->cmd_id == cmd) && (notif->src == source)) {
                         list_del(&notif->pending);
                         return notif;
diff --git a/drivers/net/wireless/iwmc3200wifi/rx.c b/drivers/net/wireless/iwmc3200wifi/rx.c
index 8456b4dbd146..ce36baf34039 100644
--- a/drivers/net/wireless/iwmc3200wifi/rx.c
+++ b/drivers/net/wireless/iwmc3200wifi/rx.c
@@ -342,15 +342,17 @@ static void iwm_rx_ticket_node_free(struct iwm_rx_ticket_node *ticket_node)
 static struct iwm_rx_packet *iwm_rx_packet_get(struct iwm_priv *iwm, u16 id)
 {
         u8 id_hash = IWM_RX_ID_GET_HASH(id);
-        struct list_head *packet_list;
-        struct iwm_rx_packet *packet, *next;
-
-        packet_list = &iwm->rx_packets[id_hash];
+        struct iwm_rx_packet *packet;
 
-        list_for_each_entry_safe(packet, next, packet_list, node)
-                if (packet->id == id)
+        spin_lock(&iwm->packet_lock[id_hash]);
+        list_for_each_entry(packet, &iwm->rx_packets[id_hash], node)
+                if (packet->id == id) {
+                        list_del(&packet->node);
+                        spin_unlock(&iwm->packet_lock[id_hash]);
                         return packet;
+                }
 
+        spin_unlock(&iwm->packet_lock[id_hash]);
         return NULL;
 }
 
@@ -388,18 +390,22 @@ void iwm_rx_free(struct iwm_priv *iwm)
         struct iwm_rx_packet *packet, *np;
         int i;
 
+        spin_lock(&iwm->ticket_lock);
         list_for_each_entry_safe(ticket, nt, &iwm->rx_tickets, node) {
                 list_del(&ticket->node);
                 iwm_rx_ticket_node_free(ticket);
         }
+        spin_unlock(&iwm->ticket_lock);
 
         for (i = 0; i < IWM_RX_ID_HASH; i++) {
+                spin_lock(&iwm->packet_lock[i]);
                 list_for_each_entry_safe(packet, np, &iwm->rx_packets[i],
                                          node) {
                         list_del(&packet->node);
                         kfree_skb(packet->skb);
                         kfree(packet);
                 }
+                spin_unlock(&iwm->packet_lock[i]);
         }
 }
 
@@ -427,7 +433,9 @@ static int iwm_ntf_rx_ticket(struct iwm_priv *iwm, u8 *buf,
                                    ticket->action ==  IWM_RX_TICKET_RELEASE ?
                                    "RELEASE" : "DROP",
                                    ticket->id);
+                        spin_lock(&iwm->ticket_lock);
                         list_add_tail(&ticket_node->node, &iwm->rx_tickets);
+                        spin_unlock(&iwm->ticket_lock);
 
                         /*
                          * We received an Rx ticket, most likely there's
@@ -460,6 +468,7 @@ static int iwm_ntf_rx_packet(struct iwm_priv *iwm, u8 *buf,
         struct iwm_rx_packet *packet;
         u16 id, buf_offset;
         u32 packet_size;
+        u8 id_hash;
 
         IWM_DBG_RX(iwm, DBG, "\n");
 
@@ -477,7 +486,10 @@ static int iwm_ntf_rx_packet(struct iwm_priv *iwm, u8 *buf,
         if (IS_ERR(packet))
                 return PTR_ERR(packet);
 
-        list_add_tail(&packet->node, &iwm->rx_packets[IWM_RX_ID_GET_HASH(id)]);
+        id_hash = IWM_RX_ID_GET_HASH(id);
+        spin_lock(&iwm->packet_lock[id_hash]);
+        list_add_tail(&packet->node, &iwm->rx_packets[id_hash]);
+        spin_unlock(&iwm->packet_lock[id_hash]);
 
         /* We might (unlikely) have received the packet _after_ the ticket */
         queue_work(iwm->rx_wq, &iwm->rx_worker);
@@ -518,6 +530,8 @@ static int iwm_mlme_assoc_complete(struct iwm_priv *iwm, u8 *buf,
                                    unsigned long buf_size,
                                    struct iwm_wifi_cmd *cmd)
 {
+        struct wiphy *wiphy = iwm_to_wiphy(iwm);
+        struct ieee80211_channel *chan;
         struct iwm_umac_notif_assoc_complete *complete =
                 (struct iwm_umac_notif_assoc_complete *)buf;
 
@@ -526,6 +540,18 @@ static int iwm_mlme_assoc_complete(struct iwm_priv *iwm, u8 *buf,
 
         switch (le32_to_cpu(complete->status)) {
         case UMAC_ASSOC_COMPLETE_SUCCESS:
+                chan = ieee80211_get_channel(wiphy,
+                        ieee80211_channel_to_frequency(complete->channel));
+                if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
+                        /* Associated to a unallowed channel, disassociate. */
+                        __iwm_invalidate_mlme_profile(iwm);
+                        IWM_WARN(iwm, "Couldn't associate with %pM due to "
+                                 "channel %d is disabled. Check your local "
+                                 "regulatory setting.\n",
+                                 complete->bssid, complete->channel);
+                        goto failure;
+                }
+
                 set_bit(IWM_STATUS_ASSOCIATED, &iwm->status);
                 memcpy(iwm->bssid, complete->bssid, ETH_ALEN);
                 iwm->channel = complete->channel;
@@ -562,6 +588,7 @@ static int iwm_mlme_assoc_complete(struct iwm_priv *iwm, u8 *buf,
                                         GFP_KERNEL);
                 break;
         case UMAC_ASSOC_COMPLETE_FAILURE:
+ failure:
                 clear_bit(IWM_STATUS_ASSOCIATED, &iwm->status);
                 memset(iwm->bssid, 0, ETH_ALEN);
                 iwm->channel = 0;
@@ -756,7 +783,7 @@ static int iwm_mlme_update_bss_table(struct iwm_priv *iwm, u8 *buf,
                         (struct iwm_umac_notif_bss_info *)buf;
         struct ieee80211_channel *channel;
         struct ieee80211_supported_band *band;
-        struct iwm_bss_info *bss, *next;
+        struct iwm_bss_info *bss;
         s32 signal;
         int freq;
         u16 frame_len = le16_to_cpu(umac_bss->frame_len);
@@ -775,7 +802,7 @@ static int iwm_mlme_update_bss_table(struct iwm_priv *iwm, u8 *buf,
         IWM_DBG_MLME(iwm, DBG, "\tRSSI: %d\n", umac_bss->rssi);
         IWM_DBG_MLME(iwm, DBG, "\tFrame Length: %d\n", frame_len);
 
-        list_for_each_entry_safe(bss, next, &iwm->bss_list, node)
+        list_for_each_entry(bss, &iwm->bss_list, node)
                 if (bss->bss->table_idx == umac_bss->table_idx)
                         break;
 
@@ -842,16 +869,15 @@ static int iwm_mlme_remove_bss(struct iwm_priv *iwm, u8 *buf,
         int i;
 
         for (i = 0; i < le32_to_cpu(bss_rm->count); i++) {
-                table_idx = (le16_to_cpu(bss_rm->entries[i])
-                             & IWM_BSS_REMOVE_INDEX_MSK);
+                table_idx = le16_to_cpu(bss_rm->entries[i]) &
+                            IWM_BSS_REMOVE_INDEX_MSK;
                 list_for_each_entry_safe(bss, next, &iwm->bss_list, node)
                         if (bss->bss->table_idx == cpu_to_le16(table_idx)) {
                                 struct ieee80211_mgmt *mgmt;
 
                                 mgmt = (struct ieee80211_mgmt *)
                                         (bss->bss->frame_buf);
-                                IWM_DBG_MLME(iwm, ERR,
-                                             "BSS removed: %pM\n",
+                                IWM_DBG_MLME(iwm, ERR, "BSS removed: %pM\n",
                                              mgmt->bssid);
                                 list_del(&bss->node);
                                 kfree(bss->bss);
@@ -1223,18 +1249,24 @@ static int iwm_rx_handle_wifi(struct iwm_priv *iwm, u8 *buf,
         u8 source, cmd_id;
         u16 seq_num;
         u32 count;
-        u8 resp;
 
         wifi_hdr = (struct iwm_umac_wifi_in_hdr *)buf;
         cmd_id = wifi_hdr->sw_hdr.cmd.cmd;
-
         source = GET_VAL32(wifi_hdr->hw_hdr.cmd, UMAC_HDI_IN_CMD_SOURCE);
         if (source >= IWM_SRC_NUM) {
                 IWM_CRIT(iwm, "invalid source %d\n", source);
                 return -EINVAL;
         }
 
-        count = (GET_VAL32(wifi_hdr->sw_hdr.meta_data, UMAC_FW_CMD_BYTE_COUNT));
+        if (cmd_id == REPLY_RX_MPDU_CMD)
+                trace_iwm_rx_packet(iwm, buf, buf_size);
+        else if ((cmd_id == UMAC_NOTIFY_OPCODE_RX_TICKET) &&
+                 (source == UMAC_HDI_IN_SOURCE_FW))
+                trace_iwm_rx_ticket(iwm, buf, buf_size);
+        else
+                trace_iwm_rx_wifi_cmd(iwm, wifi_hdr);
+
+        count = GET_VAL32(wifi_hdr->sw_hdr.meta_data, UMAC_FW_CMD_BYTE_COUNT);
         count += sizeof(struct iwm_umac_wifi_in_hdr) -
                  sizeof(struct iwm_dev_cmd_hdr);
         if (count > buf_size) {
@@ -1242,8 +1274,6 @@ static int iwm_rx_handle_wifi(struct iwm_priv *iwm, u8 *buf,
                 return -EINVAL;
         }
 
-        resp = GET_VAL32(wifi_hdr->sw_hdr.meta_data, UMAC_FW_CMD_STATUS);
-
         seq_num = le16_to_cpu(wifi_hdr->sw_hdr.cmd.seq_num);
 
         IWM_DBG_RX(iwm, DBG, "CMD:0x%x, source: 0x%x, seqnum: %d\n",
@@ -1316,8 +1346,9 @@ static int iwm_rx_handle_nonwifi(struct iwm_priv *iwm, u8 *buf,
 {
         u8 seq_num;
         struct iwm_udma_in_hdr *hdr = (struct iwm_udma_in_hdr *)buf;
-        struct iwm_nonwifi_cmd *cmd, *next;
+        struct iwm_nonwifi_cmd *cmd;
 
+        trace_iwm_rx_nonwifi_cmd(iwm, buf, buf_size);
         seq_num = GET_VAL32(hdr->cmd, UDMA_HDI_IN_CMD_NON_WIFI_HW_SEQ_NUM);
 
         /*
@@ -1328,7 +1359,7 @@ static int iwm_rx_handle_nonwifi(struct iwm_priv *iwm, u8 *buf,
          * That means we only support synchronised non wifi command response
          * schemes.
          */
-        list_for_each_entry_safe(cmd, next, &iwm->nonwifi_pending_cmd, pending)
+        list_for_each_entry(cmd, &iwm->nonwifi_pending_cmd, pending)
                 if (cmd->seq_num == seq_num) {
                         cmd->resp_received = 1;
                         cmd->buf.len = buf_size;
@@ -1647,6 +1678,7 @@ void iwm_rx_worker(struct work_struct *work)
          * We stop whenever a ticket is missing its packet, as we're
          * supposed to send the packets in order.
          */
+        spin_lock(&iwm->ticket_lock);
         list_for_each_entry_safe(ticket, next, &iwm->rx_tickets, node) {
                 struct iwm_rx_packet *packet =
                         iwm_rx_packet_get(iwm, le16_to_cpu(ticket->ticket->id));
@@ -1655,12 +1687,12 @@ void iwm_rx_worker(struct work_struct *work)
                         IWM_DBG_RX(iwm, DBG, "Skip rx_work: Wait for ticket %d "
                                    "to be handled first\n",
                                    le16_to_cpu(ticket->ticket->id));
-                        return;
+                        break;
                 }
 
                 list_del(&ticket->node);
-                list_del(&packet->node);
                 iwm_rx_process_packet(iwm, packet, ticket);
         }
+        spin_unlock(&iwm->ticket_lock);
 }
 
diff --git a/drivers/net/wireless/iwmc3200wifi/trace.c b/drivers/net/wireless/iwmc3200wifi/trace.c
new file mode 100644
index 000000000000..904d36f22311
--- /dev/null
+++ b/drivers/net/wireless/iwmc3200wifi/trace.c
@@ -0,0 +1,3 @@
+#include "iwm.h"
+#define CREATE_TRACE_POINTS
+#include "trace.h"
diff --git a/drivers/net/wireless/iwmc3200wifi/trace.h b/drivers/net/wireless/iwmc3200wifi/trace.h
new file mode 100644
index 000000000000..320e54fbb38c
--- /dev/null
+++ b/drivers/net/wireless/iwmc3200wifi/trace.h
@@ -0,0 +1,283 @@
+#if !defined(__IWM_TRACE_H__) || defined(TRACE_HEADER_MULTI_READ)
+#define __IWM_TRACE_H__
+
+#include <linux/tracepoint.h>
+
+#if !defined(CONFIG_IWM_TRACING)
+#undef TRACE_EVENT
+#define TRACE_EVENT(name, proto, ...) \
+static inline void trace_ ## name(proto) {}
+#endif
+
+#undef TRACE_SYSTEM
+#define TRACE_SYSTEM iwm
+
+#define IWM_ENTRY       __array(char, ndev_name, 16)
+#define IWM_ASSIGN      strlcpy(__entry->ndev_name, iwm_to_ndev(iwm)->name, 16)
+#define IWM_PR_FMT      "%s"
+#define IWM_PR_ARG      __entry->ndev_name
+
+TRACE_EVENT(iwm_tx_nonwifi_cmd,
+        TP_PROTO(struct iwm_priv *iwm, struct iwm_udma_out_nonwifi_hdr *hdr),
+
+        TP_ARGS(iwm, hdr),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, opcode)
+                __field(u8, resp)
+                __field(u8, eot)
+                __field(u8, hw)
+                __field(u16, seq)
+                __field(u32, addr)
+                __field(u32, op1)
+                __field(u32, op2)
+        ),
+
+        TP_fast_assign(
+                IWM_ASSIGN;
+                __entry->opcode = GET_VAL32(hdr->cmd, UMAC_HDI_OUT_CMD_OPCODE);
+                __entry->resp = GET_VAL32(hdr->cmd, UDMA_HDI_OUT_NW_CMD_RESP);
+                __entry->eot = GET_VAL32(hdr->cmd, UMAC_HDI_OUT_CMD_EOT);
+                __entry->hw = GET_VAL32(hdr->cmd, UDMA_HDI_OUT_NW_CMD_HANDLE_BY_HW);
+                __entry->seq = GET_VAL32(hdr->cmd, UDMA_HDI_OUT_CMD_NON_WIFI_HW_SEQ_NUM);
+                __entry->addr = le32_to_cpu(hdr->addr);
+                __entry->op1 = le32_to_cpu(hdr->op1_sz);
+                __entry->op2 = le32_to_cpu(hdr->op2);
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Tx TARGET CMD: opcode 0x%x, resp %d, eot %d, "
+                "hw %d, seq 0x%x, addr 0x%x, op1 0x%x, op2 0x%x",
+                IWM_PR_ARG, __entry->opcode, __entry->resp, __entry->eot,
+                __entry->hw, __entry->seq, __entry->addr, __entry->op1,
+                __entry->op2
+        )
+);
+
+TRACE_EVENT(iwm_tx_wifi_cmd,
+        TP_PROTO(struct iwm_priv *iwm, struct iwm_umac_wifi_out_hdr *hdr),
+
+        TP_ARGS(iwm, hdr),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, opcode)
+                __field(u8, lmac)
+                __field(u8, resp)
+                __field(u8, eot)
+                __field(u8, ra_tid)
+                __field(u8, credit_group)
+                __field(u8, color)
+                __field(u16, seq)
+        ),
+
+        TP_fast_assign(
+                IWM_ASSIGN;
+                __entry->opcode = hdr->sw_hdr.cmd.cmd;
+                __entry->lmac = 0;
+                __entry->seq = hdr->sw_hdr.cmd.seq_num;
+                __entry->resp = GET_VAL8(hdr->sw_hdr.cmd.flags, UMAC_DEV_CMD_FLAGS_RESP_REQ);
+                __entry->color = GET_VAL32(hdr->sw_hdr.meta_data, UMAC_FW_CMD_TX_STA_COLOR);
+                __entry->eot = GET_VAL32(hdr->hw_hdr.cmd, UMAC_HDI_OUT_CMD_EOT);
+                __entry->ra_tid = GET_VAL32(hdr->hw_hdr.meta_data, UMAC_HDI_OUT_RATID);
+                __entry->credit_group = GET_VAL32(hdr->hw_hdr.meta_data, UMAC_HDI_OUT_CREDIT_GRP);
+                if (__entry->opcode == UMAC_CMD_OPCODE_WIFI_PASS_THROUGH ||
+                    __entry->opcode == UMAC_CMD_OPCODE_WIFI_IF_WRAPPER) {
+                        __entry->lmac = 1;
+                        __entry->opcode = ((struct iwm_lmac_hdr *)(hdr + 1))->id;
+                }
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Tx %cMAC CMD: opcode 0x%x, resp %d, eot %d, "
+                "seq 0x%x, sta_color 0x%x, ra_tid 0x%x, credit_group 0x%x",
+                IWM_PR_ARG, __entry->lmac ? 'L' : 'U', __entry->opcode,
+                __entry->resp, __entry->eot, __entry->seq, __entry->color,
+                __entry->ra_tid, __entry->credit_group
+        )
+);
+
+TRACE_EVENT(iwm_tx_packets,
+        TP_PROTO(struct iwm_priv *iwm, u8 *buf, int len),
+
+        TP_ARGS(iwm, buf, len),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, eot)
+                __field(u8, ra_tid)
+                __field(u8, credit_group)
+                __field(u8, color)
+                __field(u16, seq)
+                __field(u8, npkt)
+                __field(u32, bytes)
+        ),
+
+        TP_fast_assign(
+                struct iwm_umac_wifi_out_hdr *hdr =
+                        (struct iwm_umac_wifi_out_hdr *)buf;
+
+                IWM_ASSIGN;
+                __entry->eot = GET_VAL32(hdr->hw_hdr.cmd, UMAC_HDI_OUT_CMD_EOT);
+                __entry->ra_tid = GET_VAL32(hdr->hw_hdr.meta_data, UMAC_HDI_OUT_RATID);
+                __entry->credit_group = GET_VAL32(hdr->hw_hdr.meta_data, UMAC_HDI_OUT_CREDIT_GRP);
+                __entry->color = GET_VAL32(hdr->sw_hdr.meta_data, UMAC_FW_CMD_TX_STA_COLOR);
+                __entry->seq = hdr->sw_hdr.cmd.seq_num;
+                __entry->npkt = 1;
+                __entry->bytes = len;
+
+                if (!__entry->eot) {
+                        int count;
+                        u8 *ptr = buf;
+
+                        __entry->npkt = 0;
+                        while (ptr < buf + len) {
+                                count = GET_VAL32(hdr->sw_hdr.meta_data,
+                                                  UMAC_FW_CMD_BYTE_COUNT);
+                                ptr += ALIGN(sizeof(*hdr) + count, 16);
+                                hdr = (struct iwm_umac_wifi_out_hdr *)ptr;
+                                __entry->npkt++;
+                        }
+                }
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Tx %spacket: eot %d, seq 0x%x, sta_color 0x%x, "
+                "ra_tid 0x%x, credit_group 0x%x, embeded_packets %d, %d bytes",
+                IWM_PR_ARG, !__entry->eot ? "concatenated " : "",
+                __entry->eot, __entry->seq, __entry->color, __entry->ra_tid,
+                __entry->credit_group, __entry->npkt, __entry->bytes
+        )
+);
+
+TRACE_EVENT(iwm_rx_nonwifi_cmd,
+        TP_PROTO(struct iwm_priv *iwm, void *buf, int len),
+
+        TP_ARGS(iwm, buf, len),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, opcode)
+                __field(u16, seq)
+                __field(u32, len)
+        ),
+
+        TP_fast_assign(
+                struct iwm_udma_in_hdr *hdr = buf;
+
+                IWM_ASSIGN;
+                __entry->opcode = GET_VAL32(hdr->cmd, UDMA_HDI_IN_NW_CMD_OPCODE);
+                __entry->seq = GET_VAL32(hdr->cmd, UDMA_HDI_IN_CMD_NON_WIFI_HW_SEQ_NUM);
+                __entry->len = len;
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Rx TARGET RESP: opcode 0x%x, seq 0x%x, len 0x%x",
+                IWM_PR_ARG, __entry->opcode, __entry->seq, __entry->len
+        )
+);
+
+TRACE_EVENT(iwm_rx_wifi_cmd,
+        TP_PROTO(struct iwm_priv *iwm, struct iwm_umac_wifi_in_hdr *hdr),
+
+        TP_ARGS(iwm, hdr),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, cmd)
+                __field(u8, source)
+                __field(u16, seq)
+                __field(u32, count)
+        ),
+
+        TP_fast_assign(
+                IWM_ASSIGN;
+                __entry->cmd = hdr->sw_hdr.cmd.cmd;
+                __entry->source = GET_VAL32(hdr->hw_hdr.cmd, UMAC_HDI_IN_CMD_SOURCE);
+                __entry->count = GET_VAL32(hdr->sw_hdr.meta_data, UMAC_FW_CMD_BYTE_COUNT);
+                __entry->seq = le16_to_cpu(hdr->sw_hdr.cmd.seq_num);
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Rx %s RESP: cmd 0x%x, seq 0x%x, count 0x%x",
+                IWM_PR_ARG, __entry->source == UMAC_HDI_IN_SOURCE_FHRX ? "LMAC" :
+                __entry->source == UMAC_HDI_IN_SOURCE_FW ? "UMAC" : "UDMA",
+                __entry->cmd, __entry->seq, __entry->count
+        )
+);
+
+#define iwm_ticket_action_symbol                \
+        { IWM_RX_TICKET_DROP, "DROP" },         \
+        { IWM_RX_TICKET_RELEASE, "RELEASE" },   \
+        { IWM_RX_TICKET_SNIFFER, "SNIFFER" },   \
+        { IWM_RX_TICKET_ENQUEUE, "ENQUEUE" }
+
+TRACE_EVENT(iwm_rx_ticket,
+        TP_PROTO(struct iwm_priv *iwm, void *buf, int len),
+
+        TP_ARGS(iwm, buf, len),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, action)
+                __field(u8, reason)
+                __field(u16, id)
+                __field(u16, flags)
+        ),
+
+        TP_fast_assign(
+                struct iwm_rx_ticket *ticket =
+                        ((struct iwm_umac_notif_rx_ticket *)buf)->tickets;
+
+                IWM_ASSIGN;
+                __entry->id = le16_to_cpu(ticket->id);
+                __entry->action = le16_to_cpu(ticket->action);
+                __entry->flags = le16_to_cpu(ticket->flags);
+                __entry->reason = (__entry->flags & IWM_RX_TICKET_DROP_REASON_MSK) >> IWM_RX_TICKET_DROP_REASON_POS;
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Rx ticket: id 0x%x, action %s, %s 0x%x%s",
+                IWM_PR_ARG, __entry->id,
+                __print_symbolic(__entry->action, iwm_ticket_action_symbol),
+                __entry->reason ? "reason" : "flags",
+                __entry->reason ? __entry->reason : __entry->flags,
+                __entry->flags & IWM_RX_TICKET_AMSDU_MSK ? ", AMSDU frame" : ""
+        )
+);
+
+TRACE_EVENT(iwm_rx_packet,
+        TP_PROTO(struct iwm_priv *iwm, void *buf, int len),
+
+        TP_ARGS(iwm, buf, len),
+
+        TP_STRUCT__entry(
+                IWM_ENTRY
+                __field(u8, source)
+                __field(u16, id)
+                __field(u32, len)
+        ),
+
+        TP_fast_assign(
+                struct iwm_umac_wifi_in_hdr *hdr = buf;
+
+                IWM_ASSIGN;
+                __entry->source = GET_VAL32(hdr->hw_hdr.cmd, UMAC_HDI_IN_CMD_SOURCE);
+                __entry->id = le16_to_cpu(hdr->sw_hdr.cmd.seq_num);
+                __entry->len = len - sizeof(*hdr);
+        ),
+
+        TP_printk(
+                IWM_PR_FMT " Rx %s packet: id 0x%x, %d bytes",
+                IWM_PR_ARG, __entry->source == UMAC_HDI_IN_SOURCE_FHRX ?
+                "LMAC" : "UMAC", __entry->id, __entry->len
+        )
+);
+#endif
+
+#undef TRACE_INCLUDE_PATH
+#define TRACE_INCLUDE_PATH .
+#undef TRACE_INCLUDE_FILE
+#define TRACE_INCLUDE_FILE trace
+#include <trace/define_trace.h>
diff --git a/drivers/net/wireless/iwmc3200wifi/tx.c b/drivers/net/wireless/iwmc3200wifi/tx.c
index 55905f02309c..a20b936ae21f 100644
--- a/drivers/net/wireless/iwmc3200wifi/tx.c
+++ b/drivers/net/wireless/iwmc3200wifi/tx.c
@@ -346,6 +346,7 @@ static int iwm_tx_send_concat_packets(struct iwm_priv *iwm,
         /* mark EOP for the last packet */
         iwm_udma_wifi_hdr_set_eop(iwm, txq->concat_ptr, 1);
 
+        trace_iwm_tx_packets(iwm, txq->concat_buf, txq->concat_count);
         ret = iwm_bus_send_chunk(iwm, txq->concat_buf, txq->concat_count);
 
         txq->concat_count = 0;
@@ -450,7 +451,6 @@ void iwm_tx_worker(struct work_struct *work)
 int iwm_xmit_frame(struct sk_buff *skb, struct net_device *netdev)
 {
         struct iwm_priv *iwm = ndev_to_iwm(netdev);
-        struct net_device *ndev = iwm_to_ndev(iwm);
         struct wireless_dev *wdev = iwm_to_wdev(iwm);
         struct iwm_tx_info *tx_info;
         struct iwm_tx_queue *txq;
@@ -517,12 +517,12 @@ int iwm_xmit_frame(struct sk_buff *skb, struct net_device *netdev)
 
         queue_work(iwm->txq[queue].wq, &iwm->txq[queue].worker);
 
-        ndev->stats.tx_packets++;
-        ndev->stats.tx_bytes += skb->len;
+        netdev->stats.tx_packets++;
+        netdev->stats.tx_bytes += skb->len;
         return NETDEV_TX_OK;
 
  drop:
-        ndev->stats.tx_dropped++;
+        netdev->stats.tx_dropped++;
         dev_kfree_skb_any(skb);
         return NETDEV_TX_OK;
 }
diff --git a/drivers/net/wireless/iwmc3200wifi/umac.h b/drivers/net/wireless/iwmc3200wifi/umac.h
index 7f54a145ca65..0cbba3ecc813 100644
--- a/drivers/net/wireless/iwmc3200wifi/umac.h
+++ b/drivers/net/wireless/iwmc3200wifi/umac.h
@@ -362,7 +362,7 @@ struct iwm_udma_out_wifi_hdr {
 #define IWM_RX_TICKET_SPECIAL_SNAP_MSK    0x4
 #define IWM_RX_TICKET_AMSDU_MSK           0x8
 #define IWM_RX_TICKET_DROP_REASON_POS       4
-#define IWM_RX_TICKET_DROP_REASON_MSK (0x1F << RX_TICKET_FLAGS_DROP_REASON_POS)
+#define IWM_RX_TICKET_DROP_REASON_MSK (0x1F << IWM_RX_TICKET_DROP_REASON_POS)
 
 #define IWM_RX_DROP_NO_DROP                          0x0
 #define IWM_RX_DROP_BAD_CRC                          0x1
diff --git a/drivers/net/wireless/libertas/assoc.c b/drivers/net/wireless/libertas/assoc.c
index f03d5e4e59c3..95d3d4c5e08b 100644
--- a/drivers/net/wireless/libertas/assoc.c
+++ b/drivers/net/wireless/libertas/assoc.c
@@ -31,6 +31,9 @@ u8 lbs_bg_rates[MAX_RATES] =
 0x00, 0x00 };
 
 
+static int assoc_helper_wep_keys(struct lbs_private *priv,
+                struct assoc_request *assoc_req);
+
 /**
  *  @brief This function finds common rates between rates and card rates.
  *
@@ -610,7 +613,7 @@ static int lbs_assoc_post(struct lbs_private *priv,
 
         if (status_code) {
                 lbs_mac_event_disconnected(priv);
-                ret = -1;
+                ret = status_code;
                 goto done;
         }
 
@@ -813,7 +816,24 @@ static int lbs_try_associate(struct lbs_private *priv,
                 goto out;
 
         ret = lbs_associate(priv, assoc_req, CMD_802_11_ASSOCIATE);
+        /* If the association fails with current auth mode, let's
+         * try by changing the auth mode
+         */
+        if ((priv->authtype_auto) &&
+                        (ret == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG) &&
+                        (assoc_req->secinfo.wep_enabled) &&
+                        (priv->connect_status != LBS_CONNECTED)) {
+                if (priv->secinfo.auth_mode == IW_AUTH_ALG_OPEN_SYSTEM)
+                        priv->secinfo.auth_mode = IW_AUTH_ALG_SHARED_KEY;
+                else
+                        priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
+                if (!assoc_helper_wep_keys(priv, assoc_req))
+                        ret = lbs_associate(priv, assoc_req,
+                                                CMD_802_11_ASSOCIATE);
+        }
 
+        if (ret)
+                ret = -1;
 out:
         lbs_deb_leave_args(LBS_DEB_ASSOC, "ret %d", ret);
         return ret;
diff --git a/drivers/net/wireless/libertas/dev.h b/drivers/net/wireless/libertas/dev.h
index 6875e1498bd5..a54880e4ad2b 100644
--- a/drivers/net/wireless/libertas/dev.h
+++ b/drivers/net/wireless/libertas/dev.h
@@ -134,6 +134,7 @@ struct lbs_private {
         u8 wpa_ie_len;
         u16 wep_tx_keyidx;
         struct enc_key wep_keys[4];
+        u8 authtype_auto;
 
         /* Wake On LAN */
         uint32_t wol_criteria;
diff --git a/drivers/net/wireless/libertas/main.c b/drivers/net/wireless/libertas/main.c
index 28a1c9d1627a..ff7b0d0cca56 100644
--- a/drivers/net/wireless/libertas/main.c
+++ b/drivers/net/wireless/libertas/main.c
@@ -318,7 +318,7 @@ static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
                                struct net_device *dev, int nr_addrs)
 {
         int i = nr_addrs;
-        struct dev_mc_list *mc_list;
+        struct netdev_hw_addr *ha;
         int cnt;
 
         if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
@@ -326,19 +326,19 @@ static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
 
         netif_addr_lock_bh(dev);
         cnt = netdev_mc_count(dev);
-        netdev_for_each_mc_addr(mc_list, dev) {
-                if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
+        netdev_for_each_mc_addr(ha, dev) {
+                if (mac_in_list(cmd->maclist, nr_addrs, ha->addr)) {
                         lbs_deb_net("mcast address %s:%pM skipped\n", dev->name,
-                                    mc_list->dmi_addr);
+                                    ha->addr);
                         cnt--;
                         continue;
                 }
 
                 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
                         break;
-                memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
+                memcpy(&cmd->maclist[6*i], ha->addr, ETH_ALEN);
                 lbs_deb_net("mcast address %s:%pM added to filter\n", dev->name,
-                            mc_list->dmi_addr);
+                            ha->addr);
                 i++;
                 cnt--;
         }
@@ -835,6 +835,7 @@ static int lbs_init_adapter(struct lbs_private *priv)
         priv->is_auto_deep_sleep_enabled = 0;
         priv->wakeup_dev_required = 0;
         init_waitqueue_head(&priv->ds_awake_q);
+        priv->authtype_auto = 1;
 
         mutex_init(&priv->lock);
 
diff --git a/drivers/net/wireless/libertas/rx.c b/drivers/net/wireless/libertas/rx.c
index 2daf8ffdb7e1..7a867e31ca5a 100644
--- a/drivers/net/wireless/libertas/rx.c
+++ b/drivers/net/wireless/libertas/rx.c
@@ -38,10 +38,10 @@ static int process_rxed_802_11_packet(struct lbs_private *priv,
         struct sk_buff *skb);
 
 /**
- *  @brief This function computes the avgSNR .
+ *  @brief      This function computes the avgSNR .
  *
- *  @param priv    A pointer to struct lbs_private structure
- *  @return        avgSNR
+ *  @param      priv    A pointer to struct lbs_private structure
+ *  @return     avgSNR
  */
 static u8 lbs_getavgsnr(struct lbs_private *priv)
 {
@@ -56,10 +56,10 @@ static u8 lbs_getavgsnr(struct lbs_private *priv)
 }
 
 /**
- *  @brief This function computes the AvgNF
+ *  @brief      This function computes the AvgNF
  *
- *  @param priv    A pointer to struct lbs_private structure
- *  @return        AvgNF
+ *  @param      priv    A pointer to struct lbs_private structure
+ *  @return     AvgNF
  */
 static u8 lbs_getavgnf(struct lbs_private *priv)
 {
@@ -74,11 +74,11 @@ static u8 lbs_getavgnf(struct lbs_private *priv)
 }
 
 /**
- *  @brief This function save the raw SNR/NF to our internel buffer
+ *  @brief      This function save the raw SNR/NF to our internel buffer
  *
- *  @param priv    A pointer to struct lbs_private structure
- *  @param prxpd   A pointer to rxpd structure of received packet
- *  @return        n/a
+ *  @param      priv    A pointer to struct lbs_private structure
+ *  @param      prxpd   A pointer to rxpd structure of received packet
+ *  @return     n/a
  */
 static void lbs_save_rawSNRNF(struct lbs_private *priv, struct rxpd *p_rx_pd)
 {
@@ -93,11 +93,11 @@ static void lbs_save_rawSNRNF(struct lbs_private *priv, struct rxpd *p_rx_pd)
 }
 
 /**
- *  @brief This function computes the RSSI in received packet.
+ *  @brief      This function computes the RSSI in received packet.
  *
- *  @param priv    A pointer to struct lbs_private structure
- *  @param prxpd   A pointer to rxpd structure of received packet
- *  @return        n/a
+ *  @param      priv    A pointer to struct lbs_private structure
+ *  @param      prxpd   A pointer to rxpd structure of received packet
+ *  @return     n/a
  */
 static void lbs_compute_rssi(struct lbs_private *priv, struct rxpd *p_rx_pd)
 {
@@ -134,9 +134,9 @@ static void lbs_compute_rssi(struct lbs_private *priv, struct rxpd *p_rx_pd)
  *  @brief This function processes received packet and forwards it
  *  to kernel/upper layer
  *
- *  @param priv    A pointer to struct lbs_private
- *  @param skb     A pointer to skb which includes the received packet
- *  @return        0 or -1
+ *  @param      priv    A pointer to struct lbs_private
+ *  @param      skb             A pointer to skb which includes the received packet
+ *  @return     0 or -1
  */
 int lbs_process_rxed_packet(struct lbs_private *priv, struct sk_buff *skb)
 {
@@ -196,7 +196,7 @@ int lbs_process_rxed_packet(struct lbs_private *priv, struct sk_buff *skb)
                  *    before the snap_type.
                  */
                 p_ethhdr = (struct ethhdr *)
-                    ((u8 *) & p_rx_pkt->eth803_hdr
+                    ((u8 *) &p_rx_pkt->eth803_hdr
                      + sizeof(p_rx_pkt->eth803_hdr) + sizeof(p_rx_pkt->rfc1042_hdr)
                      - sizeof(p_rx_pkt->eth803_hdr.dest_addr)
                      - sizeof(p_rx_pkt->eth803_hdr.src_addr)
@@ -213,7 +213,7 @@ int lbs_process_rxed_packet(struct lbs_private *priv, struct sk_buff *skb)
                 hdrchop = (u8 *)p_ethhdr - (u8 *)p_rx_pd;
         } else {
                 lbs_deb_hex(LBS_DEB_RX, "RX Data: LLC/SNAP",
-                        (u8 *) & p_rx_pkt->rfc1042_hdr,
+                        (u8 *) &p_rx_pkt->rfc1042_hdr,
                         sizeof(p_rx_pkt->rfc1042_hdr));
 
                 /* Chop off the rxpd */
@@ -254,8 +254,8 @@ EXPORT_SYMBOL_GPL(lbs_process_rxed_packet);
  *  @brief This function converts Tx/Rx rates from the Marvell WLAN format
  *  (see Table 2 in Section 3.1) to IEEE80211_RADIOTAP_RATE units (500 Kb/s)
  *
- *  @param rate    Input rate
- *  @return        Output Rate (0 if invalid)
+ *  @param      rate    Input rate
+ *  @return     Output Rate (0 if invalid)
  */
 static u8 convert_mv_rate_to_radiotap(u8 rate)
 {
@@ -294,9 +294,9 @@ static u8 convert_mv_rate_to_radiotap(u8 rate)
  *  @brief This function processes a received 802.11 packet and forwards it
  *  to kernel/upper layer
  *
- *  @param priv    A pointer to struct lbs_private
- *  @param skb     A pointer to skb which includes the received packet
- *  @return        0 or -1
+ *  @param      priv    A pointer to struct lbs_private
+ *  @param      skb             A pointer to skb which includes the received packet
+ *  @return     0 or -1
  */
 static int process_rxed_802_11_packet(struct lbs_private *priv,
         struct sk_buff *skb)
@@ -313,7 +313,7 @@ static int process_rxed_802_11_packet(struct lbs_private *priv,
         p_rx_pkt = (struct rx80211packethdr *) skb->data;
         prxpd = &p_rx_pkt->rx_pd;
 
-        // lbs_deb_hex(LBS_DEB_RX, "RX Data: Before chop rxpd", skb->data, min(skb->len, 100));
+        /* lbs_deb_hex(LBS_DEB_RX, "RX Data: Before chop rxpd", skb->data, min(skb->len, 100)); */
 
         if (skb->len < (ETH_HLEN + 8 + sizeof(struct rxpd))) {
                 lbs_deb_rx("rx err: frame received with bad length\n");
diff --git a/drivers/net/wireless/libertas/wext.c b/drivers/net/wireless/libertas/wext.c
index 71f88a08e090..aad6263dee6d 100644
--- a/drivers/net/wireless/libertas/wext.c
+++ b/drivers/net/wireless/libertas/wext.c
@@ -1440,8 +1440,10 @@ static int lbs_set_encode(struct net_device *dev,
                 set_bit(ASSOC_FLAG_WEP_TX_KEYIDX, &assoc_req->flags);
 
         if (dwrq->flags & IW_ENCODE_RESTRICTED) {
+                priv->authtype_auto = 0;
                 assoc_req->secinfo.auth_mode = IW_AUTH_ALG_SHARED_KEY;
         } else if (dwrq->flags & IW_ENCODE_OPEN) {
+                priv->authtype_auto = 0;
                 assoc_req->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
         }
 
@@ -1620,8 +1622,10 @@ static int lbs_set_encodeext(struct net_device *dev,
                         goto out;
 
                 if (dwrq->flags & IW_ENCODE_RESTRICTED) {
+                        priv->authtype_auto = 0;
                         assoc_req->secinfo.auth_mode = IW_AUTH_ALG_SHARED_KEY;
                 } else if (dwrq->flags & IW_ENCODE_OPEN) {
+                        priv->authtype_auto = 0;
                         assoc_req->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
                 }
 
diff --git a/drivers/net/wireless/libertas_tf/main.c b/drivers/net/wireless/libertas_tf/main.c
index 6ab30033c26c..c20eef6b95c2 100644
--- a/drivers/net/wireless/libertas_tf/main.c
+++ b/drivers/net/wireless/libertas_tf/main.c
@@ -367,22 +367,20 @@ static int lbtf_op_config(struct ieee80211_hw *hw, u32 changed)
 }
 
 static u64 lbtf_op_prepare_multicast(struct ieee80211_hw *hw,
-                                     int mc_count, struct dev_addr_list *mclist)
+                                     struct netdev_hw_addr_list *mc_list)
 {
         struct lbtf_private *priv = hw->priv;
         int i;
+        struct netdev_hw_addr *ha;
+        int mc_count = netdev_hw_addr_list_count(mc_list);
 
         if (!mc_count || mc_count > MRVDRV_MAX_MULTICAST_LIST_SIZE)
                 return mc_count;
 
         priv->nr_of_multicastmacaddr = mc_count;
-        for (i = 0; i < mc_count; i++) {
-                if (!mclist)
-                        break;
-                memcpy(&priv->multicastlist[i], mclist->da_addr,
-                                ETH_ALEN);
-                mclist = mclist->next;
-        }
+        i = 0;
+        netdev_hw_addr_list_for_each(ha, mc_list)
+                memcpy(&priv->multicastlist[i++], ha->addr, ETH_ALEN);
 
         return mc_count;
 }
diff --git a/drivers/net/wireless/mwl8k.c b/drivers/net/wireless/mwl8k.c
index 4e58ebe15580..1b5d0aebbb0e 100644
--- a/drivers/net/wireless/mwl8k.c
+++ b/drivers/net/wireless/mwl8k.c
@@ -1938,11 +1938,15 @@ struct mwl8k_cmd_mac_multicast_adr {
 
 static struct mwl8k_cmd_pkt *
 __mwl8k_cmd_mac_multicast_adr(struct ieee80211_hw *hw, int allmulti,
-                              int mc_count, struct dev_addr_list *mclist)
+                              struct netdev_hw_addr_list *mc_list)
 {
         struct mwl8k_priv *priv = hw->priv;
         struct mwl8k_cmd_mac_multicast_adr *cmd;
         int size;
+        int mc_count = 0;
+
+        if (mc_list)
+                mc_count = netdev_hw_addr_list_count(mc_list);
 
         if (allmulti || mc_count > priv->num_mcaddrs) {
                 allmulti = 1;
@@ -1963,17 +1967,13 @@ __mwl8k_cmd_mac_multicast_adr(struct ieee80211_hw *hw, int allmulti,
         if (allmulti) {
                 cmd->action |= cpu_to_le16(MWL8K_ENABLE_RX_ALL_MULTICAST);
         } else if (mc_count) {
-                int i;
+                struct netdev_hw_addr *ha;
+                int i = 0;
 
                 cmd->action |= cpu_to_le16(MWL8K_ENABLE_RX_MULTICAST);
                 cmd->numaddr = cpu_to_le16(mc_count);
-                for (i = 0; i < mc_count && mclist; i++) {
-                        if (mclist->da_addrlen != ETH_ALEN) {
-                                kfree(cmd);
-                                return NULL;
-                        }
-                        memcpy(cmd->addr[i], mclist->da_addr, ETH_ALEN);
-                        mclist = mclist->next;
+                netdev_hw_addr_list_for_each(ha, mc_list) {
+                        memcpy(cmd->addr[i], ha->addr, ETH_ALEN);
                 }
         }
 
@@ -3552,7 +3552,7 @@ mwl8k_bss_info_changed(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
 }
 
 static u64 mwl8k_prepare_multicast(struct ieee80211_hw *hw,
-                                   int mc_count, struct dev_addr_list *mclist)
+                                   struct netdev_hw_addr_list *mc_list)
 {
         struct mwl8k_cmd_pkt *cmd;
 
@@ -3563,7 +3563,7 @@ static u64 mwl8k_prepare_multicast(struct ieee80211_hw *hw,
          * we'll end up throwing this packet away and creating a new
          * one in mwl8k_configure_filter().
          */
-        cmd = __mwl8k_cmd_mac_multicast_adr(hw, 0, mc_count, mclist);
+        cmd = __mwl8k_cmd_mac_multicast_adr(hw, 0, mc_list);
 
         return (unsigned long)cmd;
 }
@@ -3686,7 +3686,7 @@ static void mwl8k_configure_filter(struct ieee80211_hw *hw,
          */
         if (*total_flags & FIF_ALLMULTI) {
                 kfree(cmd);
-                cmd = __mwl8k_cmd_mac_multicast_adr(hw, 1, 0, NULL);
+                cmd = __mwl8k_cmd_mac_multicast_adr(hw, 1, NULL);
         }
 
         if (cmd != NULL) {
diff --git a/drivers/net/wireless/orinoco/Kconfig b/drivers/net/wireless/orinoco/Kconfig
index e2a2c18920aa..6116b546861d 100644
--- a/drivers/net/wireless/orinoco/Kconfig
+++ b/drivers/net/wireless/orinoco/Kconfig
@@ -27,6 +27,17 @@ config HERMES
           configure your card and that /etc/pcmcia/wireless.opts works :
           <http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Tools.html>
 
+config HERMES_PRISM
+        bool "Support Prism 2/2.5 chipset"
+        depends on HERMES
+        ---help---
+
+          Say Y to enable support for Prism 2 and 2.5 chipsets.  These
+          chipsets are better handled by the hostap driver.  This driver
+          would not support WPA or firmware download for Prism chipset.
+
+          If you are not sure, say N.
+
 config HERMES_CACHE_FW_ON_INIT
         bool "Cache Hermes firmware on driver initialisation"
         depends on HERMES
@@ -86,7 +97,7 @@ config NORTEL_HERMES
 
 config PCI_HERMES
         tristate "Prism 2.5 PCI 802.11b adaptor support"
-        depends on PCI && HERMES
+        depends on PCI && HERMES && HERMES_PRISM
         help
           Enable support for PCI and mini-PCI 802.11b wireless NICs based on
           the Prism 2.5 chipset.  These are true PCI cards, not the 802.11b
diff --git a/drivers/net/wireless/orinoco/hw.c b/drivers/net/wireless/orinoco/hw.c
index e6369242e49c..9f657afaa3e5 100644
--- a/drivers/net/wireless/orinoco/hw.c
+++ b/drivers/net/wireless/orinoco/hw.c
@@ -262,6 +262,13 @@ int determine_fw_capabilities(struct orinoco_private *priv,
         if (fw_name)
                 dev_info(dev, "Firmware determined as %s\n", fw_name);
 
+#ifndef CONFIG_HERMES_PRISM
+        if (priv->firmware_type == FIRMWARE_TYPE_INTERSIL) {
+                dev_err(dev, "Support for Prism chipset is not enabled\n");
+                return -ENODEV;
+        }
+#endif
+
         return 0;
 }
 
@@ -1049,14 +1056,14 @@ int __orinoco_hw_set_multicast_list(struct orinoco_private *priv,
          * group address if either we want to multicast, or if we were
          * multicasting and want to stop */
         if (!promisc && (mc_count || priv->mc_count)) {
-                struct dev_mc_list *p;
+                struct netdev_hw_addr *ha;
                 struct hermes_multicast mclist;
                 int i = 0;
 
-                netdev_for_each_mc_addr(p, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         if (i == mc_count)
                                 break;
-                        memcpy(mclist.addr[i++], p->dmi_addr, ETH_ALEN);
+                        memcpy(mclist.addr[i++], ha->addr, ETH_ALEN);
                 }
 
                 err = hermes_write_ltv(hw, USER_BAP,
diff --git a/drivers/net/wireless/orinoco/hw.h b/drivers/net/wireless/orinoco/hw.h
index 9799a1d14a63..97af71e79950 100644
--- a/drivers/net/wireless/orinoco/hw.h
+++ b/drivers/net/wireless/orinoco/hw.h
@@ -22,7 +22,6 @@
 
 /* Forward declarations */
 struct orinoco_private;
-struct dev_addr_list;
 
 int determine_fw_capabilities(struct orinoco_private *priv, char *fw_name,
                               size_t fw_name_len, u32 *hw_ver);
diff --git a/drivers/net/wireless/orinoco/orinoco_cs.c b/drivers/net/wireless/orinoco/orinoco_cs.c
index 1d4ada188eda..fdc961379170 100644
--- a/drivers/net/wireless/orinoco/orinoco_cs.c
+++ b/drivers/net/wireless/orinoco/orinoco_cs.c
@@ -374,87 +374,90 @@ static char version[] __initdata = DRIVER_NAME " " DRIVER_VERSION
         "Pavel Roskin <proski@gnu.org>, et al)";
 
 static struct pcmcia_device_id orinoco_cs_ids[] = {
-        PCMCIA_DEVICE_MANF_CARD(0x000b, 0x7100), /* SonicWALL Long Range Wireless Card */
-        PCMCIA_DEVICE_MANF_CARD(0x000b, 0x7300), /* Sohoware NCP110, Philips 802.11b */
-        PCMCIA_DEVICE_MANF_CARD(0x0089, 0x0002), /* AnyPoint(TM) Wireless II PC Card */
         PCMCIA_DEVICE_MANF_CARD(0x0101, 0x0777), /* 3Com AirConnect PCI 777A */
-        PCMCIA_DEVICE_MANF_CARD(0x0126, 0x8000), /* PROXIM RangeLAN-DS/LAN PC CARD */
-        PCMCIA_DEVICE_MANF_CARD(0x0138, 0x0002), /* Compaq WL100 11 Mbps Wireless Adapter */
         PCMCIA_DEVICE_MANF_CARD(0x0156, 0x0002), /* Lucent Orinoco and old Intersil */
         PCMCIA_DEVICE_MANF_CARD(0x016b, 0x0001), /* Ericsson WLAN Card C11 */
         PCMCIA_DEVICE_MANF_CARD(0x01eb, 0x080a), /* Nortel Networks eMobility 802.11 Wireless Adapter */
-        PCMCIA_DEVICE_MANF_CARD(0x01ff, 0x0008), /* Intermec MobileLAN 11Mbps 802.11b WLAN Card */
-        PCMCIA_DEVICE_MANF_CARD(0x0250, 0x0002), /* Samsung SWL2000-N 11Mb/s WLAN Card */
         PCMCIA_DEVICE_MANF_CARD(0x0261, 0x0002), /* AirWay 802.11 Adapter (PCMCIA) */
         PCMCIA_DEVICE_MANF_CARD(0x0268, 0x0001), /* ARtem Onair */
         PCMCIA_DEVICE_MANF_CARD(0x0268, 0x0003), /* ARtem Onair Comcard 11 */
         PCMCIA_DEVICE_MANF_CARD(0x026f, 0x0305), /* Buffalo WLI-PCM-S11 */
-        PCMCIA_DEVICE_MANF_CARD(0x0274, 0x1612), /* Linksys WPC11 Version 2.5 */
-        PCMCIA_DEVICE_MANF_CARD(0x0274, 0x1613), /* Linksys WPC11 Version 3 */
-        PCMCIA_DEVICE_MANF_CARD(0x028a, 0x0002), /* Compaq HNW-100 11 Mbps Wireless Adapter */
-        PCMCIA_DEVICE_MANF_CARD(0x028a, 0x0673), /* Linksys WCF12 Wireless CompactFlash Card */
         PCMCIA_DEVICE_MANF_CARD(0x02aa, 0x0002), /* ASUS SpaceLink WL-100 */
         PCMCIA_DEVICE_MANF_CARD(0x02ac, 0x0002), /* SpeedStream SS1021 Wireless Adapter */
         PCMCIA_DEVICE_MANF_CARD(0x02ac, 0x3021), /* SpeedStream Wireless Adapter */
         PCMCIA_DEVICE_MANF_CARD(0x14ea, 0xb001), /* PLANEX RoadLannerWave GW-NS11H */
+        PCMCIA_DEVICE_PROD_ID12("3Com", "3CRWE737A AirConnect Wireless LAN PC Card", 0x41240e5b, 0x56010af3),
+        PCMCIA_DEVICE_PROD_ID12("Allied Telesyn", "AT-WCL452 Wireless PCMCIA Radio", 0x5cd01705, 0x4271660f),
+        PCMCIA_DEVICE_PROD_ID12("ASUS", "802_11B_CF_CARD_25", 0x78fc06ee, 0x45a50c1e),
+        PCMCIA_DEVICE_PROD_ID12("ASUS", "802_11b_PC_CARD_25", 0x78fc06ee, 0xdb9aa842),
+        PCMCIA_DEVICE_PROD_ID12("Avaya Communication", "Avaya Wireless PC Card", 0xd8a43b78, 0x0d341169),
+        PCMCIA_DEVICE_PROD_ID12("BENQ", "AWL100 PCMCIA ADAPTER", 0x35dadc74, 0x01f7fedb),
+        PCMCIA_DEVICE_PROD_ID12("Cabletron", "RoamAbout 802.11 DS", 0x32d445f5, 0xedeffd90),
+        PCMCIA_DEVICE_PROD_ID12("D-Link Corporation", "D-Link DWL-650H 11Mbps WLAN Adapter", 0xef544d24, 0xcd8ea916),
+        PCMCIA_DEVICE_PROD_ID12("ELSA", "AirLancer MC-11", 0x4507a33a, 0xef54f0e3),
+        PCMCIA_DEVICE_PROD_ID12("HyperLink", "Wireless PC Card 11Mbps", 0x56cc3f1a, 0x0bcf220c),
+        PCMCIA_DEVICE_PROD_ID12("Intel", "PRO/Wireless 2011 LAN PC Card", 0x816cc815, 0x07f58077),
+        PCMCIA_DEVICE_PROD_ID12("LeArtery", "SYNCBYAIR 11Mbps Wireless LAN PC Card", 0x7e3b326a, 0x49893e92),
+        PCMCIA_DEVICE_PROD_ID12("Lucent Technologies", "WaveLAN/IEEE", 0x23eb9949, 0xc562e72a),
+        PCMCIA_DEVICE_PROD_ID12("MELCO", "WLI-PCM-L11", 0x481e0094, 0x7360e410),
+        PCMCIA_DEVICE_PROD_ID12("MELCO", "WLI-PCM-L11G", 0x481e0094, 0xf57ca4b3),
+        PCMCIA_DEVICE_PROD_ID12("NCR", "WaveLAN/IEEE", 0x24358cd4, 0xc562e72a),
+        PCMCIA_DEVICE_PROD_ID12("Nortel Networks", "emobility 802.11 Wireless LAN PC Card", 0x2d617ea0, 0x88cd5767),
+        PCMCIA_DEVICE_PROD_ID12("OTC", "Wireless AirEZY 2411-PCC WLAN Card", 0x4ac44287, 0x235a6bed),
+        PCMCIA_DEVICE_PROD_ID12("PROXIM", "LAN PC CARD HARMONY 80211B", 0xc6536a5e, 0x090c3cd9),
+        PCMCIA_DEVICE_PROD_ID12("PROXIM", "LAN PCI CARD HARMONY 80211B", 0xc6536a5e, 0x9f494e26),
+        PCMCIA_DEVICE_PROD_ID12("SAMSUNG", "11Mbps WLAN Card", 0x43d74cb4, 0x579bd91b),
+        PCMCIA_DEVICE_PROD_ID12("Symbol Technologies", "LA4111 Spectrum24 Wireless LAN PC Card", 0x3f02b4d6, 0x3663cb0e),
+#ifdef CONFIG_HERMES_PRISM
+        /* Only entries that certainly identify Prism chipset */
+        PCMCIA_DEVICE_MANF_CARD(0x000b, 0x7100), /* SonicWALL Long Range Wireless Card */
+        PCMCIA_DEVICE_MANF_CARD(0x000b, 0x7300), /* Sohoware NCP110, Philips 802.11b */
+        PCMCIA_DEVICE_MANF_CARD(0x0089, 0x0002), /* AnyPoint(TM) Wireless II PC Card */
+        PCMCIA_DEVICE_MANF_CARD(0x0126, 0x8000), /* PROXIM RangeLAN-DS/LAN PC CARD */
+        PCMCIA_DEVICE_MANF_CARD(0x0138, 0x0002), /* Compaq WL100 11 Mbps Wireless Adapter */
+        PCMCIA_DEVICE_MANF_CARD(0x01ff, 0x0008), /* Intermec MobileLAN 11Mbps 802.11b WLAN Card */
+        PCMCIA_DEVICE_MANF_CARD(0x0250, 0x0002), /* Samsung SWL2000-N 11Mb/s WLAN Card */
+        PCMCIA_DEVICE_MANF_CARD(0x0274, 0x1612), /* Linksys WPC11 Version 2.5 */
+        PCMCIA_DEVICE_MANF_CARD(0x0274, 0x1613), /* Linksys WPC11 Version 3 */
+        PCMCIA_DEVICE_MANF_CARD(0x028a, 0x0002), /* Compaq HNW-100 11 Mbps Wireless Adapter */
+        PCMCIA_DEVICE_MANF_CARD(0x028a, 0x0673), /* Linksys WCF12 Wireless CompactFlash Card */
         PCMCIA_DEVICE_MANF_CARD(0x50c2, 0x7300), /* Airvast WN-100 */
         PCMCIA_DEVICE_MANF_CARD(0x9005, 0x0021), /* Adaptec Ultra Wireless ANW-8030 */
         PCMCIA_DEVICE_MANF_CARD(0xc001, 0x0008), /* CONTEC FLEXSCAN/FX-DDS110-PCC */
         PCMCIA_DEVICE_MANF_CARD(0xc250, 0x0002), /* Conceptronic CON11Cpro, EMTAC A2424i */
         PCMCIA_DEVICE_MANF_CARD(0xd601, 0x0002), /* Safeway 802.11b, ZCOMAX AirRunner/XI-300 */
         PCMCIA_DEVICE_MANF_CARD(0xd601, 0x0005), /* D-Link DCF660, Sandisk Connect SDWCFB-000 */
-        PCMCIA_DEVICE_PROD_ID12(" ", "IEEE 802.11 Wireless LAN/PC Card", 0x3b6e20c8, 0xefccafe9),
-        PCMCIA_DEVICE_PROD_ID12("3Com", "3CRWE737A AirConnect Wireless LAN PC Card", 0x41240e5b, 0x56010af3),
+        PCMCIA_DEVICE_PROD_ID123("Instant Wireless ", " Network PC CARD", "Version 01.02", 0x11d901af, 0x6e9bd926, 0x4b74baa0),
         PCMCIA_DEVICE_PROD_ID12("ACTIONTEC", "PRISM Wireless LAN PC Card", 0x393089da, 0xa71e69d5),
         PCMCIA_DEVICE_PROD_ID12("Addtron", "AWP-100 Wireless PCMCIA", 0xe6ec52ce, 0x08649af2),
-        PCMCIA_DEVICE_PROD_ID12("Allied Telesyn", "AT-WCL452 Wireless PCMCIA Radio", 0x5cd01705, 0x4271660f),
-        PCMCIA_DEVICE_PROD_ID12("ASUS", "802_11b_PC_CARD_25", 0x78fc06ee, 0xdb9aa842),
-        PCMCIA_DEVICE_PROD_ID12("ASUS", "802_11B_CF_CARD_25", 0x78fc06ee, 0x45a50c1e),
-        PCMCIA_DEVICE_PROD_ID12("Avaya Communication", "Avaya Wireless PC Card", 0xd8a43b78, 0x0d341169),
-        PCMCIA_DEVICE_PROD_ID12("BENQ", "AWL100 PCMCIA ADAPTER", 0x35dadc74, 0x01f7fedb),
-        PCMCIA_DEVICE_PROD_ID12("BUFFALO", "WLI-PCM-L11G", 0x2decece3, 0xf57ca4b3),
         PCMCIA_DEVICE_PROD_ID12("BUFFALO", "WLI-CF-S11G", 0x2decece3, 0x82067c18),
-        PCMCIA_DEVICE_PROD_ID12("Cabletron", "RoamAbout 802.11 DS", 0x32d445f5, 0xedeffd90),
+        PCMCIA_DEVICE_PROD_ID12("BUFFALO", "WLI-PCM-L11G", 0x2decece3, 0xf57ca4b3),
         PCMCIA_DEVICE_PROD_ID12("Compaq", "WL200_11Mbps_Wireless_PCI_Card", 0x54f7c49c, 0x15a75e5b),
         PCMCIA_DEVICE_PROD_ID12("corega K.K.", "Wireless LAN PCC-11", 0x5261440f, 0xa6405584),
         PCMCIA_DEVICE_PROD_ID12("corega K.K.", "Wireless LAN PCCA-11", 0x5261440f, 0xdf6115f9),
         PCMCIA_DEVICE_PROD_ID12("corega_K.K.", "Wireless_LAN_PCCB-11", 0x29e33311, 0xee7a27ae),
+        PCMCIA_DEVICE_PROD_ID12("Digital Data Communications", "WPC-0100", 0xfdd73470, 0xe0b6f146),
         PCMCIA_DEVICE_PROD_ID12("D", "Link DRC-650 11Mbps WLAN Card", 0x71b18589, 0xf144e3ac),
         PCMCIA_DEVICE_PROD_ID12("D", "Link DWL-650 11Mbps WLAN Card", 0x71b18589, 0xb6f1b0ab),
-        PCMCIA_DEVICE_PROD_ID12("D-Link Corporation", "D-Link DWL-650H 11Mbps WLAN Adapter", 0xef544d24, 0xcd8ea916),
-        PCMCIA_DEVICE_PROD_ID12("Digital Data Communications", "WPC-0100", 0xfdd73470, 0xe0b6f146),
-        PCMCIA_DEVICE_PROD_ID12("ELSA", "AirLancer MC-11", 0x4507a33a, 0xef54f0e3),
-        PCMCIA_DEVICE_PROD_ID12("HyperLink", "Wireless PC Card 11Mbps", 0x56cc3f1a, 0x0bcf220c),
-        PCMCIA_DEVICE_PROD_ID123("Instant Wireless ", " Network PC CARD", "Version 01.02", 0x11d901af, 0x6e9bd926, 0x4b74baa0),
-        PCMCIA_DEVICE_PROD_ID12("Intel", "PRO/Wireless 2011 LAN PC Card", 0x816cc815, 0x07f58077),
+        PCMCIA_DEVICE_PROD_ID12(" ", "IEEE 802.11 Wireless LAN/PC Card", 0x3b6e20c8, 0xefccafe9),
         PCMCIA_DEVICE_PROD_ID12("INTERSIL", "HFA384x/IEEE", 0x74c5e40d, 0xdb472a18),
         PCMCIA_DEVICE_PROD_ID12("INTERSIL", "I-GATE 11M PC Card / PC Card plus", 0x74c5e40d, 0x8304ff77),
         PCMCIA_DEVICE_PROD_ID12("Intersil", "PRISM 2_5 PCMCIA ADAPTER", 0x4b801a17, 0x6345a0bf),
-        PCMCIA_DEVICE_PROD_ID12("LeArtery", "SYNCBYAIR 11Mbps Wireless LAN PC Card", 0x7e3b326a, 0x49893e92),
         PCMCIA_DEVICE_PROD_ID12("Linksys", "Wireless CompactFlash Card", 0x0733cc81, 0x0c52f395),
-        PCMCIA_DEVICE_PROD_ID12("Lucent Technologies", "WaveLAN/IEEE", 0x23eb9949, 0xc562e72a),
-        PCMCIA_DEVICE_PROD_ID12("MELCO", "WLI-PCM-L11", 0x481e0094, 0x7360e410),
-        PCMCIA_DEVICE_PROD_ID12("MELCO", "WLI-PCM-L11G", 0x481e0094, 0xf57ca4b3),
         PCMCIA_DEVICE_PROD_ID12("Microsoft", "Wireless Notebook Adapter MN-520", 0x5961bf85, 0x6eec8c01),
-        PCMCIA_DEVICE_PROD_ID12("NCR", "WaveLAN/IEEE", 0x24358cd4, 0xc562e72a),
-        PCMCIA_DEVICE_PROD_ID12("NETGEAR MA401 Wireless PC", "Card", 0xa37434e9, 0x9762e8f1),
         PCMCIA_DEVICE_PROD_ID12("NETGEAR MA401RA Wireless PC", "Card", 0x0306467f, 0x9762e8f1),
-        PCMCIA_DEVICE_PROD_ID12("Nortel Networks", "emobility 802.11 Wireless LAN PC Card", 0x2d617ea0, 0x88cd5767),
+        PCMCIA_DEVICE_PROD_ID12("NETGEAR MA401 Wireless PC", "Card", 0xa37434e9, 0x9762e8f1),
         PCMCIA_DEVICE_PROD_ID12("OEM", "PRISM2 IEEE 802.11 PC-Card", 0xfea54c90, 0x48f2bdd6),
-        PCMCIA_DEVICE_PROD_ID12("OTC", "Wireless AirEZY 2411-PCC WLAN Card", 0x4ac44287, 0x235a6bed),
         PCMCIA_DEVICE_PROD_ID12("PLANEX", "GeoWave/GW-CF110", 0x209f40ab, 0xd9715264),
         PCMCIA_DEVICE_PROD_ID12("PLANEX", "GeoWave/GW-NS110", 0x209f40ab, 0x46263178),
-        PCMCIA_DEVICE_PROD_ID12("PROXIM", "LAN PC CARD HARMONY 80211B", 0xc6536a5e, 0x090c3cd9),
-        PCMCIA_DEVICE_PROD_ID12("PROXIM", "LAN PCI CARD HARMONY 80211B", 0xc6536a5e, 0x9f494e26),
-        PCMCIA_DEVICE_PROD_ID12("SAMSUNG", "11Mbps WLAN Card", 0x43d74cb4, 0x579bd91b),
         PCMCIA_DEVICE_PROD_ID12("SMC", "SMC2532W-B EliteConnect Wireless Adapter", 0xc4f8b18b, 0x196bd757),
         PCMCIA_DEVICE_PROD_ID12("SMC", "SMC2632W", 0xc4f8b18b, 0x474a1f2a),
-        PCMCIA_DEVICE_PROD_ID12("Symbol Technologies", "LA4111 Spectrum24 Wireless LAN PC Card", 0x3f02b4d6, 0x3663cb0e),
         PCMCIA_DEVICE_PROD_ID12("ZoomAir 11Mbps High", "Rate wireless Networking", 0x273fe3db, 0x32a1eaee),
         PCMCIA_DEVICE_PROD_ID3("HFA3863", 0x355cb092),
         PCMCIA_DEVICE_PROD_ID3("ISL37100P", 0x630d52b2),
         PCMCIA_DEVICE_PROD_ID3("ISL37101P-10", 0xdd97a26b),
         PCMCIA_DEVICE_PROD_ID3("ISL37300P", 0xc9049a39),
+#endif
         PCMCIA_DEVICE_NULL,
 };
 MODULE_DEVICE_TABLE(pcmcia, orinoco_cs_ids);
diff --git a/drivers/net/wireless/orinoco/wext.c b/drivers/net/wireless/orinoco/wext.c
index 31ca241f7753..29f9bc03190a 100644
--- a/drivers/net/wireless/orinoco/wext.c
+++ b/drivers/net/wireless/orinoco/wext.c
@@ -1505,46 +1505,44 @@ static const struct iw_priv_args orinoco_privtab[] = {
  * Structures to export the Wireless Handlers
  */
 
-#define STD_IW_HANDLER(id, func) \
-        [IW_IOCTL_IDX(id)] = (iw_handler) func
 static const iw_handler orinoco_handler[] = {
-        STD_IW_HANDLER(SIOCSIWCOMMIT,   orinoco_ioctl_commit),
-        STD_IW_HANDLER(SIOCGIWNAME,     cfg80211_wext_giwname),
-        STD_IW_HANDLER(SIOCSIWFREQ,     orinoco_ioctl_setfreq),
-        STD_IW_HANDLER(SIOCGIWFREQ,     orinoco_ioctl_getfreq),
-        STD_IW_HANDLER(SIOCSIWMODE,     cfg80211_wext_siwmode),
-        STD_IW_HANDLER(SIOCGIWMODE,     cfg80211_wext_giwmode),
-        STD_IW_HANDLER(SIOCSIWSENS,     orinoco_ioctl_setsens),
-        STD_IW_HANDLER(SIOCGIWSENS,     orinoco_ioctl_getsens),
-        STD_IW_HANDLER(SIOCGIWRANGE,    cfg80211_wext_giwrange),
-        STD_IW_HANDLER(SIOCSIWSPY,      iw_handler_set_spy),
-        STD_IW_HANDLER(SIOCGIWSPY,      iw_handler_get_spy),
-        STD_IW_HANDLER(SIOCSIWTHRSPY,   iw_handler_set_thrspy),
-        STD_IW_HANDLER(SIOCGIWTHRSPY,   iw_handler_get_thrspy),
-        STD_IW_HANDLER(SIOCSIWAP,       orinoco_ioctl_setwap),
-        STD_IW_HANDLER(SIOCGIWAP,       orinoco_ioctl_getwap),
-        STD_IW_HANDLER(SIOCSIWSCAN,     cfg80211_wext_siwscan),
-        STD_IW_HANDLER(SIOCGIWSCAN,     cfg80211_wext_giwscan),
-        STD_IW_HANDLER(SIOCSIWESSID,    orinoco_ioctl_setessid),
-        STD_IW_HANDLER(SIOCGIWESSID,    orinoco_ioctl_getessid),
-        STD_IW_HANDLER(SIOCSIWRATE,     orinoco_ioctl_setrate),
-        STD_IW_HANDLER(SIOCGIWRATE,     orinoco_ioctl_getrate),
-        STD_IW_HANDLER(SIOCSIWRTS,      orinoco_ioctl_setrts),
-        STD_IW_HANDLER(SIOCGIWRTS,      orinoco_ioctl_getrts),
-        STD_IW_HANDLER(SIOCSIWFRAG,     orinoco_ioctl_setfrag),
-        STD_IW_HANDLER(SIOCGIWFRAG,     orinoco_ioctl_getfrag),
-        STD_IW_HANDLER(SIOCGIWRETRY,    orinoco_ioctl_getretry),
-        STD_IW_HANDLER(SIOCSIWENCODE,   orinoco_ioctl_setiwencode),
-        STD_IW_HANDLER(SIOCGIWENCODE,   orinoco_ioctl_getiwencode),
-        STD_IW_HANDLER(SIOCSIWPOWER,    orinoco_ioctl_setpower),
-        STD_IW_HANDLER(SIOCGIWPOWER,    orinoco_ioctl_getpower),
-        STD_IW_HANDLER(SIOCSIWGENIE,    orinoco_ioctl_set_genie),
-        STD_IW_HANDLER(SIOCGIWGENIE,    orinoco_ioctl_get_genie),
-        STD_IW_HANDLER(SIOCSIWMLME,     orinoco_ioctl_set_mlme),
-        STD_IW_HANDLER(SIOCSIWAUTH,     orinoco_ioctl_set_auth),
-        STD_IW_HANDLER(SIOCGIWAUTH,     orinoco_ioctl_get_auth),
-        STD_IW_HANDLER(SIOCSIWENCODEEXT, orinoco_ioctl_set_encodeext),
-        STD_IW_HANDLER(SIOCGIWENCODEEXT, orinoco_ioctl_get_encodeext),
+        IW_HANDLER(SIOCSIWCOMMIT,       (iw_handler)orinoco_ioctl_commit),
+        IW_HANDLER(SIOCGIWNAME,         (iw_handler)cfg80211_wext_giwname),
+        IW_HANDLER(SIOCSIWFREQ,         (iw_handler)orinoco_ioctl_setfreq),
+        IW_HANDLER(SIOCGIWFREQ,         (iw_handler)orinoco_ioctl_getfreq),
+        IW_HANDLER(SIOCSIWMODE,         (iw_handler)cfg80211_wext_siwmode),
+        IW_HANDLER(SIOCGIWMODE,         (iw_handler)cfg80211_wext_giwmode),
+        IW_HANDLER(SIOCSIWSENS,         (iw_handler)orinoco_ioctl_setsens),
+        IW_HANDLER(SIOCGIWSENS,         (iw_handler)orinoco_ioctl_getsens),
+        IW_HANDLER(SIOCGIWRANGE,        (iw_handler)cfg80211_wext_giwrange),
+        IW_HANDLER(SIOCSIWSPY,          iw_handler_set_spy),
+        IW_HANDLER(SIOCGIWSPY,          iw_handler_get_spy),
+        IW_HANDLER(SIOCSIWTHRSPY,       iw_handler_set_thrspy),
+        IW_HANDLER(SIOCGIWTHRSPY,       iw_handler_get_thrspy),
+        IW_HANDLER(SIOCSIWAP,           (iw_handler)orinoco_ioctl_setwap),
+        IW_HANDLER(SIOCGIWAP,           (iw_handler)orinoco_ioctl_getwap),
+        IW_HANDLER(SIOCSIWSCAN,         (iw_handler)cfg80211_wext_siwscan),
+        IW_HANDLER(SIOCGIWSCAN,         (iw_handler)cfg80211_wext_giwscan),
+        IW_HANDLER(SIOCSIWESSID,        (iw_handler)orinoco_ioctl_setessid),
+        IW_HANDLER(SIOCGIWESSID,        (iw_handler)orinoco_ioctl_getessid),
+        IW_HANDLER(SIOCSIWRATE,         (iw_handler)orinoco_ioctl_setrate),
+        IW_HANDLER(SIOCGIWRATE,         (iw_handler)orinoco_ioctl_getrate),
+        IW_HANDLER(SIOCSIWRTS,          (iw_handler)orinoco_ioctl_setrts),
+        IW_HANDLER(SIOCGIWRTS,          (iw_handler)orinoco_ioctl_getrts),
+        IW_HANDLER(SIOCSIWFRAG,         (iw_handler)orinoco_ioctl_setfrag),
+        IW_HANDLER(SIOCGIWFRAG,         (iw_handler)orinoco_ioctl_getfrag),
+        IW_HANDLER(SIOCGIWRETRY,        (iw_handler)orinoco_ioctl_getretry),
+        IW_HANDLER(SIOCSIWENCODE,       (iw_handler)orinoco_ioctl_setiwencode),
+        IW_HANDLER(SIOCGIWENCODE,       (iw_handler)orinoco_ioctl_getiwencode),
+        IW_HANDLER(SIOCSIWPOWER,        (iw_handler)orinoco_ioctl_setpower),
+        IW_HANDLER(SIOCGIWPOWER,        (iw_handler)orinoco_ioctl_getpower),
+        IW_HANDLER(SIOCSIWGENIE,        orinoco_ioctl_set_genie),
+        IW_HANDLER(SIOCGIWGENIE,        orinoco_ioctl_get_genie),
+        IW_HANDLER(SIOCSIWMLME,         orinoco_ioctl_set_mlme),
+        IW_HANDLER(SIOCSIWAUTH,         orinoco_ioctl_set_auth),
+        IW_HANDLER(SIOCGIWAUTH,         orinoco_ioctl_get_auth),
+        IW_HANDLER(SIOCSIWENCODEEXT,    orinoco_ioctl_set_encodeext),
+        IW_HANDLER(SIOCGIWENCODEEXT,    orinoco_ioctl_get_encodeext),
 };
 
 
@@ -1552,15 +1550,15 @@ static const iw_handler	orinoco_handler[] = {
   Added typecasting since we no longer use iwreq_data -- Moustafa
  */
 static const iw_handler orinoco_private_handler[] = {
-        [0] = (iw_handler) orinoco_ioctl_reset,
-        [1] = (iw_handler) orinoco_ioctl_reset,
-        [2] = (iw_handler) orinoco_ioctl_setport3,
-        [3] = (iw_handler) orinoco_ioctl_getport3,
-        [4] = (iw_handler) orinoco_ioctl_setpreamble,
-        [5] = (iw_handler) orinoco_ioctl_getpreamble,
-        [6] = (iw_handler) orinoco_ioctl_setibssport,
-        [7] = (iw_handler) orinoco_ioctl_getibssport,
-        [9] = (iw_handler) orinoco_ioctl_getrid,
+        [0] = (iw_handler)orinoco_ioctl_reset,
+        [1] = (iw_handler)orinoco_ioctl_reset,
+        [2] = (iw_handler)orinoco_ioctl_setport3,
+        [3] = (iw_handler)orinoco_ioctl_getport3,
+        [4] = (iw_handler)orinoco_ioctl_setpreamble,
+        [5] = (iw_handler)orinoco_ioctl_getpreamble,
+        [6] = (iw_handler)orinoco_ioctl_setibssport,
+        [7] = (iw_handler)orinoco_ioctl_getibssport,
+        [9] = (iw_handler)orinoco_ioctl_getrid,
 };
 
 const struct iw_handler_def orinoco_handler_def = {
diff --git a/drivers/net/wireless/p54/main.c b/drivers/net/wireless/p54/main.c
index 4f752a21495f..36f4c820ad01 100644
--- a/drivers/net/wireless/p54/main.c
+++ b/drivers/net/wireless/p54/main.c
@@ -545,6 +545,7 @@ struct ieee80211_hw *p54_init_common(size_t priv_data_len)
                      IEEE80211_HW_SUPPORTS_PS |
                      IEEE80211_HW_PS_NULLFUNC_STACK |
                      IEEE80211_HW_BEACON_FILTER |
+                     IEEE80211_HW_REPORTS_TX_ACK_STATUS |
                      IEEE80211_HW_NOISE_DBM;
 
         dev->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
diff --git a/drivers/net/wireless/ray_cs.c b/drivers/net/wireless/ray_cs.c
index 84c530aa52f9..54680a3a5acb 100644
--- a/drivers/net/wireless/ray_cs.c
+++ b/drivers/net/wireless/ray_cs.c
@@ -1113,10 +1113,10 @@ static const struct ethtool_ops netdev_ethtool_ops = {
 /*
  * Wireless Handler : get protocol name
  */
-static int ray_get_name(struct net_device *dev,
-                        struct iw_request_info *info, char *cwrq, char *extra)
+static int ray_get_name(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
-        strcpy(cwrq, "IEEE 802.11-FH");
+        strcpy(wrqu->name, "IEEE 802.11-FH");
         return 0;
 }
 
@@ -1124,9 +1124,8 @@ static int ray_get_name(struct net_device *dev,
 /*
  * Wireless Handler : set frequency
  */
-static int ray_set_freq(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_freq *fwrq, char *extra)
+static int ray_set_freq(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
         int err = -EINPROGRESS; /* Call commit handler */
@@ -1136,10 +1135,10 @@ static int ray_set_freq(struct net_device *dev,
                 return -EBUSY;
 
         /* Setting by channel number */
-        if ((fwrq->m > USA_HOP_MOD) || (fwrq->e > 0))
+        if ((wrqu->freq.m > USA_HOP_MOD) || (wrqu->freq.e > 0))
                 err = -EOPNOTSUPP;
         else
-                local->sparm.b5.a_hop_pattern = fwrq->m;
+                local->sparm.b5.a_hop_pattern = wrqu->freq.m;
 
         return err;
 }
@@ -1148,14 +1147,13 @@ static int ray_set_freq(struct net_device *dev,
 /*
  * Wireless Handler : get frequency
  */
-static int ray_get_freq(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_freq *fwrq, char *extra)
+static int ray_get_freq(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
-        fwrq->m = local->sparm.b5.a_hop_pattern;
-        fwrq->e = 0;
+        wrqu->freq.m = local->sparm.b5.a_hop_pattern;
+        wrqu->freq.e = 0;
         return 0;
 }
 
@@ -1163,9 +1161,8 @@ static int ray_get_freq(struct net_device *dev,
 /*
  * Wireless Handler : set ESSID
  */
-static int ray_set_essid(struct net_device *dev,
-                         struct iw_request_info *info,
-                         struct iw_point *dwrq, char *extra)
+static int ray_set_essid(struct net_device *dev, struct iw_request_info *info,
+                         union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
@@ -1174,19 +1171,17 @@ static int ray_set_essid(struct net_device *dev,
                 return -EBUSY;
 
         /* Check if we asked for `any' */
-        if (dwrq->flags == 0) {
+        if (wrqu->essid.flags == 0)
                 /* Corey : can you do that ? */
                 return -EOPNOTSUPP;
-        } else {
-                /* Check the size of the string */
-                if (dwrq->length > IW_ESSID_MAX_SIZE) {
-                        return -E2BIG;
-                }
 
-                /* Set the ESSID in the card */
-                memset(local->sparm.b5.a_current_ess_id, 0, IW_ESSID_MAX_SIZE);
-                memcpy(local->sparm.b5.a_current_ess_id, extra, dwrq->length);
-        }
+        /* Check the size of the string */
+        if (wrqu->essid.length > IW_ESSID_MAX_SIZE)
+                return -E2BIG;
+
+        /* Set the ESSID in the card */
+        memset(local->sparm.b5.a_current_ess_id, 0, IW_ESSID_MAX_SIZE);
+        memcpy(local->sparm.b5.a_current_ess_id, extra, wrqu->essid.length);
 
         return -EINPROGRESS;    /* Call commit handler */
 }
@@ -1195,9 +1190,8 @@ static int ray_set_essid(struct net_device *dev,
 /*
  * Wireless Handler : get ESSID
  */
-static int ray_get_essid(struct net_device *dev,
-                         struct iw_request_info *info,
-                         struct iw_point *dwrq, char *extra)
+static int ray_get_essid(struct net_device *dev, struct iw_request_info *info,
+                         union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
@@ -1205,8 +1199,8 @@ static int ray_get_essid(struct net_device *dev,
         memcpy(extra, local->sparm.b5.a_current_ess_id, IW_ESSID_MAX_SIZE);
 
         /* Push it out ! */
-        dwrq->length = strlen(extra);
-        dwrq->flags = 1;        /* active */
+        wrqu->essid.length = strlen(extra);
+        wrqu->essid.flags = 1;  /* active */
 
         return 0;
 }
@@ -1215,14 +1209,13 @@ static int ray_get_essid(struct net_device *dev,
 /*
  * Wireless Handler : get AP address
  */
-static int ray_get_wap(struct net_device *dev,
-                       struct iw_request_info *info,
-                       struct sockaddr *awrq, char *extra)
+static int ray_get_wap(struct net_device *dev, struct iw_request_info *info,
+                       union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
-        memcpy(awrq->sa_data, local->bss_id, ETH_ALEN);
-        awrq->sa_family = ARPHRD_ETHER;
+        memcpy(wrqu->ap_addr.sa_data, local->bss_id, ETH_ALEN);
+        wrqu->ap_addr.sa_family = ARPHRD_ETHER;
 
         return 0;
 }
@@ -1231,9 +1224,8 @@ static int ray_get_wap(struct net_device *dev,
 /*
  * Wireless Handler : set Bit-Rate
  */
-static int ray_set_rate(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_param *vwrq, char *extra)
+static int ray_set_rate(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
@@ -1242,15 +1234,15 @@ static int ray_set_rate(struct net_device *dev,
                 return -EBUSY;
 
         /* Check if rate is in range */
-        if ((vwrq->value != 1000000) && (vwrq->value != 2000000))
+        if ((wrqu->bitrate.value != 1000000) && (wrqu->bitrate.value != 2000000))
                 return -EINVAL;
 
         /* Hack for 1.5 Mb/s instead of 2 Mb/s */
         if ((local->fw_ver == 0x55) &&  /* Please check */
-            (vwrq->value == 2000000))
+            (wrqu->bitrate.value == 2000000))
                 local->net_default_tx_rate = 3;
         else
-                local->net_default_tx_rate = vwrq->value / 500000;
+                local->net_default_tx_rate = wrqu->bitrate.value / 500000;
 
         return 0;
 }
@@ -1259,17 +1251,16 @@ static int ray_set_rate(struct net_device *dev,
 /*
  * Wireless Handler : get Bit-Rate
  */
-static int ray_get_rate(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_param *vwrq, char *extra)
+static int ray_get_rate(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
         if (local->net_default_tx_rate == 3)
-                vwrq->value = 2000000;  /* Hum... */
+                wrqu->bitrate.value = 2000000;  /* Hum... */
         else
-                vwrq->value = local->net_default_tx_rate * 500000;
-        vwrq->fixed = 0;        /* We are in auto mode */
+                wrqu->bitrate.value = local->net_default_tx_rate * 500000;
+        wrqu->bitrate.fixed = 0;        /* We are in auto mode */
 
         return 0;
 }
@@ -1278,19 +1269,18 @@ static int ray_get_rate(struct net_device *dev,
 /*
  * Wireless Handler : set RTS threshold
  */
-static int ray_set_rts(struct net_device *dev,
-                       struct iw_request_info *info,
-                       struct iw_param *vwrq, char *extra)
+static int ray_set_rts(struct net_device *dev, struct iw_request_info *info,
+                       union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
-        int rthr = vwrq->value;
+        int rthr = wrqu->rts.value;
 
         /* Reject if card is already initialised */
         if (local->card_status != CARD_AWAITING_PARAM)
                 return -EBUSY;
 
         /* if(wrq->u.rts.fixed == 0) we should complain */
-        if (vwrq->disabled)
+        if (wrqu->rts.disabled)
                 rthr = 32767;
         else {
                 if ((rthr < 0) || (rthr > 2347))   /* What's the max packet size ??? */
@@ -1306,16 +1296,15 @@ static int ray_set_rts(struct net_device *dev,
 /*
  * Wireless Handler : get RTS threshold
  */
-static int ray_get_rts(struct net_device *dev,
-                       struct iw_request_info *info,
-                       struct iw_param *vwrq, char *extra)
+static int ray_get_rts(struct net_device *dev, struct iw_request_info *info,
+                       union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
-        vwrq->value = (local->sparm.b5.a_rts_threshold[0] << 8)
+        wrqu->rts.value = (local->sparm.b5.a_rts_threshold[0] << 8)
             + local->sparm.b5.a_rts_threshold[1];
-        vwrq->disabled = (vwrq->value == 32767);
-        vwrq->fixed = 1;
+        wrqu->rts.disabled = (wrqu->rts.value == 32767);
+        wrqu->rts.fixed = 1;
 
         return 0;
 }
@@ -1324,19 +1313,18 @@ static int ray_get_rts(struct net_device *dev,
 /*
  * Wireless Handler : set Fragmentation threshold
  */
-static int ray_set_frag(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_param *vwrq, char *extra)
+static int ray_set_frag(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
-        int fthr = vwrq->value;
+        int fthr = wrqu->frag.value;
 
         /* Reject if card is already initialised */
         if (local->card_status != CARD_AWAITING_PARAM)
                 return -EBUSY;
 
         /* if(wrq->u.frag.fixed == 0) should complain */
-        if (vwrq->disabled)
+        if (wrqu->frag.disabled)
                 fthr = 32767;
         else {
                 if ((fthr < 256) || (fthr > 2347))      /* To check out ! */
@@ -1352,16 +1340,15 @@ static int ray_set_frag(struct net_device *dev,
 /*
  * Wireless Handler : get Fragmentation threshold
  */
-static int ray_get_frag(struct net_device *dev,
-                        struct iw_request_info *info,
-                        struct iw_param *vwrq, char *extra)
+static int ray_get_frag(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
-        vwrq->value = (local->sparm.b5.a_frag_threshold[0] << 8)
+        wrqu->frag.value = (local->sparm.b5.a_frag_threshold[0] << 8)
             + local->sparm.b5.a_frag_threshold[1];
-        vwrq->disabled = (vwrq->value == 32767);
-        vwrq->fixed = 1;
+        wrqu->frag.disabled = (wrqu->frag.value == 32767);
+        wrqu->frag.fixed = 1;
 
         return 0;
 }
@@ -1370,8 +1357,8 @@ static int ray_get_frag(struct net_device *dev,
 /*
  * Wireless Handler : set Mode of Operation
  */
-static int ray_set_mode(struct net_device *dev,
-                        struct iw_request_info *info, __u32 *uwrq, char *extra)
+static int ray_set_mode(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
         int err = -EINPROGRESS; /* Call commit handler */
@@ -1381,7 +1368,7 @@ static int ray_set_mode(struct net_device *dev,
         if (local->card_status != CARD_AWAITING_PARAM)
                 return -EBUSY;
 
-        switch (*uwrq) {
+        switch (wrqu->mode) {
         case IW_MODE_ADHOC:
                 card_mode = 0;
                 /* Fall through */
@@ -1399,15 +1386,15 @@ static int ray_set_mode(struct net_device *dev,
 /*
  * Wireless Handler : get Mode of Operation
  */
-static int ray_get_mode(struct net_device *dev,
-                        struct iw_request_info *info, __u32 *uwrq, char *extra)
+static int ray_get_mode(struct net_device *dev, struct iw_request_info *info,
+                        union iwreq_data *wrqu, char *extra)
 {
         ray_dev_t *local = netdev_priv(dev);
 
         if (local->sparm.b5.a_network_type)
-                *uwrq = IW_MODE_INFRA;
+                wrqu->mode = IW_MODE_INFRA;
         else
-                *uwrq = IW_MODE_ADHOC;
+                wrqu->mode = IW_MODE_ADHOC;
 
         return 0;
 }
@@ -1416,16 +1403,15 @@ static int ray_get_mode(struct net_device *dev,
 /*
  * Wireless Handler : get range info
  */
-static int ray_get_range(struct net_device *dev,
-                         struct iw_request_info *info,
-                         struct iw_point *dwrq, char *extra)
+static int ray_get_range(struct net_device *dev, struct iw_request_info *info,
+                         union iwreq_data *wrqu, char *extra)
 {
         struct iw_range *range = (struct iw_range *)extra;
 
-        memset((char *)range, 0, sizeof(struct iw_range));
+        memset(range, 0, sizeof(struct iw_range));
 
         /* Set the length (very important for backward compatibility) */
-        dwrq->length = sizeof(struct iw_range);
+        wrqu->data.length = sizeof(struct iw_range);
 
         /* Set the Wireless Extension versions */
         range->we_version_compiled = WIRELESS_EXT;
@@ -1448,8 +1434,7 @@ static int ray_get_range(struct net_device *dev,
 /*
  * Wireless Private Handler : set framing mode
  */
-static int ray_set_framing(struct net_device *dev,
-                           struct iw_request_info *info,
+static int ray_set_framing(struct net_device *dev, struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
 {
         translate = *(extra);   /* Set framing mode */
@@ -1461,8 +1446,7 @@ static int ray_set_framing(struct net_device *dev,
 /*
  * Wireless Private Handler : get framing mode
  */
-static int ray_get_framing(struct net_device *dev,
-                           struct iw_request_info *info,
+static int ray_get_framing(struct net_device *dev, struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
 {
         *(extra) = translate;
@@ -1474,8 +1458,7 @@ static int ray_get_framing(struct net_device *dev,
 /*
  * Wireless Private Handler : get country
  */
-static int ray_get_country(struct net_device *dev,
-                           struct iw_request_info *info,
+static int ray_get_country(struct net_device *dev, struct iw_request_info *info,
                            union iwreq_data *wrqu, char *extra)
 {
         *(extra) = country;
@@ -1487,10 +1470,9 @@ static int ray_get_country(struct net_device *dev,
 /*
  * Commit handler : called after a bunch of SET operations
  */
-static int ray_commit(struct net_device *dev, struct iw_request_info *info,     /* NULL */
-                      void *zwrq,       /* NULL */
-                      char *extra)
-{ /* NULL */
+static int ray_commit(struct net_device *dev, struct iw_request_info *info,
+                      union iwreq_data *wrqu, char *extra)
+{
         return 0;
 }
 
@@ -1531,28 +1513,28 @@ static iw_stats *ray_get_wireless_stats(struct net_device *dev)
  */
 
 static const iw_handler ray_handler[] = {
-        [SIOCSIWCOMMIT - SIOCIWFIRST] = (iw_handler) ray_commit,
-        [SIOCGIWNAME - SIOCIWFIRST] = (iw_handler) ray_get_name,
-        [SIOCSIWFREQ - SIOCIWFIRST] = (iw_handler) ray_set_freq,
-        [SIOCGIWFREQ - SIOCIWFIRST] = (iw_handler) ray_get_freq,
-        [SIOCSIWMODE - SIOCIWFIRST] = (iw_handler) ray_set_mode,
-        [SIOCGIWMODE - SIOCIWFIRST] = (iw_handler) ray_get_mode,
-        [SIOCGIWRANGE - SIOCIWFIRST] = (iw_handler) ray_get_range,
+        IW_HANDLER(SIOCSIWCOMMIT, ray_commit),
+        IW_HANDLER(SIOCGIWNAME, ray_get_name),
+        IW_HANDLER(SIOCSIWFREQ, ray_set_freq),
+        IW_HANDLER(SIOCGIWFREQ, ray_get_freq),
+        IW_HANDLER(SIOCSIWMODE, ray_set_mode),
+        IW_HANDLER(SIOCGIWMODE, ray_get_mode),
+        IW_HANDLER(SIOCGIWRANGE, ray_get_range),
 #ifdef WIRELESS_SPY
-        [SIOCSIWSPY - SIOCIWFIRST] = (iw_handler) iw_handler_set_spy,
-        [SIOCGIWSPY - SIOCIWFIRST] = (iw_handler) iw_handler_get_spy,
-        [SIOCSIWTHRSPY - SIOCIWFIRST] = (iw_handler) iw_handler_set_thrspy,
-        [SIOCGIWTHRSPY - SIOCIWFIRST] = (iw_handler) iw_handler_get_thrspy,
+        IW_HANDLER(SIOCSIWSPY, iw_handler_set_spy),
+        IW_HANDLER(SIOCGIWSPY, iw_handler_get_spy),
+        IW_HANDLER(SIOCSIWTHRSPY, iw_handler_set_thrspy),
+        IW_HANDLER(SIOCGIWTHRSPY, iw_handler_get_thrspy),
 #endif /* WIRELESS_SPY */
-        [SIOCGIWAP - SIOCIWFIRST] = (iw_handler) ray_get_wap,
-        [SIOCSIWESSID - SIOCIWFIRST] = (iw_handler) ray_set_essid,
-        [SIOCGIWESSID - SIOCIWFIRST] = (iw_handler) ray_get_essid,
-        [SIOCSIWRATE - SIOCIWFIRST] = (iw_handler) ray_set_rate,
-        [SIOCGIWRATE - SIOCIWFIRST] = (iw_handler) ray_get_rate,
-        [SIOCSIWRTS - SIOCIWFIRST] = (iw_handler) ray_set_rts,
-        [SIOCGIWRTS - SIOCIWFIRST] = (iw_handler) ray_get_rts,
-        [SIOCSIWFRAG - SIOCIWFIRST] = (iw_handler) ray_set_frag,
-        [SIOCGIWFRAG - SIOCIWFIRST] = (iw_handler) ray_get_frag,
+        IW_HANDLER(SIOCGIWAP, ray_get_wap),
+        IW_HANDLER(SIOCSIWESSID, ray_set_essid),
+        IW_HANDLER(SIOCGIWESSID, ray_get_essid),
+        IW_HANDLER(SIOCSIWRATE, ray_set_rate),
+        IW_HANDLER(SIOCGIWRATE, ray_get_rate),
+        IW_HANDLER(SIOCSIWRTS, ray_set_rts),
+        IW_HANDLER(SIOCGIWRTS, ray_get_rts),
+        IW_HANDLER(SIOCSIWFRAG, ray_set_frag),
+        IW_HANDLER(SIOCGIWFRAG, ray_get_frag),
 };
 
 #define SIOCSIPFRAMING  SIOCIWFIRSTPRIV /* Set framing mode */
@@ -1560,9 +1542,9 @@ static const iw_handler ray_handler[] = {
 #define SIOCGIPCOUNTRY  SIOCIWFIRSTPRIV + 3     /* Get country code */
 
 static const iw_handler ray_private_handler[] = {
-        [0] = (iw_handler) ray_set_framing,
-        [1] = (iw_handler) ray_get_framing,
-        [3] = (iw_handler) ray_get_country,
+        [0] = ray_set_framing,
+        [1] = ray_get_framing,
+        [3] = ray_get_country,
 };
 
 static const struct iw_priv_args ray_private_args[] = {
@@ -1893,17 +1875,17 @@ static void ray_update_multi_list(struct net_device *dev, int all)
                 writeb(0xff, &pccs->var);
                 local->num_multi = 0xff;
         } else {
-                struct dev_mc_list *dmi;
+                struct netdev_hw_addr *ha;
                 int i = 0;
 
                 /* Copy the kernel's list of MC addresses to card */
-                netdev_for_each_mc_addr(dmi, dev) {
-                        memcpy_toio(p, dmi->dmi_addr, ETH_ALEN);
+                netdev_for_each_mc_addr(ha, dev) {
+                        memcpy_toio(p, ha->addr, ETH_ALEN);
                         dev_dbg(&link->dev,
                               "ray_update_multi add addr %02x%02x%02x%02x%02x%02x\n",
-                              dmi->dmi_addr[0], dmi->dmi_addr[1],
-                              dmi->dmi_addr[2], dmi->dmi_addr[3],
-                              dmi->dmi_addr[4], dmi->dmi_addr[5]);
+                              ha->addr[0], ha->addr[1],
+                              ha->addr[2], ha->addr[3],
+                              ha->addr[4], ha->addr[5]);
                         p += ETH_ALEN;
                         i++;
                 }
diff --git a/drivers/net/wireless/rndis_wlan.c b/drivers/net/wireless/rndis_wlan.c
index 2887047069f2..8ab9f094747b 100644
--- a/drivers/net/wireless/rndis_wlan.c
+++ b/drivers/net/wireless/rndis_wlan.c
@@ -117,6 +117,7 @@ MODULE_PARM_DESC(workaround_interval,
 #define OID_802_11_ADD_KEY                      cpu_to_le32(0x0d01011d)
 #define OID_802_11_REMOVE_KEY                   cpu_to_le32(0x0d01011e)
 #define OID_802_11_ASSOCIATION_INFORMATION      cpu_to_le32(0x0d01011f)
+#define OID_802_11_CAPABILITY                   cpu_to_le32(0x0d010122)
 #define OID_802_11_PMKID                        cpu_to_le32(0x0d010123)
 #define OID_802_11_NETWORK_TYPES_SUPPORTED      cpu_to_le32(0x0d010203)
 #define OID_802_11_NETWORK_TYPE_IN_USE          cpu_to_le32(0x0d010204)
@@ -358,6 +359,30 @@ struct ndis_80211_assoc_info {
         __le32 offset_resp_ies;
 } __attribute__((packed));
 
+struct ndis_80211_auth_encr_pair {
+        __le32 auth_mode;
+        __le32 encr_mode;
+} __attribute__((packed));
+
+struct ndis_80211_capability {
+        __le32 length;
+        __le32 version;
+        __le32 num_pmkids;
+        __le32 num_auth_encr_pair;
+        struct ndis_80211_auth_encr_pair auth_encr_pair[0];
+} __attribute__((packed));
+
+struct ndis_80211_bssid_info {
+        u8 bssid[6];
+        u8 pmkid[16];
+};
+
+struct ndis_80211_pmkid {
+        __le32 length;
+        __le32 bssid_info_count;
+        struct ndis_80211_bssid_info bssid_info[0];
+};
+
 /*
  *  private data
  */
@@ -476,13 +501,7 @@ struct rndis_wlan_private {
         /* encryption stuff */
         int  encr_tx_key_index;
         struct rndis_wlan_encr_key encr_keys[4];
-        enum nl80211_auth_type wpa_auth_type;
         int  wpa_version;
-        int  wpa_keymgmt;
-        int  wpa_ie_len;
-        u8  *wpa_ie;
-        int  wpa_cipher_pair;
-        int  wpa_cipher_group;
 
         u8 command_buffer[COMMAND_BUFFER_SIZE];
 };
@@ -534,6 +553,14 @@ static int rndis_get_station(struct wiphy *wiphy, struct net_device *dev,
 static int rndis_dump_station(struct wiphy *wiphy, struct net_device *dev,
                                int idx, u8 *mac, struct station_info *sinfo);
 
+static int rndis_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
+                                struct cfg80211_pmksa *pmksa);
+
+static int rndis_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
+                                struct cfg80211_pmksa *pmksa);
+
+static int rndis_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev);
+
 static struct cfg80211_ops rndis_config_ops = {
         .change_virtual_intf = rndis_change_virtual_intf,
         .scan = rndis_scan,
@@ -550,6 +577,9 @@ static struct cfg80211_ops rndis_config_ops = {
         .set_default_key = rndis_set_default_key,
         .get_station = rndis_get_station,
         .dump_station = rndis_dump_station,
+        .set_pmksa = rndis_set_pmksa,
+        .del_pmksa = rndis_del_pmksa,
+        .flush_pmksa = rndis_flush_pmksa,
 };
 
 static void *rndis_wiphy_privid = &rndis_wiphy_privid;
@@ -704,6 +734,7 @@ static int rndis_query_oid(struct usbnet *dev, __le32 oid, void *data, int *len)
                 struct rndis_query_c    *get_c;
         } u;
         int ret, buflen;
+        int resplen, respoffs, copylen;
 
         buflen = *len + sizeof(*u.get);
         if (buflen < CONTROL_BUFFER_SIZE)
@@ -733,11 +764,34 @@ static int rndis_query_oid(struct usbnet *dev, __le32 oid, void *data, int *len)
                            le32_to_cpu(u.get_c->status));
 
         if (ret == 0) {
-                memcpy(data, u.buf + le32_to_cpu(u.get_c->offset) + 8, *len);
+                resplen = le32_to_cpu(u.get_c->len);
+                respoffs = le32_to_cpu(u.get_c->offset) + 8;
 
-                ret = le32_to_cpu(u.get_c->len);
-                if (ret > *len)
-                        *len = ret;
+                if (respoffs > buflen) {
+                        /* Device returned data offset outside buffer, error. */
+                        netdev_dbg(dev->net, "%s(%s): received invalid "
+                                "data offset: %d > %d\n", __func__,
+                                oid_to_string(oid), respoffs, buflen);
+
+                        ret = -EINVAL;
+                        goto exit_unlock;
+                }
+
+                if ((resplen + respoffs) > buflen) {
+                        /* Device would have returned more data if buffer would
+                         * have been big enough. Copy just the bits that we got.
+                         */
+                        copylen = buflen - respoffs;
+                } else {
+                        copylen = resplen;
+                }
+
+                if (copylen > *len)
+                        copylen = *len;
+
+                memcpy(data, u.buf + respoffs, copylen);
+
+                *len = resplen;
 
                 ret = rndis_error_status(u.get_c->status);
                 if (ret < 0)
@@ -746,6 +800,7 @@ static int rndis_query_oid(struct usbnet *dev, __le32 oid, void *data, int *len)
                                    le32_to_cpu(u.get_c->status), ret);
         }
 
+exit_unlock:
         mutex_unlock(&priv->command_lock);
 
         if (u.buf != priv->command_buffer)
@@ -1091,8 +1146,6 @@ static int set_auth_mode(struct usbnet *usbdev, u32 wpa_version,
         }
 
         priv->wpa_version = wpa_version;
-        priv->wpa_auth_type = auth_type;
-        priv->wpa_keymgmt = keymgmt;
 
         return 0;
 }
@@ -1117,7 +1170,6 @@ static int set_priv_filter(struct usbnet *usbdev)
 
 static int set_encr_mode(struct usbnet *usbdev, int pairwise, int groupwise)
 {
-        struct rndis_wlan_private *priv = get_rndis_wlan_priv(usbdev);
         __le32 tmp;
         int encr_mode, ret;
 
@@ -1146,8 +1198,6 @@ static int set_encr_mode(struct usbnet *usbdev, int pairwise, int groupwise)
                 return ret;
         }
 
-        priv->wpa_cipher_pair = pairwise;
-        priv->wpa_cipher_group = groupwise;
         return 0;
 }
 
@@ -1495,7 +1545,7 @@ static int remove_key(struct usbnet *usbdev, int index, const u8 *bssid)
 static void set_multicast_list(struct usbnet *usbdev)
 {
         struct rndis_wlan_private *priv = get_rndis_wlan_priv(usbdev);
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         __le32 filter, basefilter;
         int ret;
         char *mc_addrs = NULL;
@@ -1534,9 +1584,9 @@ static void set_multicast_list(struct usbnet *usbdev)
                         return;
                 }
 
-                netdev_for_each_mc_addr(mclist, usbdev->net)
+                netdev_for_each_mc_addr(ha, usbdev->net)
                         memcpy(mc_addrs + i++ * ETH_ALEN,
-                               mclist->dmi_addr, ETH_ALEN);
+                               ha->addr, ETH_ALEN);
         }
         netif_addr_unlock_bh(usbdev->net);
 
@@ -1568,6 +1618,194 @@ set_filter:
                    le32_to_cpu(filter), ret);
 }
 
+#ifdef DEBUG
+static void debug_print_pmkids(struct usbnet *usbdev,
+                                struct ndis_80211_pmkid *pmkids,
+                                const char *func_str)
+{
+        struct rndis_wlan_private *priv = get_rndis_wlan_priv(usbdev);
+        int i, len, count, max_pmkids, entry_len;
+
+        max_pmkids = priv->wdev.wiphy->max_num_pmkids;
+        len = le32_to_cpu(pmkids->length);
+        count = le32_to_cpu(pmkids->bssid_info_count);
+
+        entry_len = (count > 0) ? (len - sizeof(*pmkids)) / count : -1;
+
+        netdev_dbg(usbdev->net, "%s(): %d PMKIDs (data len: %d, entry len: "
+                                "%d)\n", func_str, count, len, entry_len);
+
+        if (count > max_pmkids)
+                count = max_pmkids;
+
+        for (i = 0; i < count; i++) {
+                u32 *tmp = (u32 *)pmkids->bssid_info[i].pmkid;
+
+                netdev_dbg(usbdev->net, "%s():  bssid: %pM, "
+                                "pmkid: %08X:%08X:%08X:%08X\n",
+                                func_str, pmkids->bssid_info[i].bssid,
+                                cpu_to_be32(tmp[0]), cpu_to_be32(tmp[1]),
+                                cpu_to_be32(tmp[2]), cpu_to_be32(tmp[3]));
+        }
+}
+#else
+static void debug_print_pmkids(struct usbnet *usbdev,
+                                struct ndis_80211_pmkid *pmkids,
+                                const char *func_str)
+{
+        return;
+}
+#endif
+
+static struct ndis_80211_pmkid *get_device_pmkids(struct usbnet *usbdev)
+{
+        struct rndis_wlan_private *priv = get_rndis_wlan_priv(usbdev);
+        struct ndis_80211_pmkid *pmkids;
+        int len, ret, max_pmkids;
+
+        max_pmkids = priv->wdev.wiphy->max_num_pmkids;
+        len = sizeof(*pmkids) + max_pmkids * sizeof(pmkids->bssid_info[0]);
+
+        pmkids = kzalloc(len, GFP_KERNEL);
+        if (!pmkids)
+                return ERR_PTR(-ENOMEM);
+
+        pmkids->length = cpu_to_le32(len);
+        pmkids->bssid_info_count = cpu_to_le32(max_pmkids);
+
+        ret = rndis_query_oid(usbdev, OID_802_11_PMKID, pmkids, &len);
+        if (ret < 0) {
+                netdev_dbg(usbdev->net, "%s(): OID_802_11_PMKID(%d, %d)"
+                                " -> %d\n", __func__, len, max_pmkids, ret);
+
+                kfree(pmkids);
+                return ERR_PTR(ret);
+        }
+
+        if (le32_to_cpu(pmkids->bssid_info_count) > max_pmkids)
+                pmkids->bssid_info_count = cpu_to_le32(max_pmkids);
+
+        debug_print_pmkids(usbdev, pmkids, __func__);
+
+        return pmkids;
+}
+
+static int set_device_pmkids(struct usbnet *usbdev,
+                                struct ndis_80211_pmkid *pmkids)
+{
+        int ret, len, num_pmkids;
+
+        num_pmkids = le32_to_cpu(pmkids->bssid_info_count);
+        len = sizeof(*pmkids) + num_pmkids * sizeof(pmkids->bssid_info[0]);
+        pmkids->length = cpu_to_le32(len);
+
+        debug_print_pmkids(usbdev, pmkids, __func__);
+
+        ret = rndis_set_oid(usbdev, OID_802_11_PMKID, pmkids,
+                                                le32_to_cpu(pmkids->length));
+        if (ret < 0) {
+                netdev_dbg(usbdev->net, "%s(): OID_802_11_PMKID(%d, %d) -> %d"
+                                "\n", __func__, len, num_pmkids, ret);
+        }
+
+        kfree(pmkids);
+        return ret;
+}
+
+static struct ndis_80211_pmkid *remove_pmkid(struct usbnet *usbdev,
+                                                struct ndis_80211_pmkid *pmkids,
+                                                struct cfg80211_pmksa *pmksa,
+                                                int max_pmkids)
+{
+        int i, len, count, newlen, err;
+
+        len = le32_to_cpu(pmkids->length);
+        count = le32_to_cpu(pmkids->bssid_info_count);
+
+        if (count > max_pmkids)
+                count = max_pmkids;
+
+        for (i = 0; i < count; i++)
+                if (!compare_ether_addr(pmkids->bssid_info[i].bssid,
+                                                        pmksa->bssid))
+                        break;
+
+        /* pmkid not found */
+        if (i == count) {
+                netdev_dbg(usbdev->net, "%s(): bssid not found (%pM)\n",
+                                        __func__, pmksa->bssid);
+                err = -ENOENT;
+                goto error;
+        }
+
+        for (; i + 1 < count; i++)
+                pmkids->bssid_info[i] = pmkids->bssid_info[i + 1];
+
+        count--;
+        newlen = sizeof(*pmkids) + count * sizeof(pmkids->bssid_info[0]);
+
+        pmkids->length = cpu_to_le32(newlen);
+        pmkids->bssid_info_count = cpu_to_le32(count);
+
+        return pmkids;
+error:
+        kfree(pmkids);
+        return ERR_PTR(err);
+}
+
+static struct ndis_80211_pmkid *update_pmkid(struct usbnet *usbdev,
+                                                struct ndis_80211_pmkid *pmkids,
+                                                struct cfg80211_pmksa *pmksa,
+                                                int max_pmkids)
+{
+        int i, err, len, count, newlen;
+
+        len = le32_to_cpu(pmkids->length);
+        count = le32_to_cpu(pmkids->bssid_info_count);
+
+        if (count > max_pmkids)
+                count = max_pmkids;
+
+        /* update with new pmkid */
+        for (i = 0; i < count; i++) {
+                if (compare_ether_addr(pmkids->bssid_info[i].bssid,
+                                                        pmksa->bssid))
+                        continue;
+
+                memcpy(pmkids->bssid_info[i].pmkid, pmksa->pmkid,
+                                                                WLAN_PMKID_LEN);
+
+                return pmkids;
+        }
+
+        /* out of space, return error */
+        if (i == max_pmkids) {
+                netdev_dbg(usbdev->net, "%s(): out of space\n", __func__);
+                err = -ENOSPC;
+                goto error;
+        }
+
+        /* add new pmkid */
+        newlen = sizeof(*pmkids) + (count + 1) * sizeof(pmkids->bssid_info[0]);
+
+        pmkids = krealloc(pmkids, newlen, GFP_KERNEL);
+        if (!pmkids) {
+                err = -ENOMEM;
+                goto error;
+        }
+
+        pmkids->length = cpu_to_le32(newlen);
+        pmkids->bssid_info_count = cpu_to_le32(count + 1);
+
+        memcpy(pmkids->bssid_info[count].bssid, pmksa->bssid, ETH_ALEN);
+        memcpy(pmkids->bssid_info[count].pmkid, pmksa->pmkid, WLAN_PMKID_LEN);
+
+        return pmkids;
+error:
+        kfree(pmkids);
+        return ERR_PTR(err);
+}
+
 /*
  * cfg80211 ops
  */
@@ -2178,6 +2416,78 @@ static int rndis_dump_station(struct wiphy *wiphy, struct net_device *dev,
         return 0;
 }
 
+static int rndis_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
+                                struct cfg80211_pmksa *pmksa)
+{
+        struct rndis_wlan_private *priv = wiphy_priv(wiphy);
+        struct usbnet *usbdev = priv->usbdev;
+        struct ndis_80211_pmkid *pmkids;
+        u32 *tmp = (u32 *)pmksa->pmkid;
+
+        netdev_dbg(usbdev->net, "%s(%pM, %08X:%08X:%08X:%08X)\n", __func__,
+                        pmksa->bssid,
+                        cpu_to_be32(tmp[0]), cpu_to_be32(tmp[1]),
+                        cpu_to_be32(tmp[2]), cpu_to_be32(tmp[3]));
+
+        pmkids = get_device_pmkids(usbdev);
+        if (IS_ERR(pmkids)) {
+                /* couldn't read PMKID cache from device */
+                return PTR_ERR(pmkids);
+        }
+
+        pmkids = update_pmkid(usbdev, pmkids, pmksa, wiphy->max_num_pmkids);
+        if (IS_ERR(pmkids)) {
+                /* not found, list full, etc */
+                return PTR_ERR(pmkids);
+        }
+
+        return set_device_pmkids(usbdev, pmkids);
+}
+
+static int rndis_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
+                                struct cfg80211_pmksa *pmksa)
+{
+        struct rndis_wlan_private *priv = wiphy_priv(wiphy);
+        struct usbnet *usbdev = priv->usbdev;
+        struct ndis_80211_pmkid *pmkids;
+        u32 *tmp = (u32 *)pmksa->pmkid;
+
+        netdev_dbg(usbdev->net, "%s(%pM, %08X:%08X:%08X:%08X)\n", __func__,
+                        pmksa->bssid,
+                        cpu_to_be32(tmp[0]), cpu_to_be32(tmp[1]),
+                        cpu_to_be32(tmp[2]), cpu_to_be32(tmp[3]));
+
+        pmkids = get_device_pmkids(usbdev);
+        if (IS_ERR(pmkids)) {
+                /* Couldn't read PMKID cache from device */
+                return PTR_ERR(pmkids);
+        }
+
+        pmkids = remove_pmkid(usbdev, pmkids, pmksa, wiphy->max_num_pmkids);
+        if (IS_ERR(pmkids)) {
+                /* not found, etc */
+                return PTR_ERR(pmkids);
+        }
+
+        return set_device_pmkids(usbdev, pmkids);
+}
+
+static int rndis_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
+{
+        struct rndis_wlan_private *priv = wiphy_priv(wiphy);
+        struct usbnet *usbdev = priv->usbdev;
+        struct ndis_80211_pmkid pmkid;
+
+        netdev_dbg(usbdev->net, "%s()\n", __func__);
+
+        memset(&pmkid, 0, sizeof(pmkid));
+
+        pmkid.length = cpu_to_le32(sizeof(pmkid));
+        pmkid.bssid_info_count = cpu_to_le32(0);
+
+        return rndis_set_oid(usbdev, OID_802_11_PMKID, &pmkid, sizeof(pmkid));
+}
+
 /*
  * workers, indication handlers, device poller
  */
@@ -2522,12 +2832,14 @@ static void rndis_wlan_indication(struct usbnet *usbdev, void *ind, int buflen)
         }
 }
 
-static int rndis_wlan_get_caps(struct usbnet *usbdev)
+static int rndis_wlan_get_caps(struct usbnet *usbdev, struct wiphy *wiphy)
 {
         struct {
                 __le32  num_items;
                 __le32  items[8];
         } networks_supported;
+        struct ndis_80211_capability *caps;
+        u8 caps_buf[sizeof(*caps) + sizeof(caps->auth_encr_pair) * 16];
         int len, retval, i, n;
         struct rndis_wlan_private *priv = get_rndis_wlan_priv(usbdev);
 
@@ -2555,6 +2867,21 @@ static int rndis_wlan_get_caps(struct usbnet *usbdev)
                 }
         }
 
+        /* get device 802.11 capabilities, number of PMKIDs */
+        caps = (struct ndis_80211_capability *)caps_buf;
+        len = sizeof(caps_buf);
+        retval = rndis_query_oid(usbdev, OID_802_11_CAPABILITY, caps, &len);
+        if (retval >= 0) {
+                netdev_dbg(usbdev->net, "OID_802_11_CAPABILITY -> len %d, "
+                                "ver %d, pmkids %d, auth-encr-pairs %d\n",
+                                le32_to_cpu(caps->length),
+                                le32_to_cpu(caps->version),
+                                le32_to_cpu(caps->num_pmkids),
+                                le32_to_cpu(caps->num_auth_encr_pair));
+                wiphy->max_num_pmkids = le32_to_cpu(caps->num_pmkids);
+        } else
+                wiphy->max_num_pmkids = 0;
+
         return retval;
 }
 
@@ -2802,7 +3129,7 @@ static int rndis_wlan_bind(struct usbnet *usbdev, struct usb_interface *intf)
         wiphy->max_scan_ssids = 1;
 
         /* TODO: fill-out band/encr information based on priv->caps */
-        rndis_wlan_get_caps(usbdev);
+        rndis_wlan_get_caps(usbdev, wiphy);
 
         memcpy(priv->channels, rndis_channels, sizeof(rndis_channels));
         memcpy(priv->rates, rndis_rates, sizeof(rndis_rates));
@@ -2862,9 +3189,6 @@ static void rndis_wlan_unbind(struct usbnet *usbdev, struct usb_interface *intf)
         flush_workqueue(priv->workqueue);
         destroy_workqueue(priv->workqueue);
 
-        if (priv && priv->wpa_ie_len)
-                kfree(priv->wpa_ie);
-
         rndis_unbind(usbdev, intf);
 
         wiphy_unregister(priv->wdev.wiphy);
diff --git a/drivers/net/wireless/rt2x00/rt2800pci.c b/drivers/net/wireless/rt2x00/rt2800pci.c
index 91cce2d0f6db..b1f5643f83fc 100644
--- a/drivers/net/wireless/rt2x00/rt2800pci.c
+++ b/drivers/net/wireless/rt2x00/rt2800pci.c
@@ -907,14 +907,12 @@ static void rt2800pci_txdone(struct rt2x00_dev *rt2x00dev)
 {
         struct data_queue *queue;
         struct queue_entry *entry;
-        struct queue_entry *entry_done;
-        struct queue_entry_priv_pci *entry_priv;
+        __le32 *txwi;
         struct txdone_entry_desc txdesc;
         u32 word;
         u32 reg;
         u32 old_reg;
-        unsigned int type;
-        unsigned int index;
+        int wcid, ack, pid, tx_wcid, tx_ack, tx_pid;
         u16 mcs, real_mcs;
 
         /*
@@ -936,71 +934,76 @@ static void rt2800pci_txdone(struct rt2x00_dev *rt2x00dev)
                         break;
                 old_reg = reg;
 
+                wcid    = rt2x00_get_field32(reg, TX_STA_FIFO_WCID);
+                ack     = rt2x00_get_field32(reg, TX_STA_FIFO_TX_ACK_REQUIRED);
+                pid     = rt2x00_get_field32(reg, TX_STA_FIFO_PID_TYPE);
+
                 /*
                  * Skip this entry when it contains an invalid
                  * queue identication number.
                  */
-                type = rt2x00_get_field32(reg, TX_STA_FIFO_PID_TYPE) - 1;
-                if (type >= QID_RX)
+                if (pid <= 0 || pid > QID_RX)
                         continue;
 
-                queue = rt2x00queue_get_queue(rt2x00dev, type);
+                queue = rt2x00queue_get_queue(rt2x00dev, pid - 1);
                 if (unlikely(!queue))
                         continue;
 
                 /*
-                 * Skip this entry when it contains an invalid
-                 * index number.
+                 * Inside each queue, we process each entry in a chronological
+                 * order. We first check that the queue is not empty.
                  */
-                index = rt2x00_get_field32(reg, TX_STA_FIFO_WCID) - 1;
-                if (unlikely(index >= queue->limit))
+                if (rt2x00queue_empty(queue))
                         continue;
+                entry = rt2x00queue_get_entry(queue, Q_INDEX_DONE);
 
-                entry = &queue->entries[index];
-                entry_priv = entry->priv_data;
-                rt2x00_desc_read((__le32 *)entry->skb->data, 0, &word);
-
-                entry_done = rt2x00queue_get_entry(queue, Q_INDEX_DONE);
-                while (entry != entry_done) {
-                        /*
-                         * Catch up.
-                         * Just report any entries we missed as failed.
-                         */
-                        WARNING(rt2x00dev,
-                                "TX status report missed for entry %d\n",
-                                entry_done->entry_idx);
+                /* Check if we got a match by looking at WCID/ACK/PID
+                 * fields */
+                txwi = (__le32 *)(entry->skb->data -
+                                  rt2x00dev->ops->extra_tx_headroom);
 
-                        txdesc.flags = 0;
-                        __set_bit(TXDONE_UNKNOWN, &txdesc.flags);
-                        txdesc.retry = 0;
+                rt2x00_desc_read(txwi, 1, &word);
+                tx_wcid = rt2x00_get_field32(word, TXWI_W1_WIRELESS_CLI_ID);
+                tx_ack  = rt2x00_get_field32(word, TXWI_W1_ACK);
+                tx_pid  = rt2x00_get_field32(word, TXWI_W1_PACKETID);
 
-                        rt2x00lib_txdone(entry_done, &txdesc);
-                        entry_done = rt2x00queue_get_entry(queue, Q_INDEX_DONE);
-                }
+                if ((wcid != tx_wcid) || (ack != tx_ack) || (pid != tx_pid))
+                        WARNING(rt2x00dev, "invalid TX_STA_FIFO content\n");
 
                 /*
                  * Obtain the status about this packet.
                  */
                 txdesc.flags = 0;
-                if (rt2x00_get_field32(reg, TX_STA_FIFO_TX_SUCCESS))
-                        __set_bit(TXDONE_SUCCESS, &txdesc.flags);
-                else
-                        __set_bit(TXDONE_FAILURE, &txdesc.flags);
+                rt2x00_desc_read(txwi, 0, &word);
+                mcs = rt2x00_get_field32(word, TXWI_W0_MCS);
+                real_mcs = rt2x00_get_field32(reg, TX_STA_FIFO_MCS);
 
                 /*
                  * Ralink has a retry mechanism using a global fallback
-                 * table. We setup this fallback table to try immediate
-                 * lower rate for all rates. In the TX_STA_FIFO,
-                 * the MCS field contains the MCS used for the successfull
-                 * transmission. If the first transmission succeed,
-                 * we have mcs == tx_mcs. On the second transmission,
-                 * we have mcs = tx_mcs - 1. So the number of
-                 * retry is (tx_mcs - mcs).
+                 * table. We setup this fallback table to try the immediate
+                 * lower rate for all rates. In the TX_STA_FIFO, the MCS field
+                 * always contains the MCS used for the last transmission, be
+                 * it successful or not.
                  */
-                mcs = rt2x00_get_field32(word, TXWI_W0_MCS);
-                real_mcs = rt2x00_get_field32(reg, TX_STA_FIFO_MCS);
+                if (rt2x00_get_field32(reg, TX_STA_FIFO_TX_SUCCESS)) {
+                        /*
+                         * Transmission succeeded. The number of retries is
+                         * mcs - real_mcs
+                         */
+                        __set_bit(TXDONE_SUCCESS, &txdesc.flags);
+                        txdesc.retry = ((mcs > real_mcs) ? mcs - real_mcs : 0);
+                } else {
+                        /*
+                         * Transmission failed. The number of retries is
+                         * always 7 in this case (for a total number of 8
+                         * frames sent).
+                         */
+                        __set_bit(TXDONE_FAILURE, &txdesc.flags);
+                        txdesc.retry = 7;
+                }
+
                 __set_bit(TXDONE_FALLBACK, &txdesc.flags);
-                txdesc.retry = mcs - min(mcs, real_mcs);
+
 
                 rt2x00lib_txdone(entry, &txdesc);
         }
@@ -1184,6 +1187,7 @@ static const struct rt2x00_ops rt2800pci_ops = {
 /*
  * RT2800pci module information.
  */
+#ifdef CONFIG_RT2800PCI_PCI
 static DEFINE_PCI_DEVICE_TABLE(rt2800pci_device_table) = {
         { PCI_DEVICE(0x1814, 0x0601), PCI_DEVICE_DATA(&rt2800pci_ops) },
         { PCI_DEVICE(0x1814, 0x0681), PCI_DEVICE_DATA(&rt2800pci_ops) },
@@ -1211,6 +1215,7 @@ static DEFINE_PCI_DEVICE_TABLE(rt2800pci_device_table) = {
 #endif
         { 0, }
 };
+#endif /* CONFIG_RT2800PCI_PCI */
 
 MODULE_AUTHOR(DRV_PROJECT);
 MODULE_VERSION(DRV_VERSION);
diff --git a/drivers/net/wireless/rtl818x/rtl8180_dev.c b/drivers/net/wireless/rtl818x/rtl8180_dev.c
index 2b928ecf47bd..fb8a62f2b9b4 100644
--- a/drivers/net/wireless/rtl818x/rtl8180_dev.c
+++ b/drivers/net/wireless/rtl818x/rtl8180_dev.c
@@ -723,10 +723,10 @@ static void rtl8180_bss_info_changed(struct ieee80211_hw *dev,
                 priv->rf->conf_erp(dev, info);
 }
 
-static u64 rtl8180_prepare_multicast(struct ieee80211_hw *dev, int mc_count,
-                                     struct dev_addr_list *mc_list)
+static u64 rtl8180_prepare_multicast(struct ieee80211_hw *dev,
+                                     struct netdev_hw_addr_list *mc_list)
 {
-        return mc_count;
+        return netdev_hw_addr_list_count(mc_list);
 }
 
 static void rtl8180_configure_filter(struct ieee80211_hw *dev,
diff --git a/drivers/net/wireless/rtl818x/rtl8187_dev.c b/drivers/net/wireless/rtl818x/rtl8187_dev.c
index 0fb850e0c656..441d817ed489 100644
--- a/drivers/net/wireless/rtl818x/rtl8187_dev.c
+++ b/drivers/net/wireless/rtl818x/rtl8187_dev.c
@@ -1193,9 +1193,9 @@ static void rtl8187_bss_info_changed(struct ieee80211_hw *dev,
 }
 
 static u64 rtl8187_prepare_multicast(struct ieee80211_hw *dev,
-                                     int mc_count, struct dev_addr_list *mc_list)
+                                     struct netdev_hw_addr_list *mc_list)
 {
-        return mc_count;
+        return netdev_hw_addr_list_count(mc_list);
 }
 
 static void rtl8187_configure_filter(struct ieee80211_hw *dev,
diff --git a/drivers/net/wireless/wl12xx/Kconfig b/drivers/net/wireless/wl12xx/Kconfig
index 785e0244e305..337fc7bec5a5 100644
--- a/drivers/net/wireless/wl12xx/Kconfig
+++ b/drivers/net/wireless/wl12xx/Kconfig
@@ -51,3 +51,27 @@ config WL1271
 
           If you choose to build a module, it'll be called wl1271. Say N if
           unsure.
+
+config WL1271_SPI
+        tristate "TI wl1271 SPI support"
+        depends on WL1271 && SPI_MASTER
+        ---help---
+          This module adds support for the SPI interface of adapters using
+          TI wl1271 chipset.  Select this if your platform is using
+          the SPI bus.
+
+          If you choose to build a module, it'll be called wl1251_spi.
+          Say N if unsure.
+
+config WL1271_SDIO
+        tristate "TI wl1271 SDIO support"
+        depends on WL1271 && MMC && ARM
+        ---help---
+          This module adds support for the SDIO interface of adapters using
+          TI wl1271 chipset.  Select this if your platform is using
+          the SDIO bus.
+
+          If you choose to build a module, it'll be called
+          wl1271_sdio. Say N if unsure.
+
+
diff --git a/drivers/net/wireless/wl12xx/Makefile b/drivers/net/wireless/wl12xx/Makefile
index f47ec94c16dc..27ddd2be0a91 100644
--- a/drivers/net/wireless/wl12xx/Makefile
+++ b/drivers/net/wireless/wl12xx/Makefile
@@ -7,10 +7,12 @@ obj-$(CONFIG_WL1251)	+= wl1251.o
 obj-$(CONFIG_WL1251_SPI)        += wl1251_spi.o
 obj-$(CONFIG_WL1251_SDIO)       += wl1251_sdio.o
 
-wl1271-objs             = wl1271_main.o  wl1271_spi.o wl1271_cmd.o  \
+wl1271-objs             = wl1271_main.o  wl1271_cmd.o wl1271_io.o \
                           wl1271_event.o wl1271_tx.o  wl1271_rx.o   \
                           wl1271_ps.o    wl1271_acx.o wl1271_boot.o \
-                          wl1271_init.o  wl1271_debugfs.o wl1271_io.o
+                          wl1271_init.o  wl1271_debugfs.o
 
 wl1271-$(CONFIG_NL80211_TESTMODE)       += wl1271_testmode.o
 obj-$(CONFIG_WL1271)    += wl1271.o
+obj-$(CONFIG_WL1271_SPI)        += wl1271_spi.o
+obj-$(CONFIG_WL1271_SDIO)       += wl1271_sdio.o
diff --git a/drivers/net/wireless/wl12xx/wl1251.h b/drivers/net/wireless/wl12xx/wl1251.h
index 37c61c19cae5..4f5f02a26e62 100644
--- a/drivers/net/wireless/wl12xx/wl1251.h
+++ b/drivers/net/wireless/wl12xx/wl1251.h
@@ -256,6 +256,8 @@ struct wl1251_debugfs {
 struct wl1251_if_operations {
         void (*read)(struct wl1251 *wl, int addr, void *buf, size_t len);
         void (*write)(struct wl1251 *wl, int addr, void *buf, size_t len);
+        void (*read_elp)(struct wl1251 *wl, int addr, u32 *val);
+        void (*write_elp)(struct wl1251 *wl, int addr, u32 val);
         void (*reset)(struct wl1251 *wl);
         void (*enable_irq)(struct wl1251 *wl);
         void (*disable_irq)(struct wl1251 *wl);
diff --git a/drivers/net/wireless/wl12xx/wl1251_boot.c b/drivers/net/wireless/wl12xx/wl1251_boot.c
index 28a808674080..acb334184d70 100644
--- a/drivers/net/wireless/wl12xx/wl1251_boot.c
+++ b/drivers/net/wireless/wl12xx/wl1251_boot.c
@@ -496,7 +496,8 @@ int wl1251_boot(struct wl1251 *wl)
         /* 2. start processing NVS file */
         if (wl->use_eeprom) {
                 wl1251_reg_write32(wl, ACX_REG_EE_START, START_EEPROM_MGR);
-                msleep(4000);
+                /* Wait for EEPROM NVS burst read to complete */
+                msleep(40);
                 wl1251_reg_write32(wl, ACX_EEPROMLESS_IND_REG, USE_EEPROM);
         } else {
                 ret = wl1251_boot_upload_nvs(wl);
diff --git a/drivers/net/wireless/wl12xx/wl1251_io.h b/drivers/net/wireless/wl12xx/wl1251_io.h
index b89d2ac62efb..c545e9d5f512 100644
--- a/drivers/net/wireless/wl12xx/wl1251_io.h
+++ b/drivers/net/wireless/wl12xx/wl1251_io.h
@@ -48,6 +48,26 @@ static inline void wl1251_write32(struct wl1251 *wl, int addr, u32 val)
         wl->if_ops->write(wl, addr, &val, sizeof(u32));
 }
 
+static inline u32 wl1251_read_elp(struct wl1251 *wl, int addr)
+{
+        u32 response;
+
+        if (wl->if_ops->read_elp)
+                wl->if_ops->read_elp(wl, addr, &response);
+        else
+                wl->if_ops->read(wl, addr, &response, sizeof(u32));
+
+        return response;
+}
+
+static inline void wl1251_write_elp(struct wl1251 *wl, int addr, u32 val)
+{
+        if (wl->if_ops->write_elp)
+                wl->if_ops->write_elp(wl, addr, val);
+        else
+                wl->if_ops->write(wl, addr, &val, sizeof(u32));
+}
+
 /* Memory target IO, address is translated to partition 0 */
 void wl1251_mem_read(struct wl1251 *wl, int addr, void *buf, size_t len);
 void wl1251_mem_write(struct wl1251 *wl, int addr, void *buf, size_t len);
diff --git a/drivers/net/wireless/wl12xx/wl1251_main.c b/drivers/net/wireless/wl12xx/wl1251_main.c
index 24ae6a360ac8..0155653b7105 100644
--- a/drivers/net/wireless/wl12xx/wl1251_main.c
+++ b/drivers/net/wireless/wl12xx/wl1251_main.c
@@ -146,8 +146,8 @@ static void wl1251_fw_wakeup(struct wl1251 *wl)
         u32 elp_reg;
 
         elp_reg = ELPCTRL_WAKE_UP;
-        wl1251_write32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
-        elp_reg = wl1251_read32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
+        wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
+        elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
 
         if (!(elp_reg & ELPCTRL_WLAN_READY))
                 wl1251_warning("WLAN not ready");
diff --git a/drivers/net/wireless/wl12xx/wl1251_ps.c b/drivers/net/wireless/wl12xx/wl1251_ps.c
index 851dfb65e474..b55cb2bd459a 100644
--- a/drivers/net/wireless/wl12xx/wl1251_ps.c
+++ b/drivers/net/wireless/wl12xx/wl1251_ps.c
@@ -45,7 +45,7 @@ void wl1251_elp_work(struct work_struct *work)
                 goto out;
 
         wl1251_debug(DEBUG_PSM, "chip to elp");
-        wl1251_write32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, ELPCTRL_SLEEP);
+        wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, ELPCTRL_SLEEP);
         wl->elp = true;
 
 out:
@@ -79,9 +79,9 @@ int wl1251_ps_elp_wakeup(struct wl1251 *wl)
         start = jiffies;
         timeout = jiffies + msecs_to_jiffies(WL1251_WAKEUP_TIMEOUT);
 
-        wl1251_write32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, ELPCTRL_WAKE_UP);
+        wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, ELPCTRL_WAKE_UP);
 
-        elp_reg = wl1251_read32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
+        elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
 
         /*
          * FIXME: we should wait for irq from chip but, as a temporary
@@ -93,7 +93,7 @@ int wl1251_ps_elp_wakeup(struct wl1251 *wl)
                         return -ETIMEDOUT;
                 }
                 msleep(1);
-                elp_reg = wl1251_read32(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
+                elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
         }
 
         wl1251_debug(DEBUG_PSM, "wakeup time: %u ms",
diff --git a/drivers/net/wireless/wl12xx/wl1251_sdio.c b/drivers/net/wireless/wl12xx/wl1251_sdio.c
index 9423f22bdced..2051ef06e9ec 100644
--- a/drivers/net/wireless/wl12xx/wl1251_sdio.c
+++ b/drivers/net/wireless/wl12xx/wl1251_sdio.c
@@ -20,20 +20,11 @@
  * Copyright (C) 2009 Bob Copeland (me@bobcopeland.com)
  */
 #include <linux/module.h>
-#include <linux/crc7.h>
 #include <linux/mod_devicetable.h>
-#include <linux/irq.h>
 #include <linux/mmc/sdio_func.h>
 #include <linux/mmc/sdio_ids.h>
-#include <linux/platform_device.h>
 
 #include "wl1251.h"
-#include "wl12xx_80211.h"
-#include "wl1251_reg.h"
-#include "wl1251_ps.h"
-#include "wl1251_io.h"
-#include "wl1251_tx.h"
-#include "wl1251_debugfs.h"
 
 #ifndef SDIO_VENDOR_ID_TI
 #define SDIO_VENDOR_ID_TI               0x104c
@@ -65,7 +56,8 @@ static const struct sdio_device_id wl1251_devices[] = {
 MODULE_DEVICE_TABLE(sdio, wl1251_devices);
 
 
-void wl1251_sdio_read(struct wl1251 *wl, int addr, void *buf, size_t len)
+static void wl1251_sdio_read(struct wl1251 *wl, int addr,
+                             void *buf, size_t len)
 {
         int ret;
         struct sdio_func *func = wl_to_func(wl);
@@ -77,7 +69,8 @@ void wl1251_sdio_read(struct wl1251 *wl, int addr, void *buf, size_t len)
         sdio_release_host(func);
 }
 
-void wl1251_sdio_write(struct wl1251 *wl, int addr, void *buf, size_t len)
+static void wl1251_sdio_write(struct wl1251 *wl, int addr,
+                              void *buf, size_t len)
 {
         int ret;
         struct sdio_func *func = wl_to_func(wl);
@@ -89,7 +82,33 @@ void wl1251_sdio_write(struct wl1251 *wl, int addr, void *buf, size_t len)
         sdio_release_host(func);
 }
 
-void wl1251_sdio_reset(struct wl1251 *wl)
+static void wl1251_sdio_read_elp(struct wl1251 *wl, int addr, u32 *val)
+{
+        int ret = 0;
+        struct sdio_func *func = wl_to_func(wl);
+
+        sdio_claim_host(func);
+        *val = sdio_readb(func, addr, &ret);
+        sdio_release_host(func);
+
+        if (ret)
+                wl1251_error("sdio_readb failed (%d)", ret);
+}
+
+static void wl1251_sdio_write_elp(struct wl1251 *wl, int addr, u32 val)
+{
+        int ret = 0;
+        struct sdio_func *func = wl_to_func(wl);
+
+        sdio_claim_host(func);
+        sdio_writeb(func, val, addr, &ret);
+        sdio_release_host(func);
+
+        if (ret)
+                wl1251_error("sdio_writeb failed (%d)", ret);
+}
+
+static void wl1251_sdio_reset(struct wl1251 *wl)
 {
 }
 
@@ -111,19 +130,22 @@ static void wl1251_sdio_disable_irq(struct wl1251 *wl)
         sdio_release_host(func);
 }
 
-void wl1251_sdio_set_power(bool enable)
+static void wl1251_sdio_set_power(bool enable)
 {
 }
 
-struct wl1251_if_operations wl1251_sdio_ops = {
+static const struct wl1251_if_operations wl1251_sdio_ops = {
         .read = wl1251_sdio_read,
         .write = wl1251_sdio_write,
+        .write_elp = wl1251_sdio_write_elp,
+        .read_elp = wl1251_sdio_read_elp,
         .reset = wl1251_sdio_reset,
         .enable_irq = wl1251_sdio_enable_irq,
         .disable_irq = wl1251_sdio_disable_irq,
 };
 
-int wl1251_sdio_probe(struct sdio_func *func, const struct sdio_device_id *id)
+static int wl1251_sdio_probe(struct sdio_func *func,
+                             const struct sdio_device_id *id)
 {
         int ret;
         struct wl1251 *wl;
diff --git a/drivers/net/wireless/wl12xx/wl1271.h b/drivers/net/wireless/wl12xx/wl1271.h
index 97ea5096bc8c..8f11506f8310 100644
--- a/drivers/net/wireless/wl12xx/wl1271.h
+++ b/drivers/net/wireless/wl12xx/wl1271.h
@@ -53,6 +53,8 @@ enum {
         DEBUG_MAC80211  = BIT(11),
         DEBUG_CMD       = BIT(12),
         DEBUG_ACX       = BIT(13),
+        DEBUG_SDIO      = BIT(14),
+        DEBUG_FILTERS   = BIT(15),
         DEBUG_ALL       = ~0,
 };
 
@@ -110,6 +112,9 @@ enum {
 #define WL1271_FW_NAME "wl1271-fw.bin"
 #define WL1271_NVS_NAME "wl1271-nvs.bin"
 
+#define WL1271_TX_SECURITY_LO16(s) ((u16)((s) & 0xffff))
+#define WL1271_TX_SECURITY_HI32(s) ((u32)(((s) >> 16) & 0xffffffff))
+
 /* NVS data structure */
 #define WL1271_NVS_SECTION_SIZE                  468
 
@@ -334,11 +339,27 @@ struct wl1271_scan {
         u8 probe_requests;
 };
 
+struct wl1271_if_operations {
+        void (*read)(struct wl1271 *wl, int addr, void *buf, size_t len,
+                     bool fixed);
+        void (*write)(struct wl1271 *wl, int addr, void *buf, size_t len,
+                     bool fixed);
+        void (*reset)(struct wl1271 *wl);
+        void (*init)(struct wl1271 *wl);
+        void (*power)(struct wl1271 *wl, bool enable);
+        struct device* (*dev)(struct wl1271 *wl);
+        void (*enable_irq)(struct wl1271 *wl);
+        void (*disable_irq)(struct wl1271 *wl);
+};
+
 struct wl1271 {
+        struct platform_device *plat_dev;
         struct ieee80211_hw *hw;
         bool mac80211_registered;
 
-        struct spi_device *spi;
+        void *if_priv;
+
+        struct wl1271_if_operations *if_ops;
 
         void (*set_power)(bool enable);
         int irq;
@@ -357,6 +378,8 @@ struct wl1271 {
 #define WL1271_FLAG_IN_ELP             (6)
 #define WL1271_FLAG_PSM                (7)
 #define WL1271_FLAG_PSM_REQUESTED      (8)
+#define WL1271_FLAG_IRQ_PENDING        (9)
+#define WL1271_FLAG_IRQ_RUNNING       (10)
         unsigned long flags;
 
         struct wl1271_partition_set part;
@@ -382,13 +405,13 @@ struct wl1271 {
         /* Accounting for allocated / available TX blocks on HW */
         u32 tx_blocks_freed[NUM_TX_QUEUES];
         u32 tx_blocks_available;
-        u8 tx_results_count;
+        u32 tx_results_count;
 
         /* Transmitted TX packets counter for chipset interface */
-        int tx_packets_count;
+        u32 tx_packets_count;
 
         /* Time-offset between host and chipset clocks */
-        int time_offset;
+        s64 time_offset;
 
         /* Session counter for the chipset */
         int session_counter;
@@ -403,8 +426,7 @@ struct wl1271 {
 
         /* Security sequence number counters */
         u8 tx_security_last_seq;
-        u16 tx_security_seq_16;
-        u32 tx_security_seq_32;
+        s64 tx_security_seq;
 
         /* FW Rx counter */
         u32 rx_counter;
@@ -438,6 +460,7 @@ struct wl1271 {
         /* Default key (for WEP) */
         u32 default_key;
 
+        unsigned int filters;
         unsigned int rx_config;
         unsigned int rx_filter;
 
@@ -465,6 +488,8 @@ struct wl1271 {
         /* Current chipset configuration */
         struct conf_drv_settings conf;
 
+        bool sg_enabled;
+
         struct list_head list;
 };
 
@@ -477,7 +502,8 @@ int wl1271_plt_stop(struct wl1271 *wl);
 
 #define WL1271_DEFAULT_POWER_LEVEL 0
 
-#define WL1271_TX_QUEUE_MAX_LENGTH 20
+#define WL1271_TX_QUEUE_LOW_WATERMARK  10
+#define WL1271_TX_QUEUE_HIGH_WATERMARK 25
 
 /* WL1271 needs a 200ms sleep after power on, and a 20ms sleep before power
    on in case is has been shut down shortly before */
diff --git a/drivers/net/wireless/wl12xx/wl1271_acx.c b/drivers/net/wireless/wl12xx/wl1271_acx.c
index 60f10dce4800..7e337cea9905 100644
--- a/drivers/net/wireless/wl12xx/wl1271_acx.c
+++ b/drivers/net/wireless/wl12xx/wl1271_acx.c
@@ -31,7 +31,6 @@
 #include "wl1271.h"
 #include "wl12xx_80211.h"
 #include "wl1271_reg.h"
-#include "wl1271_spi.h"
 #include "wl1271_ps.h"
 
 int wl1271_acx_wake_up_conditions(struct wl1271 *wl)
@@ -136,12 +135,7 @@ int wl1271_acx_tx_power(struct wl1271 *wl, int power)
                 goto out;
         }
 
-        /*
-         * FIXME: This is a workaround needed while we don't the correct
-         * calibration, to avoid distortions
-         */
-        /* acx->current_tx_power = power * 10; */
-        acx->current_tx_power = 120;
+        acx->current_tx_power = power * 10;
 
         ret = wl1271_cmd_configure(wl, DOT11_CUR_TX_PWR, acx, sizeof(*acx));
         if (ret < 0) {
@@ -540,7 +534,7 @@ out:
 }
 
 
-int wl1271_acx_sg_enable(struct wl1271 *wl)
+int wl1271_acx_sg_enable(struct wl1271 *wl, bool enable)
 {
         struct acx_bt_wlan_coex *pta;
         int ret;
@@ -553,7 +547,10 @@ int wl1271_acx_sg_enable(struct wl1271 *wl)
                 goto out;
         }
 
-        pta->enable = SG_ENABLE;
+        if (enable)
+                pta->enable = wl->conf.sg.state;
+        else
+                pta->enable = CONF_SG_DISABLE;
 
         ret = wl1271_cmd_configure(wl, ACX_SG_ENABLE, pta, sizeof(*pta));
         if (ret < 0) {
@@ -570,7 +567,7 @@ int wl1271_acx_sg_cfg(struct wl1271 *wl)
 {
         struct acx_bt_wlan_coex_param *param;
         struct conf_sg_settings *c = &wl->conf.sg;
-        int ret;
+        int i, ret;
 
         wl1271_debug(DEBUG_ACX, "acx sg cfg");
 
@@ -581,19 +578,9 @@ int wl1271_acx_sg_cfg(struct wl1271 *wl)
         }
 
         /* BT-WLAN coext parameters */
-        param->per_threshold = cpu_to_le32(c->per_threshold);
-        param->max_scan_compensation_time =
-                cpu_to_le32(c->max_scan_compensation_time);
-        param->nfs_sample_interval = cpu_to_le16(c->nfs_sample_interval);
-        param->load_ratio = c->load_ratio;
-        param->auto_ps_mode = c->auto_ps_mode;
-        param->probe_req_compensation = c->probe_req_compensation;
-        param->scan_window_compensation = c->scan_window_compensation;
-        param->antenna_config = c->antenna_config;
-        param->beacon_miss_threshold = c->beacon_miss_threshold;
-        param->rate_adaptation_threshold =
-                cpu_to_le32(c->rate_adaptation_threshold);
-        param->rate_adaptation_snr = c->rate_adaptation_snr;
+        for (i = 0; i < CONF_SG_PARAMS_MAX; i++)
+                param->params[i] = c->params[i];
+        param->param_idx = CONF_SG_PARAMS_ALL;
 
         ret = wl1271_cmd_configure(wl, ACX_SG_CFG, param, sizeof(*param));
         if (ret < 0) {
diff --git a/drivers/net/wireless/wl12xx/wl1271_acx.h b/drivers/net/wireless/wl12xx/wl1271_acx.h
index aeccc98581eb..8e5870fa9609 100644
--- a/drivers/net/wireless/wl12xx/wl1271_acx.h
+++ b/drivers/net/wireless/wl12xx/wl1271_acx.h
@@ -392,81 +392,27 @@ struct acx_conn_monit_params {
        __le32 bss_lose_timeout; /* number of TU's from synch fail */
 } __attribute__ ((packed));
 
-enum {
-        SG_ENABLE = 0,
-        SG_DISABLE,
-        SG_SENSE_NO_ACTIVITY,
-        SG_SENSE_ACTIVE
-};
-
 struct acx_bt_wlan_coex {
         struct acx_header header;
 
-        /*
-         * 0 -> PTA enabled
-         * 1 -> PTA disabled
-         * 2 -> sense no active mode, i.e.
-         *      an interrupt is sent upon
-         *      BT activity.
-         * 3 -> PTA is switched on in response
-         *      to the interrupt sending.
-         */
         u8 enable;
         u8 pad[3];
 } __attribute__ ((packed));
 
-struct acx_dco_itrim_params {
+struct acx_bt_wlan_coex_param {
         struct acx_header header;
 
-        u8 enable;
+        __le32 params[CONF_SG_PARAMS_MAX];
+        u8 param_idx;
         u8 padding[3];
-        __le32 timeout;
 } __attribute__ ((packed));
 
-#define PTA_ANTENNA_TYPE_DEF              (0)
-#define PTA_BT_HP_MAXTIME_DEF             (2000)
-#define PTA_WLAN_HP_MAX_TIME_DEF          (5000)
-#define PTA_SENSE_DISABLE_TIMER_DEF       (1350)
-#define PTA_PROTECTIVE_RX_TIME_DEF        (1500)
-#define PTA_PROTECTIVE_TX_TIME_DEF        (1500)
-#define PTA_TIMEOUT_NEXT_BT_LP_PACKET_DEF (3000)
-#define PTA_SIGNALING_TYPE_DEF            (1)
-#define PTA_AFH_LEVERAGE_ON_DEF           (0)
-#define PTA_NUMBER_QUIET_CYCLE_DEF        (0)
-#define PTA_MAX_NUM_CTS_DEF               (3)
-#define PTA_NUMBER_OF_WLAN_PACKETS_DEF    (2)
-#define PTA_NUMBER_OF_BT_PACKETS_DEF      (2)
-#define PTA_PROTECTIVE_RX_TIME_FAST_DEF   (1500)
-#define PTA_PROTECTIVE_TX_TIME_FAST_DEF   (3000)
-#define PTA_CYCLE_TIME_FAST_DEF           (8700)
-#define PTA_RX_FOR_AVALANCHE_DEF          (5)
-#define PTA_ELP_HP_DEF                    (0)
-#define PTA_ANTI_STARVE_PERIOD_DEF        (500)
-#define PTA_ANTI_STARVE_NUM_CYCLE_DEF     (4)
-#define PTA_ALLOW_PA_SD_DEF               (1)
-#define PTA_TIME_BEFORE_BEACON_DEF        (6300)
-#define PTA_HPDM_MAX_TIME_DEF             (1600)
-#define PTA_TIME_OUT_NEXT_WLAN_DEF        (2550)
-#define PTA_AUTO_MODE_NO_CTS_DEF          (0)
-#define PTA_BT_HP_RESPECTED_DEF           (3)
-#define PTA_WLAN_RX_MIN_RATE_DEF          (24)
-#define PTA_ACK_MODE_DEF                  (1)
-
-struct acx_bt_wlan_coex_param {
+struct acx_dco_itrim_params {
         struct acx_header header;
 
-        __le32 per_threshold;
-        __le32 max_scan_compensation_time;
-        __le16 nfs_sample_interval;
-        u8 load_ratio;
-        u8 auto_ps_mode;
-        u8 probe_req_compensation;
-        u8 scan_window_compensation;
-        u8 antenna_config;
-        u8 beacon_miss_threshold;
-        __le32 rate_adaptation_threshold;
-        s8 rate_adaptation_snr;
+        u8 enable;
         u8 padding[3];
+        __le32 timeout;
 } __attribute__ ((packed));
 
 struct acx_energy_detection {
@@ -1059,7 +1005,7 @@ int wl1271_acx_dco_itrim_params(struct wl1271 *wl);
 int wl1271_acx_beacon_filter_opt(struct wl1271 *wl, bool enable_filter);
 int wl1271_acx_beacon_filter_table(struct wl1271 *wl);
 int wl1271_acx_conn_monit_params(struct wl1271 *wl);
-int wl1271_acx_sg_enable(struct wl1271 *wl);
+int wl1271_acx_sg_enable(struct wl1271 *wl, bool enable);
 int wl1271_acx_sg_cfg(struct wl1271 *wl);
 int wl1271_acx_cca_threshold(struct wl1271 *wl);
 int wl1271_acx_bcn_dtim_options(struct wl1271 *wl);
diff --git a/drivers/net/wireless/wl12xx/wl1271_boot.c b/drivers/net/wireless/wl12xx/wl1271_boot.c
index 2be76ee42bb9..41c6affbee29 100644
--- a/drivers/net/wireless/wl12xx/wl1271_boot.c
+++ b/drivers/net/wireless/wl12xx/wl1271_boot.c
@@ -26,7 +26,6 @@
 #include "wl1271_acx.h"
 #include "wl1271_reg.h"
 #include "wl1271_boot.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 #include "wl1271_event.h"
 
@@ -229,6 +228,14 @@ static int wl1271_boot_upload_nvs(struct wl1271 *wl)
         nvs_len = sizeof(wl->nvs->nvs);
         nvs_ptr = (u8 *)wl->nvs->nvs;
 
+        /* update current MAC address to NVS */
+        nvs_ptr[11] = wl->mac_addr[0];
+        nvs_ptr[10] = wl->mac_addr[1];
+        nvs_ptr[6] = wl->mac_addr[2];
+        nvs_ptr[5] = wl->mac_addr[3];
+        nvs_ptr[4] = wl->mac_addr[4];
+        nvs_ptr[3] = wl->mac_addr[5];
+
         /*
          * Layout before the actual NVS tables:
          * 1 byte : burst length.
@@ -299,7 +306,7 @@ static int wl1271_boot_upload_nvs(struct wl1271 *wl)
 
 static void wl1271_boot_enable_interrupts(struct wl1271 *wl)
 {
-        enable_irq(wl->irq);
+        wl1271_enable_interrupts(wl);
         wl1271_write32(wl, ACX_REG_INTERRUPT_MASK,
                        WL1271_ACX_INTR_ALL & ~(WL1271_INTR_MASK));
         wl1271_write32(wl, HI_CFG, HI_CFG_DEF_VAL);
diff --git a/drivers/net/wireless/wl12xx/wl1271_cmd.c b/drivers/net/wireless/wl12xx/wl1271_cmd.c
index 36a64e06f290..d005729e0312 100644
--- a/drivers/net/wireless/wl12xx/wl1271_cmd.c
+++ b/drivers/net/wireless/wl12xx/wl1271_cmd.c
@@ -26,10 +26,10 @@
 #include <linux/crc7.h>
 #include <linux/spi/spi.h>
 #include <linux/etherdevice.h>
+#include <linux/ieee80211.h>
 
 #include "wl1271.h"
 #include "wl1271_reg.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 #include "wl1271_acx.h"
 #include "wl12xx_80211.h"
@@ -248,7 +248,7 @@ int wl1271_cmd_radio_parms(struct wl1271 *wl)
         return ret;
 }
 
-int wl1271_cmd_join(struct wl1271 *wl)
+int wl1271_cmd_join(struct wl1271 *wl, u8 bss_type)
 {
         static bool do_cal = true;
         struct wl1271_cmd_join *join;
@@ -279,16 +279,7 @@ int wl1271_cmd_join(struct wl1271 *wl)
 
         join->rx_config_options = cpu_to_le32(wl->rx_config);
         join->rx_filter_options = cpu_to_le32(wl->rx_filter);
-        join->bss_type = wl->bss_type;
-
-        /*
-         * FIXME: disable temporarily all filters because after commit
-         * 9cef8737 "mac80211: fix managed mode BSSID handling" broke
-         * association. The filter logic needs to be implemented properly
-         * and once that is done, this hack can be removed.
-         */
-        join->rx_config_options = cpu_to_le32(0);
-        join->rx_filter_options = cpu_to_le32(WL1271_DEFAULT_RX_FILTER);
+        join->bss_type = bss_type;
 
         if (wl->band == IEEE80211_BAND_2GHZ)
                 join->basic_rate_set = cpu_to_le32(CONF_HW_BIT_RATE_1MBPS   |
@@ -319,8 +310,7 @@ int wl1271_cmd_join(struct wl1271 *wl)
 
         /* reset TX security counters */
         wl->tx_security_last_seq = 0;
-        wl->tx_security_seq_16 = 0;
-        wl->tx_security_seq_32 = 0;
+        wl->tx_security_seq = 0;
 
         ret = wl1271_cmd_send(wl, CMD_START_JOIN, join, sizeof(*join), 0);
         if (ret < 0) {
@@ -548,9 +538,9 @@ out:
         return ret;
 }
 
-int wl1271_cmd_scan(struct wl1271 *wl, u8 *ssid, size_t len,
-                    u8 active_scan, u8 high_prio, u8 band,
-                    u8 probe_requests)
+int wl1271_cmd_scan(struct wl1271 *wl, const u8 *ssid, size_t ssid_len,
+                    const u8 *ie, size_t ie_len, u8 active_scan,
+                    u8 high_prio, u8 band, u8 probe_requests)
 {
 
         struct wl1271_cmd_trigger_scan_to *trigger = NULL;
@@ -621,12 +611,13 @@ int wl1271_cmd_scan(struct wl1271 *wl, u8 *ssid, size_t len,
 
         params->params.num_channels = j;
 
-        if (len && ssid) {
-                params->params.ssid_len = len;
-                memcpy(params->params.ssid, ssid, len);
+        if (ssid_len && ssid) {
+                params->params.ssid_len = ssid_len;
+                memcpy(params->params.ssid, ssid, ssid_len);
         }
 
-        ret = wl1271_cmd_build_probe_req(wl, ssid, len, ieee_band);
+        ret = wl1271_cmd_build_probe_req(wl, ssid, ssid_len,
+                                         ie, ie_len, ieee_band);
         if (ret < 0) {
                 wl1271_error("PROBE request template failed");
                 goto out;
@@ -657,9 +648,9 @@ int wl1271_cmd_scan(struct wl1271 *wl, u8 *ssid, size_t len,
                         wl->scan.active = active_scan;
                         wl->scan.high_prio = high_prio;
                         wl->scan.probe_requests = probe_requests;
-                        if (len && ssid) {
-                                wl->scan.ssid_len = len;
-                                memcpy(wl->scan.ssid, ssid, len);
+                        if (ssid_len && ssid) {
+                                wl->scan.ssid_len = ssid_len;
+                                memcpy(wl->scan.ssid, ssid, ssid_len);
                         } else
                                 wl->scan.ssid_len = 0;
                 }
@@ -716,155 +707,102 @@ out:
         return ret;
 }
 
-static int wl1271_build_basic_rates(u8 *rates, u8 band)
+int wl1271_cmd_build_null_data(struct wl1271 *wl)
 {
-        u8 index = 0;
-
-        if (band == IEEE80211_BAND_2GHZ) {
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_5MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_11MB;
-        } else if (band == IEEE80211_BAND_5GHZ) {
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_6MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_12MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_24MB;
-        } else {
-                wl1271_error("build_basic_rates invalid band: %d", band);
-        }
+        struct sk_buff *skb = NULL;
+        int size;
+        void *ptr;
+        int ret = -ENOMEM;
 
-        return index;
-}
 
-static int wl1271_build_extended_rates(u8 *rates, u8 band)
-{
-        u8 index = 0;
-
-        if (band == IEEE80211_BAND_2GHZ) {
-                rates[index++] = IEEE80211_OFDM_RATE_6MB;
-                rates[index++] = IEEE80211_OFDM_RATE_9MB;
-                rates[index++] = IEEE80211_OFDM_RATE_12MB;
-                rates[index++] = IEEE80211_OFDM_RATE_18MB;
-                rates[index++] = IEEE80211_OFDM_RATE_24MB;
-                rates[index++] = IEEE80211_OFDM_RATE_36MB;
-                rates[index++] = IEEE80211_OFDM_RATE_48MB;
-                rates[index++] = IEEE80211_OFDM_RATE_54MB;
-        } else if (band == IEEE80211_BAND_5GHZ) {
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_9MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_18MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_24MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_36MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_48MB;
-                rates[index++] =
-                        IEEE80211_BASIC_RATE_MASK | IEEE80211_OFDM_RATE_54MB;
+        if (wl->bss_type == BSS_TYPE_IBSS) {
+                size = sizeof(struct wl12xx_null_data_template);
+                ptr = NULL;
         } else {
-                wl1271_error("build_basic_rates invalid band: %d", band);
+                skb = ieee80211_nullfunc_get(wl->hw, wl->vif);
+                if (!skb)
+                        goto out;
+                size = skb->len;
+                ptr = skb->data;
         }
 
-        return index;
-}
+        ret = wl1271_cmd_template_set(wl, CMD_TEMPL_NULL_DATA, ptr, size);
 
-int wl1271_cmd_build_null_data(struct wl1271 *wl)
-{
-        struct wl12xx_null_data_template template;
-
-        if (!is_zero_ether_addr(wl->bssid)) {
-                memcpy(template.header.da, wl->bssid, ETH_ALEN);
-                memcpy(template.header.bssid, wl->bssid, ETH_ALEN);
-        } else {
-                memset(template.header.da, 0xff, ETH_ALEN);
-                memset(template.header.bssid, 0xff, ETH_ALEN);
-        }
-
-        memcpy(template.header.sa, wl->mac_addr, ETH_ALEN);
-        template.header.frame_ctl = cpu_to_le16(IEEE80211_FTYPE_DATA |
-                                                IEEE80211_STYPE_NULLFUNC |
-                                                IEEE80211_FCTL_TODS);
+out:
+        dev_kfree_skb(skb);
+        if (ret)
+                wl1271_warning("cmd buld null data failed %d", ret);
 
-        return wl1271_cmd_template_set(wl, CMD_TEMPL_NULL_DATA, &template,
-                                       sizeof(template));
+        return ret;
 
 }
 
 int wl1271_cmd_build_ps_poll(struct wl1271 *wl, u16 aid)
 {
-        struct wl12xx_ps_poll_template template;
-
-        memcpy(template.bssid, wl->bssid, ETH_ALEN);
-        memcpy(template.ta, wl->mac_addr, ETH_ALEN);
-
-        /* aid in PS-Poll has its two MSBs each set to 1 */
-        template.aid = cpu_to_le16(1 << 15 | 1 << 14 | aid);
+        struct sk_buff *skb;
+        int ret = 0;
 
-        template.fc = cpu_to_le16(IEEE80211_FTYPE_CTL | IEEE80211_STYPE_PSPOLL);
+        skb = ieee80211_pspoll_get(wl->hw, wl->vif);
+        if (!skb)
+                goto out;
 
-        return wl1271_cmd_template_set(wl, CMD_TEMPL_PS_POLL, &template,
-                                       sizeof(template));
+        ret = wl1271_cmd_template_set(wl, CMD_TEMPL_PS_POLL, skb->data,
+                                      skb->len);
 
+out:
+        dev_kfree_skb(skb);
+        return ret;
 }
 
-int wl1271_cmd_build_probe_req(struct wl1271 *wl, u8 *ssid, size_t ssid_len,
-                               u8 band)
+int wl1271_cmd_build_probe_req(struct wl1271 *wl,
+                               const u8 *ssid, size_t ssid_len,
+                               const u8 *ie, size_t ie_len, u8 band)
 {
-        struct wl12xx_probe_req_template template;
-        struct wl12xx_ie_rates *rates;
-        char *ptr;
-        u16 size;
+        struct sk_buff *skb;
         int ret;
 
-        ptr = (char *)&template;
-        size = sizeof(struct ieee80211_header);
-
-        memset(template.header.da, 0xff, ETH_ALEN);
-        memset(template.header.bssid, 0xff, ETH_ALEN);
-        memcpy(template.header.sa, wl->mac_addr, ETH_ALEN);
-        template.header.frame_ctl = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ);
-
-        /* IEs */
-        /* SSID */
-        template.ssid.header.id = WLAN_EID_SSID;
-        template.ssid.header.len = ssid_len;
-        if (ssid_len && ssid)
-                memcpy(template.ssid.ssid, ssid, ssid_len);
-        size += sizeof(struct wl12xx_ie_header) + ssid_len;
-        ptr += size;
-
-        /* Basic Rates */
-        rates = (struct wl12xx_ie_rates *)ptr;
-        rates->header.id = WLAN_EID_SUPP_RATES;
-        rates->header.len = wl1271_build_basic_rates(rates->rates, band);
-        size += sizeof(struct wl12xx_ie_header) + rates->header.len;
-        ptr += sizeof(struct wl12xx_ie_header) + rates->header.len;
-
-        /* Extended rates */
-        rates = (struct wl12xx_ie_rates *)ptr;
-        rates->header.id = WLAN_EID_EXT_SUPP_RATES;
-        rates->header.len = wl1271_build_extended_rates(rates->rates, band);
-        size += sizeof(struct wl12xx_ie_header) + rates->header.len;
-
-        wl1271_dump(DEBUG_SCAN, "PROBE REQ: ", &template, size);
+        skb = ieee80211_probereq_get(wl->hw, wl->vif, ssid, ssid_len,
+                                     ie, ie_len);
+        if (!skb) {
+                ret = -ENOMEM;
+                goto out;
+        }
+
+        wl1271_dump(DEBUG_SCAN, "PROBE REQ: ", skb->data, skb->len);
 
         if (band == IEEE80211_BAND_2GHZ)
                 ret = wl1271_cmd_template_set(wl, CMD_TEMPL_CFG_PROBE_REQ_2_4,
-                                              &template, size);
+                                              skb->data, skb->len);
         else
                 ret = wl1271_cmd_template_set(wl, CMD_TEMPL_CFG_PROBE_REQ_5,
-                                              &template, size);
+                                              skb->data, skb->len);
+
+out:
+        dev_kfree_skb(skb);
         return ret;
 }
 
+int wl1271_build_qos_null_data(struct wl1271 *wl)
+{
+        struct ieee80211_qos_hdr template;
+
+        memset(&template, 0, sizeof(template));
+
+        memcpy(template.addr1, wl->bssid, ETH_ALEN);
+        memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
+        memcpy(template.addr3, wl->bssid, ETH_ALEN);
+
+        template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
+                                             IEEE80211_STYPE_QOS_NULLFUNC |
+                                             IEEE80211_FCTL_TODS);
+
+        /* FIXME: not sure what priority to use here */
+        template.qos_ctrl = cpu_to_le16(0);
+
+        return wl1271_cmd_template_set(wl, CMD_TEMPL_QOS_NULL_DATA, &template,
+                                       sizeof(template));
+}
+
 int wl1271_cmd_set_default_wep_key(struct wl1271 *wl, u8 id)
 {
         struct wl1271_cmd_set_keys *cmd;
diff --git a/drivers/net/wireless/wl12xx/wl1271_cmd.h b/drivers/net/wireless/wl12xx/wl1271_cmd.h
index 2dc06c73532b..6324bbf36843 100644
--- a/drivers/net/wireless/wl12xx/wl1271_cmd.h
+++ b/drivers/net/wireless/wl12xx/wl1271_cmd.h
@@ -33,7 +33,7 @@ int wl1271_cmd_send(struct wl1271 *wl, u16 id, void *buf, size_t len,
                     size_t res_len);
 int wl1271_cmd_general_parms(struct wl1271 *wl);
 int wl1271_cmd_radio_parms(struct wl1271 *wl);
-int wl1271_cmd_join(struct wl1271 *wl);
+int wl1271_cmd_join(struct wl1271 *wl, u8 bss_type);
 int wl1271_cmd_test(struct wl1271 *wl, void *buf, size_t buf_len, u8 answer);
 int wl1271_cmd_interrogate(struct wl1271 *wl, u16 id, void *buf, size_t len);
 int wl1271_cmd_configure(struct wl1271 *wl, u16 id, void *buf, size_t len);
@@ -41,15 +41,17 @@ int wl1271_cmd_data_path(struct wl1271 *wl, bool enable);
 int wl1271_cmd_ps_mode(struct wl1271 *wl, u8 ps_mode, bool send);
 int wl1271_cmd_read_memory(struct wl1271 *wl, u32 addr, void *answer,
                            size_t len);
-int wl1271_cmd_scan(struct wl1271 *wl, u8 *ssid, size_t len,
-                    u8 active_scan, u8 high_prio, u8 band,
-                    u8 probe_requests);
+int wl1271_cmd_scan(struct wl1271 *wl, const u8 *ssid, size_t ssid_len,
+                    const u8 *ie, size_t ie_len, u8 active_scan,
+                    u8 high_prio, u8 band, u8 probe_requests);
 int wl1271_cmd_template_set(struct wl1271 *wl, u16 template_id,
                             void *buf, size_t buf_len);
 int wl1271_cmd_build_null_data(struct wl1271 *wl);
 int wl1271_cmd_build_ps_poll(struct wl1271 *wl, u16 aid);
-int wl1271_cmd_build_probe_req(struct wl1271 *wl, u8 *ssid, size_t ssid_len,
-                               u8 band);
+int wl1271_cmd_build_probe_req(struct wl1271 *wl,
+                               const u8 *ssid, size_t ssid_len,
+                               const u8 *ie, size_t ie_len, u8 band);
+int wl1271_build_qos_null_data(struct wl1271 *wl);
 int wl1271_cmd_set_default_wep_key(struct wl1271 *wl, u8 id);
 int wl1271_cmd_set_key(struct wl1271 *wl, u16 action, u8 id, u8 key_type,
                        u8 key_size, const u8 *key, const u8 *addr,
diff --git a/drivers/net/wireless/wl12xx/wl1271_conf.h b/drivers/net/wireless/wl12xx/wl1271_conf.h
index 6f9e75cc5640..7fcfe06b1412 100644
--- a/drivers/net/wireless/wl12xx/wl1271_conf.h
+++ b/drivers/net/wireless/wl12xx/wl1271_conf.h
@@ -65,110 +65,318 @@ enum {
         CONF_HW_RATE_INDEX_MAX     = CONF_HW_RATE_INDEX_54MBPS,
 };
 
-struct conf_sg_settings {
+enum {
+        CONF_SG_DISABLE = 0,
+        CONF_SG_PROTECTIVE,
+        CONF_SG_OPPORTUNISTIC
+};
+
+enum {
         /*
-         * Defines the PER threshold in PPM of the BT voice of which reaching
-         * this value will trigger raising the priority of the BT voice by
-         * the BT IP until next NFS sample interval time as defined in
-         * nfs_sample_interval.
+         * PER threshold in PPM of the BT voice
          *
-         * Unit: PER value in PPM (parts per million)
-         * #Error_packets / #Total_packets
+         * Range: 0 - 10000000
+         */
+        CONF_SG_BT_PER_THRESHOLD = 0,
 
-         * Range: u32
+        /*
+         * Number of consequent RX_ACTIVE activities to override BT voice
+         * frames to ensure WLAN connection
+         *
+         * Range: 0 - 100
+         */
+        CONF_SG_HV3_MAX_OVERRIDE,
+
+        /*
+         * Defines the PER threshold of the BT voice
+         *
+         * Range: 0 - 65000
+         */
+        CONF_SG_BT_NFS_SAMPLE_INTERVAL,
+
+        /*
+         * Defines the load ratio of BT
+         *
+         * Range: 0 - 100 (%)
+         */
+        CONF_SG_BT_LOAD_RATIO,
+
+        /*
+         * Defines whether the SG will force WLAN host to enter/exit PSM
+         *
+         * Range: 1 - SG can force, 0 - host handles PSM
+         */
+        CONF_SG_AUTO_PS_MODE,
+
+        /*
+         * Compensation percentage of probe requests when scan initiated
+         * during BT voice/ACL link.
+         *
+         * Range: 0 - 255 (%)
+         */
+        CONF_SG_AUTO_SCAN_PROBE_REQ,
+
+        /*
+         * Compensation percentage of probe requests when active scan initiated
+         * during BT voice
+         *
+         * Range: 0 - 255 (%)
+         */
+        CONF_SG_ACTIVE_SCAN_DURATION_FACTOR_HV3,
+
+        /*
+         * Defines antenna configuration (single/dual antenna)
+         *
+         * Range: 0 - single antenna, 1 - dual antenna
+         */
+        CONF_SG_ANTENNA_CONFIGURATION,
+
+        /*
+         * The threshold (percent) of max consequtive beacon misses before
+         * increasing priority of beacon reception.
+         *
+         * Range: 0 - 100 (%)
+         */
+        CONF_SG_BEACON_MISS_PERCENT,
+
+        /*
+         * The rate threshold below which receiving a data frame from the AP
+         * will increase the priority of the data frame above BT traffic.
+         *
+         * Range: 0,2, 5(=5.5), 6, 9, 11, 12, 18, 24, 36, 48, 54
+         */
+        CONF_SG_RATE_ADAPT_THRESH,
+
+        /*
+         * Not used currently.
+         *
+         * Range: 0
+         */
+        CONF_SG_RATE_ADAPT_SNR,
+
+        /*
+         * Configure the min and max time BT gains the antenna
+         * in WLAN PSM / BT master basic rate
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_PS_BT_ACL_MASTER_MIN_BR,
+        CONF_SG_WLAN_PS_BT_ACL_MASTER_MAX_BR,
+
+        /*
+         * The time after it expires no new WLAN trigger frame is trasmitted
+         * in WLAN PSM / BT master basic rate
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_PS_MAX_BT_ACL_MASTER_BR,
+
+        /*
+         * Configure the min and max time BT gains the antenna
+         * in WLAN PSM / BT slave basic rate
+         *
+         * Range: 0 - 255 (ms)
          */
-        u32 per_threshold;
+        CONF_SG_WLAN_PS_BT_ACL_SLAVE_MIN_BR,
+        CONF_SG_WLAN_PS_BT_ACL_SLAVE_MAX_BR,
 
         /*
-         * This value is an absolute time in micro-seconds to limit the
-         * maximum scan duration compensation while in SG
+         * The time after it expires no new WLAN trigger frame is trasmitted
+         * in WLAN PSM / BT slave basic rate
+         *
+         * Range: 0 - 255 (ms)
          */
-        u32 max_scan_compensation_time;
+        CONF_SG_WLAN_PS_MAX_BT_ACL_SLAVE_BR,
 
-        /* Defines the PER threshold of the BT voice of which reaching this
-         * value will trigger raising the priority of the BT voice until next
-         * NFS sample interval time as defined in sample_interval.
+        /*
+         * Configure the min and max time BT gains the antenna
+         * in WLAN PSM / BT master EDR
          *
-         * Unit: msec
-         * Range: 1-65000
+         * Range: 0 - 255 (ms)
          */
-        u16 nfs_sample_interval;
+        CONF_SG_WLAN_PS_BT_ACL_MASTER_MIN_EDR,
+        CONF_SG_WLAN_PS_BT_ACL_MASTER_MAX_EDR,
 
         /*
-         * Defines the load ratio for the BT.
-         * The WLAN ratio is: 100 - load_ratio
+         * The time after it expires no new WLAN trigger frame is trasmitted
+         * in WLAN PSM / BT master EDR
          *
-         * Unit: Percent
-         * Range: 0-100
+         * Range: 0 - 255 (ms)
          */
-        u8 load_ratio;
+        CONF_SG_WLAN_PS_MAX_BT_ACL_MASTER_EDR,
 
         /*
-         * true - Co-ex is allowed to enter/exit P.S automatically and
-         *        transparently to the host
+         * Configure the min and max time BT gains the antenna
+         * in WLAN PSM / BT slave EDR
          *
-         * false - Co-ex is disallowed to enter/exit P.S and will trigger an
-         *         event to the host to notify for the need to enter/exit P.S
-         *         due to BT change state
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_PS_BT_ACL_SLAVE_MIN_EDR,
+        CONF_SG_WLAN_PS_BT_ACL_SLAVE_MAX_EDR,
+
+        /*
+         * The time after it expires no new WLAN trigger frame is trasmitted
+         * in WLAN PSM / BT slave EDR
          *
+         * Range: 0 - 255 (ms)
          */
-        u8 auto_ps_mode;
+        CONF_SG_WLAN_PS_MAX_BT_ACL_SLAVE_EDR,
 
         /*
-         * This parameter defines the compensation percentage of num of probe
-         * requests in case scan is initiated during BT voice/BT ACL
-         * guaranteed link.
+         * RX guard time before the beginning of a new BT voice frame during
+         * which no new WLAN trigger frame is transmitted.
          *
-         * Unit: Percent
-         * Range: 0-255 (0 - No compensation)
+         * Range: 0 - 100000 (us)
          */
-        u8 probe_req_compensation;
+        CONF_SG_RXT,
 
         /*
-         * This parameter defines the compensation percentage of scan window
-         * size in case scan is initiated during BT voice/BT ACL Guaranteed
-         * link.
+         * TX guard time before the beginning of a new BT voice frame during
+         * which no new WLAN frame is transmitted.
          *
-         * Unit: Percent
-         * Range: 0-255 (0 - No compensation)
+         * Range: 0 - 100000 (us)
          */
-        u8 scan_window_compensation;
+
+        CONF_SG_TXT,
 
         /*
-         * Defines the antenna configuration.
+         * Enable adaptive RXT/TXT algorithm. If disabled, the host values
+         * will be utilized.
          *
-         * Range: 0 - Single Antenna; 1 - Dual Antenna
+         * Range: 0 - disable, 1 - enable
          */
-        u8 antenna_config;
+        CONF_SG_ADAPTIVE_RXT_TXT,
 
         /*
-         * The percent out of the Max consecutive beacon miss roaming trigger
-         * which is the threshold for raising the priority of beacon
-         * reception.
+         * The used WLAN legacy service period during active BT ACL link
          *
-         * Range: 1-100
-         * N = MaxConsecutiveBeaconMiss
-         * P = coexMaxConsecutiveBeaconMissPrecent
-         * Threshold = MIN( N-1, round(N * P / 100))
+         * Range: 0 - 255 (ms)
          */
-        u8 beacon_miss_threshold;
+        CONF_SG_PS_POLL_TIMEOUT,
 
         /*
-         * The RX rate threshold below which rate adaptation is assumed to be
-         * occurring at the AP which will raise priority for ACTIVE_RX and RX
-         * SP.
+         * The used WLAN UPSD service period during active BT ACL link
          *
-         * Range: HW_BIT_RATE_*
+         * Range: 0 - 255 (ms)
          */
-        u32 rate_adaptation_threshold;
+        CONF_SG_UPSD_TIMEOUT,
 
         /*
-         * The SNR above which the RX rate threshold indicating AP rate
-         * adaptation is valid
+         * Configure the min and max time BT gains the antenna
+         * in WLAN Active / BT master EDR
          *
-         * Range: -128 - 127
+         * Range: 0 - 255 (ms)
          */
-        s8 rate_adaptation_snr;
+        CONF_SG_WLAN_ACTIVE_BT_ACL_MASTER_MIN_EDR,
+        CONF_SG_WLAN_ACTIVE_BT_ACL_MASTER_MAX_EDR,
+
+        /*
+         * The maximum time WLAN can gain the antenna for
+         * in WLAN Active / BT master EDR
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_MASTER_EDR,
+
+        /*
+         * Configure the min and max time BT gains the antenna
+         * in WLAN Active / BT slave EDR
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_ACTIVE_BT_ACL_SLAVE_MIN_EDR,
+        CONF_SG_WLAN_ACTIVE_BT_ACL_SLAVE_MAX_EDR,
+
+        /*
+         * The maximum time WLAN can gain the antenna for
+         * in WLAN Active / BT slave EDR
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_SLAVE_EDR,
+
+        /*
+         * Configure the min and max time BT gains the antenna
+         * in WLAN Active / BT basic rate
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_ACTIVE_BT_ACL_MIN_BR,
+        CONF_SG_WLAN_ACTIVE_BT_ACL_MAX_BR,
+
+        /*
+         * The maximum time WLAN can gain the antenna for
+         * in WLAN Active / BT basic rate
+         *
+         * Range: 0 - 255 (ms)
+         */
+        CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_BR,
+
+        /*
+         * Compensation percentage of WLAN passive scan window if initiated
+         * during BT voice
+         *
+         * Range: 0 - 1000 (%)
+         */
+        CONF_SG_PASSIVE_SCAN_DURATION_FACTOR_HV3,
+
+        /*
+         * Compensation percentage of WLAN passive scan window if initiated
+         * during BT A2DP
+         *
+         * Range: 0 - 1000 (%)
+         */
+        CONF_SG_PASSIVE_SCAN_DURATION_FACTOR_A2DP,
+
+        /*
+         * Fixed time ensured for BT traffic to gain the antenna during WLAN
+         * passive scan.
+         *
+         * Range: 0 - 1000 ms
+         */
+        CONF_SG_PASSIVE_SCAN_A2DP_BT_TIME,
+
+        /*
+         * Fixed time ensured for WLAN traffic to gain the antenna during WLAN
+         * passive scan.
+         *
+         * Range: 0 - 1000 ms
+         */
+        CONF_SG_PASSIVE_SCAN_A2DP_WLAN_TIME,
+
+        /*
+         * Number of consequent BT voice frames not interrupted by WLAN
+         *
+         * Range: 0 - 100
+         */
+        CONF_SG_HV3_MAX_SERVED,
+
+        /*
+         * Protection time of the DHCP procedure.
+         *
+         * Range: 0 - 100000 (ms)
+         */
+        CONF_SG_DHCP_TIME,
+
+        /*
+         * Compensation percentage of WLAN active scan window if initiated
+         * during BT A2DP
+         *
+         * Range: 0 - 1000 (%)
+         */
+        CONF_SG_ACTIVE_SCAN_DURATION_FACTOR_A2DP,
+        CONF_SG_TEMP_PARAM_1,
+        CONF_SG_TEMP_PARAM_2,
+        CONF_SG_TEMP_PARAM_3,
+        CONF_SG_TEMP_PARAM_4,
+        CONF_SG_TEMP_PARAM_5,
+        CONF_SG_PARAMS_MAX,
+        CONF_SG_PARAMS_ALL = 0xff
+};
+
+struct conf_sg_settings {
+        __le32 params[CONF_SG_PARAMS_MAX];
+        u8 state;
 };
 
 enum conf_rx_queue_type {
diff --git a/drivers/net/wireless/wl12xx/wl1271_debugfs.c b/drivers/net/wireless/wl12xx/wl1271_debugfs.c
index 8d7588ca68fd..3c0f5b1ac272 100644
--- a/drivers/net/wireless/wl12xx/wl1271_debugfs.c
+++ b/drivers/net/wireless/wl12xx/wl1271_debugfs.c
@@ -28,6 +28,7 @@
 #include "wl1271.h"
 #include "wl1271_acx.h"
 #include "wl1271_ps.h"
+#include "wl1271_io.h"
 
 /* ms */
 #define WL1271_DEBUGFS_STATS_LIFETIME 1000
@@ -276,13 +277,10 @@ static ssize_t gpio_power_write(struct file *file,
                 goto out;
         }
 
-        if (value) {
-                wl->set_power(true);
-                set_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
-        } else {
-                wl->set_power(false);
-                clear_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
-        }
+        if (value)
+                wl1271_power_on(wl);
+        else
+                wl1271_power_off(wl);
 
 out:
         mutex_unlock(&wl->mutex);
diff --git a/drivers/net/wireless/wl12xx/wl1271_event.c b/drivers/net/wireless/wl12xx/wl1271_event.c
index 7468ef10194b..4d35af96c597 100644
--- a/drivers/net/wireless/wl12xx/wl1271_event.c
+++ b/drivers/net/wireless/wl12xx/wl1271_event.c
@@ -23,7 +23,6 @@
 
 #include "wl1271.h"
 #include "wl1271_reg.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 #include "wl1271_event.h"
 #include "wl1271_ps.h"
@@ -45,7 +44,9 @@ static int wl1271_event_scan_complete(struct wl1271 *wl,
                          * scanning as it checks that.
                          */
                         clear_bit(WL1271_FLAG_SCANNING, &wl->flags);
+                        /* FIXME: ie missing! */
                         wl1271_cmd_scan(wl, wl->scan.ssid, wl->scan.ssid_len,
+                                                NULL, 0,
                                                 wl->scan.active,
                                                 wl->scan.high_prio,
                                                 WL1271_SCAN_BAND_5_GHZ,
diff --git a/drivers/net/wireless/wl12xx/wl1271_init.c b/drivers/net/wireless/wl12xx/wl1271_init.c
index 86c30a86a456..d9335fc2a575 100644
--- a/drivers/net/wireless/wl12xx/wl1271_init.c
+++ b/drivers/net/wireless/wl12xx/wl1271_init.c
@@ -160,11 +160,11 @@ int wl1271_init_pta(struct wl1271 *wl)
 {
         int ret;
 
-        ret = wl1271_acx_sg_enable(wl);
+        ret = wl1271_acx_sg_cfg(wl);
         if (ret < 0)
                 return ret;
 
-        ret = wl1271_acx_sg_cfg(wl);
+        ret = wl1271_acx_sg_enable(wl, wl->sg_enabled);
         if (ret < 0)
                 return ret;
 
diff --git a/drivers/net/wireless/wl12xx/wl1271_io.c b/drivers/net/wireless/wl12xx/wl1271_io.c
index 5cd94d5666c2..c8759acef131 100644
--- a/drivers/net/wireless/wl12xx/wl1271_io.c
+++ b/drivers/net/wireless/wl12xx/wl1271_io.c
@@ -28,30 +28,29 @@
 
 #include "wl1271.h"
 #include "wl12xx_80211.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 
-static int wl1271_translate_addr(struct wl1271 *wl, int addr)
+#define OCP_CMD_LOOP  32
+
+#define OCP_CMD_WRITE 0x1
+#define OCP_CMD_READ  0x2
+
+#define OCP_READY_MASK  BIT(18)
+#define OCP_STATUS_MASK (BIT(16) | BIT(17))
+
+#define OCP_STATUS_NO_RESP    0x00000
+#define OCP_STATUS_OK         0x10000
+#define OCP_STATUS_REQ_FAILED 0x20000
+#define OCP_STATUS_RESP_ERROR 0x30000
+
+void wl1271_disable_interrupts(struct wl1271 *wl)
 {
-        /*
-         * To translate, first check to which window of addresses the
-         * particular address belongs. Then subtract the starting address
-         * of that window from the address. Then, add offset of the
-         * translated region.
-         *
-         * The translated regions occur next to each other in physical device
-         * memory, so just add the sizes of the preceeding address regions to
-         * get the offset to the new region.
-         *
-         * Currently, only the two first regions are addressed, and the
-         * assumption is that all addresses will fall into either of those
-         * two.
-         */
-        if ((addr >= wl->part.reg.start) &&
-            (addr < wl->part.reg.start + wl->part.reg.size))
-                return addr - wl->part.reg.start + wl->part.mem.size;
-        else
-                return addr - wl->part.mem.start;
+        wl->if_ops->disable_irq(wl);
+}
+
+void wl1271_enable_interrupts(struct wl1271 *wl)
+{
+        wl->if_ops->enable_irq(wl);
 }
 
 /* Set the SPI partitions to access the chip addresses
@@ -117,54 +116,12 @@ int wl1271_set_partition(struct wl1271 *wl,
 
 void wl1271_io_reset(struct wl1271 *wl)
 {
-        wl1271_spi_reset(wl);
+        wl->if_ops->reset(wl);
 }
 
 void wl1271_io_init(struct wl1271 *wl)
 {
-        wl1271_spi_init(wl);
-}
-
-void wl1271_raw_write(struct wl1271 *wl, int addr, void *buf,
-                      size_t len, bool fixed)
-{
-        wl1271_spi_raw_write(wl, addr, buf, len, fixed);
-}
-
-void wl1271_raw_read(struct wl1271 *wl, int addr, void *buf,
-                     size_t len, bool fixed)
-{
-        wl1271_spi_raw_read(wl, addr, buf, len, fixed);
-}
-
-void wl1271_read(struct wl1271 *wl, int addr, void *buf, size_t len,
-                     bool fixed)
-{
-        int physical;
-
-        physical = wl1271_translate_addr(wl, addr);
-
-        wl1271_spi_raw_read(wl, physical, buf, len, fixed);
-}
-
-void wl1271_write(struct wl1271 *wl, int addr, void *buf, size_t len,
-                  bool fixed)
-{
-        int physical;
-
-        physical = wl1271_translate_addr(wl, addr);
-
-        wl1271_spi_raw_write(wl, physical, buf, len, fixed);
-}
-
-u32 wl1271_read32(struct wl1271 *wl, int addr)
-{
-        return wl1271_raw_read32(wl, wl1271_translate_addr(wl, addr));
-}
-
-void wl1271_write32(struct wl1271 *wl, int addr, u32 val)
-{
-        wl1271_raw_write32(wl, wl1271_translate_addr(wl, addr), val);
+        wl->if_ops->init(wl);
 }
 
 void wl1271_top_reg_write(struct wl1271 *wl, int addr, u16 val)
diff --git a/drivers/net/wireless/wl12xx/wl1271_io.h b/drivers/net/wireless/wl12xx/wl1271_io.h
index fa9a0b35788f..d8837ef0bb40 100644
--- a/drivers/net/wireless/wl12xx/wl1271_io.h
+++ b/drivers/net/wireless/wl12xx/wl1271_io.h
@@ -25,31 +25,49 @@
 #ifndef __WL1271_IO_H__
 #define __WL1271_IO_H__
 
+#include "wl1271_reg.h"
+
+#define HW_ACCESS_MEMORY_MAX_RANGE      0x1FFC0
+
+#define HW_PARTITION_REGISTERS_ADDR     0x1FFC0
+#define HW_PART0_SIZE_ADDR              (HW_PARTITION_REGISTERS_ADDR)
+#define HW_PART0_START_ADDR             (HW_PARTITION_REGISTERS_ADDR + 4)
+#define HW_PART1_SIZE_ADDR              (HW_PARTITION_REGISTERS_ADDR + 8)
+#define HW_PART1_START_ADDR             (HW_PARTITION_REGISTERS_ADDR + 12)
+#define HW_PART2_SIZE_ADDR              (HW_PARTITION_REGISTERS_ADDR + 16)
+#define HW_PART2_START_ADDR             (HW_PARTITION_REGISTERS_ADDR + 20)
+#define HW_PART3_START_ADDR             (HW_PARTITION_REGISTERS_ADDR + 24)
+
+#define HW_ACCESS_REGISTER_SIZE         4
+
+#define HW_ACCESS_PRAM_MAX_RANGE        0x3c000
+
 struct wl1271;
 
+void wl1271_disable_interrupts(struct wl1271 *wl);
+void wl1271_enable_interrupts(struct wl1271 *wl);
+
 void wl1271_io_reset(struct wl1271 *wl);
 void wl1271_io_init(struct wl1271 *wl);
 
-/* Raw target IO, address is not translated */
-void wl1271_raw_write(struct wl1271 *wl, int addr, void *buf,
-                      size_t len, bool fixed);
-void wl1271_raw_read(struct wl1271 *wl, int addr, void *buf,
-                     size_t len, bool fixed);
+static inline struct device *wl1271_wl_to_dev(struct wl1271 *wl)
+{
+        return wl->if_ops->dev(wl);
+}
 
-/* Translated target IO */
-void wl1271_read(struct wl1271 *wl, int addr, void *buf, size_t len,
-                     bool fixed);
-void wl1271_write(struct wl1271 *wl, int addr, void *buf, size_t len,
-                      bool fixed);
-u32 wl1271_read32(struct wl1271 *wl, int addr);
-void wl1271_write32(struct wl1271 *wl, int addr, u32 val);
 
-/* Top Register IO */
-void wl1271_top_reg_write(struct wl1271 *wl, int addr, u16 val);
-u16 wl1271_top_reg_read(struct wl1271 *wl, int addr);
+/* Raw target IO, address is not translated */
+static inline void wl1271_raw_write(struct wl1271 *wl, int addr, void *buf,
+                                    size_t len, bool fixed)
+{
+        wl->if_ops->write(wl, addr, buf, len, fixed);
+}
 
-int wl1271_set_partition(struct wl1271 *wl,
-                         struct wl1271_partition_set *p);
+static inline void wl1271_raw_read(struct wl1271 *wl, int addr, void *buf,
+                                   size_t len, bool fixed)
+{
+        wl->if_ops->read(wl, addr, buf, len, fixed);
+}
 
 static inline u32 wl1271_raw_read32(struct wl1271 *wl, int addr)
 {
@@ -65,4 +83,87 @@ static inline void wl1271_raw_write32(struct wl1271 *wl, int addr, u32 val)
         wl1271_raw_write(wl, addr, &wl->buffer_32,
                              sizeof(wl->buffer_32), false);
 }
+
+/* Translated target IO */
+static inline int wl1271_translate_addr(struct wl1271 *wl, int addr)
+{
+        /*
+         * To translate, first check to which window of addresses the
+         * particular address belongs. Then subtract the starting address
+         * of that window from the address. Then, add offset of the
+         * translated region.
+         *
+         * The translated regions occur next to each other in physical device
+         * memory, so just add the sizes of the preceeding address regions to
+         * get the offset to the new region.
+         *
+         * Currently, only the two first regions are addressed, and the
+         * assumption is that all addresses will fall into either of those
+         * two.
+         */
+        if ((addr >= wl->part.reg.start) &&
+            (addr < wl->part.reg.start + wl->part.reg.size))
+                return addr - wl->part.reg.start + wl->part.mem.size;
+        else
+                return addr - wl->part.mem.start;
+}
+
+static inline void wl1271_read(struct wl1271 *wl, int addr, void *buf,
+                               size_t len, bool fixed)
+{
+        int physical;
+
+        physical = wl1271_translate_addr(wl, addr);
+
+        wl1271_raw_read(wl, physical, buf, len, fixed);
+}
+
+static inline void wl1271_write(struct wl1271 *wl, int addr, void *buf,
+                                size_t len, bool fixed)
+{
+        int physical;
+
+        physical = wl1271_translate_addr(wl, addr);
+
+        wl1271_raw_write(wl, physical, buf, len, fixed);
+}
+
+static inline u32 wl1271_read32(struct wl1271 *wl, int addr)
+{
+        return wl1271_raw_read32(wl, wl1271_translate_addr(wl, addr));
+}
+
+static inline void wl1271_write32(struct wl1271 *wl, int addr, u32 val)
+{
+        wl1271_raw_write32(wl, wl1271_translate_addr(wl, addr), val);
+}
+
+static inline void wl1271_power_off(struct wl1271 *wl)
+{
+        wl->if_ops->power(wl, false);
+        clear_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
+}
+
+static inline void wl1271_power_on(struct wl1271 *wl)
+{
+        wl->if_ops->power(wl, true);
+        set_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
+}
+
+
+/* Top Register IO */
+void wl1271_top_reg_write(struct wl1271 *wl, int addr, u16 val);
+u16 wl1271_top_reg_read(struct wl1271 *wl, int addr);
+
+int wl1271_set_partition(struct wl1271 *wl,
+                         struct wl1271_partition_set *p);
+
+/* Functions from wl1271_main.c */
+
+int wl1271_register_hw(struct wl1271 *wl);
+void wl1271_unregister_hw(struct wl1271 *wl);
+int wl1271_init_ieee80211(struct wl1271 *wl);
+struct ieee80211_hw *wl1271_alloc_hw(void);
+int wl1271_free_hw(struct wl1271 *wl);
+
 #endif
diff --git a/drivers/net/wireless/wl12xx/wl1271_main.c b/drivers/net/wireless/wl12xx/wl1271_main.c
index 2a864b24291d..6036d0206fec 100644
--- a/drivers/net/wireless/wl12xx/wl1271_main.c
+++ b/drivers/net/wireless/wl12xx/wl1271_main.c
@@ -22,22 +22,18 @@
  */
 
 #include <linux/module.h>
-#include <linux/platform_device.h>
-#include <linux/interrupt.h>
 #include <linux/firmware.h>
 #include <linux/delay.h>
-#include <linux/irq.h>
 #include <linux/spi/spi.h>
 #include <linux/crc32.h>
 #include <linux/etherdevice.h>
 #include <linux/vmalloc.h>
-#include <linux/spi/wl12xx.h>
 #include <linux/inetdevice.h>
+#include <linux/platform_device.h>
 
 #include "wl1271.h"
 #include "wl12xx_80211.h"
 #include "wl1271_reg.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 #include "wl1271_event.h"
 #include "wl1271_tx.h"
@@ -53,17 +49,57 @@
 
 static struct conf_drv_settings default_conf = {
         .sg = {
-                .per_threshold               = 7500,
-                .max_scan_compensation_time  = 120000,
-                .nfs_sample_interval         = 400,
-                .load_ratio                  = 50,
-                .auto_ps_mode                = 0,
-                .probe_req_compensation      = 170,
-                .scan_window_compensation    = 50,
-                .antenna_config              = 0,
-                .beacon_miss_threshold       = 60,
-                .rate_adaptation_threshold   = CONF_HW_BIT_RATE_12MBPS,
-                .rate_adaptation_snr         = 0
+                .params = {
+                        [CONF_SG_BT_PER_THRESHOLD]                  = 7500,
+                        [CONF_SG_HV3_MAX_OVERRIDE]                  = 0,
+                        [CONF_SG_BT_NFS_SAMPLE_INTERVAL]            = 400,
+                        [CONF_SG_BT_LOAD_RATIO]                     = 50,
+                        [CONF_SG_AUTO_PS_MODE]                      = 0,
+                        [CONF_SG_AUTO_SCAN_PROBE_REQ]               = 170,
+                        [CONF_SG_ACTIVE_SCAN_DURATION_FACTOR_HV3]   = 50,
+                        [CONF_SG_ANTENNA_CONFIGURATION]             = 0,
+                        [CONF_SG_BEACON_MISS_PERCENT]               = 60,
+                        [CONF_SG_RATE_ADAPT_THRESH]                 = 12,
+                        [CONF_SG_RATE_ADAPT_SNR]                    = 0,
+                        [CONF_SG_WLAN_PS_BT_ACL_MASTER_MIN_BR]      = 10,
+                        [CONF_SG_WLAN_PS_BT_ACL_MASTER_MAX_BR]      = 30,
+                        [CONF_SG_WLAN_PS_MAX_BT_ACL_MASTER_BR]      = 8,
+                        [CONF_SG_WLAN_PS_BT_ACL_SLAVE_MIN_BR]       = 20,
+                        [CONF_SG_WLAN_PS_BT_ACL_SLAVE_MAX_BR]       = 50,
+                        /* Note: with UPSD, this should be 4 */
+                        [CONF_SG_WLAN_PS_MAX_BT_ACL_SLAVE_BR]       = 8,
+                        [CONF_SG_WLAN_PS_BT_ACL_MASTER_MIN_EDR]     = 7,
+                        [CONF_SG_WLAN_PS_BT_ACL_MASTER_MAX_EDR]     = 25,
+                        [CONF_SG_WLAN_PS_MAX_BT_ACL_MASTER_EDR]     = 20,
+                        /* Note: with UPDS, this should be 15 */
+                        [CONF_SG_WLAN_PS_BT_ACL_SLAVE_MIN_EDR]      = 8,
+                        /* Note: with UPDS, this should be 50 */
+                        [CONF_SG_WLAN_PS_BT_ACL_SLAVE_MAX_EDR]      = 40,
+                        /* Note: with UPDS, this should be 10 */
+                        [CONF_SG_WLAN_PS_MAX_BT_ACL_SLAVE_EDR]      = 20,
+                        [CONF_SG_RXT]                               = 1200,
+                        [CONF_SG_TXT]                               = 1000,
+                        [CONF_SG_ADAPTIVE_RXT_TXT]                  = 1,
+                        [CONF_SG_PS_POLL_TIMEOUT]                   = 10,
+                        [CONF_SG_UPSD_TIMEOUT]                      = 10,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_MASTER_MIN_EDR] = 7,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_MASTER_MAX_EDR] = 15,
+                        [CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_MASTER_EDR] = 15,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_SLAVE_MIN_EDR]  = 8,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_SLAVE_MAX_EDR]  = 20,
+                        [CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_SLAVE_EDR]  = 15,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_MIN_BR]         = 20,
+                        [CONF_SG_WLAN_ACTIVE_BT_ACL_MAX_BR]         = 50,
+                        [CONF_SG_WLAN_ACTIVE_MAX_BT_ACL_BR]         = 10,
+                        [CONF_SG_PASSIVE_SCAN_DURATION_FACTOR_HV3]  = 200,
+                        [CONF_SG_PASSIVE_SCAN_DURATION_FACTOR_A2DP] = 800,
+                        [CONF_SG_PASSIVE_SCAN_A2DP_BT_TIME]         = 75,
+                        [CONF_SG_PASSIVE_SCAN_A2DP_WLAN_TIME]       = 15,
+                        [CONF_SG_HV3_MAX_SERVED]                    = 6,
+                        [CONF_SG_DHCP_TIME]                         = 5000,
+                        [CONF_SG_ACTIVE_SCAN_DURATION_FACTOR_A2DP]  = 100,
+                },
+                .state = CONF_SG_PROTECTIVE,
         },
         .rx = {
                 .rx_msdu_life_time           = 512000,
@@ -245,6 +281,21 @@ static struct conf_drv_settings default_conf = {
         }
 };
 
+static void wl1271_device_release(struct device *dev)
+{
+
+}
+
+static struct platform_device wl1271_device = {
+        .name           = "wl1271",
+        .id             = -1,
+
+        /* device model insists to have a release function */
+        .dev            = {
+                .release = wl1271_device_release,
+        },
+};
+
 static LIST_HEAD(wl_list);
 
 static void wl1271_conf_init(struct wl1271 *wl)
@@ -364,30 +415,14 @@ static int wl1271_plt_init(struct wl1271 *wl)
         return ret;
 }
 
-static void wl1271_disable_interrupts(struct wl1271 *wl)
-{
-        disable_irq(wl->irq);
-}
-
-static void wl1271_power_off(struct wl1271 *wl)
-{
-        wl->set_power(false);
-        clear_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
-}
-
-static void wl1271_power_on(struct wl1271 *wl)
-{
-        wl->set_power(true);
-        set_bit(WL1271_FLAG_GPIO_POWER, &wl->flags);
-}
-
 static void wl1271_fw_status(struct wl1271 *wl,
                              struct wl1271_fw_status *status)
 {
+        struct timespec ts;
         u32 total = 0;
         int i;
 
-        wl1271_read(wl, FW_STATUS_ADDR, status, sizeof(*status), false);
+        wl1271_raw_read(wl, FW_STATUS_ADDR, status, sizeof(*status), false);
 
         wl1271_debug(DEBUG_IRQ, "intr: 0x%x (fw_rx_counter = %d, "
                      "drv_rx_counter = %d, tx_results_counter = %d)",
@@ -412,14 +447,19 @@ static void wl1271_fw_status(struct wl1271 *wl,
                 ieee80211_queue_work(wl->hw, &wl->tx_work);
 
         /* update the host-chipset time offset */
-        wl->time_offset = jiffies_to_usecs(jiffies) -
-                le32_to_cpu(status->fw_localtime);
+        getnstimeofday(&ts);
+        wl->time_offset = (timespec_to_ns(&ts) >> 10) -
+                (s64)le32_to_cpu(status->fw_localtime);
 }
 
+#define WL1271_IRQ_MAX_LOOPS 10
+
 static void wl1271_irq_work(struct work_struct *work)
 {
         int ret;
         u32 intr;
+        int loopcount = WL1271_IRQ_MAX_LOOPS;
+        unsigned long flags;
         struct wl1271 *wl =
                 container_of(work, struct wl1271, irq_work);
 
@@ -427,91 +467,77 @@ static void wl1271_irq_work(struct work_struct *work)
 
         wl1271_debug(DEBUG_IRQ, "IRQ work");
 
-        if (wl->state == WL1271_STATE_OFF)
+        if (unlikely(wl->state == WL1271_STATE_OFF))
                 goto out;
 
         ret = wl1271_ps_elp_wakeup(wl, true);
         if (ret < 0)
                 goto out;
 
-        wl1271_write32(wl, ACX_REG_INTERRUPT_MASK, WL1271_ACX_INTR_ALL);
-
-        wl1271_fw_status(wl, wl->fw_status);
-        intr = le32_to_cpu(wl->fw_status->intr);
-        if (!intr) {
-                wl1271_debug(DEBUG_IRQ, "Zero interrupt received.");
-                goto out_sleep;
-        }
+        spin_lock_irqsave(&wl->wl_lock, flags);
+        while (test_bit(WL1271_FLAG_IRQ_PENDING, &wl->flags) && loopcount) {
+                clear_bit(WL1271_FLAG_IRQ_PENDING, &wl->flags);
+                spin_unlock_irqrestore(&wl->wl_lock, flags);
+                loopcount--;
+
+                wl1271_fw_status(wl, wl->fw_status);
+                intr = le32_to_cpu(wl->fw_status->intr);
+                if (!intr) {
+                        wl1271_debug(DEBUG_IRQ, "Zero interrupt received.");
+                        continue;
+                }
 
-        intr &= WL1271_INTR_MASK;
+                intr &= WL1271_INTR_MASK;
 
-        if (intr & WL1271_ACX_INTR_EVENT_A) {
-                wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_A");
-                wl1271_event_handle(wl, 0);
-        }
+                if (intr & WL1271_ACX_INTR_DATA) {
+                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_DATA");
 
-        if (intr & WL1271_ACX_INTR_EVENT_B) {
-                wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_B");
-                wl1271_event_handle(wl, 1);
-        }
+                        /* check for tx results */
+                        if (wl->fw_status->tx_results_counter !=
+                            (wl->tx_results_count & 0xff))
+                                wl1271_tx_complete(wl);
 
-        if (intr & WL1271_ACX_INTR_INIT_COMPLETE)
-                wl1271_debug(DEBUG_IRQ,
-                             "WL1271_ACX_INTR_INIT_COMPLETE");
+                        wl1271_rx(wl, wl->fw_status);
+                }
 
-        if (intr & WL1271_ACX_INTR_HW_AVAILABLE)
-                wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_HW_AVAILABLE");
+                if (intr & WL1271_ACX_INTR_EVENT_A) {
+                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_A");
+                        wl1271_event_handle(wl, 0);
+                }
 
-        if (intr & WL1271_ACX_INTR_DATA) {
-                u8 tx_res_cnt = wl->fw_status->tx_results_counter -
-                        wl->tx_results_count;
+                if (intr & WL1271_ACX_INTR_EVENT_B) {
+                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_EVENT_B");
+                        wl1271_event_handle(wl, 1);
+                }
 
-                wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_DATA");
+                if (intr & WL1271_ACX_INTR_INIT_COMPLETE)
+                        wl1271_debug(DEBUG_IRQ,
+                                     "WL1271_ACX_INTR_INIT_COMPLETE");
 
-                /* check for tx results */
-                if (tx_res_cnt)
-                        wl1271_tx_complete(wl, tx_res_cnt);
+                if (intr & WL1271_ACX_INTR_HW_AVAILABLE)
+                        wl1271_debug(DEBUG_IRQ, "WL1271_ACX_INTR_HW_AVAILABLE");
 
-                wl1271_rx(wl, wl->fw_status);
+                spin_lock_irqsave(&wl->wl_lock, flags);
         }
 
-out_sleep:
-        wl1271_write32(wl, ACX_REG_INTERRUPT_MASK,
-                       WL1271_ACX_INTR_ALL & ~(WL1271_INTR_MASK));
+        if (test_bit(WL1271_FLAG_IRQ_PENDING, &wl->flags))
+                ieee80211_queue_work(wl->hw, &wl->irq_work);
+        else
+                clear_bit(WL1271_FLAG_IRQ_RUNNING, &wl->flags);
+        spin_unlock_irqrestore(&wl->wl_lock, flags);
+
         wl1271_ps_elp_sleep(wl);
 
 out:
         mutex_unlock(&wl->mutex);
 }
 
-static irqreturn_t wl1271_irq(int irq, void *cookie)
-{
-        struct wl1271 *wl;
-        unsigned long flags;
-
-        wl1271_debug(DEBUG_IRQ, "IRQ");
-
-        wl = cookie;
-
-        /* complete the ELP completion */
-        spin_lock_irqsave(&wl->wl_lock, flags);
-        if (wl->elp_compl) {
-                complete(wl->elp_compl);
-                wl->elp_compl = NULL;
-        }
-
-        ieee80211_queue_work(wl->hw, &wl->irq_work);
-        spin_unlock_irqrestore(&wl->wl_lock, flags);
-
-        return IRQ_HANDLED;
-}
-
 static int wl1271_fetch_firmware(struct wl1271 *wl)
 {
         const struct firmware *fw;
         int ret;
 
-        ret = request_firmware(&fw, WL1271_FW_NAME, &wl->spi->dev);
+        ret = request_firmware(&fw, WL1271_FW_NAME, wl1271_wl_to_dev(wl));
 
         if (ret < 0) {
                 wl1271_error("could not get firmware: %d", ret);
@@ -544,46 +570,12 @@ out:
         return ret;
 }
 
-static int wl1271_update_mac_addr(struct wl1271 *wl)
-{
-        int ret = 0;
-        u8 *nvs_ptr = (u8 *)wl->nvs->nvs;
-
-        /* get mac address from the NVS */
-        wl->mac_addr[0] = nvs_ptr[11];
-        wl->mac_addr[1] = nvs_ptr[10];
-        wl->mac_addr[2] = nvs_ptr[6];
-        wl->mac_addr[3] = nvs_ptr[5];
-        wl->mac_addr[4] = nvs_ptr[4];
-        wl->mac_addr[5] = nvs_ptr[3];
-
-        /* FIXME: if it is a zero-address, we should bail out. Now, instead,
-           we randomize an address */
-        if (is_zero_ether_addr(wl->mac_addr)) {
-                static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
-                memcpy(wl->mac_addr, nokia_oui, 3);
-                get_random_bytes(wl->mac_addr + 3, 3);
-
-                /* update this address to the NVS */
-                nvs_ptr[11] = wl->mac_addr[0];
-                nvs_ptr[10] = wl->mac_addr[1];
-                nvs_ptr[6] = wl->mac_addr[2];
-                nvs_ptr[5] = wl->mac_addr[3];
-                nvs_ptr[4] = wl->mac_addr[4];
-                nvs_ptr[3] = wl->mac_addr[5];
-        }
-
-        SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
-
-        return ret;
-}
-
 static int wl1271_fetch_nvs(struct wl1271 *wl)
 {
         const struct firmware *fw;
         int ret;
 
-        ret = request_firmware(&fw, WL1271_NVS_NAME, &wl->spi->dev);
+        ret = request_firmware(&fw, WL1271_NVS_NAME, wl1271_wl_to_dev(wl));
 
         if (ret < 0) {
                 wl1271_error("could not get nvs file: %d", ret);
@@ -607,8 +599,6 @@ static int wl1271_fetch_nvs(struct wl1271 *wl)
 
         memcpy(wl->nvs, fw->data, sizeof(struct wl1271_nvs_file));
 
-        ret = wl1271_update_mac_addr(wl);
-
 out:
         release_firmware(fw);
 
@@ -825,15 +815,13 @@ static int wl1271_op_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
          * The workqueue is slow to process the tx_queue and we need stop
          * the queue here, otherwise the queue will get too long.
          */
-        if (skb_queue_len(&wl->tx_queue) >= WL1271_TX_QUEUE_MAX_LENGTH) {
-                ieee80211_stop_queues(wl->hw);
+        if (skb_queue_len(&wl->tx_queue) >= WL1271_TX_QUEUE_HIGH_WATERMARK) {
+                wl1271_debug(DEBUG_TX, "op_tx: stopping queues");
 
-                /*
-                 * FIXME: this is racy, the variable is not properly
-                 * protected. Maybe fix this by removing the stupid
-                 * variable altogether and checking the real queue state?
-                 */
+                spin_lock_irqsave(&wl->wl_lock, flags);
+                ieee80211_stop_queues(wl->hw);
                 set_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
+                spin_unlock_irqrestore(&wl->wl_lock, flags);
         }
 
         return NETDEV_TX_OK;
@@ -928,13 +916,58 @@ static struct notifier_block wl1271_dev_notifier = {
 
 static int wl1271_op_start(struct ieee80211_hw *hw)
 {
+        wl1271_debug(DEBUG_MAC80211, "mac80211 start");
+
+        /*
+         * We have to delay the booting of the hardware because
+         * we need to know the local MAC address before downloading and
+         * initializing the firmware. The MAC address cannot be changed
+         * after boot, and without the proper MAC address, the firmware
+         * will not function properly.
+         *
+         * The MAC address is first known when the corresponding interface
+         * is added. That is where we will initialize the hardware.
+         */
+
+        return 0;
+}
+
+static void wl1271_op_stop(struct ieee80211_hw *hw)
+{
+        wl1271_debug(DEBUG_MAC80211, "mac80211 stop");
+}
+
+static int wl1271_op_add_interface(struct ieee80211_hw *hw,
+                                   struct ieee80211_vif *vif)
+{
         struct wl1271 *wl = hw->priv;
         int retries = WL1271_BOOT_RETRIES;
         int ret = 0;
 
-        wl1271_debug(DEBUG_MAC80211, "mac80211 start");
+        wl1271_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
+                     vif->type, vif->addr);
 
         mutex_lock(&wl->mutex);
+        if (wl->vif) {
+                ret = -EBUSY;
+                goto out;
+        }
+
+        wl->vif = vif;
+
+        switch (vif->type) {
+        case NL80211_IFTYPE_STATION:
+                wl->bss_type = BSS_TYPE_STA_BSS;
+                break;
+        case NL80211_IFTYPE_ADHOC:
+                wl->bss_type = BSS_TYPE_IBSS;
+                break;
+        default:
+                ret = -EOPNOTSUPP;
+                goto out;
+        }
+
+        memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
 
         if (wl->state != WL1271_STATE_OFF) {
                 wl1271_error("cannot start because not in off state: %d",
@@ -990,19 +1023,20 @@ out:
         return ret;
 }
 
-static void wl1271_op_stop(struct ieee80211_hw *hw)
+static void wl1271_op_remove_interface(struct ieee80211_hw *hw,
+                                       struct ieee80211_vif *vif)
 {
         struct wl1271 *wl = hw->priv;
         int i;
 
-        wl1271_info("down");
-
-        wl1271_debug(DEBUG_MAC80211, "mac80211 stop");
-
         unregister_inetaddr_notifier(&wl1271_dev_notifier);
-        list_del(&wl->list);
 
         mutex_lock(&wl->mutex);
+        wl1271_debug(DEBUG_MAC80211, "mac80211 remove interface");
+
+        wl1271_info("down");
+
+        list_del(&wl->list);
 
         WARN_ON(wl->state != WL1271_STATE_ON);
 
@@ -1040,13 +1074,14 @@ static void wl1271_op_stop(struct ieee80211_hw *hw)
         wl->tx_results_count = 0;
         wl->tx_packets_count = 0;
         wl->tx_security_last_seq = 0;
-        wl->tx_security_seq_16 = 0;
-        wl->tx_security_seq_32 = 0;
+        wl->tx_security_seq = 0;
         wl->time_offset = 0;
         wl->session_counter = 0;
         wl->rate_set = CONF_TX_RATE_MASK_BASIC;
         wl->sta_rate_set = 0;
         wl->flags = 0;
+        wl->vif = NULL;
+        wl->filters = 0;
 
         for (i = 0; i < NUM_TX_QUEUES; i++)
                 wl->tx_blocks_freed[i] = 0;
@@ -1055,119 +1090,39 @@ static void wl1271_op_stop(struct ieee80211_hw *hw)
         mutex_unlock(&wl->mutex);
 }
 
-static int wl1271_op_add_interface(struct ieee80211_hw *hw,
-                                   struct ieee80211_vif *vif)
+static void wl1271_configure_filters(struct wl1271 *wl, unsigned int filters)
 {
-        struct wl1271 *wl = hw->priv;
-        int ret = 0;
-
-        wl1271_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
-                     vif->type, vif->addr);
+        wl->rx_config = WL1271_DEFAULT_RX_CONFIG;
+        wl->rx_filter = WL1271_DEFAULT_RX_FILTER;
 
-        mutex_lock(&wl->mutex);
-        if (wl->vif) {
-                ret = -EBUSY;
-                goto out;
-        }
+        /* combine requested filters with current filter config */
+        filters = wl->filters | filters;
 
-        wl->vif = vif;
+        wl1271_debug(DEBUG_FILTERS, "RX filters set: ");
 
-        switch (vif->type) {
-        case NL80211_IFTYPE_STATION:
-                wl->bss_type = BSS_TYPE_STA_BSS;
-                break;
-        case NL80211_IFTYPE_ADHOC:
-                wl->bss_type = BSS_TYPE_IBSS;
-                break;
-        default:
-                ret = -EOPNOTSUPP;
-                goto out;
+        if (filters & FIF_PROMISC_IN_BSS) {
+                wl1271_debug(DEBUG_FILTERS, " - FIF_PROMISC_IN_BSS");
+                wl->rx_config &= ~CFG_UNI_FILTER_EN;
+                wl->rx_config |= CFG_BSSID_FILTER_EN;
         }
-
-        /* FIXME: what if conf->mac_addr changes? */
-
-out:
-        mutex_unlock(&wl->mutex);
-        return ret;
-}
-
-static void wl1271_op_remove_interface(struct ieee80211_hw *hw,
-                                         struct ieee80211_vif *vif)
-{
-        struct wl1271 *wl = hw->priv;
-
-        mutex_lock(&wl->mutex);
-        wl1271_debug(DEBUG_MAC80211, "mac80211 remove interface");
-        wl->vif = NULL;
-        mutex_unlock(&wl->mutex);
-}
-
-#if 0
-static int wl1271_op_config_interface(struct ieee80211_hw *hw,
-                                      struct ieee80211_vif *vif,
-                                      struct ieee80211_if_conf *conf)
-{
-        struct wl1271 *wl = hw->priv;
-        struct sk_buff *beacon;
-        int ret;
-
-        wl1271_debug(DEBUG_MAC80211, "mac80211 config_interface bssid %pM",
-                     conf->bssid);
-        wl1271_dump_ascii(DEBUG_MAC80211, "ssid: ", conf->ssid,
-                          conf->ssid_len);
-
-        mutex_lock(&wl->mutex);
-
-        ret = wl1271_ps_elp_wakeup(wl, false);
-        if (ret < 0)
-                goto out;
-
-        if (memcmp(wl->bssid, conf->bssid, ETH_ALEN)) {
-                wl1271_debug(DEBUG_MAC80211, "bssid changed");
-
-                memcpy(wl->bssid, conf->bssid, ETH_ALEN);
-
-                ret = wl1271_cmd_join(wl);
-                if (ret < 0)
-                        goto out_sleep;
-
-                ret = wl1271_cmd_build_null_data(wl);
-                if (ret < 0)
-                        goto out_sleep;
+        if (filters & FIF_BCN_PRBRESP_PROMISC) {
+                wl1271_debug(DEBUG_FILTERS, " - FIF_BCN_PRBRESP_PROMISC");
+                wl->rx_config &= ~CFG_BSSID_FILTER_EN;
+                wl->rx_config &= ~CFG_SSID_FILTER_EN;
         }
-
-        wl->ssid_len = conf->ssid_len;
-        if (wl->ssid_len)
-                memcpy(wl->ssid, conf->ssid, wl->ssid_len);
-
-        if (conf->changed & IEEE80211_IFCC_BEACON) {
-                beacon = ieee80211_beacon_get(hw, vif);
-                ret = wl1271_cmd_template_set(wl, CMD_TEMPL_BEACON,
-                                              beacon->data, beacon->len);
-
-                if (ret < 0) {
-                        dev_kfree_skb(beacon);
-                        goto out_sleep;
-                }
-
-                ret = wl1271_cmd_template_set(wl, CMD_TEMPL_PROBE_RESPONSE,
-                                              beacon->data, beacon->len);
-
-                dev_kfree_skb(beacon);
-
-                if (ret < 0)
-                        goto out_sleep;
+        if (filters & FIF_OTHER_BSS) {
+                wl1271_debug(DEBUG_FILTERS, " - FIF_OTHER_BSS");
+                wl->rx_config &= ~CFG_BSSID_FILTER_EN;
+        }
+        if (filters & FIF_CONTROL) {
+                wl1271_debug(DEBUG_FILTERS, " - FIF_CONTROL");
+                wl->rx_filter |= CFG_RX_CTL_EN;
+        }
+        if (filters & FIF_FCSFAIL) {
+                wl1271_debug(DEBUG_FILTERS, " - FIF_FCSFAIL");
+                wl->rx_filter |= CFG_RX_FCS_ERROR;
         }
-
-out_sleep:
-        wl1271_ps_elp_sleep(wl);
-
-out:
-        mutex_unlock(&wl->mutex);
-
-        return ret;
 }
-#endif
 
 static int wl1271_join_channel(struct wl1271 *wl, int channel)
 {
@@ -1176,17 +1131,16 @@ static int wl1271_join_channel(struct wl1271 *wl, int channel)
         static const u8 dummy_bssid[ETH_ALEN] = { 0x0b, 0xad, 0xde,
                                                   0xad, 0xbe, 0xef };
 
-        /* the dummy join is not required for ad-hoc */
-        if (wl->bss_type == BSS_TYPE_IBSS)
-                goto out;
-
-        /* disable mac filter, so we hear everything */
-        wl->rx_config &= ~CFG_BSSID_FILTER_EN;
-
         wl->channel = channel;
         memcpy(wl->bssid, dummy_bssid, ETH_ALEN);
 
-        ret = wl1271_cmd_join(wl);
+        /* pass through frames from all BSS */
+        wl1271_configure_filters(wl, FIF_OTHER_BSS);
+
+        /* the dummy join is performed always with STATION BSS type to allow
+           also ad-hoc mode to listen to the surroundings without sending any
+           beacons yet. */
+        ret = wl1271_cmd_join(wl, BSS_TYPE_STA_BSS);
         if (ret < 0)
                 goto out;
 
@@ -1208,7 +1162,9 @@ static int wl1271_unjoin_channel(struct wl1271 *wl)
         clear_bit(WL1271_FLAG_JOINED, &wl->flags);
         wl->channel = 0;
         memset(wl->bssid, 0, ETH_ALEN);
-        wl->rx_config = WL1271_DEFAULT_RX_CONFIG;
+
+        /* stop filterting packets based on bssid */
+        wl1271_configure_filters(wl, FIF_OTHER_BSS);
 
 out:
         return ret;
@@ -1255,7 +1211,7 @@ static int wl1271_op_config(struct ieee80211_hw *hw, u32 changed)
             test_bit(WL1271_FLAG_JOINED, &wl->flags)) {
                 wl->channel = channel;
                 /* FIXME: maybe use CMD_CHANNEL_SWITCH for this? */
-                ret = wl1271_cmd_join(wl);
+                ret = wl1271_cmd_join(wl, wl->bss_type);
                 if (ret < 0)
                         wl1271_warning("cmd join to update channel failed %d",
                                        ret);
@@ -1272,13 +1228,13 @@ static int wl1271_op_config(struct ieee80211_hw *hw, u32 changed)
                  * through the bss_info_changed() hook.
                  */
                 if (test_bit(WL1271_FLAG_STA_ASSOCIATED, &wl->flags)) {
-                        wl1271_info("psm enabled");
+                        wl1271_debug(DEBUG_PSM, "psm enabled");
                         ret = wl1271_ps_set_mode(wl, STATION_POWER_SAVE_MODE,
                                                  true);
                 }
         } else if (!(conf->flags & IEEE80211_CONF_PS) &&
                    test_bit(WL1271_FLAG_PSM_REQUESTED, &wl->flags)) {
-                wl1271_info("psm disabled");
+                wl1271_debug(DEBUG_PSM, "psm disabled");
 
                 clear_bit(WL1271_FLAG_PSM_REQUESTED, &wl->flags);
 
@@ -1310,11 +1266,11 @@ struct wl1271_filter_params {
         u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
 };
 
-static u64 wl1271_op_prepare_multicast(struct ieee80211_hw *hw, int mc_count,
-                                       struct dev_addr_list *mc_list)
+static u64 wl1271_op_prepare_multicast(struct ieee80211_hw *hw,
+                                       struct netdev_hw_addr_list *mc_list)
 {
         struct wl1271_filter_params *fp;
-        int i;
+        struct netdev_hw_addr *ha;
 
         fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
         if (!fp) {
@@ -1323,21 +1279,16 @@ static u64 wl1271_op_prepare_multicast(struct ieee80211_hw *hw, int mc_count,
         }
 
         /* update multicast filtering parameters */
-        fp->enabled = true;
-        if (mc_count > ACX_MC_ADDRESS_GROUP_MAX) {
-                mc_count = 0;
-                fp->enabled = false;
-        }
-
         fp->mc_list_length = 0;
-        for (i = 0; i < mc_count; i++) {
-                if (mc_list->da_addrlen == ETH_ALEN) {
+        if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
+                fp->enabled = false;
+        } else {
+                fp->enabled = true;
+                netdev_hw_addr_list_for_each(ha, mc_list) {
                         memcpy(fp->mc_list[fp->mc_list_length],
-                               mc_list->da_addr, ETH_ALEN);
+                                        ha->addr, ETH_ALEN);
                         fp->mc_list_length++;
-                } else
-                        wl1271_warning("Unknown mc address length.");
-                mc_list = mc_list->next;
+                }
         }
 
         return (u64)(unsigned long)fp;
@@ -1381,14 +1332,14 @@ static void wl1271_op_configure_filter(struct ieee80211_hw *hw,
         if (ret < 0)
                 goto out_sleep;
 
-        kfree(fp);
-
-        /* FIXME: We still need to set our filters properly */
-
         /* determine, whether supported filter values have changed */
         if (changed == 0)
                 goto out_sleep;
 
+        /* configure filters */
+        wl->filters = *total;
+        wl1271_configure_filters(wl, 0);
+
         /* apply configured filters */
         ret = wl1271_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
         if (ret < 0)
@@ -1399,6 +1350,7 @@ out_sleep:
 
 out:
         mutex_unlock(&wl->mutex);
+        kfree(fp);
 }
 
 static int wl1271_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
@@ -1449,15 +1401,15 @@ static int wl1271_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
                 key_type = KEY_TKIP;
 
                 key_conf->hw_key_idx = key_conf->keyidx;
-                tx_seq_32 = wl->tx_security_seq_32;
-                tx_seq_16 = wl->tx_security_seq_16;
+                tx_seq_32 = WL1271_TX_SECURITY_HI32(wl->tx_security_seq);
+                tx_seq_16 = WL1271_TX_SECURITY_LO16(wl->tx_security_seq);
                 break;
         case ALG_CCMP:
                 key_type = KEY_AES;
 
                 key_conf->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
-                tx_seq_32 = wl->tx_security_seq_32;
-                tx_seq_16 = wl->tx_security_seq_16;
+                tx_seq_32 = WL1271_TX_SECURITY_HI32(wl->tx_security_seq);
+                tx_seq_16 = WL1271_TX_SECURITY_LO16(wl->tx_security_seq);
                 break;
         default:
                 wl1271_error("Unknown key algo 0x%x", key_conf->alg);
@@ -1544,10 +1496,12 @@ static int wl1271_op_hw_scan(struct ieee80211_hw *hw,
                 goto out;
 
         if (wl1271_11a_enabled())
-                ret = wl1271_cmd_scan(hw->priv, ssid, len, 1, 0,
+                ret = wl1271_cmd_scan(hw->priv, ssid, len,
+                                      req->ie, req->ie_len, 1, 0,
                                       WL1271_SCAN_BAND_DUAL, 3);
         else
-                ret = wl1271_cmd_scan(hw->priv, ssid, len, 1, 0,
+                ret = wl1271_cmd_scan(hw->priv, ssid, len,
+                                      req->ie, req->ie_len, 1, 0,
                                       WL1271_SCAN_BAND_2_4_GHZ, 3);
 
         wl1271_ps_elp_sleep(wl);
@@ -1660,14 +1614,14 @@ static void wl1271_op_bss_info_changed(struct ieee80211_hw *hw,
              * and enable the BSSID filter
              */
             memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
-                        wl->rx_config |= CFG_BSSID_FILTER_EN;
                         memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
+
                         ret = wl1271_cmd_build_null_data(wl);
-                        if (ret < 0) {
-                                wl1271_warning("cmd buld null data failed %d",
-                                               ret);
+                        if (ret < 0)
                                 goto out_sleep;
-                        }
+
+                        /* filter out all packets not from this BSSID */
+                        wl1271_configure_filters(wl, 0);
 
                         /* Need to update the BSSID (for filtering etc) */
                         do_join = true;
@@ -1738,7 +1692,7 @@ static void wl1271_op_bss_info_changed(struct ieee80211_hw *hw,
         }
 
         if (do_join) {
-                ret = wl1271_cmd_join(wl);
+                ret = wl1271_cmd_join(wl, wl->bss_type);
                 if (ret < 0) {
                         wl1271_warning("cmd join failed %d", ret);
                         goto out_sleep;
@@ -1757,6 +1711,7 @@ static int wl1271_op_conf_tx(struct ieee80211_hw *hw, u16 queue,
                              const struct ieee80211_tx_queue_params *params)
 {
         struct wl1271 *wl = hw->priv;
+        u8 ps_scheme;
         int ret;
 
         mutex_lock(&wl->mutex);
@@ -1767,17 +1722,22 @@ static int wl1271_op_conf_tx(struct ieee80211_hw *hw, u16 queue,
         if (ret < 0)
                 goto out;
 
+        /* the txop is confed in units of 32us by the mac80211, we need us */
         ret = wl1271_acx_ac_cfg(wl, wl1271_tx_get_queue(queue),
                                 params->cw_min, params->cw_max,
-                                params->aifs, params->txop);
+                                params->aifs, params->txop << 5);
         if (ret < 0)
                 goto out_sleep;
 
+        if (params->uapsd)
+                ps_scheme = CONF_PS_SCHEME_UPSD_TRIGGER;
+        else
+                ps_scheme = CONF_PS_SCHEME_LEGACY;
+
         ret = wl1271_acx_tid_cfg(wl, wl1271_tx_get_queue(queue),
                                  CONF_CHANNEL_TYPE_EDCF,
                                  wl1271_tx_get_queue(queue),
-                                 CONF_PS_SCHEME_LEGACY_PSPOLL,
-                                 CONF_ACK_POLICY_LEGACY, 0, 0);
+                                 ps_scheme, CONF_ACK_POLICY_LEGACY, 0, 0);
         if (ret < 0)
                 goto out_sleep;
 
@@ -1947,7 +1907,6 @@ static const struct ieee80211_ops wl1271_ops = {
         .add_interface = wl1271_op_add_interface,
         .remove_interface = wl1271_op_remove_interface,
         .config = wl1271_op_config,
-/*      .config_interface = wl1271_op_config_interface, */
         .prepare_multicast = wl1271_op_prepare_multicast,
         .configure_filter = wl1271_op_configure_filter,
         .tx = wl1271_op_tx,
@@ -1959,7 +1918,69 @@ static const struct ieee80211_ops wl1271_ops = {
         CFG80211_TESTMODE_CMD(wl1271_tm_cmd)
 };
 
-static int wl1271_register_hw(struct wl1271 *wl)
+static ssize_t wl1271_sysfs_show_bt_coex_state(struct device *dev,
+                                               struct device_attribute *attr,
+                                               char *buf)
+{
+        struct wl1271 *wl = dev_get_drvdata(dev);
+        ssize_t len;
+
+        /* FIXME: what's the maximum length of buf? page size?*/
+        len = 500;
+
+        mutex_lock(&wl->mutex);
+        len = snprintf(buf, len, "%d\n\n0 - off\n1 - on\n",
+                       wl->sg_enabled);
+        mutex_unlock(&wl->mutex);
+
+        return len;
+
+}
+
+static ssize_t wl1271_sysfs_store_bt_coex_state(struct device *dev,
+                                                struct device_attribute *attr,
+                                                const char *buf, size_t count)
+{
+        struct wl1271 *wl = dev_get_drvdata(dev);
+        unsigned long res;
+        int ret;
+
+        ret = strict_strtoul(buf, 10, &res);
+
+        if (ret < 0) {
+                wl1271_warning("incorrect value written to bt_coex_mode");
+                return count;
+        }
+
+        mutex_lock(&wl->mutex);
+
+        res = !!res;
+
+        if (res == wl->sg_enabled)
+                goto out;
+
+        wl->sg_enabled = res;
+
+        if (wl->state == WL1271_STATE_OFF)
+                goto out;
+
+        ret = wl1271_ps_elp_wakeup(wl, false);
+        if (ret < 0)
+                goto out;
+
+        wl1271_acx_sg_enable(wl, wl->sg_enabled);
+        wl1271_ps_elp_sleep(wl);
+
+ out:
+        mutex_unlock(&wl->mutex);
+        return count;
+}
+
+static DEVICE_ATTR(bt_coex_state, S_IRUGO | S_IWUSR,
+                   wl1271_sysfs_show_bt_coex_state,
+                   wl1271_sysfs_store_bt_coex_state);
+
+int wl1271_register_hw(struct wl1271 *wl)
 {
         int ret;
 
@@ -1980,8 +2001,17 @@ static int wl1271_register_hw(struct wl1271 *wl)
 
         return 0;
 }
+EXPORT_SYMBOL_GPL(wl1271_register_hw);
 
-static int wl1271_init_ieee80211(struct wl1271 *wl)
+void wl1271_unregister_hw(struct wl1271 *wl)
+{
+        ieee80211_unregister_hw(wl->hw);
+        wl->mac80211_registered = false;
+
+}
+EXPORT_SYMBOL_GPL(wl1271_unregister_hw);
+
+int wl1271_init_ieee80211(struct wl1271 *wl)
 {
         /* The tx descriptor buffer and the TKIP space. */
         wl->hw->extra_tx_headroom = WL1271_TKIP_IV_SPACE +
@@ -1994,7 +2024,9 @@ static int wl1271_init_ieee80211(struct wl1271 *wl)
         wl->hw->flags = IEEE80211_HW_SIGNAL_DBM |
                 IEEE80211_HW_NOISE_DBM |
                 IEEE80211_HW_BEACON_FILTER |
-                IEEE80211_HW_SUPPORTS_PS;
+                IEEE80211_HW_SUPPORTS_PS |
+                IEEE80211_HW_SUPPORTS_UAPSD |
+                IEEE80211_HW_HAS_RATE_CONTROL;
 
         wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
                 BIT(NL80211_IFTYPE_ADHOC);
@@ -2004,46 +2036,47 @@ static int wl1271_init_ieee80211(struct wl1271 *wl)
         if (wl1271_11a_enabled())
                 wl->hw->wiphy->bands[IEEE80211_BAND_5GHZ] = &wl1271_band_5ghz;
 
-        SET_IEEE80211_DEV(wl->hw, &wl->spi->dev);
-
-        return 0;
-}
+        wl->hw->queues = 4;
 
-static void wl1271_device_release(struct device *dev)
-{
+        SET_IEEE80211_DEV(wl->hw, wl1271_wl_to_dev(wl));
 
+        return 0;
 }
-
-static struct platform_device wl1271_device = {
-        .name           = "wl1271",
-        .id             = -1,
-
-        /* device model insists to have a release function */
-        .dev            = {
-                .release = wl1271_device_release,
-        },
-};
+EXPORT_SYMBOL_GPL(wl1271_init_ieee80211);
 
 #define WL1271_DEFAULT_CHANNEL 0
 
-static struct ieee80211_hw *wl1271_alloc_hw(void)
+struct ieee80211_hw *wl1271_alloc_hw(void)
 {
         struct ieee80211_hw *hw;
+        struct platform_device *plat_dev = NULL;
         struct wl1271 *wl;
-        int i;
+        int i, ret;
+        static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
 
         hw = ieee80211_alloc_hw(sizeof(*wl), &wl1271_ops);
         if (!hw) {
                 wl1271_error("could not alloc ieee80211_hw");
-                return ERR_PTR(-ENOMEM);
+                ret = -ENOMEM;
+                goto err_hw_alloc;
         }
 
+        plat_dev = kmalloc(sizeof(wl1271_device), GFP_KERNEL);
+        if (!plat_dev) {
+                wl1271_error("could not allocate platform_device");
+                ret = -ENOMEM;
+                goto err_plat_alloc;
+        }
+
+        memcpy(plat_dev, &wl1271_device, sizeof(wl1271_device));
+
         wl = hw->priv;
         memset(wl, 0, sizeof(*wl));
 
         INIT_LIST_HEAD(&wl->list);
 
         wl->hw = hw;
+        wl->plat_dev = plat_dev;
 
         skb_queue_head_init(&wl->tx_queue);
 
@@ -2061,6 +2094,7 @@ static struct ieee80211_hw *wl1271_alloc_hw(void)
         wl->band = IEEE80211_BAND_2GHZ;
         wl->vif = NULL;
         wl->flags = 0;
+        wl->sg_enabled = true;
 
         for (i = 0; i < ACX_TX_DESCRIPTORS; i++)
                 wl->tx_frames[i] = NULL;
@@ -2070,15 +2104,55 @@ static struct ieee80211_hw *wl1271_alloc_hw(void)
         wl->state = WL1271_STATE_OFF;
         mutex_init(&wl->mutex);
 
+        /*
+         * FIXME: we should use a zero MAC address here, but for now we
+         * generate a random Nokia address.
+         */
+        memcpy(wl->mac_addr, nokia_oui, 3);
+        get_random_bytes(wl->mac_addr + 3, 3);
+
         /* Apply default driver configuration. */
         wl1271_conf_init(wl);
 
+        wl1271_debugfs_init(wl);
+
+        /* Register platform device */
+        ret = platform_device_register(wl->plat_dev);
+        if (ret) {
+                wl1271_error("couldn't register platform device");
+                goto err_hw;
+        }
+        dev_set_drvdata(&wl->plat_dev->dev, wl);
+
+        /* Create sysfs file to control bt coex state */
+        ret = device_create_file(&wl->plat_dev->dev, &dev_attr_bt_coex_state);
+        if (ret < 0) {
+                wl1271_error("failed to create sysfs file bt_coex_state");
+                goto err_platform;
+        }
+
         return hw;
+
+err_platform:
+        platform_device_unregister(wl->plat_dev);
+
+err_hw:
+        wl1271_debugfs_exit(wl);
+        kfree(plat_dev);
+
+err_plat_alloc:
+        ieee80211_free_hw(hw);
+
+err_hw_alloc:
+
+        return ERR_PTR(ret);
 }
+EXPORT_SYMBOL_GPL(wl1271_alloc_hw);
 
 int wl1271_free_hw(struct wl1271 *wl)
 {
-        ieee80211_unregister_hw(wl->hw);
+        platform_device_unregister(wl->plat_dev);
+        kfree(wl->plat_dev);
 
         wl1271_debugfs_exit(wl);
 
@@ -2095,145 +2169,8 @@ int wl1271_free_hw(struct wl1271 *wl)
 
         return 0;
 }
-
-static int __devinit wl1271_probe(struct spi_device *spi)
-{
-        struct wl12xx_platform_data *pdata;
-        struct ieee80211_hw *hw;
-        struct wl1271 *wl;
-        int ret;
-
-        pdata = spi->dev.platform_data;
-        if (!pdata) {
-                wl1271_error("no platform data");
-                return -ENODEV;
-        }
-
-        hw = wl1271_alloc_hw();
-        if (IS_ERR(hw))
-                return PTR_ERR(hw);
-
-        wl = hw->priv;
-
-        dev_set_drvdata(&spi->dev, wl);
-        wl->spi = spi;
-
-        /* This is the only SPI value that we need to set here, the rest
-         * comes from the board-peripherals file */
-        spi->bits_per_word = 32;
-
-        ret = spi_setup(spi);
-        if (ret < 0) {
-                wl1271_error("spi_setup failed");
-                goto out_free;
-        }
-
-        wl->set_power = pdata->set_power;
-        if (!wl->set_power) {
-                wl1271_error("set power function missing in platform data");
-                ret = -ENODEV;
-                goto out_free;
-        }
-
-        wl->irq = spi->irq;
-        if (wl->irq < 0) {
-                wl1271_error("irq missing in platform data");
-                ret = -ENODEV;
-                goto out_free;
-        }
-
-        ret = request_irq(wl->irq, wl1271_irq, 0, DRIVER_NAME, wl);
-        if (ret < 0) {
-                wl1271_error("request_irq() failed: %d", ret);
-                goto out_free;
-        }
-
-        set_irq_type(wl->irq, IRQ_TYPE_EDGE_RISING);
-
-        disable_irq(wl->irq);
-
-        ret = platform_device_register(&wl1271_device);
-        if (ret) {
-                wl1271_error("couldn't register platform device");
-                goto out_irq;
-        }
-        dev_set_drvdata(&wl1271_device.dev, wl);
-
-        ret = wl1271_init_ieee80211(wl);
-        if (ret)
-                goto out_platform;
-
-        ret = wl1271_register_hw(wl);
-        if (ret)
-                goto out_platform;
-
-        wl1271_debugfs_init(wl);
-
-        wl1271_notice("initialized");
-
-        return 0;
-
- out_platform:
-        platform_device_unregister(&wl1271_device);
-
- out_irq:
-        free_irq(wl->irq, wl);
-
- out_free:
-        ieee80211_free_hw(hw);
-
-        return ret;
-}
-
-static int __devexit wl1271_remove(struct spi_device *spi)
-{
-        struct wl1271 *wl = dev_get_drvdata(&spi->dev);
-
-        platform_device_unregister(&wl1271_device);
-        free_irq(wl->irq, wl);
-
-        wl1271_free_hw(wl);
-
-        return 0;
-}
-
-
-static struct spi_driver wl1271_spi_driver = {
-        .driver = {
-                .name           = "wl1271",
-                .bus            = &spi_bus_type,
-                .owner          = THIS_MODULE,
-        },
-
-        .probe          = wl1271_probe,
-        .remove         = __devexit_p(wl1271_remove),
-};
-
-static int __init wl1271_init(void)
-{
-        int ret;
-
-        ret = spi_register_driver(&wl1271_spi_driver);
-        if (ret < 0) {
-                wl1271_error("failed to register spi driver: %d", ret);
-                goto out;
-        }
-
-out:
-        return ret;
-}
-
-static void __exit wl1271_exit(void)
-{
-        spi_unregister_driver(&wl1271_spi_driver);
-
-        wl1271_notice("unloaded");
-}
-
-module_init(wl1271_init);
-module_exit(wl1271_exit);
+EXPORT_SYMBOL_GPL(wl1271_free_hw);
 
 MODULE_LICENSE("GPL");
 MODULE_AUTHOR("Luciano Coelho <luciano.coelho@nokia.com>");
 MODULE_AUTHOR("Juuso Oikarinen <juuso.oikarinen@nokia.com>");
-MODULE_FIRMWARE(WL1271_FW_NAME);
diff --git a/drivers/net/wireless/wl12xx/wl1271_ps.c b/drivers/net/wireless/wl12xx/wl1271_ps.c
index e2b1ebf096e8..5a04482b9353 100644
--- a/drivers/net/wireless/wl12xx/wl1271_ps.c
+++ b/drivers/net/wireless/wl12xx/wl1271_ps.c
@@ -23,7 +23,6 @@
 
 #include "wl1271_reg.h"
 #include "wl1271_ps.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 
 #define WL1271_WAKEUP_TIMEOUT 500
diff --git a/drivers/net/wireless/wl12xx/wl1271_rx.c b/drivers/net/wireless/wl12xx/wl1271_rx.c
index 6730f5b96e76..b824c6cc2cc5 100644
--- a/drivers/net/wireless/wl12xx/wl1271_rx.c
+++ b/drivers/net/wireless/wl12xx/wl1271_rx.c
@@ -25,7 +25,6 @@
 #include "wl1271_acx.h"
 #include "wl1271_reg.h"
 #include "wl1271_rx.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 
 static u8 wl1271_rx_get_mem_block(struct wl1271_fw_status *status,
@@ -160,6 +159,13 @@ static void wl1271_rx_handle_data(struct wl1271 *wl, u32 length)
         u8 *buf;
         u8 beacon = 0;
 
+        /*
+         * In PLT mode we seem to get frames and mac80211 warns about them,
+         * workaround this by not retrieving them at all.
+         */
+        if (unlikely(wl->state == WL1271_STATE_PLT))
+                return;
+
         skb = __dev_alloc_skb(length, GFP_KERNEL);
         if (!skb) {
                 wl1271_error("Couldn't allocate RX frame");
@@ -218,6 +224,7 @@ void wl1271_rx(struct wl1271 *wl, struct wl1271_fw_status *status)
 
                 wl->rx_counter++;
                 drv_rx_counter = wl->rx_counter & NUM_RX_PKT_DESC_MOD_MASK;
-                wl1271_write32(wl, RX_DRIVER_COUNTER_ADDRESS, wl->rx_counter);
         }
+
+        wl1271_write32(wl, RX_DRIVER_COUNTER_ADDRESS, wl->rx_counter);
 }
diff --git a/drivers/net/wireless/wl12xx/wl1271_sdio.c b/drivers/net/wireless/wl12xx/wl1271_sdio.c
new file mode 100644
index 000000000000..3c03de74dbfc
--- /dev/null
+++ b/drivers/net/wireless/wl12xx/wl1271_sdio.c
@@ -0,0 +1,291 @@
+/*
+ * This file is part of wl1271
+ *
+ * Copyright (C) 2009-2010 Nokia Corporation
+ *
+ * Contact: Luciano Coelho <luciano.coelho@nokia.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * version 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA
+ *
+ */
+
+#include <linux/irq.h>
+#include <linux/module.h>
+#include <linux/crc7.h>
+#include <linux/vmalloc.h>
+#include <linux/mmc/sdio_func.h>
+#include <linux/mmc/sdio_ids.h>
+#include <linux/mmc/card.h>
+#include <plat/gpio.h>
+
+#include "wl1271.h"
+#include "wl12xx_80211.h"
+#include "wl1271_io.h"
+
+
+#define RX71_WL1271_IRQ_GPIO            42
+
+#ifndef SDIO_VENDOR_ID_TI
+#define SDIO_VENDOR_ID_TI               0x0097
+#endif
+
+#ifndef SDIO_DEVICE_ID_TI_WL1271
+#define SDIO_DEVICE_ID_TI_WL1271        0x4076
+#endif
+
+static const struct sdio_device_id wl1271_devices[] = {
+        { SDIO_DEVICE(SDIO_VENDOR_ID_TI, SDIO_DEVICE_ID_TI_WL1271) },
+        {}
+};
+MODULE_DEVICE_TABLE(sdio, wl1271_devices);
+
+static inline struct sdio_func *wl_to_func(struct wl1271 *wl)
+{
+        return wl->if_priv;
+}
+
+static struct device *wl1271_sdio_wl_to_dev(struct wl1271 *wl)
+{
+        return &(wl_to_func(wl)->dev);
+}
+
+static irqreturn_t wl1271_irq(int irq, void *cookie)
+{
+        struct wl1271 *wl = cookie;
+        unsigned long flags;
+
+        wl1271_debug(DEBUG_IRQ, "IRQ");
+
+        /* complete the ELP completion */
+        spin_lock_irqsave(&wl->wl_lock, flags);
+        if (wl->elp_compl) {
+                complete(wl->elp_compl);
+                wl->elp_compl = NULL;
+        }
+
+        if (!test_and_set_bit(WL1271_FLAG_IRQ_RUNNING, &wl->flags))
+                ieee80211_queue_work(wl->hw, &wl->irq_work);
+        set_bit(WL1271_FLAG_IRQ_PENDING, &wl->flags);
+        spin_unlock_irqrestore(&wl->wl_lock, flags);
+
+        return IRQ_HANDLED;
+}
+
+static void wl1271_sdio_disable_interrupts(struct wl1271 *wl)
+{
+        disable_irq(wl->irq);
+}
+
+static void wl1271_sdio_enable_interrupts(struct wl1271 *wl)
+{
+        enable_irq(wl->irq);
+}
+
+static void wl1271_sdio_reset(struct wl1271 *wl)
+{
+}
+
+static void wl1271_sdio_init(struct wl1271 *wl)
+{
+}
+
+static void wl1271_sdio_raw_read(struct wl1271 *wl, int addr, void *buf,
+                                 size_t len, bool fixed)
+{
+        int ret;
+        struct sdio_func *func = wl_to_func(wl);
+
+        if (unlikely(addr == HW_ACCESS_ELP_CTRL_REG_ADDR)) {
+                ((u8 *)buf)[0] = sdio_f0_readb(func, addr, &ret);
+                wl1271_debug(DEBUG_SDIO, "sdio read 52 addr 0x%x, byte 0x%02x",
+                             addr, ((u8 *)buf)[0]);
+        } else {
+                if (fixed)
+                        ret = sdio_readsb(func, buf, addr, len);
+                else
+                        ret = sdio_memcpy_fromio(func, buf, addr, len);
+
+                wl1271_debug(DEBUG_SDIO, "sdio read 53 addr 0x%x, %d bytes",
+                             addr, len);
+                wl1271_dump_ascii(DEBUG_SDIO, "data: ", buf, len);
+        }
+
+        if (ret)
+                wl1271_error("sdio read failed (%d)", ret);
+
+}
+
+static void wl1271_sdio_raw_write(struct wl1271 *wl, int addr, void *buf,
+                                  size_t len, bool fixed)
+{
+        int ret;
+        struct sdio_func *func = wl_to_func(wl);
+
+        if (unlikely(addr == HW_ACCESS_ELP_CTRL_REG_ADDR)) {
+                sdio_f0_writeb(func, ((u8 *)buf)[0], addr, &ret);
+                wl1271_debug(DEBUG_SDIO, "sdio write 52 addr 0x%x, byte 0x%02x",
+                             addr, ((u8 *)buf)[0]);
+        } else {
+                wl1271_debug(DEBUG_SDIO, "sdio write 53 addr 0x%x, %d bytes",
+                             addr, len);
+                wl1271_dump_ascii(DEBUG_SDIO, "data: ", buf, len);
+
+                if (fixed)
+                        ret = sdio_writesb(func, addr, buf, len);
+                else
+                        ret = sdio_memcpy_toio(func, addr, buf, len);
+        }
+        if (ret)
+                wl1271_error("sdio write failed (%d)", ret);
+
+}
+
+static void wl1271_sdio_set_power(struct wl1271 *wl, bool enable)
+{
+        struct sdio_func *func = wl_to_func(wl);
+
+        /* Let the SDIO stack handle wlan_enable control, so we
+         * keep host claimed while wlan is in use to keep wl1271
+         * alive.
+         */
+        if (enable) {
+                sdio_claim_host(func);
+                sdio_enable_func(func);
+        } else {
+                sdio_disable_func(func);
+                sdio_release_host(func);
+        }
+}
+
+static struct wl1271_if_operations sdio_ops = {
+        .read           = wl1271_sdio_raw_read,
+        .write          = wl1271_sdio_raw_write,
+        .reset          = wl1271_sdio_reset,
+        .init           = wl1271_sdio_init,
+        .power          = wl1271_sdio_set_power,
+        .dev            = wl1271_sdio_wl_to_dev,
+        .enable_irq     = wl1271_sdio_enable_interrupts,
+        .disable_irq    = wl1271_sdio_disable_interrupts
+};
+
+static int __devinit wl1271_probe(struct sdio_func *func,
+                                  const struct sdio_device_id *id)
+{
+        struct ieee80211_hw *hw;
+        struct wl1271 *wl;
+        int ret;
+
+        /* We are only able to handle the wlan function */
+        if (func->num != 0x02)
+                return -ENODEV;
+
+        hw = wl1271_alloc_hw();
+        if (IS_ERR(hw))
+                return PTR_ERR(hw);
+
+        wl = hw->priv;
+
+        wl->if_priv = func;
+        wl->if_ops = &sdio_ops;
+
+        /* Grab access to FN0 for ELP reg. */
+        func->card->quirks |= MMC_QUIRK_LENIENT_FN0;
+
+        wl->irq = gpio_to_irq(RX71_WL1271_IRQ_GPIO);
+        if (wl->irq < 0) {
+                ret = wl->irq;
+                wl1271_error("could not get irq!");
+                goto out_free;
+        }
+
+        ret = request_irq(wl->irq, wl1271_irq, 0, DRIVER_NAME, wl);
+        if (ret < 0) {
+                wl1271_error("request_irq() failed: %d", ret);
+                goto out_free;
+        }
+
+        set_irq_type(wl->irq, IRQ_TYPE_EDGE_RISING);
+
+        disable_irq(wl->irq);
+
+        ret = wl1271_init_ieee80211(wl);
+        if (ret)
+                goto out_irq;
+
+        ret = wl1271_register_hw(wl);
+        if (ret)
+                goto out_irq;
+
+        sdio_set_drvdata(func, wl);
+
+        wl1271_notice("initialized");
+
+        return 0;
+
+ out_irq:
+        free_irq(wl->irq, wl);
+
+
+ out_free:
+        wl1271_free_hw(wl);
+
+        return ret;
+}
+
+static void __devexit wl1271_remove(struct sdio_func *func)
+{
+        struct wl1271 *wl = sdio_get_drvdata(func);
+
+        free_irq(wl->irq, wl);
+
+        wl1271_unregister_hw(wl);
+        wl1271_free_hw(wl);
+}
+
+static struct sdio_driver wl1271_sdio_driver = {
+        .name           = "wl1271",
+        .id_table       = wl1271_devices,
+        .probe          = wl1271_probe,
+        .remove         = __devexit_p(wl1271_remove),
+};
+
+static int __init wl1271_init(void)
+{
+        int ret;
+
+        ret = sdio_register_driver(&wl1271_sdio_driver);
+        if (ret < 0) {
+                wl1271_error("failed to register sdio driver: %d", ret);
+                goto out;
+        }
+
+out:
+        return ret;
+}
+
+static void __exit wl1271_exit(void)
+{
+        sdio_unregister_driver(&wl1271_sdio_driver);
+
+        wl1271_notice("unloaded");
+}
+
+module_init(wl1271_init);
+module_exit(wl1271_exit);
+
+MODULE_LICENSE("GPL");
+MODULE_AUTHOR("Luciano Coelho <luciano.coelho@nokia.com>");
+MODULE_AUTHOR("Juuso Oikarinen <juuso.oikarinen@nokia.com>");
+MODULE_FIRMWARE(WL1271_FW_NAME);
diff --git a/drivers/net/wireless/wl12xx/wl1271_spi.c b/drivers/net/wireless/wl12xx/wl1271_spi.c
index 67a82934f36e..f44b05a32b0d 100644
--- a/drivers/net/wireless/wl12xx/wl1271_spi.c
+++ b/drivers/net/wireless/wl12xx/wl1271_spi.c
@@ -21,17 +21,68 @@
  *
  */
 
+#include <linux/irq.h>
 #include <linux/module.h>
-#include <linux/platform_device.h>
 #include <linux/crc7.h>
 #include <linux/spi/spi.h>
+#include <linux/spi/wl12xx.h>
 
 #include "wl1271.h"
 #include "wl12xx_80211.h"
-#include "wl1271_spi.h"
+#include "wl1271_io.h"
+
+#include "wl1271_reg.h"
+
+#define WSPI_CMD_READ                 0x40000000
+#define WSPI_CMD_WRITE                0x00000000
+#define WSPI_CMD_FIXED                0x20000000
+#define WSPI_CMD_BYTE_LENGTH          0x1FFE0000
+#define WSPI_CMD_BYTE_LENGTH_OFFSET   17
+#define WSPI_CMD_BYTE_ADDR            0x0001FFFF
+
+#define WSPI_INIT_CMD_CRC_LEN       5
+
+#define WSPI_INIT_CMD_START         0x00
+#define WSPI_INIT_CMD_TX            0x40
+/* the extra bypass bit is sampled by the TNET as '1' */
+#define WSPI_INIT_CMD_BYPASS_BIT    0x80
+#define WSPI_INIT_CMD_FIXEDBUSY_LEN 0x07
+#define WSPI_INIT_CMD_EN_FIXEDBUSY  0x80
+#define WSPI_INIT_CMD_DIS_FIXEDBUSY 0x00
+#define WSPI_INIT_CMD_IOD           0x40
+#define WSPI_INIT_CMD_IP            0x20
+#define WSPI_INIT_CMD_CS            0x10
+#define WSPI_INIT_CMD_WS            0x08
+#define WSPI_INIT_CMD_WSPI          0x01
+#define WSPI_INIT_CMD_END           0x01
+
+#define WSPI_INIT_CMD_LEN           8
+
+#define HW_ACCESS_WSPI_FIXED_BUSY_LEN \
+                ((WL1271_BUSY_WORD_LEN - 4) / sizeof(u32))
+#define HW_ACCESS_WSPI_INIT_CMD_MASK  0
+
+static inline struct spi_device *wl_to_spi(struct wl1271 *wl)
+{
+        return wl->if_priv;
+}
+
+static struct device *wl1271_spi_wl_to_dev(struct wl1271 *wl)
+{
+        return &(wl_to_spi(wl)->dev);
+}
 
+static void wl1271_spi_disable_interrupts(struct wl1271 *wl)
+{
+        disable_irq(wl->irq);
+}
+
+static void wl1271_spi_enable_interrupts(struct wl1271 *wl)
+{
+        enable_irq(wl->irq);
+}
 
-void wl1271_spi_reset(struct wl1271 *wl)
+static void wl1271_spi_reset(struct wl1271 *wl)
 {
         u8 *cmd;
         struct spi_transfer t;
@@ -52,12 +103,12 @@ void wl1271_spi_reset(struct wl1271 *wl)
         t.len = WSPI_INIT_CMD_LEN;
         spi_message_add_tail(&t, &m);
 
-        spi_sync(wl->spi, &m);
+        spi_sync(wl_to_spi(wl), &m);
 
         wl1271_dump(DEBUG_SPI, "spi reset -> ", cmd, WSPI_INIT_CMD_LEN);
 }
 
-void wl1271_spi_init(struct wl1271 *wl)
+static void wl1271_spi_init(struct wl1271 *wl)
 {
         u8 crc[WSPI_INIT_CMD_CRC_LEN], *cmd;
         struct spi_transfer t;
@@ -106,7 +157,7 @@ void wl1271_spi_init(struct wl1271 *wl)
         t.len = WSPI_INIT_CMD_LEN;
         spi_message_add_tail(&t, &m);
 
-        spi_sync(wl->spi, &m);
+        spi_sync(wl_to_spi(wl), &m);
 
         wl1271_dump(DEBUG_SPI, "spi init -> ", cmd, WSPI_INIT_CMD_LEN);
 }
@@ -138,7 +189,7 @@ static void wl1271_spi_read_busy(struct wl1271 *wl, void *buf, size_t len)
                         t[0].rx_buf = buf + (len - num_busy_bytes);
                         t[0].len = num_busy_bytes;
                         spi_message_add_tail(&t[0], &m);
-                        spi_sync(wl->spi, &m);
+                        spi_sync(wl_to_spi(wl), &m);
                         return;
                 }
         }
@@ -158,7 +209,7 @@ static void wl1271_spi_read_busy(struct wl1271 *wl, void *buf, size_t len)
                 t[0].rx_buf = busy_buf;
                 t[0].len = sizeof(u32);
                 spi_message_add_tail(&t[0], &m);
-                spi_sync(wl->spi, &m);
+                spi_sync(wl_to_spi(wl), &m);
 
                 if (*busy_buf & 0x1) {
                         spi_message_init(&m);
@@ -166,7 +217,7 @@ static void wl1271_spi_read_busy(struct wl1271 *wl, void *buf, size_t len)
                         t[0].rx_buf = buf;
                         t[0].len = len;
                         spi_message_add_tail(&t[0], &m);
-                        spi_sync(wl->spi, &m);
+                        spi_sync(wl_to_spi(wl), &m);
                         return;
                 }
         }
@@ -177,7 +228,7 @@ static void wl1271_spi_read_busy(struct wl1271 *wl, void *buf, size_t len)
 }
 #endif
 
-void wl1271_spi_raw_read(struct wl1271 *wl, int addr, void *buf,
+static void wl1271_spi_raw_read(struct wl1271 *wl, int addr, void *buf,
                          size_t len, bool fixed)
 {
         struct spi_transfer t[3];
@@ -212,7 +263,7 @@ void wl1271_spi_raw_read(struct wl1271 *wl, int addr, void *buf,
         t[2].len = len;
         spi_message_add_tail(&t[2], &m);
 
-        spi_sync(wl->spi, &m);
+        spi_sync(wl_to_spi(wl), &m);
 
         /* FIXME: Check busy words, removed due to SPI bug */
         /* if (!(busy_buf[WL1271_BUSY_WORD_CNT - 1] & 0x1))
@@ -222,7 +273,7 @@ void wl1271_spi_raw_read(struct wl1271 *wl, int addr, void *buf,
         wl1271_dump(DEBUG_SPI, "spi_read buf <- ", buf, len);
 }
 
-void wl1271_spi_raw_write(struct wl1271 *wl, int addr, void *buf,
+static void wl1271_spi_raw_write(struct wl1271 *wl, int addr, void *buf,
                           size_t len, bool fixed)
 {
         struct spi_transfer t[2];
@@ -250,8 +301,181 @@ void wl1271_spi_raw_write(struct wl1271 *wl, int addr, void *buf,
         t[1].len = len;
         spi_message_add_tail(&t[1], &m);
 
-        spi_sync(wl->spi, &m);
+        spi_sync(wl_to_spi(wl), &m);
 
         wl1271_dump(DEBUG_SPI, "spi_write cmd -> ", cmd, sizeof(*cmd));
         wl1271_dump(DEBUG_SPI, "spi_write buf -> ", buf, len);
 }
+
+static irqreturn_t wl1271_irq(int irq, void *cookie)
+{
+        struct wl1271 *wl;
+        unsigned long flags;
+
+        wl1271_debug(DEBUG_IRQ, "IRQ");
+
+        wl = cookie;
+
+        /* complete the ELP completion */
+        spin_lock_irqsave(&wl->wl_lock, flags);
+        if (wl->elp_compl) {
+                complete(wl->elp_compl);
+                wl->elp_compl = NULL;
+        }
+
+        if (!test_and_set_bit(WL1271_FLAG_IRQ_RUNNING, &wl->flags))
+                ieee80211_queue_work(wl->hw, &wl->irq_work);
+        set_bit(WL1271_FLAG_IRQ_PENDING, &wl->flags);
+        spin_unlock_irqrestore(&wl->wl_lock, flags);
+
+        return IRQ_HANDLED;
+}
+
+static void wl1271_spi_set_power(struct wl1271 *wl, bool enable)
+{
+        if (wl->set_power)
+                wl->set_power(enable);
+}
+
+static struct wl1271_if_operations spi_ops = {
+        .read           = wl1271_spi_raw_read,
+        .write          = wl1271_spi_raw_write,
+        .reset          = wl1271_spi_reset,
+        .init           = wl1271_spi_init,
+        .power          = wl1271_spi_set_power,
+        .dev            = wl1271_spi_wl_to_dev,
+        .enable_irq     = wl1271_spi_enable_interrupts,
+        .disable_irq    = wl1271_spi_disable_interrupts
+};
+
+static int __devinit wl1271_probe(struct spi_device *spi)
+{
+        struct wl12xx_platform_data *pdata;
+        struct ieee80211_hw *hw;
+        struct wl1271 *wl;
+        int ret;
+
+        pdata = spi->dev.platform_data;
+        if (!pdata) {
+                wl1271_error("no platform data");
+                return -ENODEV;
+        }
+
+        hw = wl1271_alloc_hw();
+        if (IS_ERR(hw))
+                return PTR_ERR(hw);
+
+        wl = hw->priv;
+
+        dev_set_drvdata(&spi->dev, wl);
+        wl->if_priv = spi;
+
+        wl->if_ops = &spi_ops;
+
+        /* This is the only SPI value that we need to set here, the rest
+         * comes from the board-peripherals file */
+        spi->bits_per_word = 32;
+
+        ret = spi_setup(spi);
+        if (ret < 0) {
+                wl1271_error("spi_setup failed");
+                goto out_free;
+        }
+
+        wl->set_power = pdata->set_power;
+        if (!wl->set_power) {
+                wl1271_error("set power function missing in platform data");
+                ret = -ENODEV;
+                goto out_free;
+        }
+
+        wl->irq = spi->irq;
+        if (wl->irq < 0) {
+                wl1271_error("irq missing in platform data");
+                ret = -ENODEV;
+                goto out_free;
+        }
+
+        ret = request_irq(wl->irq, wl1271_irq, 0, DRIVER_NAME, wl);
+        if (ret < 0) {
+                wl1271_error("request_irq() failed: %d", ret);
+                goto out_free;
+        }
+
+        set_irq_type(wl->irq, IRQ_TYPE_EDGE_RISING);
+
+        disable_irq(wl->irq);
+
+        ret = wl1271_init_ieee80211(wl);
+        if (ret)
+                goto out_irq;
+
+        ret = wl1271_register_hw(wl);
+        if (ret)
+                goto out_irq;
+
+        wl1271_notice("initialized");
+
+        return 0;
+
+ out_irq:
+        free_irq(wl->irq, wl);
+
+ out_free:
+        wl1271_free_hw(wl);
+
+        return ret;
+}
+
+static int __devexit wl1271_remove(struct spi_device *spi)
+{
+        struct wl1271 *wl = dev_get_drvdata(&spi->dev);
+
+        free_irq(wl->irq, wl);
+
+        wl1271_unregister_hw(wl);
+        wl1271_free_hw(wl);
+
+        return 0;
+}
+
+
+static struct spi_driver wl1271_spi_driver = {
+        .driver = {
+                .name           = "wl1271",
+                .bus            = &spi_bus_type,
+                .owner          = THIS_MODULE,
+        },
+
+        .probe          = wl1271_probe,
+        .remove         = __devexit_p(wl1271_remove),
+};
+
+static int __init wl1271_init(void)
+{
+        int ret;
+
+        ret = spi_register_driver(&wl1271_spi_driver);
+        if (ret < 0) {
+                wl1271_error("failed to register spi driver: %d", ret);
+                goto out;
+        }
+
+out:
+        return ret;
+}
+
+static void __exit wl1271_exit(void)
+{
+        spi_unregister_driver(&wl1271_spi_driver);
+
+        wl1271_notice("unloaded");
+}
+
+module_init(wl1271_init);
+module_exit(wl1271_exit);
+
+MODULE_LICENSE("GPL");
+MODULE_AUTHOR("Luciano Coelho <luciano.coelho@nokia.com>");
+MODULE_AUTHOR("Juuso Oikarinen <juuso.oikarinen@nokia.com>");
+MODULE_FIRMWARE(WL1271_FW_NAME);
diff --git a/drivers/net/wireless/wl12xx/wl1271_spi.h b/drivers/net/wireless/wl12xx/wl1271_spi.h
deleted file mode 100644
index a803596dad4a..000000000000
--- a/drivers/net/wireless/wl12xx/wl1271_spi.h
+++ /dev/null
@@ -1,96 +0,0 @@
-/*
- * This file is part of wl1271
- *
- * Copyright (C) 1998-2009 Texas Instruments. All rights reserved.
- * Copyright (C) 2008-2009 Nokia Corporation
- *
- * Contact: Luciano Coelho <luciano.coelho@nokia.com>
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * version 2 as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful, but
- * WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
- * General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, write to the Free Software
- * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
- * 02110-1301 USA
- *
- */
-
-#ifndef __WL1271_SPI_H__
-#define __WL1271_SPI_H__
-
-#include "wl1271_reg.h"
-
-#define HW_ACCESS_MEMORY_MAX_RANGE              0x1FFC0
-
-#define HW_PARTITION_REGISTERS_ADDR         0x1ffc0
-#define HW_PART0_SIZE_ADDR                  (HW_PARTITION_REGISTERS_ADDR)
-#define HW_PART0_START_ADDR                 (HW_PARTITION_REGISTERS_ADDR + 4)
-#define HW_PART1_SIZE_ADDR                  (HW_PARTITION_REGISTERS_ADDR + 8)
-#define HW_PART1_START_ADDR                 (HW_PARTITION_REGISTERS_ADDR + 12)
-#define HW_PART2_SIZE_ADDR                  (HW_PARTITION_REGISTERS_ADDR + 16)
-#define HW_PART2_START_ADDR                 (HW_PARTITION_REGISTERS_ADDR + 20)
-#define HW_PART3_START_ADDR                 (HW_PARTITION_REGISTERS_ADDR + 24)
-
-#define HW_ACCESS_REGISTER_SIZE             4
-
-#define HW_ACCESS_PRAM_MAX_RANGE                0x3c000
-
-#define WSPI_CMD_READ                 0x40000000
-#define WSPI_CMD_WRITE                0x00000000
-#define WSPI_CMD_FIXED                0x20000000
-#define WSPI_CMD_BYTE_LENGTH          0x1FFE0000
-#define WSPI_CMD_BYTE_LENGTH_OFFSET   17
-#define WSPI_CMD_BYTE_ADDR            0x0001FFFF
-
-#define WSPI_INIT_CMD_CRC_LEN       5
-
-#define WSPI_INIT_CMD_START         0x00
-#define WSPI_INIT_CMD_TX            0x40
-/* the extra bypass bit is sampled by the TNET as '1' */
-#define WSPI_INIT_CMD_BYPASS_BIT    0x80
-#define WSPI_INIT_CMD_FIXEDBUSY_LEN 0x07
-#define WSPI_INIT_CMD_EN_FIXEDBUSY  0x80
-#define WSPI_INIT_CMD_DIS_FIXEDBUSY 0x00
-#define WSPI_INIT_CMD_IOD           0x40
-#define WSPI_INIT_CMD_IP            0x20
-#define WSPI_INIT_CMD_CS            0x10
-#define WSPI_INIT_CMD_WS            0x08
-#define WSPI_INIT_CMD_WSPI          0x01
-#define WSPI_INIT_CMD_END           0x01
-
-#define WSPI_INIT_CMD_LEN           8
-
-#define HW_ACCESS_WSPI_FIXED_BUSY_LEN \
-                ((WL1271_BUSY_WORD_LEN - 4) / sizeof(u32))
-#define HW_ACCESS_WSPI_INIT_CMD_MASK  0
-
-#define OCP_CMD_LOOP  32
-
-#define OCP_CMD_WRITE 0x1
-#define OCP_CMD_READ  0x2
-
-#define OCP_READY_MASK  BIT(18)
-#define OCP_STATUS_MASK (BIT(16) | BIT(17))
-
-#define OCP_STATUS_NO_RESP    0x00000
-#define OCP_STATUS_OK         0x10000
-#define OCP_STATUS_REQ_FAILED 0x20000
-#define OCP_STATUS_RESP_ERROR 0x30000
-
-/* Raw target IO, address is not translated */
-void wl1271_spi_raw_write(struct wl1271 *wl, int addr, void *buf,
-                      size_t len, bool fixed);
-void wl1271_spi_raw_read(struct wl1271 *wl, int addr, void *buf,
-                     size_t len, bool fixed);
-
-/* INIT and RESET words */
-void wl1271_spi_reset(struct wl1271 *wl);
-void wl1271_spi_init(struct wl1271 *wl);
-#endif /* __WL1271_SPI_H__ */
diff --git a/drivers/net/wireless/wl12xx/wl1271_testmode.c b/drivers/net/wireless/wl12xx/wl1271_testmode.c
index 3919102e942e..2401e6035d51 100644
--- a/drivers/net/wireless/wl12xx/wl1271_testmode.c
+++ b/drivers/net/wireless/wl12xx/wl1271_testmode.c
@@ -25,7 +25,6 @@
 #include <net/genetlink.h>
 
 #include "wl1271.h"
-#include "wl1271_spi.h"
 #include "wl1271_acx.h"
 
 #define WL1271_TM_MAX_DATA_LENGTH 1024
diff --git a/drivers/net/wireless/wl12xx/wl1271_tx.c b/drivers/net/wireless/wl12xx/wl1271_tx.c
index 811e739d05bf..6d109df9a0a0 100644
--- a/drivers/net/wireless/wl12xx/wl1271_tx.c
+++ b/drivers/net/wireless/wl12xx/wl1271_tx.c
@@ -25,7 +25,6 @@
 #include <linux/module.h>
 
 #include "wl1271.h"
-#include "wl1271_spi.h"
 #include "wl1271_io.h"
 #include "wl1271_reg.h"
 #include "wl1271_ps.h"
@@ -47,7 +46,7 @@ static int wl1271_tx_allocate(struct wl1271 *wl, struct sk_buff *skb, u32 extra)
 {
         struct wl1271_tx_hw_descr *desc;
         u32 total_len = skb->len + sizeof(struct wl1271_tx_hw_descr) + extra;
-        u32 total_blocks, excluded;
+        u32 total_blocks;
         int id, ret = -EBUSY;
 
         /* allocate free identifier for the packet */
@@ -57,12 +56,8 @@ static int wl1271_tx_allocate(struct wl1271 *wl, struct sk_buff *skb, u32 extra)
 
         /* approximate the number of blocks required for this packet
            in the firmware */
-        /* FIXME: try to figure out what is done here and make it cleaner */
-        total_blocks = (total_len + 20) >> TX_HW_BLOCK_SHIFT_DIV;
-        excluded = (total_blocks << 2) + ((total_len + 20) & 0xff) + 34;
-        total_blocks += (excluded > 252) ? 2 : 1;
-        total_blocks += TX_HW_BLOCK_SPARE;
-
+        total_blocks = total_len + TX_HW_BLOCK_SIZE - 1;
+        total_blocks = total_blocks / TX_HW_BLOCK_SIZE + TX_HW_BLOCK_SPARE;
         if (total_blocks <= wl->tx_blocks_available) {
                 desc = (struct wl1271_tx_hw_descr *)skb_push(
                         skb, total_len - skb->len);
@@ -87,8 +82,10 @@ static int wl1271_tx_allocate(struct wl1271 *wl, struct sk_buff *skb, u32 extra)
 static int wl1271_tx_fill_hdr(struct wl1271 *wl, struct sk_buff *skb,
                               u32 extra, struct ieee80211_tx_info *control)
 {
+        struct timespec ts;
         struct wl1271_tx_hw_descr *desc;
         int pad, ac;
+        s64 hosttime;
         u16 tx_attr;
 
         desc = (struct wl1271_tx_hw_descr *) skb->data;
@@ -102,8 +99,9 @@ static int wl1271_tx_fill_hdr(struct wl1271 *wl, struct sk_buff *skb,
         }
 
         /* configure packet life time */
-        desc->start_time = cpu_to_le32(jiffies_to_usecs(jiffies) -
-                                       wl->time_offset);
+        getnstimeofday(&ts);
+        hosttime = (timespec_to_ns(&ts) >> 10);
+        desc->start_time = cpu_to_le32(hosttime - wl->time_offset);
         desc->life_time = cpu_to_le16(TX_HW_MGMT_PKT_LIFETIME_TU);
 
         /* configure the tx attributes */
@@ -170,7 +168,6 @@ static int wl1271_tx_send_packet(struct wl1271 *wl, struct sk_buff *skb,
 
         /* write packet new counter into the write access register */
         wl->tx_packets_count++;
-        wl1271_write32(wl, WL1271_HOST_WR_ACCESS, wl->tx_packets_count);
 
         desc = (struct wl1271_tx_hw_descr *) skb->data;
         wl1271_debug(DEBUG_TX, "tx id %u skb 0x%p payload %u (%u words)",
@@ -245,6 +242,7 @@ void wl1271_tx_work(struct work_struct *work)
         struct sk_buff *skb;
         bool woken_up = false;
         u32 sta_rates = 0;
+        u32 prev_tx_packets_count;
         int ret;
 
         /* check if the rates supported by the AP have changed */
@@ -261,6 +259,8 @@ void wl1271_tx_work(struct work_struct *work)
         if (unlikely(wl->state == WL1271_STATE_OFF))
                 goto out;
 
+        prev_tx_packets_count = wl->tx_packets_count;
+
         /* if rates have changed, re-configure the rate policy */
         if (unlikely(sta_rates)) {
                 wl->rate_set = wl1271_tx_enabled_rates_get(wl, sta_rates);
@@ -271,31 +271,26 @@ void wl1271_tx_work(struct work_struct *work)
                 if (!woken_up) {
                         ret = wl1271_ps_elp_wakeup(wl, false);
                         if (ret < 0)
-                                goto out;
+                                goto out_ack;
                         woken_up = true;
                 }
 
                 ret = wl1271_tx_frame(wl, skb);
                 if (ret == -EBUSY) {
-                        /* firmware buffer is full, stop queues */
-                        wl1271_debug(DEBUG_TX, "tx_work: fw buffer full, "
-                                     "stop queues");
-                        ieee80211_stop_queues(wl->hw);
-                        set_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
+                        /* firmware buffer is full, lets stop transmitting. */
                         skb_queue_head(&wl->tx_queue, skb);
-                        goto out;
+                        goto out_ack;
                 } else if (ret < 0) {
                         dev_kfree_skb(skb);
-                        goto out;
-                } else if (test_and_clear_bit(WL1271_FLAG_TX_QUEUE_STOPPED,
-                                              &wl->flags)) {
-                        /* firmware buffer has space, restart queues */
-                        wl1271_debug(DEBUG_TX,
-                                     "complete_packet: waking queues");
-                        ieee80211_wake_queues(wl->hw);
+                        goto out_ack;
                 }
         }
 
+out_ack:
+        /* interrupt the firmware with the new packets */
+        if (prev_tx_packets_count != wl->tx_packets_count)
+                wl1271_write32(wl, WL1271_HOST_WR_ACCESS, wl->tx_packets_count);
+
 out:
         if (woken_up)
                 wl1271_ps_elp_sleep(wl);
@@ -308,11 +303,10 @@ static void wl1271_tx_complete_packet(struct wl1271 *wl,
 {
         struct ieee80211_tx_info *info;
         struct sk_buff *skb;
-        u16 seq;
         int id = result->id;
 
         /* check for id legality */
-        if (id >= ACX_TX_DESCRIPTORS || wl->tx_frames[id] == NULL) {
+        if (unlikely(id >= ACX_TX_DESCRIPTORS || wl->tx_frames[id] == NULL)) {
                 wl1271_warning("TX result illegal id: %d", id);
                 return;
         }
@@ -336,15 +330,10 @@ static void wl1271_tx_complete_packet(struct wl1271 *wl,
         wl->stats.retry_count += result->ack_failures;
 
         /* update security sequence number */
-        seq = wl->tx_security_seq_16 +
-                (result->lsb_security_sequence_number -
-                 wl->tx_security_last_seq);
+        wl->tx_security_seq += (result->lsb_security_sequence_number -
+                                wl->tx_security_last_seq);
         wl->tx_security_last_seq = result->lsb_security_sequence_number;
 
-        if (seq < wl->tx_security_seq_16)
-                wl->tx_security_seq_32++;
-        wl->tx_security_seq_16 = seq;
-
         /* remove private header from packet */
         skb_pull(skb, sizeof(struct wl1271_tx_hw_descr));
 
@@ -361,29 +350,37 @@ static void wl1271_tx_complete_packet(struct wl1271 *wl,
                      result->id, skb, result->ack_failures,
                      result->rate_class_index, result->status);
 
+        /* FIXME: do we need to tell the stack about the used rate? */
+
         /* return the packet to the stack */
         ieee80211_tx_status(wl->hw, skb);
         wl->tx_frames[result->id] = NULL;
 }
 
 /* Called upon reception of a TX complete interrupt */
-void wl1271_tx_complete(struct wl1271 *wl, u32 count)
+void wl1271_tx_complete(struct wl1271 *wl)
 {
         struct wl1271_acx_mem_map *memmap =
                 (struct wl1271_acx_mem_map *)wl->target_mem_map;
+        u32 count, fw_counter;
         u32 i;
 
-        wl1271_debug(DEBUG_TX, "tx_complete received, packets: %d", count);
-
         /* read the tx results from the chipset */
         wl1271_read(wl, le32_to_cpu(memmap->tx_result),
                     wl->tx_res_if, sizeof(*wl->tx_res_if), false);
+        fw_counter = le32_to_cpu(wl->tx_res_if->tx_result_fw_counter);
+
+        /* write host counter to chipset (to ack) */
+        wl1271_write32(wl, le32_to_cpu(memmap->tx_result) +
+                       offsetof(struct wl1271_tx_hw_res_if,
+                                tx_result_host_counter), fw_counter);
+
+        count = fw_counter - wl->tx_results_count;
+        wl1271_debug(DEBUG_TX, "tx_complete received, packets: %d", count);
 
         /* verify that the result buffer is not getting overrun */
-        if (count > TX_HW_RESULT_QUEUE_LEN) {
+        if (unlikely(count > TX_HW_RESULT_QUEUE_LEN))
                 wl1271_warning("TX result overflow from chipset: %d", count);
-                count = TX_HW_RESULT_QUEUE_LEN;
-        }
 
         /* process the results */
         for (i = 0; i < count; i++) {
@@ -397,11 +394,18 @@ void wl1271_tx_complete(struct wl1271 *wl, u32 count)
                 wl->tx_results_count++;
         }
 
-        /* write host counter to chipset (to ack) */
-        wl1271_write32(wl, le32_to_cpu(memmap->tx_result) +
-                       offsetof(struct wl1271_tx_hw_res_if,
-                       tx_result_host_counter),
-                       le32_to_cpu(wl->tx_res_if->tx_result_fw_counter));
+        if (test_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags) &&
+            skb_queue_len(&wl->tx_queue) <= WL1271_TX_QUEUE_LOW_WATERMARK) {
+                unsigned long flags;
+
+                /* firmware buffer has space, restart queues */
+                wl1271_debug(DEBUG_TX, "tx_complete: waking queues");
+                spin_lock_irqsave(&wl->wl_lock, flags);
+                ieee80211_wake_queues(wl->hw);
+                clear_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
+                spin_unlock_irqrestore(&wl->wl_lock, flags);
+                ieee80211_queue_work(wl->hw, &wl->tx_work);
+        }
 }
 
 /* caller must hold wl->mutex */
diff --git a/drivers/net/wireless/wl12xx/wl1271_tx.h b/drivers/net/wireless/wl12xx/wl1271_tx.h
index 17e405a09caa..5e6c27a57415 100644
--- a/drivers/net/wireless/wl12xx/wl1271_tx.h
+++ b/drivers/net/wireless/wl12xx/wl1271_tx.h
@@ -26,7 +26,7 @@
 #define __WL1271_TX_H__
 
 #define TX_HW_BLOCK_SPARE                2
-#define TX_HW_BLOCK_SHIFT_DIV            8
+#define TX_HW_BLOCK_SIZE                 252
 
 #define TX_HW_MGMT_PKT_LIFETIME_TU       2000
 /* The chipset reference driver states, that the "aid" value 1
@@ -125,9 +125,6 @@ struct wl1271_tx_hw_res_if {
 
 static inline int wl1271_tx_get_queue(int queue)
 {
-        /* FIXME: use best effort until WMM is enabled */
-        return CONF_TX_AC_BE;
-
         switch (queue) {
         case 0:
                 return CONF_TX_AC_VO;
@@ -160,7 +157,7 @@ static inline int wl1271_tx_ac_to_tid(int ac)
 }
 
 void wl1271_tx_work(struct work_struct *work);
-void wl1271_tx_complete(struct wl1271 *wl, u32 count);
+void wl1271_tx_complete(struct wl1271 *wl);
 void wl1271_tx_flush(struct wl1271 *wl);
 
 #endif
diff --git a/drivers/net/wireless/wl3501_cs.c b/drivers/net/wireless/wl3501_cs.c
index 7b9621de239f..65dd502eab0d 100644
--- a/drivers/net/wireless/wl3501_cs.c
+++ b/drivers/net/wireless/wl3501_cs.c
@@ -1834,32 +1834,32 @@ out:
 }
 
 static const iw_handler wl3501_handler[] = {
-        [SIOCGIWNAME    - SIOCIWFIRST] = wl3501_get_name,
-        [SIOCSIWFREQ    - SIOCIWFIRST] = wl3501_set_freq,
-        [SIOCGIWFREQ    - SIOCIWFIRST] = wl3501_get_freq,
-        [SIOCSIWMODE    - SIOCIWFIRST] = wl3501_set_mode,
-        [SIOCGIWMODE    - SIOCIWFIRST] = wl3501_get_mode,
-        [SIOCGIWSENS    - SIOCIWFIRST] = wl3501_get_sens,
-        [SIOCGIWRANGE   - SIOCIWFIRST] = wl3501_get_range,
-        [SIOCSIWSPY     - SIOCIWFIRST] = iw_handler_set_spy,
-        [SIOCGIWSPY     - SIOCIWFIRST] = iw_handler_get_spy,
-        [SIOCSIWTHRSPY  - SIOCIWFIRST] = iw_handler_set_thrspy,
-        [SIOCGIWTHRSPY  - SIOCIWFIRST] = iw_handler_get_thrspy,
-        [SIOCSIWAP      - SIOCIWFIRST] = wl3501_set_wap,
-        [SIOCGIWAP      - SIOCIWFIRST] = wl3501_get_wap,
-        [SIOCSIWSCAN    - SIOCIWFIRST] = wl3501_set_scan,
-        [SIOCGIWSCAN    - SIOCIWFIRST] = wl3501_get_scan,
-        [SIOCSIWESSID   - SIOCIWFIRST] = wl3501_set_essid,
-        [SIOCGIWESSID   - SIOCIWFIRST] = wl3501_get_essid,
-        [SIOCSIWNICKN   - SIOCIWFIRST] = wl3501_set_nick,
-        [SIOCGIWNICKN   - SIOCIWFIRST] = wl3501_get_nick,
-        [SIOCGIWRATE    - SIOCIWFIRST] = wl3501_get_rate,
-        [SIOCGIWRTS     - SIOCIWFIRST] = wl3501_get_rts_threshold,
-        [SIOCGIWFRAG    - SIOCIWFIRST] = wl3501_get_frag_threshold,
-        [SIOCGIWTXPOW   - SIOCIWFIRST] = wl3501_get_txpow,
-        [SIOCGIWRETRY   - SIOCIWFIRST] = wl3501_get_retry,
-        [SIOCGIWENCODE  - SIOCIWFIRST] = wl3501_get_encode,
-        [SIOCGIWPOWER   - SIOCIWFIRST] = wl3501_get_power,
+        IW_HANDLER(SIOCGIWNAME, wl3501_get_name),
+        IW_HANDLER(SIOCSIWFREQ, wl3501_set_freq),
+        IW_HANDLER(SIOCGIWFREQ, wl3501_get_freq),
+        IW_HANDLER(SIOCSIWMODE, wl3501_set_mode),
+        IW_HANDLER(SIOCGIWMODE, wl3501_get_mode),
+        IW_HANDLER(SIOCGIWSENS, wl3501_get_sens),
+        IW_HANDLER(SIOCGIWRANGE, wl3501_get_range),
+        IW_HANDLER(SIOCSIWSPY, iw_handler_set_spy),
+        IW_HANDLER(SIOCGIWSPY, iw_handler_get_spy),
+        IW_HANDLER(SIOCSIWTHRSPY, iw_handler_set_thrspy),
+        IW_HANDLER(SIOCGIWTHRSPY, iw_handler_get_thrspy),
+        IW_HANDLER(SIOCSIWAP, wl3501_set_wap),
+        IW_HANDLER(SIOCGIWAP, wl3501_get_wap),
+        IW_HANDLER(SIOCSIWSCAN, wl3501_set_scan),
+        IW_HANDLER(SIOCGIWSCAN, wl3501_get_scan),
+        IW_HANDLER(SIOCSIWESSID, wl3501_set_essid),
+        IW_HANDLER(SIOCGIWESSID, wl3501_get_essid),
+        IW_HANDLER(SIOCSIWNICKN, wl3501_set_nick),
+        IW_HANDLER(SIOCGIWNICKN, wl3501_get_nick),
+        IW_HANDLER(SIOCGIWRATE, wl3501_get_rate),
+        IW_HANDLER(SIOCGIWRTS, wl3501_get_rts_threshold),
+        IW_HANDLER(SIOCGIWFRAG, wl3501_get_frag_threshold),
+        IW_HANDLER(SIOCGIWTXPOW, wl3501_get_txpow),
+        IW_HANDLER(SIOCGIWRETRY, wl3501_get_retry),
+        IW_HANDLER(SIOCGIWENCODE, wl3501_get_encode),
+        IW_HANDLER(SIOCGIWPOWER, wl3501_get_power),
 };
 
 static const struct iw_handler_def wl3501_handler_def = {
diff --git a/drivers/net/wireless/zd1201.c b/drivers/net/wireless/zd1201.c
index 6917286edcae..74530b2d672c 100644
--- a/drivers/net/wireless/zd1201.c
+++ b/drivers/net/wireless/zd1201.c
@@ -875,7 +875,7 @@ static struct iw_statistics *zd1201_get_wireless_stats(struct net_device *dev)
 static void zd1201_set_multicast(struct net_device *dev)
 {
         struct zd1201 *zd = netdev_priv(dev);
-        struct dev_mc_list *mc;
+        struct netdev_hw_addr *ha;
         unsigned char reqbuf[ETH_ALEN*ZD1201_MAXMULTI];
         int i;
 
@@ -883,8 +883,8 @@ static void zd1201_set_multicast(struct net_device *dev)
                 return;
 
         i = 0;
-        netdev_for_each_mc_addr(mc, dev)
-                memcpy(reqbuf + i++ * ETH_ALEN, mc->dmi_addr, ETH_ALEN);
+        netdev_for_each_mc_addr(ha, dev)
+                memcpy(reqbuf + i++ * ETH_ALEN, ha->addr, ETH_ALEN);
         zd1201_setconfig(zd, ZD1201_RID_CNFGROUPADDRESS, reqbuf,
                          netdev_mc_count(dev) * ETH_ALEN, 0);
 }
diff --git a/drivers/net/wireless/zd1211rw/zd_mac.c b/drivers/net/wireless/zd1211rw/zd_mac.c
index 00e09e26c826..6d95e4d74d7f 100644
--- a/drivers/net/wireless/zd1211rw/zd_mac.c
+++ b/drivers/net/wireless/zd1211rw/zd_mac.c
@@ -947,20 +947,17 @@ static void set_rx_filter_handler(struct work_struct *work)
 }
 
 static u64 zd_op_prepare_multicast(struct ieee80211_hw *hw,
-                                   int mc_count, struct dev_addr_list *mclist)
+                                   struct netdev_hw_addr_list *mc_list)
 {
         struct zd_mac *mac = zd_hw_mac(hw);
         struct zd_mc_hash hash;
-        int i;
+        struct netdev_hw_addr *ha;
 
         zd_mc_clear(&hash);
 
-        for (i = 0; i < mc_count; i++) {
-                if (!mclist)
-                        break;
-                dev_dbg_f(zd_mac_dev(mac), "mc addr %pM\n", mclist->dmi_addr);
-                zd_mc_add_addr(&hash, mclist->dmi_addr);
-                mclist = mclist->next;
+        netdev_hw_addr_list_for_each(ha, mc_list) {
+                dev_dbg_f(zd_mac_dev(mac), "mc addr %pM\n", ha->addr);
+                zd_mc_add_addr(&hash, ha->addr);
         }
 
         return hash.low | ((u64)hash.high << 32);
diff --git a/drivers/net/xilinx_emaclite.c b/drivers/net/xilinx_emaclite.c
index 1a74594224b1..eaebba8df6fc 100644
--- a/drivers/net/xilinx_emaclite.c
+++ b/drivers/net/xilinx_emaclite.c
@@ -638,7 +638,6 @@ static void xemaclite_rx_handler(struct net_device *dev)
         }
 
         skb_put(skb, len);      /* Tell the skb how much data we got */
-        skb->dev = dev;         /* Fill out required meta-data */
 
         skb->protocol = eth_type_trans(skb, dev);
         skb->ip_summed = CHECKSUM_NONE;
diff --git a/drivers/net/yellowfin.c b/drivers/net/yellowfin.c
index 7d4107f5eeb0..34c91cf5d839 100644
--- a/drivers/net/yellowfin.c
+++ b/drivers/net/yellowfin.c
@@ -1300,25 +1300,25 @@ static void set_rx_mode(struct net_device *dev)
                 /* Too many to filter well, or accept all multicasts. */
                 iowrite16(0x000B, ioaddr + AddrMode);
         } else if (!netdev_mc_empty(dev)) { /* Must use the multicast hash table. */
-                struct dev_mc_list *mclist;
+                struct netdev_hw_addr *ha;
                 u16 hash_table[4];
                 int i;
 
                 memset(hash_table, 0, sizeof(hash_table));
-                netdev_for_each_mc_addr(mclist, dev) {
+                netdev_for_each_mc_addr(ha, dev) {
                         unsigned int bit;
 
                         /* Due to a bug in the early chip versions, multiple filter
                            slots must be set for each address. */
                         if (yp->drv_flags & HasMulticastBug) {
-                                bit = (ether_crc_le(3, mclist->dmi_addr) >> 3) & 0x3f;
+                                bit = (ether_crc_le(3, ha->addr) >> 3) & 0x3f;
                                 hash_table[bit >> 4] |= (1 << bit);
-                                bit = (ether_crc_le(4, mclist->dmi_addr) >> 3) & 0x3f;
+                                bit = (ether_crc_le(4, ha->addr) >> 3) & 0x3f;
                                 hash_table[bit >> 4] |= (1 << bit);
-                                bit = (ether_crc_le(5, mclist->dmi_addr) >> 3) & 0x3f;
+                                bit = (ether_crc_le(5, ha->addr) >> 3) & 0x3f;
                                 hash_table[bit >> 4] |= (1 << bit);
                         }
-                        bit = (ether_crc_le(6, mclist->dmi_addr) >> 3) & 0x3f;
+                        bit = (ether_crc_le(6, ha->addr) >> 3) & 0x3f;
                         hash_table[bit >> 4] |= (1 << bit);
                 }
                 /* Copy the hash table to the chip. */
diff --git a/drivers/s390/net/qeth_l2_main.c b/drivers/s390/net/qeth_l2_main.c
index 6f1e3036bafd..945f3e0a9f06 100644
--- a/drivers/s390/net/qeth_l2_main.c
+++ b/drivers/s390/net/qeth_l2_main.c
@@ -607,7 +607,6 @@ static int qeth_l2_set_mac_address(struct net_device *dev, void *p)
 static void qeth_l2_set_multicast_list(struct net_device *dev)
 {
         struct qeth_card *card = dev->ml_priv;
-        struct dev_addr_list *dm;
         struct netdev_hw_addr *ha;
 
         if (card->info.type == QETH_CARD_TYPE_OSN)
@@ -619,8 +618,8 @@ static void qeth_l2_set_multicast_list(struct net_device *dev)
                 return;
         qeth_l2_del_all_mc(card);
         spin_lock_bh(&card->mclock);
-        for (dm = dev->mc_list; dm; dm = dm->next)
-                qeth_l2_add_mc(card, dm->da_addr, 0);
+        netdev_for_each_mc_addr(ha, dev)
+                qeth_l2_add_mc(card, ha->addr, 0);
 
         netdev_for_each_uc_addr(ha, dev)
                 qeth_l2_add_mc(card, ha->addr, 1);
diff --git a/drivers/s390/net/qeth_l3_main.c b/drivers/s390/net/qeth_l3_main.c
index b3b6e872d806..0b06f065b18b 100644
--- a/drivers/s390/net/qeth_l3_main.c
+++ b/drivers/s390/net/qeth_l3_main.c
@@ -1928,7 +1928,7 @@ static void qeth_l3_free_vlan_addresses6(struct qeth_card *card,
         in6_dev = in6_dev_get(vlan_group_get_device(card->vlangrp, vid));
         if (!in6_dev)
                 return;
-        for (ifa = in6_dev->addr_list; ifa; ifa = ifa->lst_next) {
+        list_for_each_entry(ifa, &in6_dev->addr_list, if_list) {
                 addr = qeth_l3_get_addr_buffer(QETH_PROT_IPV6);
                 if (addr) {
                         memcpy(&addr->u.a6.addr, &ifa->addr,
diff --git a/drivers/scsi/fcoe/fcoe.c b/drivers/scsi/fcoe/fcoe.c
index 2f47ae7cce91..37de40e01684 100644
--- a/drivers/scsi/fcoe/fcoe.c
+++ b/drivers/scsi/fcoe/fcoe.c
@@ -308,10 +308,10 @@ static int fcoe_interface_setup(struct fcoe_interface *fcoe,
          * for multiple unicast MACs.
          */
         memcpy(flogi_maddr, (u8[6]) FC_FCOE_FLOGI_MAC, ETH_ALEN);
-        dev_unicast_add(netdev, flogi_maddr);
+        dev_uc_add(netdev, flogi_maddr);
         if (fip->spma)
-                dev_unicast_add(netdev, fip->ctl_src_addr);
-        dev_mc_add(netdev, FIP_ALL_ENODE_MACS, ETH_ALEN, 0);
+                dev_uc_add(netdev, fip->ctl_src_addr);
+        dev_mc_add(netdev, FIP_ALL_ENODE_MACS);
 
         /*
          * setup the receive function from ethernet driver
@@ -394,10 +394,10 @@ void fcoe_interface_cleanup(struct fcoe_interface *fcoe)
 
         /* Delete secondary MAC addresses */
         memcpy(flogi_maddr, (u8[6]) FC_FCOE_FLOGI_MAC, ETH_ALEN);
-        dev_unicast_delete(netdev, flogi_maddr);
+        dev_uc_del(netdev, flogi_maddr);
         if (fip->spma)
-                dev_unicast_delete(netdev, fip->ctl_src_addr);
-        dev_mc_delete(netdev, FIP_ALL_ENODE_MACS, ETH_ALEN, 0);
+                dev_uc_del(netdev, fip->ctl_src_addr);
+        dev_mc_del(netdev, FIP_ALL_ENODE_MACS);
 
         /* Tell the LLD we are done w/ FCoE */
         ops = netdev->netdev_ops;
@@ -490,9 +490,9 @@ static void fcoe_update_src_mac(struct fc_lport *lport, u8 *addr)
 
         rtnl_lock();
         if (!is_zero_ether_addr(port->data_src_addr))
-                dev_unicast_delete(fcoe->netdev, port->data_src_addr);
+                dev_uc_del(fcoe->netdev, port->data_src_addr);
         if (!is_zero_ether_addr(addr))
-                dev_unicast_add(fcoe->netdev, addr);
+                dev_uc_add(fcoe->netdev, addr);
         memcpy(port->data_src_addr, addr, ETH_ALEN);
         rtnl_unlock();
 }
@@ -819,7 +819,7 @@ static void fcoe_if_destroy(struct fc_lport *lport)
 
         rtnl_lock();
         if (!is_zero_ether_addr(port->data_src_addr))
-                dev_unicast_delete(netdev, port->data_src_addr);
+                dev_uc_del(netdev, port->data_src_addr);
         rtnl_unlock();
 
         /* receives may not be stopped until after this */
diff --git a/drivers/ssb/driver_chipcommon.c b/drivers/ssb/driver_chipcommon.c
index 9681536163ca..59c3c0fdbecd 100644
--- a/drivers/ssb/driver_chipcommon.c
+++ b/drivers/ssb/driver_chipcommon.c
@@ -370,6 +370,7 @@ u32 ssb_chipco_gpio_control(struct ssb_chipcommon *cc, u32 mask, u32 value)
 {
         return chipco_write32_masked(cc, SSB_CHIPCO_GPIOCTL, mask, value);
 }
+EXPORT_SYMBOL(ssb_chipco_gpio_control);
 
 u32 ssb_chipco_gpio_intmask(struct ssb_chipcommon *cc, u32 mask, u32 value)
 {
diff --git a/drivers/staging/arlan/arlan-main.c b/drivers/staging/arlan/arlan-main.c
index 88fdd53cf5d3..80284522c42b 100644
--- a/drivers/staging/arlan/arlan-main.c
+++ b/drivers/staging/arlan/arlan-main.c
@@ -1458,7 +1458,7 @@ static void arlan_rx_interrupt(struct net_device *dev, u_char rxStatus, u_short
                                 !netdev_mc_empty(dev))
                         {
                                 char hw_dst_addr[6];
-                                struct dev_mc_list *dmi;
+                                struct netdev_hw_addr *ha;
                                 int i;
 
                                 memcpy_fromio(hw_dst_addr, arlan->ultimateDestAddress, 6);
@@ -1469,12 +1469,13 @@ static void arlan_rx_interrupt(struct net_device *dev, u_char rxStatus, u_short
                                                         printk(KERN_ERR "%s mcast 0x0100 \n", dev->name);
                                                 else if (hw_dst_addr[1] == 0x40)
                                                         printk(KERN_ERR "%s m/bcast 0x0140 \n", dev->name);
-                                        netdev_for_each_mc_entry(dmi, dev) {
+                                        netdev_for_each_mc_entry(ha, dev) {
                                                 if (arlan_debug & ARLAN_DEBUG_HEADER_DUMP)
                                                         printk(KERN_ERR "%s mcl %pM\n",
-                                                               dev->name, dmi->dmi_addr);
+                                                               dev->name,
+                                                               ha->addr);
                                                 for (i = 0; i < 6; i++)
-                                                        if (dmi->dmi_addr[i] != hw_dst_addr[i])
+                                                        if (ha->addr[i] != hw_dst_addr[i])
                                                                 break;
                                                 if (i == 6)
                                                         break;
diff --git a/drivers/staging/et131x/et131x_netdev.c b/drivers/staging/et131x/et131x_netdev.c
index 40f8954dde47..2fb89cddef16 100644
--- a/drivers/staging/et131x/et131x_netdev.c
+++ b/drivers/staging/et131x/et131x_netdev.c
@@ -405,7 +405,7 @@ void et131x_multicast(struct net_device *netdev)
         struct et131x_adapter *adapter = netdev_priv(netdev);
         uint32_t PacketFilter = 0;
         unsigned long flags;
-        struct dev_mc_list *mclist;
+        struct netdev_hw_addr *ha;
         int i;
 
         spin_lock_irqsave(&adapter->Lock, flags);
@@ -450,10 +450,10 @@ void et131x_multicast(struct net_device *netdev)
 
         /* Set values in the private adapter struct */
         i = 0;
-        netdev_for_each_mc_addr(mclist, netdev) {
+        netdev_for_each_mc_addr(ha, netdev) {
                 if (i == NIC_MAX_MCAST_LIST)
                         break;
-                memcpy(adapter->MCList[i++], mclist->dmi_addr, ETH_ALEN);
+                memcpy(adapter->MCList[i++], ha->addr, ETH_ALEN);
         }
         adapter->MCAddressCount = i;
 
diff --git a/drivers/staging/slicoss/slicoss.c b/drivers/staging/slicoss/slicoss.c
index 7daeced317c4..bebf0fd2af85 100644
--- a/drivers/staging/slicoss/slicoss.c
+++ b/drivers/staging/slicoss/slicoss.c
@@ -1367,12 +1367,12 @@ static void slic_mcast_set_list(struct net_device *dev)
         struct adapter *adapter = netdev_priv(dev);
         int status = STATUS_SUCCESS;
         char *addresses;
-        struct dev_mc_list *mc_list;
+        struct netdev_hw_addr *ha;
 
         ASSERT(adapter);
 
-        netdev_for_each_mc_addr(mc_list, dev) {
-                addresses = (char *) &mc_list->dmi_addr;
+        netdev_for_each_mc_addr(ha, dev) {
+                addresses = (char *) &ha->addr;
                 status = slic_mcast_add_list(adapter, addresses);
                 if (status != STATUS_SUCCESS)
                         break;
diff --git a/drivers/staging/vt6655/device_main.c b/drivers/staging/vt6655/device_main.c
index 1d643653a7ed..b698de40a60e 100644
--- a/drivers/staging/vt6655/device_main.c
+++ b/drivers/staging/vt6655/device_main.c
@@ -3079,7 +3079,7 @@ static void device_set_multi(struct net_device *dev) {
 
     PSMgmtObject     pMgmt = pDevice->pMgmt;
     u32              mc_filter[2];
-    struct dev_mc_list *mclist;
+    struct netdev_hw_addr *ha;
 
 
     VNSvInPortB(pDevice->PortOffset + MAC_REG_RCR, &(pDevice->byRxMode));
@@ -3099,8 +3099,8 @@ static void device_set_multi(struct net_device *dev) {
     }
     else {
         memset(mc_filter, 0, sizeof(mc_filter));
-        netdev_for_each_mc_addr(mclist, dev) {
-            int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+        netdev_for_each_mc_addr(ha, dev) {
+            int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
             mc_filter[bit_nr >> 5] |= cpu_to_le32(1 << (bit_nr & 31));
         }
         MACvSelectPage1(pDevice->PortOffset);
diff --git a/drivers/staging/vt6656/main_usb.c b/drivers/staging/vt6656/main_usb.c
index a8e1adbc9592..49270db98fbb 100644
--- a/drivers/staging/vt6656/main_usb.c
+++ b/drivers/staging/vt6656/main_usb.c
@@ -1596,7 +1596,7 @@ static void device_set_multi(struct net_device *dev) {
     PSMgmtObject     pMgmt = &(pDevice->sMgmtObj);
     u32              mc_filter[2];
     int              ii;
-    struct dev_mc_list *mclist;
+    struct netdev_hw_addr *ha;
     BYTE             pbyData[8] = {0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff};
     BYTE             byTmpMode = 0;
     int              rc;
@@ -1632,8 +1632,8 @@ static void device_set_multi(struct net_device *dev) {
     }
     else {
         memset(mc_filter, 0, sizeof(mc_filter));
-        netdev_for_each_mc_addr(mclist, dev) {
-            int bit_nr = ether_crc(ETH_ALEN, mclist->dmi_addr) >> 26;
+        netdev_for_each_mc_addr(ha, dev) {
+            int bit_nr = ether_crc(ETH_ALEN, ha->addr) >> 26;
             mc_filter[bit_nr >> 5] |= cpu_to_le32(1 << (bit_nr & 31));
         }
         for (ii = 0; ii < 4; ii++) {
diff --git a/drivers/staging/wavelan/wavelan.c b/drivers/staging/wavelan/wavelan.c
index 54ca63196fdd..f44ef351647b 100644
--- a/drivers/staging/wavelan/wavelan.c
+++ b/drivers/staging/wavelan/wavelan.c
@@ -3419,7 +3419,7 @@ static void wv_82586_config(struct net_device * dev)
         ac_cfg_t cfg;           /* Configure action */
         ac_ias_t ias;           /* IA-setup action */
         ac_mcs_t mcs;           /* Multicast setup */
-        struct dev_mc_list *dmi;
+        struct netdev_hw_addr *ha;
 
 #ifdef DEBUG_CONFIG_TRACE
         printk(KERN_DEBUG "%s: ->wv_82586_config()\n", dev->name);
@@ -3531,16 +3531,16 @@ static void wv_82586_config(struct net_device * dev)
 
         /* Any address to set? */
         if (lp->mc_count) {
-                netdev_for_each_mc_addr(dmi, dev)
-                        outsw(PIOP1(ioaddr), (u16 *) dmi->dmi_addr,
+                netdev_for_each_mc_addr(ha, dev)
+                        outsw(PIOP1(ioaddr), (u16 *) ha->addr,
                               WAVELAN_ADDR_SIZE >> 1);
 
 #ifdef DEBUG_CONFIG_INFO
                 printk(KERN_DEBUG
                        "%s: wv_82586_config(): set %d multicast addresses:\n",
                        dev->name, lp->mc_count);
-                netdev_for_each_mc_addr(dmi, dev)
-                        printk(KERN_DEBUG " %pM\n", dmi->dmi_addr);
+                netdev_for_each_mc_addr(ha, dev)
+                        printk(KERN_DEBUG " %pM\n", ha->addr);
 #endif
         }
 
diff --git a/drivers/staging/wavelan/wavelan_cs.c b/drivers/staging/wavelan/wavelan_cs.c
index 04f691d127b4..a90132a204e6 100644
--- a/drivers/staging/wavelan/wavelan_cs.c
+++ b/drivers/staging/wavelan/wavelan_cs.c
@@ -3591,20 +3591,20 @@ wv_82593_config(struct net_device *	dev)
     /* If roaming is enabled, join the "Beacon Request" multicast group... */
     /* But only if it's not in there already! */
   if(do_roaming)
-    dev_mc_add(dev,WAVELAN_BEACON_ADDRESS, WAVELAN_ADDR_SIZE, 1);
+    dev_mc_add(dev, WAVELAN_BEACON_ADDRESS);
 #endif  /* WAVELAN_ROAMING */
 
   /* If any multicast address to set */
   if(lp->mc_count)
     {
-      struct dev_mc_list *dmi;
+      struct netdev_hw_addr *ha;
       int                       addrs_len = WAVELAN_ADDR_SIZE * lp->mc_count;
 
 #ifdef DEBUG_CONFIG_INFO
       printk(KERN_DEBUG "%s: wv_hw_config(): set %d multicast addresses:\n",
              dev->name, lp->mc_count);
-      netdev_for_each_mc_addr(dmi, dev)
-        printk(KERN_DEBUG " %pM\n", dmi->dmi_addr);
+      netdev_for_each_mc_addr(ha, dev)
+        printk(KERN_DEBUG " %pM\n", ha->addr);
 #endif
 
       /* Initialize adapter's ethernet multicast addresses */
@@ -3612,8 +3612,8 @@ wv_82593_config(struct net_device *	dev)
       outb(((TX_BASE >> 8) & PIORH_MASK) | PIORH_SEL_TX, PIORH(base));
       outb(addrs_len & 0xff, PIOP(base));       /* byte count lsb */
       outb((addrs_len >> 8), PIOP(base));       /* byte count msb */
-      netdev_for_each_mc_addr(dmi, dev)
-        outsb(PIOP(base), dmi->dmi_addr, dmi->dmi_addrlen);
+      netdev_for_each_mc_addr(ha, dev)
+        outsb(PIOP(base), ha->addr, dev->addr_len);
 
       /* reset transmit DMA pointer */
       hacr_write_slow(base, HACR_PWR_STAT | HACR_TX_DMA_RESET);
diff --git a/drivers/staging/winbond/wbusb.c b/drivers/staging/winbond/wbusb.c
index 3482eec18651..5d9499bba9cc 100644
--- a/drivers/staging/winbond/wbusb.c
+++ b/drivers/staging/winbond/wbusb.c
@@ -92,10 +92,10 @@ static int wbsoft_get_stats(struct ieee80211_hw *hw,
         return 0;
 }
 
-static u64 wbsoft_prepare_multicast(struct ieee80211_hw *hw, int mc_count,
-                                    struct dev_addr_list *mc_list)
+static u64 wbsoft_prepare_multicast(struct ieee80211_hw *hw,
+                                    struct netdev_hw_addr_list *mc_list)
 {
-        return mc_count;
+        return netdev_hw_addr_list_count(mc_list);
 }
 
 static void wbsoft_configure_filter(struct ieee80211_hw *dev,
diff --git a/drivers/staging/wlags49_h2/wl_netdev.c b/drivers/staging/wlags49_h2/wl_netdev.c
index fa082d90fcad..d7532e89f5fc 100644
--- a/drivers/staging/wlags49_h2/wl_netdev.c
+++ b/drivers/staging/wlags49_h2/wl_netdev.c
@@ -1049,7 +1049,7 @@ void wl_multicast( struct net_device *dev )
 //;?seems reasonable that even an AP-only driver could afford this small additional footprint
 
     int                 x;
-    struct dev_mc_list *mclist;
+    struct netdev_hw_addr *ha;
     struct wl_private   *lp = wl_priv(dev);
     unsigned long       flags;
     /*------------------------------------------------------------------------*/
@@ -1072,9 +1072,9 @@ void wl_multicast( struct net_device *dev )
 
         DBG_PRINT( "  mc_count: %d\n", netdev_mc_count(dev));
 
-        netdev_for_each_mc_addr(mclist, dev)
-            DBG_PRINT( "    %s (%d)\n", DbgHwAddr(mclist->dmi_addr),
-                       mclist->dmi_addrlen );
+        netdev_for_each_mc_addr(ha, dev)
+            DBG_PRINT("    %s (%d)\n", DbgHwAddr(ha->addr),
+                      dev->addr_len);
     }
 #endif /* DBG */
 
@@ -1119,9 +1119,9 @@ void wl_multicast( struct net_device *dev )
                 lp->ltvRecord.typ = CFG_GROUP_ADDR;
 
                 x = 0;
-                netdev_for_each_mc_addr(mclist, dev)
+                netdev_for_each_mc_addr(ha, dev)
                     memcpy(&(lp->ltvRecord.u.u8[x++ * ETH_ALEN]),
-                           mclist->dmi_addr, ETH_ALEN);
+                           ha->addr, ETH_ALEN);
                 DBG_PRINT( "Setting multicast list\n" );
                 hcf_put_info( &( lp->hcfCtx ), (LTVP)&( lp->ltvRecord ));
             } else {