54 files changed, 3989 insertions, 241 deletions
diff --git a/include/linux/acpi.h b/include/linux/acpi.h
index 702f79dad16a..fd6a452b0ceb 100644
--- a/include/linux/acpi.h
+++ b/include/linux/acpi.h
@@ -94,18 +94,10 @@ int acpi_parse_mcfg (struct acpi_table_header *header);
 void acpi_table_print_madt_entry (struct acpi_subtable_header *madt);
 /* the following four functions are architecture-dependent */
-#ifdef CONFIG_HAVE_ARCH_PARSE_SRAT
-#define NR_NODE_MEMBLKS MAX_NUMNODES
-#define acpi_numa_slit_init(slit) do {} while (0)
-#define acpi_numa_processor_affinity_init(pa) do {} while (0)
-#define acpi_numa_memory_affinity_init(ma) do {} while (0)
-#define acpi_numa_arch_fixup() do {} while (0)
-#else
 void acpi_numa_slit_init (struct acpi_table_slit *slit);
 void acpi_numa_processor_affinity_init (struct acpi_srat_cpu_affinity *pa);
 void acpi_numa_memory_affinity_init (struct acpi_srat_mem_affinity *ma);
 void acpi_numa_arch_fixup(void);
-#endif
 #ifdef CONFIG_ACPI_HOTPLUG_CPU
 /* Arch dependent functions for cpu hotplug support */
diff --git a/include/linux/bitmap.h b/include/linux/bitmap.h
index 1abfe664c444..a08c33a26ca9 100644
--- a/include/linux/bitmap.h
+++ b/include/linux/bitmap.h
@@ -129,6 +129,7 @@ extern void bitmap_fold(unsigned long *dst, const unsigned long *orig,
 extern int bitmap_find_free_region(unsigned long *bitmap, int bits, int order);
 extern void bitmap_release_region(unsigned long *bitmap, int pos, int order);
 extern int bitmap_allocate_region(unsigned long *bitmap, int pos, int order);
+extern void bitmap_copy_le(void *dst, const unsigned long *src, int nbits);
 #define BITMAP_LAST_WORD_MASK(nbits)                                    \
 (                                                                       \
diff --git a/include/linux/blkdev.h b/include/linux/blkdev.h
index b4fe68fe3a57..a135256b272c 100644
--- a/include/linux/blkdev.h
+++ b/include/linux/blkdev.h
@@ -717,10 +717,10 @@ extern void blk_plug_device(struct request_queue *);
 extern void blk_plug_device_unlocked(struct request_queue *);
 extern int blk_remove_plug(struct request_queue *);
 extern void blk_recount_segments(struct request_queue *, struct bio *);
-extern int scsi_cmd_ioctl(struct file *, struct request_queue *,
+extern int scsi_cmd_ioctl(struct request_queue *, struct gendisk *, fmode_t,
-                          struct gendisk *, unsigned int, void __user *);
+                          unsigned int, void __user *);
-extern int sg_scsi_ioctl(struct file *, struct request_queue *,
+extern int sg_scsi_ioctl(struct request_queue *, struct gendisk *, fmode_t,
-                struct gendisk *, struct scsi_ioctl_command __user *);
+                         struct scsi_ioctl_command __user *);
 /*
 * Temporary export, until SCSI gets fixed up.
@@ -910,7 +910,8 @@ static inline int sb_issue_discard(struct super_block *sb,
 * command filter functions
 */
 extern int blk_verify_command(struct blk_cmd_filter *filter,
-                              unsigned char *cmd, int has_write_perm);
+                              unsigned char *cmd, fmode_t has_write_perm);
+extern void blk_unregister_filter(struct gendisk *disk);
 extern void blk_set_cmd_filter_defaults(struct blk_cmd_filter *filter);
 #define MAX_PHYS_SEGMENTS 128
@@ -1056,6 +1057,22 @@ static inline int blk_integrity_rq(struct request *rq)
 #endif /* CONFIG_BLK_DEV_INTEGRITY */
+struct block_device_operations {
+        int (*open) (struct block_device *, fmode_t);
+        int (*release) (struct gendisk *, fmode_t);
+        int (*locked_ioctl) (struct block_device *, fmode_t, unsigned, unsigned long);
+        int (*ioctl) (struct block_device *, fmode_t, unsigned, unsigned long);
+        int (*compat_ioctl) (struct block_device *, fmode_t, unsigned, unsigned long);
+        int (*direct_access) (struct block_device *, sector_t,
+                                                void **, unsigned long *);
+        int (*media_changed) (struct gendisk *);
+        int (*revalidate_disk) (struct gendisk *);
+        int (*getgeo)(struct block_device *, struct hd_geometry *);
+        struct module *owner;
+};
+extern int __blkdev_driver_ioctl(struct block_device *, fmode_t, unsigned int,
+                                 unsigned long);
 #else /* CONFIG_BLOCK */
 /*
 * stubs for when the block layer is configured out
diff --git a/include/linux/cdrom.h b/include/linux/cdrom.h
index 5db265ea60f6..0b49e08d3cb0 100644
--- a/include/linux/cdrom.h
+++ b/include/linux/cdrom.h
@@ -987,11 +987,11 @@ struct cdrom_device_ops {
 };
 /* the general block_device operations structure: */
-extern int cdrom_open(struct cdrom_device_info *cdi, struct inode *ip,
+extern int cdrom_open(struct cdrom_device_info *cdi, struct block_device *bdev,
-                        struct file *fp);
+                        fmode_t mode);
-extern int cdrom_release(struct cdrom_device_info *cdi, struct file *fp);
+extern void cdrom_release(struct cdrom_device_info *cdi, fmode_t mode);
-extern int cdrom_ioctl(struct file *file, struct cdrom_device_info *cdi,
+extern int cdrom_ioctl(struct cdrom_device_info *cdi, struct block_device *bdev,
-                struct inode *ip, unsigned int cmd, unsigned long arg);
+                       fmode_t mode, unsigned int cmd, unsigned long arg);
 extern int cdrom_media_changed(struct cdrom_device_info *);
 extern int register_cdrom(struct cdrom_device_info *cdi);
diff --git a/include/linux/dcache.h b/include/linux/dcache.h
index efba1de629ac..a37359d0bad1 100644
--- a/include/linux/dcache.h
+++ b/include/linux/dcache.h
@@ -228,9 +228,9 @@ extern void d_delete(struct dentry *);
 /* allocate/de-allocate */
 extern struct dentry * d_alloc(struct dentry *, const struct qstr *);
-extern struct dentry * d_alloc_anon(struct inode *);
 extern struct dentry * d_splice_alias(struct inode *, struct dentry *);
 extern struct dentry * d_add_ci(struct dentry *, struct inode *, struct qstr *);
+extern struct dentry * d_obtain_alias(struct inode *);
 extern void shrink_dcache_sb(struct super_block *);
 extern void shrink_dcache_parent(struct dentry *);
 extern void shrink_dcache_for_umount(struct super_block *);
@@ -287,6 +287,7 @@ static inline struct dentry *d_add_unique(struct dentry *entry, struct inode *in
 /* used for rename() and baskets */
 extern void d_move(struct dentry *, struct dentry *);
+extern struct dentry *d_ancestor(struct dentry *, struct dentry *);
 /* appendix may either be NULL or be used for transname suffixes */
 extern struct dentry * d_lookup(struct dentry *, struct qstr *);
diff --git a/include/linux/device-mapper.h b/include/linux/device-mapper.h
index 08d783592b73..c17fd334e574 100644
--- a/include/linux/device-mapper.h
+++ b/include/linux/device-mapper.h
@@ -69,8 +69,7 @@ typedef int (*dm_status_fn) (struct dm_target *ti, status_type_t status_type,
 typedef int (*dm_message_fn) (struct dm_target *ti, unsigned argc, char **argv);
-typedef int (*dm_ioctl_fn) (struct dm_target *ti, struct inode *inode,
+typedef int (*dm_ioctl_fn) (struct dm_target *ti, unsigned int cmd,
-                            struct file *filp, unsigned int cmd,
                            unsigned long arg);
 typedef int (*dm_merge_fn) (struct dm_target *ti, struct bvec_merge_data *bvm,
@@ -85,7 +84,7 @@ void dm_set_device_limits(struct dm_target *ti, struct block_device *bdev);
 struct dm_dev {
        struct block_device *bdev;
-        int mode;
+        fmode_t mode;
        char name[16];
 };
@@ -95,7 +94,7 @@ struct dm_dev {
 * FIXME: too many arguments.
 */
 int dm_get_device(struct dm_target *ti, const char *path, sector_t start,
-                  sector_t len, int mode, struct dm_dev **result);
+                  sector_t len, fmode_t mode, struct dm_dev **result);
 void dm_put_device(struct dm_target *ti, struct dm_dev *d);
 /*
@@ -223,7 +222,7 @@ int dm_set_geometry(struct mapped_device *md, struct hd_geometry *geo);
 /*
 * First create an empty table.
 */
-int dm_table_create(struct dm_table **result, int mode,
+int dm_table_create(struct dm_table **result, fmode_t mode,
                    unsigned num_targets, struct mapped_device *md);
 /*
@@ -254,7 +253,7 @@ void dm_table_put(struct dm_table *t);
 */
 sector_t dm_table_get_size(struct dm_table *t);
 unsigned int dm_table_get_num_targets(struct dm_table *t);
-int dm_table_get_mode(struct dm_table *t);
+fmode_t dm_table_get_mode(struct dm_table *t);
 struct mapped_device *dm_table_get_md(struct dm_table *t);
 /*
@@ -354,6 +353,9 @@ void *dm_vcalloc(unsigned long nmemb, unsigned long elem_size);
 */
 #define dm_round_up(n, sz) (dm_div_up((n), (sz)) * (sz))
+#define dm_array_too_big(fixed, obj, num) \
+        ((num) > (UINT_MAX - (fixed)) / (obj))
 static inline sector_t to_sector(unsigned long n)
 {
        return (n >> SECTOR_SHIFT);
diff --git a/include/linux/device.h b/include/linux/device.h
index 987f5912720a..1a3686d15f98 100644
--- a/include/linux/device.h
+++ b/include/linux/device.h
@@ -450,7 +450,7 @@ static inline void set_dev_node(struct device *dev, int node)
 }
 #endif
-static inline void *dev_get_drvdata(struct device *dev)
+static inline void *dev_get_drvdata(const struct device *dev)
 {
        return dev->driver_data;
 }
diff --git a/include/linux/dm-region-hash.h b/include/linux/dm-region-hash.h
new file mode 100644
index 000000000000..a9e652a41373
--- /dev/null
+++ b/include/linux/dm-region-hash.h
@@ -0,0 +1,104 @@
+/*
+ * Copyright (C) 2003 Sistina Software Limited.
+ * Copyright (C) 2004-2008 Red Hat, Inc. All rights reserved.
+ *
+ * Device-Mapper dirty region hash interface.
+ *
+ * This file is released under the GPL.
+ */
+#ifndef DM_REGION_HASH_H
+#define DM_REGION_HASH_H
+#include <linux/dm-dirty-log.h>
+/*-----------------------------------------------------------------
+ * Region hash
+ *----------------------------------------------------------------*/
+struct dm_region_hash;
+struct dm_region;
+/*
+ * States a region can have.
+ */
+enum dm_rh_region_states {
+        DM_RH_CLEAN      = 0x01,        /* No writes in flight. */
+        DM_RH_DIRTY      = 0x02,        /* Writes in flight. */
+        DM_RH_NOSYNC     = 0x04,        /* Out of sync. */
+        DM_RH_RECOVERING = 0x08,        /* Under resynchronization. */
+};
+/*
+ * Region hash create/destroy.
+ */
+struct bio_list;
+struct dm_region_hash *dm_region_hash_create(
+                void *context, void (*dispatch_bios)(void *context,
+                                                     struct bio_list *bios),
+                void (*wakeup_workers)(void *context),
+                void (*wakeup_all_recovery_waiters)(void *context),
+                sector_t target_begin, unsigned max_recovery,
+                struct dm_dirty_log *log, uint32_t region_size,
+                region_t nr_regions);
+void dm_region_hash_destroy(struct dm_region_hash *rh);
+struct dm_dirty_log *dm_rh_dirty_log(struct dm_region_hash *rh);
+/*
+ * Conversion functions.
+ */
+region_t dm_rh_bio_to_region(struct dm_region_hash *rh, struct bio *bio);
+sector_t dm_rh_region_to_sector(struct dm_region_hash *rh, region_t region);
+void *dm_rh_region_context(struct dm_region *reg);
+/*
+ * Get region size and key (ie. number of the region).
+ */
+sector_t dm_rh_get_region_size(struct dm_region_hash *rh);
+region_t dm_rh_get_region_key(struct dm_region *reg);
+/*
+ * Get/set/update region state (and dirty log).
+ *
+ */
+int dm_rh_get_state(struct dm_region_hash *rh, region_t region, int may_block);
+void dm_rh_set_state(struct dm_region_hash *rh, region_t region,
+                     enum dm_rh_region_states state, int may_block);
+/* Non-zero errors_handled leaves the state of the region NOSYNC */
+void dm_rh_update_states(struct dm_region_hash *rh, int errors_handled);
+/* Flush the region hash and dirty log. */
+int dm_rh_flush(struct dm_region_hash *rh);
+/* Inc/dec pending count on regions. */
+void dm_rh_inc_pending(struct dm_region_hash *rh, struct bio_list *bios);
+void dm_rh_dec(struct dm_region_hash *rh, region_t region);
+/* Delay bios on regions. */
+void dm_rh_delay(struct dm_region_hash *rh, struct bio *bio);
+void dm_rh_mark_nosync(struct dm_region_hash *rh,
+                       struct bio *bio, unsigned done, int error);
+/*
+ * Region recovery control.
+ */
+/* Prepare some regions for recovery by starting to quiesce them. */
+void dm_rh_recovery_prepare(struct dm_region_hash *rh);
+/* Try fetching a quiesced region for recovery. */
+struct dm_region *dm_rh_recovery_start(struct dm_region_hash *rh);
+/* Report recovery end on a region. */
+void dm_rh_recovery_end(struct dm_region *reg, int error);
+/* Returns number of regions with recovery work outstanding. */
+int dm_rh_recovery_in_flight(struct dm_region_hash *rh);
+/* Start/stop recovery. */
+void dm_rh_start_recovery(struct dm_region_hash *rh);
+void dm_rh_stop_recovery(struct dm_region_hash *rh);
+#endif /* DM_REGION_HASH_H */
diff --git a/include/linux/dma_remapping.h b/include/linux/dma_remapping.h
index bff5c65f81dc..952df39c989d 100644
--- a/include/linux/dma_remapping.h
+++ b/include/linux/dma_remapping.h
@@ -2,15 +2,14 @@
 #define _DMA_REMAPPING_H
 /*
- * We need a fixed PAGE_SIZE of 4K irrespective of
+ * VT-d hardware uses 4KiB page size regardless of host page size.
- * arch PAGE_SIZE for IOMMU page tables.
 */
-#define PAGE_SHIFT_4K           (12)
+#define VTD_PAGE_SHIFT          (12)
-#define PAGE_SIZE_4K            (1UL << PAGE_SHIFT_4K)
+#define VTD_PAGE_SIZE           (1UL << VTD_PAGE_SHIFT)
-#define PAGE_MASK_4K            (((u64)-1) << PAGE_SHIFT_4K)
+#define VTD_PAGE_MASK           (((u64)-1) << VTD_PAGE_SHIFT)
-#define PAGE_ALIGN_4K(addr)     (((addr) + PAGE_SIZE_4K - 1) & PAGE_MASK_4K)
+#define VTD_PAGE_ALIGN(addr)    (((addr) + VTD_PAGE_SIZE - 1) & VTD_PAGE_MASK)
-#define IOVA_PFN(addr)          ((addr) >> PAGE_SHIFT_4K)
+#define IOVA_PFN(addr)          ((addr) >> PAGE_SHIFT)
 #define DMA_32BIT_PFN           IOVA_PFN(DMA_32BIT_MASK)
 #define DMA_64BIT_PFN           IOVA_PFN(DMA_64BIT_MASK)
@@ -25,7 +24,7 @@ struct root_entry {
        u64     val;
        u64     rsvd1;
 };
-#define ROOT_ENTRY_NR (PAGE_SIZE_4K/sizeof(struct root_entry))
+#define ROOT_ENTRY_NR (VTD_PAGE_SIZE/sizeof(struct root_entry))
 static inline bool root_present(struct root_entry *root)
 {
        return (root->val & 1);
@@ -36,7 +35,7 @@ static inline void set_root_present(struct root_entry *root)
 }
 static inline void set_root_value(struct root_entry *root, unsigned long value)
 {
-        root->val |= value & PAGE_MASK_4K;
+        root->val |= value & VTD_PAGE_MASK;
 }
 struct context_entry;
@@ -45,7 +44,7 @@ get_context_addr_from_root(struct root_entry *root)
 {
        return (struct context_entry *)
                (root_present(root)?phys_to_virt(
-                root->val & PAGE_MASK_4K):
+                root->val & VTD_PAGE_MASK) :
                NULL);
 }
@@ -67,7 +66,7 @@ struct context_entry {
 #define context_present(c) ((c).lo & 1)
 #define context_fault_disable(c) (((c).lo >> 1) & 1)
 #define context_translation_type(c) (((c).lo >> 2) & 3)
-#define context_address_root(c) ((c).lo & PAGE_MASK_4K)
+#define context_address_root(c) ((c).lo & VTD_PAGE_MASK)
 #define context_address_width(c) ((c).hi &  7)
 #define context_domain_id(c) (((c).hi >> 8) & ((1 << 16) - 1))
@@ -81,7 +80,7 @@ struct context_entry {
        } while (0)
 #define CONTEXT_TT_MULTI_LEVEL 0
 #define context_set_address_root(c, val) \
-        do {(c).lo |= (val) & PAGE_MASK_4K;} while (0)
+        do {(c).lo |= (val) & VTD_PAGE_MASK; } while (0)
 #define context_set_address_width(c, val) do {(c).hi |= (val) & 7;} while (0)
 #define context_set_domain_id(c, val) \
        do {(c).hi |= ((val) & ((1 << 16) - 1)) << 8;} while (0)
@@ -107,9 +106,9 @@ struct dma_pte {
 #define dma_set_pte_writable(p) do {(p).val |= DMA_PTE_WRITE;} while (0)
 #define dma_set_pte_prot(p, prot) \
                do {(p).val = ((p).val & ~3) | ((prot) & 3); } while (0)
-#define dma_pte_addr(p) ((p).val & PAGE_MASK_4K)
+#define dma_pte_addr(p) ((p).val & VTD_PAGE_MASK)
 #define dma_set_pte_addr(p, addr) do {\
-                (p).val |= ((addr) & PAGE_MASK_4K); } while (0)
+                (p).val |= ((addr) & VTD_PAGE_MASK); } while (0)
 #define dma_pte_present(p) (((p).val & 3) != 0)
 struct intel_iommu;
diff --git a/include/linux/file.h b/include/linux/file.h
index a20259e248a5..335a0a5c316e 100644
--- a/include/linux/file.h
+++ b/include/linux/file.h
@@ -19,10 +19,10 @@ struct file_operations;
 struct vfsmount;
 struct dentry;
 extern int init_file(struct file *, struct vfsmount *mnt,
-                struct dentry *dentry, mode_t mode,
+                struct dentry *dentry, fmode_t mode,
                const struct file_operations *fop);
 extern struct file *alloc_file(struct vfsmount *, struct dentry *dentry,
-                mode_t mode, const struct file_operations *fop);
+                fmode_t mode, const struct file_operations *fop);
 static inline void fput_light(struct file *file, int fput_needed)
 {
diff --git a/include/linux/fs.h b/include/linux/fs.h
index 024049543ae1..5b248d61430c 100644
--- a/include/linux/fs.h
+++ b/include/linux/fs.h
@@ -63,18 +63,23 @@ extern int dir_notify_enable;
 #define MAY_ACCESS 16
 #define MAY_OPEN 32
-#define FMODE_READ 1
+#define FMODE_READ ((__force fmode_t)1)
-#define FMODE_WRITE 2
+#define FMODE_WRITE ((__force fmode_t)2)
 /* Internal kernel extensions */
-#define FMODE_LSEEK     4
+#define FMODE_LSEEK     ((__force fmode_t)4)
-#define FMODE_PREAD     8
+#define FMODE_PREAD     ((__force fmode_t)8)
 #define FMODE_PWRITE    FMODE_PREAD     /* These go hand in hand */
 /* File is being opened for execution. Primary users of this flag are
   distributed filesystems that can use it to achieve correct ETXTBUSY
   behavior for cross-node execution/opening_for_writing of files */
-#define FMODE_EXEC      16
+#define FMODE_EXEC      ((__force fmode_t)16)
+#define FMODE_NDELAY    ((__force fmode_t)32)
+#define FMODE_EXCL      ((__force fmode_t)64)
+#define FMODE_WRITE_IOCTL       ((__force fmode_t)128)
+#define FMODE_NDELAY_NOW        ((__force fmode_t)256)
 #define RW_MASK         1
 #define RWA_MASK        2
@@ -136,7 +141,7 @@ extern int dir_notify_enable;
 /*
 * Superblock flags that can be altered by MS_REMOUNT
 */
-#define MS_RMT_MASK     (MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK)
+#define MS_RMT_MASK     (MS_RDONLY|MS_SYNCHRONOUS|MS_MANDLOCK|MS_I_VERSION)
 /*
 * Old magic mount flag and mask
@@ -825,7 +830,7 @@ struct file {
        const struct file_operations    *f_op;
        atomic_long_t           f_count;
        unsigned int            f_flags;
-        mode_t                  f_mode;
+        fmode_t                 f_mode;
        loff_t                  f_pos;
        struct fown_struct      f_owner;
        unsigned int            f_uid, f_gid;
@@ -1151,6 +1156,7 @@ struct super_block {
        char s_id[32];                          /* Informational name */
        void                    *s_fs_info;     /* Filesystem private info */
+        fmode_t                 s_mode;
        /*
         * The next field is for VFS *only*. No filesystems have any business
@@ -1265,20 +1271,7 @@ int generic_osync_inode(struct inode *, struct address_space *, int);
 * to have different dirent layouts depending on the binary type.
 */
 typedef int (*filldir_t)(void *, const char *, int, loff_t, u64, unsigned);
+struct block_device_operations;
-struct block_device_operations {
-        int (*open) (struct inode *, struct file *);
-        int (*release) (struct inode *, struct file *);
-        int (*ioctl) (struct inode *, struct file *, unsigned, unsigned long);
-        long (*unlocked_ioctl) (struct file *, unsigned, unsigned long);
-        long (*compat_ioctl) (struct file *, unsigned, unsigned long);
-        int (*direct_access) (struct block_device *, sector_t,
-                                                void **, unsigned long *);
-        int (*media_changed) (struct gendisk *);
-        int (*revalidate_disk) (struct gendisk *);
-        int (*getgeo)(struct block_device *, struct hd_geometry *);
-        struct module *owner;
-};
 /* These macros are for out of kernel modules to test that
 * the kernel supports the unlocked_ioctl and compat_ioctl
@@ -1592,7 +1585,6 @@ extern int get_sb_pseudo(struct file_system_type *, char *,
        struct vfsmount *mnt);
 extern int simple_set_mnt(struct vfsmount *mnt, struct super_block *sb);
 int __put_super_and_need_restart(struct super_block *sb);
-void unnamed_dev_init(void);
 /* Alas, no aliases. Too much hassle with bringing module.h everywhere */
 #define fops_get(fops) \
@@ -1713,7 +1705,7 @@ extern struct block_device *bdget(dev_t);
 extern void bd_set_size(struct block_device *, loff_t size);
 extern void bd_forget(struct inode *inode);
 extern void bdput(struct block_device *);
-extern struct block_device *open_by_devnum(dev_t, unsigned);
+extern struct block_device *open_by_devnum(dev_t, fmode_t);
 #else
 static inline void bd_forget(struct inode *inode) {}
 #endif
@@ -1723,13 +1715,10 @@ extern const struct file_operations bad_sock_fops;
 extern const struct file_operations def_fifo_fops;
 #ifdef CONFIG_BLOCK
 extern int ioctl_by_bdev(struct block_device *, unsigned, unsigned long);
-extern int blkdev_ioctl(struct inode *, struct file *, unsigned, unsigned long);
+extern int blkdev_ioctl(struct block_device *, fmode_t, unsigned, unsigned long);
-extern int blkdev_driver_ioctl(struct inode *inode, struct file *file,
-                               struct gendisk *disk, unsigned cmd,
-                               unsigned long arg);
 extern long compat_blkdev_ioctl(struct file *, unsigned, unsigned long);
-extern int blkdev_get(struct block_device *, mode_t, unsigned);
+extern int blkdev_get(struct block_device *, fmode_t);
-extern int blkdev_put(struct block_device *);
+extern int blkdev_put(struct block_device *, fmode_t);
 extern int bd_claim(struct block_device *, void *);
 extern void bd_release(struct block_device *);
 #ifdef CONFIG_SYSFS
@@ -1760,9 +1749,10 @@ extern void chrdev_show(struct seq_file *,off_t);
 extern const char *__bdevname(dev_t, char *buffer);
 extern const char *bdevname(struct block_device *bdev, char *buffer);
 extern struct block_device *lookup_bdev(const char *);
-extern struct block_device *open_bdev_excl(const char *, int, void *);
+extern struct block_device *open_bdev_exclusive(const char *, fmode_t, void *);
-extern void close_bdev_excl(struct block_device *);
+extern void close_bdev_exclusive(struct block_device *, fmode_t);
 extern void blkdev_show(struct seq_file *,off_t);
 #else
 #define BLKDEV_MAJOR_HASH_SIZE  0
 #endif
@@ -1851,6 +1841,11 @@ extern int inode_permission(struct inode *, int);
 extern int generic_permission(struct inode *, int,
                int (*check_acl)(struct inode *, int));
+static inline bool execute_ok(struct inode *inode)
+{
+        return (inode->i_mode & S_IXUGO) || S_ISDIR(inode->i_mode);
+}
 extern int get_write_access(struct inode *);
 extern int deny_write_access(struct file *);
 static inline void put_write_access(struct inode * inode)
diff --git a/include/linux/fsnotify.h b/include/linux/fsnotify.h
index a89513188ce7..00fbd5b245c9 100644
--- a/include/linux/fsnotify.h
+++ b/include/linux/fsnotify.h
@@ -188,7 +188,7 @@ static inline void fsnotify_close(struct file *file)
        struct dentry *dentry = file->f_path.dentry;
        struct inode *inode = dentry->d_inode;
        const char *name = dentry->d_name.name;
-        mode_t mode = file->f_mode;
+        fmode_t mode = file->f_mode;
        u32 mask = (mode & FMODE_WRITE) ? IN_CLOSE_WRITE : IN_CLOSE_NOWRITE;
        if (S_ISDIR(inode->i_mode))
diff --git a/include/linux/hrtimer.h b/include/linux/hrtimer.h
index 9a4e35cd5f79..2b3645b1acf4 100644
--- a/include/linux/hrtimer.h
+++ b/include/linux/hrtimer.h
@@ -20,6 +20,8 @@
 #include <linux/init.h>
 #include <linux/list.h>
 #include <linux/wait.h>
+#include <linux/percpu.h>
 struct hrtimer_clock_base;
 struct hrtimer_cpu_base;
@@ -101,9 +103,14 @@ enum hrtimer_cb_mode {
 /**
 * struct hrtimer - the basic hrtimer structure
 * @node:       red black tree node for time ordered insertion
- * @expires:    the absolute expiry time in the hrtimers internal
+ * @_expires:   the absolute expiry time in the hrtimers internal
 *              representation. The time is related to the clock on
- *              which the timer is based.
+ *              which the timer is based. Is setup by adding
+ *              slack to the _softexpires value. For non range timers
+ *              identical to _softexpires.
+ * @_softexpires: the absolute earliest expiry time of the hrtimer.
+ *              The time which was given as expiry time when the timer
+ *              was armed.
 * @function:   timer expiry callback function
 * @base:       pointer to the timer base (per cpu and per clock)
 * @state:      state information (See bit values above)
@@ -121,7 +128,8 @@ enum hrtimer_cb_mode {
 */
 struct hrtimer {
        struct rb_node                  node;
-        ktime_t                         expires;
+        ktime_t                         _expires;
+        ktime_t                         _softexpires;
        enum hrtimer_restart            (*function)(struct hrtimer *);
        struct hrtimer_clock_base       *base;
        unsigned long                   state;
@@ -201,6 +209,71 @@ struct hrtimer_cpu_base {
 #endif
 };
+static inline void hrtimer_set_expires(struct hrtimer *timer, ktime_t time)
+{
+        timer->_expires = time;
+        timer->_softexpires = time;
+}
+static inline void hrtimer_set_expires_range(struct hrtimer *timer, ktime_t time, ktime_t delta)
+{
+        timer->_softexpires = time;
+        timer->_expires = ktime_add_safe(time, delta);
+}
+static inline void hrtimer_set_expires_range_ns(struct hrtimer *timer, ktime_t time, unsigned long delta)
+{
+        timer->_softexpires = time;
+        timer->_expires = ktime_add_safe(time, ns_to_ktime(delta));
+}
+static inline void hrtimer_set_expires_tv64(struct hrtimer *timer, s64 tv64)
+{
+        timer->_expires.tv64 = tv64;
+        timer->_softexpires.tv64 = tv64;
+}
+static inline void hrtimer_add_expires(struct hrtimer *timer, ktime_t time)
+{
+        timer->_expires = ktime_add_safe(timer->_expires, time);
+        timer->_softexpires = ktime_add_safe(timer->_softexpires, time);
+}
+static inline void hrtimer_add_expires_ns(struct hrtimer *timer, unsigned long ns)
+{
+        timer->_expires = ktime_add_ns(timer->_expires, ns);
+        timer->_softexpires = ktime_add_ns(timer->_softexpires, ns);
+}
+static inline ktime_t hrtimer_get_expires(const struct hrtimer *timer)
+{
+        return timer->_expires;
+}
+static inline ktime_t hrtimer_get_softexpires(const struct hrtimer *timer)
+{
+        return timer->_softexpires;
+}
+static inline s64 hrtimer_get_expires_tv64(const struct hrtimer *timer)
+{
+        return timer->_expires.tv64;
+}
+static inline s64 hrtimer_get_softexpires_tv64(const struct hrtimer *timer)
+{
+        return timer->_softexpires.tv64;
+}
+static inline s64 hrtimer_get_expires_ns(const struct hrtimer *timer)
+{
+        return ktime_to_ns(timer->_expires);
+}
+static inline ktime_t hrtimer_expires_remaining(const struct hrtimer *timer)
+{
+    return ktime_sub(timer->_expires, timer->base->get_time());
+}
 #ifdef CONFIG_HIGH_RES_TIMERS
 struct clock_event_device;
@@ -221,6 +294,8 @@ static inline int hrtimer_is_hres_active(struct hrtimer *timer)
        return timer->base->cpu_base->hres_active;
 }
+extern void hrtimer_peek_ahead_timers(void);
 /*
 * The resolution of the clocks. The resolution value is returned in
 * the clock_getres() system call to give application programmers an
@@ -243,6 +318,7 @@ static inline int hrtimer_is_hres_active(struct hrtimer *timer)
 * is expired in the next softirq when the clock was advanced.
 */
 static inline void clock_was_set(void) { }
+static inline void hrtimer_peek_ahead_timers(void) { }
 static inline void hres_timers_resume(void) { }
@@ -264,6 +340,10 @@ static inline int hrtimer_is_hres_active(struct hrtimer *timer)
 extern ktime_t ktime_get(void);
 extern ktime_t ktime_get_real(void);
+DECLARE_PER_CPU(struct tick_device, tick_cpu_device);
 /* Exported timer functions: */
 /* Initialize timers: */
@@ -288,12 +368,25 @@ static inline void destroy_hrtimer_on_stack(struct hrtimer *timer) { }
 /* Basic timer operations: */
 extern int hrtimer_start(struct hrtimer *timer, ktime_t tim,
                         const enum hrtimer_mode mode);
+extern int hrtimer_start_range_ns(struct hrtimer *timer, ktime_t tim,
+                        unsigned long range_ns, const enum hrtimer_mode mode);
 extern int hrtimer_cancel(struct hrtimer *timer);
 extern int hrtimer_try_to_cancel(struct hrtimer *timer);
+static inline int hrtimer_start_expires(struct hrtimer *timer,
+                                                enum hrtimer_mode mode)
+{
+        unsigned long delta;
+        ktime_t soft, hard;
+        soft = hrtimer_get_softexpires(timer);
+        hard = hrtimer_get_expires(timer);
+        delta = ktime_to_ns(ktime_sub(hard, soft));
+        return hrtimer_start_range_ns(timer, soft, delta, mode);
+}
 static inline int hrtimer_restart(struct hrtimer *timer)
 {
-        return hrtimer_start(timer, timer->expires, HRTIMER_MODE_ABS);
+        return hrtimer_start_expires(timer, HRTIMER_MODE_ABS);
 }
 /* Query timers: */
@@ -350,6 +443,10 @@ extern long hrtimer_nanosleep_restart(struct restart_block *restart_block);
 extern void hrtimer_init_sleeper(struct hrtimer_sleeper *sl,
                                 struct task_struct *tsk);
+extern int schedule_hrtimeout_range(ktime_t *expires, unsigned long delta,
+                                                const enum hrtimer_mode mode);
+extern int schedule_hrtimeout(ktime_t *expires, const enum hrtimer_mode mode);
 /* Soft interrupt function to run the hrtimer queues: */
 extern void hrtimer_run_queues(void);
 extern void hrtimer_run_pending(void);
diff --git a/include/linux/i2c-algo-pcf.h b/include/linux/i2c-algo-pcf.h
index 0177d280f733..0f91a957a690 100644
--- a/include/linux/i2c-algo-pcf.h
+++ b/include/linux/i2c-algo-pcf.h
@@ -31,7 +31,10 @@ struct i2c_algo_pcf_data {
        int  (*getpcf) (void *data, int ctl);
        int  (*getown) (void *data);
        int  (*getclock) (void *data);
-        void (*waitforpin) (void);
+        void (*waitforpin) (void *data);
+        void (*xfer_begin) (void *data);
+        void (*xfer_end) (void *data);
        /* Multi-master lost arbitration back-off delay (msecs)
         * This should be set by the bus adapter or knowledgable client
diff --git a/include/linux/i2c.h b/include/linux/i2c.h
index 06115128047f..33a5992d4936 100644
--- a/include/linux/i2c.h
+++ b/include/linux/i2c.h
@@ -53,45 +53,44 @@ struct i2c_board_info;
 * transmit one message at a time, a more complex version can be used to
 * transmit an arbitrary number of messages without interruption.
 */
-extern int i2c_master_send(struct i2c_client *,const char* ,int);
+extern int i2c_master_send(struct i2c_client *client, const char *buf,
-extern int i2c_master_recv(struct i2c_client *,char* ,int);
+                           int count);
+extern int i2c_master_recv(struct i2c_client *client, char *buf, int count);
 /* Transfer num messages.
 */
-extern int i2c_transfer(struct i2c_adapter *adap, struct i2c_msg *msgs, int num);
+extern int i2c_transfer(struct i2c_adapter *adap, struct i2c_msg *msgs,
+                        int num);
 /* This is the very generalized SMBus access routine. You probably do not
   want to use this, though; one of the functions below may be much easier,
   and probably just as fast.
   Note that we use i2c_adapter here, because you do not need a specific
   smbus adapter to call this function. */
-extern s32 i2c_smbus_xfer (struct i2c_adapter * adapter, u16 addr,
+extern s32 i2c_smbus_xfer(struct i2c_adapter *adapter, u16 addr,
-                           unsigned short flags,
+                          unsigned short flags, char read_write, u8 command,
-                           char read_write, u8 command, int size,
+                          int size, union i2c_smbus_data *data);
-                           union i2c_smbus_data * data);
 /* Now follow the 'nice' access routines. These also document the calling
   conventions of i2c_smbus_xfer. */
-extern s32 i2c_smbus_read_byte(struct i2c_client * client);
+extern s32 i2c_smbus_read_byte(struct i2c_client *client);
-extern s32 i2c_smbus_write_byte(struct i2c_client * client, u8 value);
+extern s32 i2c_smbus_write_byte(struct i2c_client *client, u8 value);
-extern s32 i2c_smbus_read_byte_data(struct i2c_client * client, u8 command);
+extern s32 i2c_smbus_read_byte_data(struct i2c_client *client, u8 command);
-extern s32 i2c_smbus_write_byte_data(struct i2c_client * client,
+extern s32 i2c_smbus_write_byte_data(struct i2c_client *client,
-                                     u8 command, u8 value);
+                                     u8 command, u8 value);
-extern s32 i2c_smbus_read_word_data(struct i2c_client * client, u8 command);
+extern s32 i2c_smbus_read_word_data(struct i2c_client *client, u8 command);
-extern s32 i2c_smbus_write_word_data(struct i2c_client * client,
+extern s32 i2c_smbus_write_word_data(struct i2c_client *client,
-                                     u8 command, u16 value);
+                                     u8 command, u16 value);
 /* Returns the number of read bytes */
 extern s32 i2c_smbus_read_block_data(struct i2c_client *client,
                                     u8 command, u8 *values);
-extern s32 i2c_smbus_write_block_data(struct i2c_client * client,
+extern s32 i2c_smbus_write_block_data(struct i2c_client *client,
-                                      u8 command, u8 length,
+                                      u8 command, u8 length, const u8 *values);
-                                      const u8 *values);
 /* Returns the number of read bytes */
-extern s32 i2c_smbus_read_i2c_block_data(struct i2c_client * client,
+extern s32 i2c_smbus_read_i2c_block_data(struct i2c_client *client,
                                         u8 command, u8 length, u8 *values);
-extern s32 i2c_smbus_write_i2c_block_data(struct i2c_client * client,
+extern s32 i2c_smbus_write_i2c_block_data(struct i2c_client *client,
                                          u8 command, u8 length,
                                          const u8 *values);
@@ -169,7 +168,7 @@ struct i2c_driver {
        /* a ioctl like command that can be used to perform specific functions
         * with the device.
         */
-        int (*command)(struct i2c_client *client,unsigned int cmd, void *arg);
+        int (*command)(struct i2c_client *client, unsigned int cmd, void *arg);
        struct device_driver driver;
        const struct i2c_device_id *id_table;
@@ -224,14 +223,14 @@ static inline struct i2c_client *kobj_to_i2c_client(struct kobject *kobj)
        return to_i2c_client(dev);
 }
-static inline void *i2c_get_clientdata (struct i2c_client *dev)
+static inline void *i2c_get_clientdata(const struct i2c_client *dev)
 {
-        return dev_get_drvdata (&dev->dev);
+        return dev_get_drvdata(&dev->dev);
 }
-static inline void i2c_set_clientdata (struct i2c_client *dev, void *data)
+static inline void i2c_set_clientdata(struct i2c_client *dev, void *data)
 {
-        dev_set_drvdata (&dev->dev, data);
+        dev_set_drvdata(&dev->dev, data);
 }
 /**
@@ -240,6 +239,7 @@ static inline void i2c_set_clientdata (struct i2c_client *dev, void *data)
 * @flags: to initialize i2c_client.flags
 * @addr: stored in i2c_client.addr
 * @platform_data: stored in i2c_client.dev.platform_data
+ * @archdata: copied into i2c_client.dev.archdata
 * @irq: stored in i2c_client.irq
 *
 * I2C doesn't actually support hardware probing, although controllers and
@@ -259,6 +259,7 @@ struct i2c_board_info {
        unsigned short  flags;
        unsigned short  addr;
        void            *platform_data;
+        struct dev_archdata     *archdata;
        int             irq;
 };
@@ -272,7 +273,7 @@ struct i2c_board_info {
 * fields (such as associated irq, or device-specific platform_data)
 * are provided using conventional syntax.
 */
-#define I2C_BOARD_INFO(dev_type,dev_addr) \
+#define I2C_BOARD_INFO(dev_type, dev_addr) \
        .type = (dev_type), .addr = (dev_addr)
@@ -306,10 +307,12 @@ extern void i2c_unregister_device(struct i2c_client *);
 */
 #ifdef CONFIG_I2C_BOARDINFO
 extern int
-i2c_register_board_info(int busnum, struct i2c_board_info const *info, unsigned n);
+i2c_register_board_info(int busnum, struct i2c_board_info const *info,
+                        unsigned n);
 #else
 static inline int
-i2c_register_board_info(int busnum, struct i2c_board_info const *info, unsigned n)
+i2c_register_board_info(int busnum, struct i2c_board_info const *info,
+                        unsigned n)
 {
        return 0;
 }
@@ -328,11 +331,11 @@ struct i2c_algorithm {
           using common I2C messages */
        /* master_xfer should return the number of messages successfully
           processed, or a negative value on error */
-        int (*master_xfer)(struct i2c_adapter *adap,struct i2c_msg *msgs,
+        int (*master_xfer)(struct i2c_adapter *adap, struct i2c_msg *msgs,
-                           int num);
+                           int num);
        int (*smbus_xfer) (struct i2c_adapter *adap, u16 addr,
-                           unsigned short flags, char read_write,
+                           unsigned short flags, char read_write,
-                           u8 command, int size, union i2c_smbus_data * data);
+                           u8 command, int size, union i2c_smbus_data *data);
        /* To determine what the adapter supports */
        u32 (*functionality) (struct i2c_adapter *);
@@ -345,7 +348,7 @@ struct i2c_algorithm {
 struct i2c_adapter {
        struct module *owner;
        unsigned int id;
-        unsigned int class;
+        unsigned int class;               /* classes to allow probing for */
        const struct i2c_algorithm *algo; /* the algorithm to access the bus */
        void *algo_data;
@@ -369,14 +372,14 @@ struct i2c_adapter {
 };
 #define to_i2c_adapter(d) container_of(d, struct i2c_adapter, dev)
-static inline void *i2c_get_adapdata (struct i2c_adapter *dev)
+static inline void *i2c_get_adapdata(const struct i2c_adapter *dev)
 {
-        return dev_get_drvdata (&dev->dev);
+        return dev_get_drvdata(&dev->dev);
 }
-static inline void i2c_set_adapdata (struct i2c_adapter *dev, void *data)
+static inline void i2c_set_adapdata(struct i2c_adapter *dev, void *data)
 {
-        dev_set_drvdata (&dev->dev, data);
+        dev_set_drvdata(&dev->dev, data);
 }
 /*flags for the client struct: */
@@ -449,7 +452,7 @@ extern int i2c_probe(struct i2c_adapter *adapter,
                const struct i2c_client_address_data *address_data,
                int (*found_proc) (struct i2c_adapter *, int, int));
-extern struct i2c_adapter* i2c_get_adapter(int id);
+extern struct i2c_adapter *i2c_get_adapter(int id);
 extern void i2c_put_adapter(struct i2c_adapter *adap);
@@ -465,7 +468,7 @@ static inline int i2c_check_functionality(struct i2c_adapter *adap, u32 func)
        return (func & i2c_get_functionality(adap)) == func;
 }
-/* Return id number for a specific adapter */
+/* Return the adapter number for a specific adapter */
 static inline int i2c_adapter_id(struct i2c_adapter *adap)
 {
        return adap->nr;
@@ -526,7 +529,7 @@ struct i2c_msg {
 #define I2C_FUNC_I2C                    0x00000001
 #define I2C_FUNC_10BIT_ADDR             0x00000002
-#define I2C_FUNC_PROTOCOL_MANGLING      0x00000004 /* I2C_M_{REV_DIR_ADDR,NOSTART,..} */
+#define I2C_FUNC_PROTOCOL_MANGLING      0x00000004 /* I2C_M_NOSTART etc. */
 #define I2C_FUNC_SMBUS_PEC              0x00000008
 #define I2C_FUNC_SMBUS_BLOCK_PROC_CALL  0x00008000 /* SMBus 2.0 */
 #define I2C_FUNC_SMBUS_QUICK            0x00010000
@@ -541,30 +544,26 @@ struct i2c_msg {
 #define I2C_FUNC_SMBUS_WRITE_BLOCK_DATA 0x02000000
 #define I2C_FUNC_SMBUS_READ_I2C_BLOCK   0x04000000 /* I2C-like block xfer  */
 #define I2C_FUNC_SMBUS_WRITE_I2C_BLOCK  0x08000000 /* w/ 1-byte reg. addr. */
-#define I2C_FUNC_SMBUS_READ_I2C_BLOCK_2  0x10000000 /* I2C-like block xfer  */
-#define I2C_FUNC_SMBUS_WRITE_I2C_BLOCK_2 0x20000000 /* w/ 2-byte reg. addr. */
+#define I2C_FUNC_SMBUS_BYTE             (I2C_FUNC_SMBUS_READ_BYTE | \
+                                         I2C_FUNC_SMBUS_WRITE_BYTE)
-#define I2C_FUNC_SMBUS_BYTE (I2C_FUNC_SMBUS_READ_BYTE | \
+#define I2C_FUNC_SMBUS_BYTE_DATA        (I2C_FUNC_SMBUS_READ_BYTE_DATA | \
-                             I2C_FUNC_SMBUS_WRITE_BYTE)
+                                         I2C_FUNC_SMBUS_WRITE_BYTE_DATA)
-#define I2C_FUNC_SMBUS_BYTE_DATA (I2C_FUNC_SMBUS_READ_BYTE_DATA | \
+#define I2C_FUNC_SMBUS_WORD_DATA        (I2C_FUNC_SMBUS_READ_WORD_DATA | \
-                                  I2C_FUNC_SMBUS_WRITE_BYTE_DATA)
+                                         I2C_FUNC_SMBUS_WRITE_WORD_DATA)
-#define I2C_FUNC_SMBUS_WORD_DATA (I2C_FUNC_SMBUS_READ_WORD_DATA | \
+#define I2C_FUNC_SMBUS_BLOCK_DATA       (I2C_FUNC_SMBUS_READ_BLOCK_DATA | \
-                                  I2C_FUNC_SMBUS_WRITE_WORD_DATA)
+                                         I2C_FUNC_SMBUS_WRITE_BLOCK_DATA)
-#define I2C_FUNC_SMBUS_BLOCK_DATA (I2C_FUNC_SMBUS_READ_BLOCK_DATA | \
+#define I2C_FUNC_SMBUS_I2C_BLOCK        (I2C_FUNC_SMBUS_READ_I2C_BLOCK | \
-                                   I2C_FUNC_SMBUS_WRITE_BLOCK_DATA)
+                                         I2C_FUNC_SMBUS_WRITE_I2C_BLOCK)
-#define I2C_FUNC_SMBUS_I2C_BLOCK (I2C_FUNC_SMBUS_READ_I2C_BLOCK | \
-                                  I2C_FUNC_SMBUS_WRITE_I2C_BLOCK)
+#define I2C_FUNC_SMBUS_EMUL             (I2C_FUNC_SMBUS_QUICK | \
-#define I2C_FUNC_SMBUS_I2C_BLOCK_2 (I2C_FUNC_SMBUS_READ_I2C_BLOCK_2 | \
+                                         I2C_FUNC_SMBUS_BYTE | \
-                                    I2C_FUNC_SMBUS_WRITE_I2C_BLOCK_2)
+                                         I2C_FUNC_SMBUS_BYTE_DATA | \
+                                         I2C_FUNC_SMBUS_WORD_DATA | \
-#define I2C_FUNC_SMBUS_EMUL (I2C_FUNC_SMBUS_QUICK | \
+                                         I2C_FUNC_SMBUS_PROC_CALL | \
-                             I2C_FUNC_SMBUS_BYTE | \
+                                         I2C_FUNC_SMBUS_WRITE_BLOCK_DATA | \
-                             I2C_FUNC_SMBUS_BYTE_DATA | \
+                                         I2C_FUNC_SMBUS_I2C_BLOCK | \
-                             I2C_FUNC_SMBUS_WORD_DATA | \
+                                         I2C_FUNC_SMBUS_PEC)
-                             I2C_FUNC_SMBUS_PROC_CALL | \
-                             I2C_FUNC_SMBUS_WRITE_BLOCK_DATA | \
-                             I2C_FUNC_SMBUS_I2C_BLOCK | \
-                             I2C_FUNC_SMBUS_PEC)
 /*
 * Data for SMBus Messages
@@ -574,7 +573,7 @@ union i2c_smbus_data {
        __u8 byte;
        __u16 word;
        __u8 block[I2C_SMBUS_BLOCK_MAX + 2]; /* block[0] is used for length */
-                               /* and one more for user-space compatibility */
+                               /* and one more for user-space compatibility */
 };
 /* i2c_smbus_xfer read or write markers */
@@ -602,21 +601,21 @@ union i2c_smbus_data {
 /* Default fill of many variables */
 #define I2C_CLIENT_DEFAULTS {I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END, \
-                          I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END}
+                             I2C_CLIENT_END, I2C_CLIENT_END, I2C_CLIENT_END}
 /* I2C_CLIENT_MODULE_PARM creates a module parameter, and puts it in the
   module header */
@@ -625,7 +624,7 @@ union i2c_smbus_data {
  static unsigned short var[I2C_CLIENT_MAX_OPTS] = I2C_CLIENT_DEFAULTS; \
  static unsigned int var##_num; \
  module_param_array(var, short, &var##_num, 0); \
-  MODULE_PARM_DESC(var,desc)
+  MODULE_PARM_DESC(var, desc)
 #define I2C_CLIENT_MODULE_PARM_FORCE(name)                              \
 I2C_CLIENT_MODULE_PARM(force_##name,                                    \
diff --git a/include/linux/i2c/twl4030.h b/include/linux/i2c/twl4030.h
index cdb453162a97..fb604dcd38f1 100644
--- a/include/linux/i2c/twl4030.h
+++ b/include/linux/i2c/twl4030.h
@@ -228,6 +228,12 @@ struct twl4030_gpio_platform_data {
        int             gpio_base;
        unsigned        irq_base, irq_end;
+        /* package the two LED signals as output-only GPIOs? */
+        bool            use_leds;
+        /* gpio-n should control VMMC(n+1) if BIT(n) in mmc_cd is set */
+        u8              mmc_cd;
        /* For gpio-N, bit (1 << N) in "pullups" is set if that pullup
         * should be enabled.  Else, if that bit is set in "pulldowns",
         * that pulldown is enabled.  Don't waste power by letting any
@@ -277,6 +283,8 @@ struct twl4030_platform_data {
 /*----------------------------------------------------------------------*/
+int twl4030_sih_setup(int module);
 /*
 * FIXME completely stop using TWL4030_IRQ_BASE ... instead, pass the
 * IRQ data to subsidiary devices using platform device resources.
@@ -291,16 +299,16 @@ struct twl4030_platform_data {
 #define TWL4030_MODIRQ_BCI              (TWL4030_IRQ_BASE + 2)
 #define TWL4030_MODIRQ_MADC             (TWL4030_IRQ_BASE + 3)
 /* #define TWL4030_MODIRQ_USB           (TWL4030_IRQ_BASE + 4) */
-#define TWL4030_MODIRQ_PWR              (TWL4030_IRQ_BASE + 5)
+/* #define TWL4030_MODIRQ_PWR           (TWL4030_IRQ_BASE + 5) */
 #define TWL4030_PWRIRQ_PWRBTN           (TWL4030_PWR_IRQ_BASE + 0)
-#define TWL4030_PWRIRQ_CHG_PRES         (TWL4030_PWR_IRQ_BASE + 1)
+/* #define TWL4030_PWRIRQ_CHG_PRES              (TWL4030_PWR_IRQ_BASE + 1) */
-#define TWL4030_PWRIRQ_USB_PRES         (TWL4030_PWR_IRQ_BASE + 2)
+/* #define TWL4030_PWRIRQ_USB_PRES              (TWL4030_PWR_IRQ_BASE + 2) */
-#define TWL4030_PWRIRQ_RTC              (TWL4030_PWR_IRQ_BASE + 3)
+/* #define TWL4030_PWRIRQ_RTC           (TWL4030_PWR_IRQ_BASE + 3) */
-#define TWL4030_PWRIRQ_HOT_DIE          (TWL4030_PWR_IRQ_BASE + 4)
+/* #define TWL4030_PWRIRQ_HOT_DIE               (TWL4030_PWR_IRQ_BASE + 4) */
-#define TWL4030_PWRIRQ_PWROK_TIMEOUT    (TWL4030_PWR_IRQ_BASE + 5)
+/* #define TWL4030_PWRIRQ_PWROK_TIMEOUT (TWL4030_PWR_IRQ_BASE + 5) */
-#define TWL4030_PWRIRQ_MBCHG            (TWL4030_PWR_IRQ_BASE + 6)
+/* #define TWL4030_PWRIRQ_MBCHG         (TWL4030_PWR_IRQ_BASE + 6) */
-#define TWL4030_PWRIRQ_SC_DETECT        (TWL4030_PWR_IRQ_BASE + 7)
+/* #define TWL4030_PWRIRQ_SC_DETECT     (TWL4030_PWR_IRQ_BASE + 7) */
 /* Rest are unsued currently*/
@@ -317,17 +325,13 @@ struct twl4030_platform_data {
 /* TWL4030 GPIO interrupt definitions */
 #define TWL4030_GPIO_IRQ_NO(n)          (TWL4030_GPIO_IRQ_BASE + (n))
-#define TWL4030_GPIO_IS_ENABLE          1
 /*
 * Exported TWL4030 GPIO APIs
 *
 * WARNING -- use standard GPIO and IRQ calls instead; these will vanish.
 */
-int twl4030_get_gpio_datain(int gpio);
-int twl4030_request_gpio(int gpio);
 int twl4030_set_gpio_debounce(int gpio, int enable);
-int twl4030_free_gpio(int gpio);
 #if defined(CONFIG_TWL4030_BCI_BATTERY) || \
        defined(CONFIG_TWL4030_BCI_BATTERY_MODULE)
diff --git a/include/linux/ide.h b/include/linux/ide.h
index 89e53cfbc787..54525be4b5f8 100644
--- a/include/linux/ide.h
+++ b/include/linux/ide.h
@@ -474,8 +474,8 @@ struct ide_disk_ops {
        ide_startstop_t (*do_request)(struct ide_drive_s *, struct request *,
                                      sector_t);
        int             (*end_request)(struct ide_drive_s *, int, int);
-        int             (*ioctl)(struct ide_drive_s *, struct inode *,
+        int             (*ioctl)(struct ide_drive_s *, struct block_device *,
-                                 struct file *, unsigned int, unsigned long);
+                                 fmode_t, unsigned int, unsigned long);
 };
 /* ATAPI device flags */
@@ -1158,8 +1158,7 @@ struct ide_ioctl_devset {
 int ide_setting_ioctl(ide_drive_t *, struct block_device *, unsigned int,
                      unsigned long, const struct ide_ioctl_devset *);
-int generic_ide_ioctl(ide_drive_t *, struct file *, struct block_device *,
+int generic_ide_ioctl(ide_drive_t *, struct block_device *, unsigned, unsigned long);
-                      unsigned, unsigned long);
 extern int ide_vlb_clk;
 extern int ide_pci_clk;
diff --git a/include/linux/init_task.h b/include/linux/init_task.h
index 021d8e720c79..23fd8909b9e5 100644
--- a/include/linux/init_task.h
+++ b/include/linux/init_task.h
@@ -170,6 +170,7 @@ extern struct group_info init_groups;
        .cpu_timers     = INIT_CPU_TIMERS(tsk.cpu_timers),              \
        .fs_excl        = ATOMIC_INIT(0),                               \
        .pi_lock        = __SPIN_LOCK_UNLOCKED(tsk.pi_lock),            \
+        .timer_slack_ns = 50000, /* 50 usec default slack */            \
        .pids = {                                                       \
                [PIDTYPE_PID]  = INIT_PID_LINK(PIDTYPE_PID),            \
                [PIDTYPE_PGID] = INIT_PID_LINK(PIDTYPE_PGID),           \
diff --git a/include/linux/intel-iommu.h b/include/linux/intel-iommu.h
index 2e117f30a76c..3d017cfd245b 100644
--- a/include/linux/intel-iommu.h
+++ b/include/linux/intel-iommu.h
@@ -29,6 +29,7 @@
 #include <linux/io.h>
 #include <linux/dma_remapping.h>
 #include <asm/cacheflush.h>
+#include <asm/iommu.h>
 /*
 * Intel IOMMU register specification per version 1.0 public spec.
@@ -127,6 +128,7 @@ static inline void dmar_writeq(void __iomem *addr, u64 val)
 /* IOTLB_REG */
+#define DMA_TLB_FLUSH_GRANU_OFFSET  60
 #define DMA_TLB_GLOBAL_FLUSH (((u64)1) << 60)
 #define DMA_TLB_DSI_FLUSH (((u64)2) << 60)
 #define DMA_TLB_PSI_FLUSH (((u64)3) << 60)
@@ -140,6 +142,7 @@ static inline void dmar_writeq(void __iomem *addr, u64 val)
 #define DMA_TLB_MAX_SIZE (0x3f)
 /* INVALID_DESC */
+#define DMA_CCMD_INVL_GRANU_OFFSET  61
 #define DMA_ID_TLB_GLOBAL_FLUSH (((u64)1) << 3)
 #define DMA_ID_TLB_DSI_FLUSH    (((u64)2) << 3)
 #define DMA_ID_TLB_PSI_FLUSH    (((u64)3) << 3)
@@ -200,22 +203,21 @@ static inline void dmar_writeq(void __iomem *addr, u64 val)
 #define dma_frcd_type(d) ((d >> 30) & 1)
 #define dma_frcd_fault_reason(c) (c & 0xff)
 #define dma_frcd_source_id(c) (c & 0xffff)
-#define dma_frcd_page_addr(d) (d & (((u64)-1) << 12)) /* low 64 bit */
+/* low 64 bit */
+#define dma_frcd_page_addr(d) (d & (((u64)-1) << PAGE_SHIFT))
-#define DMAR_OPERATION_TIMEOUT ((cycles_t) tsc_khz*10*1000) /* 10sec */
+#define IOMMU_WAIT_OP(iommu, offset, op, cond, sts)                     \
-#define IOMMU_WAIT_OP(iommu, offset, op, cond, sts) \
+do {                                                                    \
-{\
+        cycles_t start_time = get_cycles();                             \
-        cycles_t start_time = get_cycles();\
+        while (1) {                                                     \
-        while (1) {\
+                sts = op(iommu->reg + offset);                          \
-                sts = op (iommu->reg + offset);\
+                if (cond)                                               \
-                if (cond)\
+                        break;                                          \
-                        break;\
                if (DMAR_OPERATION_TIMEOUT < (get_cycles() - start_time))\
-                        panic("DMAR hardware is malfunctioning\n");\
+                        panic("DMAR hardware is malfunctioning\n");     \
-                cpu_relax();\
+                cpu_relax();                                            \
-        }\
+        }                                                               \
-}
+} while (0)
 #define QI_LENGTH       256     /* queue length */
@@ -238,6 +240,19 @@ enum {
 #define QI_IWD_STATUS_DATA(d)   (((u64)d) << 32)
 #define QI_IWD_STATUS_WRITE     (((u64)1) << 5)
+#define QI_IOTLB_DID(did)       (((u64)did) << 16)
+#define QI_IOTLB_DR(dr)         (((u64)dr) << 7)
+#define QI_IOTLB_DW(dw)         (((u64)dw) << 6)
+#define QI_IOTLB_GRAN(gran)     (((u64)gran) >> (DMA_TLB_FLUSH_GRANU_OFFSET-4))
+#define QI_IOTLB_ADDR(addr)     (((u64)addr) & VTD_PAGE_MASK)
+#define QI_IOTLB_IH(ih)         (((u64)ih) << 6)
+#define QI_IOTLB_AM(am)         (((u8)am))
+#define QI_CC_FM(fm)            (((u64)fm) << 48)
+#define QI_CC_SID(sid)          (((u64)sid) << 32)
+#define QI_CC_DID(did)          (((u64)did) << 16)
+#define QI_CC_GRAN(gran)        (((u64)gran) >> (DMA_CCMD_INVL_GRANU_OFFSET-4))
 struct qi_desc {
        u64 low, high;
 };
@@ -263,6 +278,13 @@ struct ir_table {
 };
 #endif
+struct iommu_flush {
+        int (*flush_context)(struct intel_iommu *iommu, u16 did, u16 sid, u8 fm,
+                u64 type, int non_present_entry_flush);
+        int (*flush_iotlb)(struct intel_iommu *iommu, u16 did, u64 addr,
+                unsigned int size_order, u64 type, int non_present_entry_flush);
+};
 struct intel_iommu {
        void __iomem    *reg; /* Pointer to hardware regs, virtual addr */
        u64             cap;
@@ -282,6 +304,7 @@ struct intel_iommu {
        unsigned char name[7];    /* Device Name */
        struct msi_msg saved_msg;
        struct sys_device sysdev;
+        struct iommu_flush flush;
 #endif
        struct q_inval  *qi;            /* Queued invalidation info */
 #ifdef CONFIG_INTR_REMAP
@@ -303,6 +326,12 @@ extern void free_iommu(struct intel_iommu *iommu);
 extern int dmar_enable_qi(struct intel_iommu *iommu);
 extern void qi_global_iec(struct intel_iommu *iommu);
+extern int qi_flush_context(struct intel_iommu *iommu, u16 did, u16 sid,
+                                u8 fm, u64 type, int non_present_entry_flush);
+extern int qi_flush_iotlb(struct intel_iommu *iommu, u16 did, u64 addr,
+                          unsigned int size_order, u64 type,
+                          int non_present_entry_flush);
 extern void qi_submit_sync(struct qi_desc *desc, struct intel_iommu *iommu);
 void intel_iommu_domain_exit(struct dmar_domain *domain);
@@ -324,4 +353,11 @@ static inline int intel_iommu_found(void)
 }
 #endif /* CONFIG_DMAR */
+extern void *intel_alloc_coherent(struct device *, size_t, dma_addr_t *, gfp_t);
+extern void intel_free_coherent(struct device *, size_t, void *, dma_addr_t);
+extern dma_addr_t intel_map_single(struct device *, phys_addr_t, size_t, int);
+extern void intel_unmap_single(struct device *, dma_addr_t, size_t, int);
+extern int intel_map_sg(struct device *, struct scatterlist *, int, int);
+extern void intel_unmap_sg(struct device *, struct scatterlist *, int, int);
 #endif
diff --git a/include/linux/irqnr.h b/include/linux/irqnr.h
index 3171ddc3b39d..452c280c8115 100644
--- a/include/linux/irqnr.h
+++ b/include/linux/irqnr.h
@@ -13,9 +13,9 @@ extern int nr_irqs;
 # define for_each_irq_desc(irq, desc)           \
        for (irq = 0, desc = irq_desc; irq < nr_irqs; irq++, desc++)
-# define for_each_irq_desc_reverse(irq, desc)                   \
+# define for_each_irq_desc_reverse(irq, desc)                           \
-        for (irq = nr_irqs -1, desc = irq_desc + (nr_irqs -1 ); \
+        for (irq = nr_irqs - 1, desc = irq_desc + (nr_irqs - 1);        \
-             irq > 0; irq--, desc--)
+             irq >= 0; irq--, desc--)
 #endif
 #define for_each_irq_nr(irq)                    \
diff --git a/include/linux/jbd.h b/include/linux/jbd.h
index 35d4f6342fac..346e2b80be7d 100644
--- a/include/linux/jbd.h
+++ b/include/linux/jbd.h
@@ -911,7 +911,7 @@ extern int	   journal_set_features
                   (journal_t *, unsigned long, unsigned long, unsigned long);
 extern int         journal_create     (journal_t *);
 extern int         journal_load       (journal_t *journal);
-extern void        journal_destroy    (journal_t *);
+extern int         journal_destroy    (journal_t *);
 extern int         journal_recover    (journal_t *journal);
 extern int         journal_wipe       (journal_t *, int);
 extern int         journal_skip_recovery        (journal_t *);
diff --git a/include/linux/kernel.h b/include/linux/kernel.h
index 94d17ff64c5a..396a350b87a6 100644
--- a/include/linux/kernel.h
+++ b/include/linux/kernel.h
@@ -191,6 +191,30 @@ extern int kernel_text_address(unsigned long addr);
 struct pid;
 extern struct pid *session_of_pgrp(struct pid *pgrp);
+/*
+ * FW_BUG
+ * Add this to a message where you are sure the firmware is buggy or behaves
+ * really stupid or out of spec. Be aware that the responsible BIOS developer
+ * should be able to fix this issue or at least get a concrete idea of the
+ * problem by reading your message without the need of looking at the kernel
+ * code.
+ * 
+ * Use it for definite and high priority BIOS bugs.
+ *
+ * FW_WARN
+ * Use it for not that clear (e.g. could the kernel messed up things already?)
+ * and medium priority BIOS bugs.
+ *
+ * FW_INFO
+ * Use this one if you want to tell the user or vendor about something
+ * suspicious, but generally harmless related to the firmware.
+ *
+ * Use it for information or very low priority BIOS bugs.
+ */
+#define FW_BUG          "[Firmware Bug]: "
+#define FW_WARN         "[Firmware Warn]: "
+#define FW_INFO         "[Firmware Info]: "
 #ifdef CONFIG_PRINTK
 asmlinkage int vprintk(const char *fmt, va_list args)
        __attribute__ ((format (printf, 1, 0)));
diff --git a/include/linux/libata.h b/include/linux/libata.h
index 947cf84e555d..c261aa0584b1 100644
--- a/include/linux/libata.h
+++ b/include/linux/libata.h
@@ -340,6 +340,9 @@ enum {
        ATA_EHI_DID_RESET       = ATA_EHI_DID_SOFTRESET | ATA_EHI_DID_HARDRESET,
+        /* mask of flags to transfer *to* the slave link */
+        ATA_EHI_TO_SLAVE_MASK   = ATA_EHI_NO_AUTOPSY | ATA_EHI_QUIET,
        /* max tries if error condition is still set after ->error_handler */
        ATA_EH_MAX_TRIES        = 5,
diff --git a/include/linux/mlx4/cmd.h b/include/linux/mlx4/cmd.h
index 77323a72dd3c..cf9c679ab38b 100644
--- a/include/linux/mlx4/cmd.h
+++ b/include/linux/mlx4/cmd.h
@@ -132,6 +132,15 @@ enum {
        MLX4_MAILBOX_SIZE       =  4096
 };
+enum {
+        /* set port opcode modifiers */
+        MLX4_SET_PORT_GENERAL   = 0x0,
+        MLX4_SET_PORT_RQP_CALC  = 0x1,
+        MLX4_SET_PORT_MAC_TABLE = 0x2,
+        MLX4_SET_PORT_VLAN_TABLE = 0x3,
+        MLX4_SET_PORT_PRIO_MAP  = 0x4,
+};
 struct mlx4_dev;
 struct mlx4_cmd_mailbox {
diff --git a/include/linux/mlx4/device.h b/include/linux/mlx4/device.h
index b2f944468313..bd9977b89490 100644
--- a/include/linux/mlx4/device.h
+++ b/include/linux/mlx4/device.h
@@ -60,6 +60,7 @@ enum {
        MLX4_DEV_CAP_FLAG_IPOIB_CSUM    = 1 <<  7,
        MLX4_DEV_CAP_FLAG_BAD_PKEY_CNTR = 1 <<  8,
        MLX4_DEV_CAP_FLAG_BAD_QKEY_CNTR = 1 <<  9,
+        MLX4_DEV_CAP_FLAG_DPDP          = 1 << 12,
        MLX4_DEV_CAP_FLAG_MEM_WINDOW    = 1 << 16,
        MLX4_DEV_CAP_FLAG_APM           = 1 << 17,
        MLX4_DEV_CAP_FLAG_ATOMIC        = 1 << 18,
@@ -145,6 +146,29 @@ enum {
        MLX4_MTT_FLAG_PRESENT           = 1
 };
+enum mlx4_qp_region {
+        MLX4_QP_REGION_FW = 0,
+        MLX4_QP_REGION_ETH_ADDR,
+        MLX4_QP_REGION_FC_ADDR,
+        MLX4_QP_REGION_FC_EXCH,
+        MLX4_NUM_QP_REGION
+};
+enum mlx4_port_type {
+        MLX4_PORT_TYPE_IB       = 1 << 0,
+        MLX4_PORT_TYPE_ETH      = 1 << 1,
+};
+enum mlx4_special_vlan_idx {
+        MLX4_NO_VLAN_IDX        = 0,
+        MLX4_VLAN_MISS_IDX,
+        MLX4_VLAN_REGULAR
+};
+enum {
+        MLX4_NUM_FEXCH          = 64 * 1024,
+};
 static inline u64 mlx4_fw_ver(u64 major, u64 minor, u64 subminor)
 {
        return (major << 32) | (minor << 16) | subminor;
@@ -154,7 +178,9 @@ struct mlx4_caps {
        u64                     fw_ver;
        int                     num_ports;
        int                     vl_cap[MLX4_MAX_PORTS + 1];
-        int                     mtu_cap[MLX4_MAX_PORTS + 1];
+        int                     ib_mtu_cap[MLX4_MAX_PORTS + 1];
+        u64                     def_mac[MLX4_MAX_PORTS + 1];
+        int                     eth_mtu_cap[MLX4_MAX_PORTS + 1];
        int                     gid_table_len[MLX4_MAX_PORTS + 1];
        int                     pkey_table_len[MLX4_MAX_PORTS + 1];
        int                     local_ca_ack_delay;
@@ -169,7 +195,6 @@ struct mlx4_caps {
        int                     max_rq_desc_sz;
        int                     max_qp_init_rdma;
        int                     max_qp_dest_rdma;
-        int                     reserved_qps;
        int                     sqp_start;
        int                     num_srqs;
        int                     max_srq_wqes;
@@ -201,6 +226,15 @@ struct mlx4_caps {
        u16                     stat_rate_support;
        u8                      port_width_cap[MLX4_MAX_PORTS + 1];
        int                     max_gso_sz;
+        int                     reserved_qps_cnt[MLX4_NUM_QP_REGION];
+        int                     reserved_qps;
+        int                     reserved_qps_base[MLX4_NUM_QP_REGION];
+        int                     log_num_macs;
+        int                     log_num_vlans;
+        int                     log_num_prios;
+        enum mlx4_port_type     port_type[MLX4_MAX_PORTS + 1];
+        u8                      supported_type[MLX4_MAX_PORTS + 1];
+        u32                     port_mask;
 };
 struct mlx4_buf_list {
@@ -355,6 +389,11 @@ struct mlx4_init_port_param {
        u64                     si_guid;
 };
+#define mlx4_foreach_port(port, dev, type)                              \
+        for ((port) = 1; (port) <= (dev)->caps.num_ports; (port)++)     \
+                if (((type) == MLX4_PORT_TYPE_IB ? (dev)->caps.port_mask : \
+                     ~(dev)->caps.port_mask) & 1 << ((port) - 1))
 int mlx4_buf_alloc(struct mlx4_dev *dev, int size, int max_direct,
                   struct mlx4_buf *buf);
 void mlx4_buf_free(struct mlx4_dev *dev, int size, struct mlx4_buf *buf);
@@ -400,7 +439,10 @@ int mlx4_cq_alloc(struct mlx4_dev *dev, int nent, struct mlx4_mtt *mtt,
                  int collapsed);
 void mlx4_cq_free(struct mlx4_dev *dev, struct mlx4_cq *cq);
-int mlx4_qp_alloc(struct mlx4_dev *dev, int sqpn, struct mlx4_qp *qp);
+int mlx4_qp_reserve_range(struct mlx4_dev *dev, int cnt, int align, int *base);
+void mlx4_qp_release_range(struct mlx4_dev *dev, int base_qpn, int cnt);
+int mlx4_qp_alloc(struct mlx4_dev *dev, int qpn, struct mlx4_qp *qp);
 void mlx4_qp_free(struct mlx4_dev *dev, struct mlx4_qp *qp);
 int mlx4_srq_alloc(struct mlx4_dev *dev, u32 pdn, struct mlx4_mtt *mtt,
@@ -416,6 +458,12 @@ int mlx4_multicast_attach(struct mlx4_dev *dev, struct mlx4_qp *qp, u8 gid[16],
                          int block_mcast_loopback);
 int mlx4_multicast_detach(struct mlx4_dev *dev, struct mlx4_qp *qp, u8 gid[16]);
+int mlx4_register_mac(struct mlx4_dev *dev, u8 port, u64 mac, int *index);
+void mlx4_unregister_mac(struct mlx4_dev *dev, u8 port, int index);
+int mlx4_register_vlan(struct mlx4_dev *dev, u8 port, u16 vlan, int *index);
+void mlx4_unregister_vlan(struct mlx4_dev *dev, u8 port, int index);
 int mlx4_map_phys_fmr(struct mlx4_dev *dev, struct mlx4_fmr *fmr, u64 *page_list,
                      int npages, u64 iova, u32 *lkey, u32 *rkey);
 int mlx4_fmr_alloc(struct mlx4_dev *dev, u32 pd, u32 access, int max_pages,
diff --git a/include/linux/module.h b/include/linux/module.h
index 5d2970cdce93..3bfed013350b 100644
--- a/include/linux/module.h
+++ b/include/linux/module.h
@@ -29,7 +29,7 @@
 #define MODULE_SYMBOL_PREFIX ""
 #endif
-#define MODULE_NAME_LEN (64 - sizeof(unsigned long))
+#define MODULE_NAME_LEN MAX_PARAM_PREFIX_LEN
 struct kernel_symbol
 {
@@ -60,6 +60,7 @@ struct module_kobject
        struct kobject kobj;
        struct module *mod;
        struct kobject *drivers_dir;
+        struct module_param_attrs *mp;
 };
 /* These are either module local, or the kernel's dummy ones. */
@@ -242,7 +243,6 @@ struct module
        /* Sysfs stuff. */
        struct module_kobject mkobj;
-        struct module_param_attrs *param_attrs;
        struct module_attribute *modinfo_attrs;
        const char *version;
        const char *srcversion;
@@ -277,7 +277,7 @@ struct module
        /* Exception table */
        unsigned int num_exentries;
-        const struct exception_table_entry *extable;
+        struct exception_table_entry *extable;
        /* Startup function. */
        int (*init)(void);
diff --git a/include/linux/moduleparam.h b/include/linux/moduleparam.h
index ec624381c844..e4af3399ef48 100644
--- a/include/linux/moduleparam.h
+++ b/include/linux/moduleparam.h
@@ -13,6 +13,9 @@
 #define MODULE_PARAM_PREFIX KBUILD_MODNAME "."
 #endif
+/* Chosen so that structs with an unsigned long line up. */
+#define MAX_PARAM_PREFIX_LEN (64 - sizeof(unsigned long))
 #ifdef MODULE
 #define ___module_cat(a,b) __mod_ ## a ## b
 #define __module_cat(a,b) ___module_cat(a,b)
@@ -79,7 +82,8 @@ struct kparam_array
 #define __module_param_call(prefix, name, set, get, arg, perm)          \
        /* Default value instead of permissions? */                     \
        static int __param_perm_check_##name __attribute__((unused)) =  \
-        BUILD_BUG_ON_ZERO((perm) < 0 || (perm) > 0777 || ((perm) & 2)); \
+        BUILD_BUG_ON_ZERO((perm) < 0 || (perm) > 0777 || ((perm) & 2))  \
+        + BUILD_BUG_ON_ZERO(sizeof(""prefix) > MAX_PARAM_PREFIX_LEN);   \
        static const char __param_str_##name[] = prefix #name;          \
        static struct kernel_param __moduleparam_const __param_##name   \
        __used                                                          \
@@ -100,6 +104,25 @@ struct kparam_array
 #define module_param(name, type, perm)                          \
        module_param_named(name, name, type, perm)
+#ifndef MODULE
+/**
+ * core_param - define a historical core kernel parameter.
+ * @name: the name of the cmdline and sysfs parameter (often the same as var)
+ * @var: the variable
+ * @type: the type (for param_set_##type and param_get_##type)
+ * @perm: visibility in sysfs
+ *
+ * core_param is just like module_param(), but cannot be modular and
+ * doesn't add a prefix (such as "printk.").  This is for compatibility
+ * with __setup(), and it makes sense as truly core parameters aren't
+ * tied to the particular file they're in.
+ */
+#define core_param(name, var, type, perm)                               \
+        param_check_##type(name, &(var));                               \
+        __module_param_call("", name, param_set_##type, param_get_##type, \
+                            &var, perm)
+#endif /* !MODULE */
 /* Actually copy string: maxlen param is usually sizeof(string). */
 #define module_param_string(name, string, len, perm)                    \
        static const struct kparam_string __param_string_##name         \
diff --git a/include/linux/namei.h b/include/linux/namei.h
index 68f8c3203c89..99eb80306dc5 100644
--- a/include/linux/namei.h
+++ b/include/linux/namei.h
@@ -51,8 +51,10 @@ enum {LAST_NORM, LAST_ROOT, LAST_DOT, LAST_DOTDOT, LAST_BIND};
 /*
 * Intent data
 */
-#define LOOKUP_OPEN             (0x0100)
+#define LOOKUP_OPEN             0x0100
-#define LOOKUP_CREATE           (0x0200)
+#define LOOKUP_CREATE           0x0200
+#define LOOKUP_EXCL             0x0400
+#define LOOKUP_RENAME_TARGET    0x0800
 extern int user_path_at(int, const char __user *, unsigned, struct path *);
@@ -61,6 +63,8 @@ extern int user_path_at(int, const char __user *, unsigned, struct path *);
 #define user_path_dir(name, path) \
        user_path_at(AT_FDCWD, name, LOOKUP_FOLLOW | LOOKUP_DIRECTORY, path)
+extern int kern_path(const char *, unsigned, struct path *);
 extern int path_lookup(const char *, unsigned, struct nameidata *);
 extern int vfs_path_lookup(struct dentry *, struct vfsmount *,
                           const char *, unsigned int, struct nameidata *);
diff --git a/include/linux/oprofile.h b/include/linux/oprofile.h
index bcb8f725427c..5231861f357d 100644
--- a/include/linux/oprofile.h
+++ b/include/linux/oprofile.h
@@ -86,13 +86,6 @@ int oprofile_arch_init(struct oprofile_operations * ops);
 void oprofile_arch_exit(void);
 /**
- * Add data to the event buffer.
- * The data passed is free-form, but typically consists of
- * file offsets, dcookies, context information, and ESCAPE codes.
- */
-void add_event_entry(unsigned long data);
-/**
 * Add a sample. This may be called from any context. Pass
 * smp_processor_id() as cpu.
 */
@@ -162,5 +155,14 @@ int oprofilefs_ulong_from_user(unsigned long * val, char const __user * buf, siz
 /** lock for read/write safety */
 extern spinlock_t oprofilefs_lock;
+/**
+ * Add the contents of a circular buffer to the event buffer.
+ */
+void oprofile_put_buff(unsigned long *buf, unsigned int start,
+                        unsigned int stop, unsigned int max);
+unsigned long oprofile_get_cpu_buffer_size(void);
+void oprofile_cpu_buffer_inc_smpl_lost(void);
 
 #endif /* OPROFILE_H */
diff --git a/include/linux/page_cgroup.h b/include/linux/page_cgroup.h
index 0fd39f2231ec..f546ad6fc028 100644
--- a/include/linux/page_cgroup.h
+++ b/include/linux/page_cgroup.h
@@ -99,5 +99,10 @@ static inline struct page_cgroup *lookup_page_cgroup(struct page *page)
 {
        return NULL;
 }
+static inline void page_cgroup_init(void)
+{
+}
 #endif
 #endif
diff --git a/include/linux/pci.h b/include/linux/pci.h
index 085187be29c7..752def8a2ef4 100644
--- a/include/linux/pci.h
+++ b/include/linux/pci.h
@@ -51,6 +51,7 @@
 #include <linux/kobject.h>
 #include <asm/atomic.h>
 #include <linux/device.h>
+#include <linux/io.h>
 /* Include the ID list */
 #include <linux/pci_ids.h>
@@ -64,6 +65,11 @@ struct pci_slot {
        struct kobject kobj;
 };
+static inline const char *pci_slot_name(const struct pci_slot *slot)
+{
+        return kobject_name(&slot->kobj);
+}
 /* File state for mmap()s on /proc/bus/pci/X/Y */
 enum pci_mmap_state {
        pci_mmap_io,
@@ -509,9 +515,10 @@ struct pci_bus *pci_create_bus(struct device *parent, int bus,
 struct pci_bus *pci_add_new_bus(struct pci_bus *parent, struct pci_dev *dev,
                                int busnr);
 struct pci_slot *pci_create_slot(struct pci_bus *parent, int slot_nr,
-                                 const char *name);
+                                 const char *name,
+                                 struct hotplug_slot *hotplug);
 void pci_destroy_slot(struct pci_slot *slot);
-void pci_update_slot_number(struct pci_slot *slot, int slot_nr);
+void pci_renumber_slot(struct pci_slot *slot, int slot_nr);
 int pci_scan_slot(struct pci_bus *bus, int devfn);
 struct pci_dev *pci_scan_single_device(struct pci_bus *bus, int devfn);
 void pci_device_add(struct pci_dev *dev, struct pci_bus *bus);
@@ -626,6 +633,8 @@ int pcix_get_mmrbc(struct pci_dev *dev);
 int pcix_set_mmrbc(struct pci_dev *dev, int mmrbc);
 int pcie_get_readrq(struct pci_dev *dev);
 int pcie_set_readrq(struct pci_dev *dev, int rq);
+int pci_reset_function(struct pci_dev *dev);
+int pci_execute_reset_function(struct pci_dev *dev);
 void pci_update_resource(struct pci_dev *dev, struct resource *res, int resno);
 int __must_check pci_assign_resource(struct pci_dev *dev, int i);
 int pci_select_bars(struct pci_dev *dev, unsigned long flags);
diff --git a/include/linux/pci_hotplug.h b/include/linux/pci_hotplug.h
index a08cd06b541a..a00bd1a0f156 100644
--- a/include/linux/pci_hotplug.h
+++ b/include/linux/pci_hotplug.h
@@ -142,8 +142,6 @@ struct hotplug_slot_info {
 /**
 * struct hotplug_slot - used to register a physical slot with the hotplug pci core
- * @name: the name of the slot being registered.  This string must
- * be unique amoung slots registered on this system.
 * @ops: pointer to the &struct hotplug_slot_ops to be used for this slot
 * @info: pointer to the &struct hotplug_slot_info for the initial values for
 * this slot.
@@ -153,7 +151,6 @@ struct hotplug_slot_info {
 * needs.
 */
 struct hotplug_slot {
-        char                            *name;
        struct hotplug_slot_ops         *ops;
        struct hotplug_slot_info        *info;
        void (*release) (struct hotplug_slot *slot);
@@ -165,7 +162,13 @@ struct hotplug_slot {
 };
 #define to_hotplug_slot(n) container_of(n, struct hotplug_slot, kobj)
-extern int pci_hp_register(struct hotplug_slot *, struct pci_bus *, int nr);
+static inline const char *hotplug_slot_name(const struct hotplug_slot *slot)
+{
+        return pci_slot_name(slot->pci_slot);
+}
+extern int pci_hp_register(struct hotplug_slot *, struct pci_bus *, int nr,
+                           const char *name);
 extern int pci_hp_deregister(struct hotplug_slot *slot);
 extern int __must_check pci_hp_change_slot_info (struct hotplug_slot *slot,
                                                 struct hotplug_slot_info *info);
diff --git a/include/linux/pci_ids.h b/include/linux/pci_ids.h
index e5d344bfcb7e..1800f1d6e40d 100644
--- a/include/linux/pci_ids.h
+++ b/include/linux/pci_ids.h
@@ -1944,6 +1944,14 @@
 #define PCI_VENDOR_ID_OXSEMI            0x1415
 #define PCI_DEVICE_ID_OXSEMI_12PCI840   0x8403
+#define PCI_DEVICE_ID_OXSEMI_PCIe840            0xC000
+#define PCI_DEVICE_ID_OXSEMI_PCIe840_G          0xC004
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_0          0xC100
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_0_G        0xC104
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_1          0xC110
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_1_G        0xC114
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_1_U        0xC118
+#define PCI_DEVICE_ID_OXSEMI_PCIe952_1_GU       0xC11C
 #define PCI_DEVICE_ID_OXSEMI_16PCI954   0x9501
 #define PCI_DEVICE_ID_OXSEMI_16PCI95N   0x9511
 #define PCI_DEVICE_ID_OXSEMI_16PCI954PP 0x9513
@@ -2448,6 +2456,7 @@
 #define PCI_DEVICE_ID_INTEL_MCH_PC1     0x359a
 #define PCI_DEVICE_ID_INTEL_E7525_MCH   0x359e
 #define PCI_DEVICE_ID_INTEL_IOAT_CNB    0x360b
+#define PCI_DEVICE_ID_INTEL_FBD_CNB     0x360c
 #define PCI_DEVICE_ID_INTEL_ICH10_0     0x3a14
 #define PCI_DEVICE_ID_INTEL_ICH10_1     0x3a16
 #define PCI_DEVICE_ID_INTEL_ICH10_2     0x3a18
diff --git a/include/linux/pci_regs.h b/include/linux/pci_regs.h
index eb6686b88f9a..e5effd47ed74 100644
--- a/include/linux/pci_regs.h
+++ b/include/linux/pci_regs.h
@@ -377,6 +377,7 @@
 #define  PCI_EXP_DEVCAP_RBER    0x8000  /* Role-Based Error Reporting */
 #define  PCI_EXP_DEVCAP_PWR_VAL 0x3fc0000 /* Slot Power Limit Value */
 #define  PCI_EXP_DEVCAP_PWR_SCL 0xc000000 /* Slot Power Limit Scale */
+#define  PCI_EXP_DEVCAP_FLR     0x10000000 /* Function Level Reset */
 #define PCI_EXP_DEVCTL          8       /* Device Control */
 #define  PCI_EXP_DEVCTL_CERE    0x0001  /* Correctable Error Reporting En. */
 #define  PCI_EXP_DEVCTL_NFERE   0x0002  /* Non-Fatal Error Reporting Enable */
@@ -389,6 +390,7 @@
 #define  PCI_EXP_DEVCTL_AUX_PME 0x0400  /* Auxiliary Power PM Enable */
 #define  PCI_EXP_DEVCTL_NOSNOOP_EN 0x0800  /* Enable No Snoop */
 #define  PCI_EXP_DEVCTL_READRQ  0x7000  /* Max_Read_Request_Size */
+#define  PCI_EXP_DEVCTL_BCR_FLR 0x8000  /* Bridge Configuration Retry / FLR */
 #define PCI_EXP_DEVSTA          10      /* Device Status */
 #define  PCI_EXP_DEVSTA_CED     0x01    /* Correctable Error Detected */
 #define  PCI_EXP_DEVSTA_NFED    0x02    /* Non-Fatal Error Detected */
diff --git a/include/linux/pnp.h b/include/linux/pnp.h
index 53b70fd1d9a5..ca3c88773028 100644
--- a/include/linux/pnp.h
+++ b/include/linux/pnp.h
@@ -485,14 +485,4 @@ static inline void pnp_unregister_driver(struct pnp_driver *drv) { }
 #endif /* CONFIG_PNP */
-#define pnp_err(format, arg...) printk(KERN_ERR "pnp: " format "\n" , ## arg)
-#define pnp_info(format, arg...) printk(KERN_INFO "pnp: " format "\n" , ## arg)
-#define pnp_warn(format, arg...) printk(KERN_WARNING "pnp: " format "\n" , ## arg)
-#ifdef CONFIG_PNP_DEBUG
-#define pnp_dbg(format, arg...) printk(KERN_DEBUG "pnp: " format "\n" , ## arg)
-#else
-#define pnp_dbg(format, arg...) do {} while (0)
-#endif
 #endif /* _LINUX_PNP_H */
diff --git a/include/linux/poll.h b/include/linux/poll.h
index ef453828877a..badd98ab06f6 100644
--- a/include/linux/poll.h
+++ b/include/linux/poll.h
@@ -114,11 +114,13 @@ void zero_fd_set(unsigned long nr, unsigned long *fdset)
 #define MAX_INT64_SECONDS (((s64)(~((u64)0)>>1)/HZ)-1)
-extern int do_select(int n, fd_set_bits *fds, s64 *timeout);
+extern int do_select(int n, fd_set_bits *fds, struct timespec *end_time);
 extern int do_sys_poll(struct pollfd __user * ufds, unsigned int nfds,
-                       s64 *timeout);
+                       struct timespec *end_time);
 extern int core_sys_select(int n, fd_set __user *inp, fd_set __user *outp,
-                           fd_set __user *exp, s64 *timeout);
+                           fd_set __user *exp, struct timespec *end_time);
+extern int poll_select_set_timeout(struct timespec *to, long sec, long nsec);
 #endif /* KERNEL */
diff --git a/include/linux/prctl.h b/include/linux/prctl.h
index 5ad79198d6f9..48d887e3c6e7 100644
--- a/include/linux/prctl.h
+++ b/include/linux/prctl.h
@@ -78,4 +78,11 @@
 #define PR_GET_SECUREBITS 27
 #define PR_SET_SECUREBITS 28
+/*
+ * Get/set the timerslack as used by poll/select/nanosleep
+ * A value of 0 means "use default"
+ */
+#define PR_SET_TIMERSLACK 29
+#define PR_GET_TIMERSLACK 30
 #endif /* _LINUX_PRCTL_H */
diff --git a/include/linux/profile.h b/include/linux/profile.h
index 570045053ce9..a0fc32279fc0 100644
--- a/include/linux/profile.h
+++ b/include/linux/profile.h
@@ -19,10 +19,16 @@ struct notifier_block;
 #if defined(CONFIG_PROFILING) && defined(CONFIG_PROC_FS)
 void create_prof_cpu_mask(struct proc_dir_entry *de);
+int create_proc_profile(void);
 #else
 static inline void create_prof_cpu_mask(struct proc_dir_entry *de)
 {
 }
+static inline int create_proc_profile(void)
+{
+        return 0;
+}
 #endif
 enum profile_type {
@@ -37,7 +43,6 @@ extern int prof_on __read_mostly;
 /* init basic kernel profiler */
 int profile_init(void);
 int profile_setup(char *str);
-int create_proc_profile(void);
 void profile_tick(int type);
 /*
diff --git a/include/linux/reiserfs_fs_sb.h b/include/linux/reiserfs_fs_sb.h
index 315517e8bfa1..bda6b562a1e0 100644
--- a/include/linux/reiserfs_fs_sb.h
+++ b/include/linux/reiserfs_fs_sb.h
@@ -178,6 +178,7 @@ struct reiserfs_journal {
        struct reiserfs_journal_cnode *j_first; /*  oldest journal block.  start here for traverse */
        struct block_device *j_dev_bd;
+        fmode_t j_dev_mode;
        int j_1st_reserved_block;       /* first block on s_dev of reserved area journal */
        unsigned long j_state;
diff --git a/include/linux/sched.h b/include/linux/sched.h
index 7f60cb9b53cb..8478f334d732 100644
--- a/include/linux/sched.h
+++ b/include/linux/sched.h
@@ -287,7 +287,6 @@ extern void trap_init(void);
 extern void account_process_tick(struct task_struct *task, int user);
 extern void update_process_times(int user);
 extern void scheduler_tick(void);
-extern void hrtick_resched(void);
 extern void sched_show_task(struct task_struct *p);
@@ -1342,6 +1341,12 @@ struct task_struct {
        int latency_record_count;
        struct latency_record latency_record[LT_SAVECOUNT];
 #endif
+        /*
+         * time slack values; these are used to round up poll() and
+         * select() etc timeout values. These are in nanoseconds.
+         */
+        unsigned long timer_slack_ns;
+        unsigned long default_timer_slack_ns;
 };
 /*
@@ -1661,6 +1666,7 @@ extern unsigned int sysctl_sched_features;
 extern unsigned int sysctl_sched_migration_cost;
 extern unsigned int sysctl_sched_nr_migrate;
 extern unsigned int sysctl_sched_shares_ratelimit;
+extern unsigned int sysctl_sched_shares_thresh;
 int sched_nr_latency_handler(struct ctl_table *table, int write,
                struct file *file, void __user *buffer, size_t *length,
diff --git a/include/linux/thread_info.h b/include/linux/thread_info.h
index 38a56477f27a..e6b820f8b56b 100644
--- a/include/linux/thread_info.h
+++ b/include/linux/thread_info.h
@@ -38,6 +38,14 @@ struct restart_block {
 #endif
                        u64 expires;
                } nanosleep;
+                /* For poll */
+                struct {
+                        struct pollfd __user *ufds;
+                        int nfds;
+                        int has_timeout;
+                        unsigned long tv_sec;
+                        unsigned long tv_nsec;
+                } poll;
        };
 };
diff --git a/include/linux/time.h b/include/linux/time.h
index 4f1c9db57707..ce321ac5c8f8 100644
--- a/include/linux/time.h
+++ b/include/linux/time.h
@@ -40,6 +40,8 @@ extern struct timezone sys_tz;
 #define NSEC_PER_SEC    1000000000L
 #define FSEC_PER_SEC    1000000000000000L
+#define TIME_T_MAX      (time_t)((1UL << ((sizeof(time_t) << 3) - 1)) - 1)
 static inline int timespec_equal(const struct timespec *a,
                                 const struct timespec *b)
 {
@@ -74,6 +76,8 @@ extern unsigned long mktime(const unsigned int year, const unsigned int mon,
                            const unsigned int min, const unsigned int sec);
 extern void set_normalized_timespec(struct timespec *ts, time_t sec, long nsec);
+extern struct timespec timespec_add_safe(const struct timespec lhs,
+                                         const struct timespec rhs);
 /*
 * sub = lhs - rhs, in normalized form
diff --git a/include/linux/types.h b/include/linux/types.h
index f24f7beb47df..1d98330b1f2c 100644
--- a/include/linux/types.h
+++ b/include/linux/types.h
@@ -190,6 +190,7 @@ typedef __u32 __bitwise __wsum;
 #ifdef __KERNEL__
 typedef unsigned __bitwise__ gfp_t;
+typedef unsigned __bitwise__ fmode_t;
 #ifdef CONFIG_PHYS_ADDR_T_64BIT
 typedef u64 phys_addr_t;
diff --git a/include/linux/usb/wusb-wa.h b/include/linux/usb/wusb-wa.h
new file mode 100644
index 000000000000..a102561e7026
--- /dev/null
+++ b/include/linux/usb/wusb-wa.h
@@ -0,0 +1,271 @@
+/*
+ * Wireless USB Wire Adapter constants and structures.
+ *
+ * Copyright (C) 2005-2006 Intel Corporation.
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * FIXME: docs
+ * FIXME: organize properly, group logically
+ *
+ * All the event structures are defined in uwb/spec.h, as they are
+ * common to the WHCI and WUSB radio control interfaces.
+ *
+ * References:
+ *   [WUSB] Wireless Universal Serial Bus Specification, revision 1.0, ch8
+ */
+#ifndef __LINUX_USB_WUSB_WA_H
+#define __LINUX_USB_WUSB_WA_H
+/**
+ * Radio Command Request for the Radio Control Interface
+ *
+ * Radio Control Interface command and event codes are the same as
+ * WHCI, and listed in include/linux/uwb.h:UWB_RC_{CMD,EVT}_*
+ */
+enum {
+        WA_EXEC_RC_CMD = 40,    /* Radio Control command Request */
+};
+/* Wireless Adapter Requests ([WUSB] table 8-51) */
+enum {
+        WUSB_REQ_ADD_MMC_IE     = 20,
+        WUSB_REQ_REMOVE_MMC_IE  = 21,
+        WUSB_REQ_SET_NUM_DNTS   = 22,
+        WUSB_REQ_SET_CLUSTER_ID = 23,
+        WUSB_REQ_SET_DEV_INFO   = 24,
+        WUSB_REQ_GET_TIME       = 25,
+        WUSB_REQ_SET_STREAM_IDX = 26,
+        WUSB_REQ_SET_WUSB_MAS   = 27,
+};
+/* Wireless Adapter WUSB Channel Time types ([WUSB] table 8-52) */
+enum {
+        WUSB_TIME_ADJ   = 0,
+        WUSB_TIME_BPST  = 1,
+        WUSB_TIME_WUSB  = 2,
+};
+enum {
+        WA_ENABLE = 0x01,
+        WA_RESET = 0x02,
+        RPIPE_PAUSE = 0x1,
+};
+/* Responses from Get Status request ([WUSB] section 8.3.1.6) */
+enum {
+        WA_STATUS_ENABLED = 0x01,
+        WA_STATUS_RESETTING = 0x02
+};
+enum rpipe_crs {
+        RPIPE_CRS_CTL = 0x01,
+        RPIPE_CRS_ISO = 0x02,
+        RPIPE_CRS_BULK = 0x04,
+        RPIPE_CRS_INTR = 0x08
+};
+/**
+ * RPipe descriptor ([WUSB] section 8.5.2.11)
+ *
+ * FIXME: explain rpipes
+ */
+struct usb_rpipe_descriptor {
+        u8      bLength;
+        u8      bDescriptorType;
+        __le16  wRPipeIndex;
+        __le16  wRequests;
+        __le16  wBlocks;                /* rw if 0 */
+        __le16  wMaxPacketSize;         /* rw? */
+        u8      bHSHubAddress;          /* reserved: 0 */
+        u8      bHSHubPort;             /* ??? FIXME ??? */
+        u8      bSpeed;                 /* rw: xfer rate 'enum uwb_phy_rate' */
+        u8      bDeviceAddress;         /* rw: Target device address */
+        u8      bEndpointAddress;       /* rw: Target EP address */
+        u8      bDataSequence;          /* ro: Current Data sequence */
+        __le32  dwCurrentWindow;        /* ro */
+        u8      bMaxDataSequence;       /* ro?: max supported seq */
+        u8      bInterval;              /* rw:  */
+        u8      bOverTheAirInterval;    /* rw:  */
+        u8      bmAttribute;            /* ro?  */
+        u8      bmCharacteristics;      /* ro? enum rpipe_attr, supported xsactions */
+        u8      bmRetryOptions;         /* rw? */
+        __le16  wNumTransactionErrors;  /* rw */
+} __attribute__ ((packed));
+/**
+ * Wire Adapter Notification types ([WUSB] sections 8.4.5 & 8.5.4)
+ *
+ * These are the notifications coming on the notification endpoint of
+ * an HWA and a DWA.
+ */
+enum wa_notif_type {
+        DWA_NOTIF_RWAKE = 0x91,
+        DWA_NOTIF_PORTSTATUS = 0x92,
+        WA_NOTIF_TRANSFER = 0x93,
+        HWA_NOTIF_BPST_ADJ = 0x94,
+        HWA_NOTIF_DN = 0x95,
+};
+/**
+ * Wire Adapter notification header
+ *
+ * Notifications coming from a wire adapter use a common header
+ * defined in [WUSB] sections 8.4.5 & 8.5.4.
+ */
+struct wa_notif_hdr {
+        u8 bLength;
+        u8 bNotifyType;                 /* enum wa_notif_type */
+} __attribute__((packed));
+/**
+ * HWA DN Received notification [(WUSB] section 8.5.4.2)
+ *
+ * The DNData is specified in WUSB1.0[7.6]. For each device
+ * notification we received, we just need to dispatch it.
+ *
+ * @dndata:  this is really an array of notifications, but all start
+ *           with the same header.
+ */
+struct hwa_notif_dn {
+        struct wa_notif_hdr hdr;
+        u8 bSourceDeviceAddr;           /* from errata 2005/07 */
+        u8 bmAttributes;
+        struct wusb_dn_hdr dndata[];
+} __attribute__((packed));
+/* [WUSB] section 8.3.3 */
+enum wa_xfer_type {
+        WA_XFER_TYPE_CTL = 0x80,
+        WA_XFER_TYPE_BI = 0x81,         /* bulk/interrupt */
+        WA_XFER_TYPE_ISO = 0x82,
+        WA_XFER_RESULT = 0x83,
+        WA_XFER_ABORT = 0x84,
+};
+/* [WUSB] section 8.3.3 */
+struct wa_xfer_hdr {
+        u8 bLength;                     /* 0x18 */
+        u8 bRequestType;                /* 0x80 WA_REQUEST_TYPE_CTL */
+        __le16 wRPipe;                  /* RPipe index */
+        __le32 dwTransferID;            /* Host-assigned ID */
+        __le32 dwTransferLength;        /* Length of data to xfer */
+        u8 bTransferSegment;
+} __attribute__((packed));
+struct wa_xfer_ctl {
+        struct wa_xfer_hdr hdr;
+        u8 bmAttribute;
+        __le16 wReserved;
+        struct usb_ctrlrequest baSetupData;
+} __attribute__((packed));
+struct wa_xfer_bi {
+        struct wa_xfer_hdr hdr;
+        u8 bReserved;
+        __le16 wReserved;
+} __attribute__((packed));
+struct wa_xfer_hwaiso {
+        struct wa_xfer_hdr hdr;
+        u8 bReserved;
+        __le16 wPresentationTime;
+        __le32 dwNumOfPackets;
+        /* FIXME: u8 pktdata[]? */
+} __attribute__((packed));
+/* [WUSB] section 8.3.3.5 */
+struct wa_xfer_abort {
+        u8 bLength;
+        u8 bRequestType;
+        __le16 wRPipe;                  /* RPipe index */
+        __le32 dwTransferID;            /* Host-assigned ID */
+} __attribute__((packed));
+/**
+ * WA Transfer Complete notification ([WUSB] section 8.3.3.3)
+ *
+ */
+struct wa_notif_xfer {
+        struct wa_notif_hdr hdr;
+        u8 bEndpoint;
+        u8 Reserved;
+} __attribute__((packed));
+/** Transfer result basic codes [WUSB] table 8-15 */
+enum {
+        WA_XFER_STATUS_SUCCESS,
+        WA_XFER_STATUS_HALTED,
+        WA_XFER_STATUS_DATA_BUFFER_ERROR,
+        WA_XFER_STATUS_BABBLE,
+        WA_XFER_RESERVED,
+        WA_XFER_STATUS_NOT_FOUND,
+        WA_XFER_STATUS_INSUFFICIENT_RESOURCE,
+        WA_XFER_STATUS_TRANSACTION_ERROR,
+        WA_XFER_STATUS_ABORTED,
+        WA_XFER_STATUS_RPIPE_NOT_READY,
+        WA_XFER_INVALID_FORMAT,
+        WA_XFER_UNEXPECTED_SEGMENT_NUMBER,
+        WA_XFER_STATUS_RPIPE_TYPE_MISMATCH,
+};
+/** [WUSB] section 8.3.3.4 */
+struct wa_xfer_result {
+        struct wa_notif_hdr hdr;
+        __le32 dwTransferID;
+        __le32 dwTransferLength;
+        u8     bTransferSegment;
+        u8     bTransferStatus;
+        __le32 dwNumOfPackets;
+} __attribute__((packed));
+/**
+ * Wire Adapter Class Descriptor ([WUSB] section 8.5.2.7).
+ *
+ * NOTE: u16 fields are read Little Endian from the hardware.
+ *
+ * @bNumPorts is the original max number of devices that the host can
+ *            connect; we might chop this so the stack can handle
+ *            it. In case you need to access it, use wusbhc->ports_max
+ *            if it is a Wireless USB WA.
+ */
+struct usb_wa_descriptor {
+        u8      bLength;
+        u8      bDescriptorType;
+        u16     bcdWAVersion;
+        u8      bNumPorts;              /* don't use!! */
+        u8      bmAttributes;           /* Reserved == 0 */
+        u16     wNumRPipes;
+        u16     wRPipeMaxBlock;
+        u8      bRPipeBlockSize;
+        u8      bPwrOn2PwrGood;
+        u8      bNumMMCIEs;
+        u8      DeviceRemovable;        /* FIXME: in DWA this is up to 16 bytes */
+} __attribute__((packed));
+/**
+ * HWA Device Information Buffer (WUSB1.0[T8.54])
+ */
+struct hwa_dev_info {
+        u8      bmDeviceAvailability[32];       /* FIXME: ignored for now */
+        u8      bDeviceAddress;
+        __le16  wPHYRates;
+        u8      bmDeviceAttribute;
+} __attribute__((packed));
+#endif /* #ifndef __LINUX_USB_WUSB_WA_H */
diff --git a/include/linux/usb/wusb.h b/include/linux/usb/wusb.h
new file mode 100644
index 000000000000..5f401b644ed5
--- /dev/null
+++ b/include/linux/usb/wusb.h
@@ -0,0 +1,376 @@
+/*
+ * Wireless USB Standard Definitions
+ * Event Size Tables
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * FIXME: docs
+ * FIXME: organize properly, group logically
+ *
+ * All the event structures are defined in uwb/spec.h, as they are
+ * common to the WHCI and WUSB radio control interfaces.
+ */
+#ifndef __WUSB_H__
+#define __WUSB_H__
+#include <linux/types.h>
+#include <linux/kernel.h>
+#include <linux/uwb/spec.h>
+#include <linux/usb/ch9.h>
+#include <linux/param.h>
+/**
+ * WUSB Information Element header
+ *
+ * I don't know why, they decided to make it different to the MBOA MAC
+ * IE Header; beats me.
+ */
+struct wuie_hdr {
+        u8 bLength;
+        u8 bIEIdentifier;
+} __attribute__((packed));
+enum {
+        WUIE_ID_WCTA = 0x80,
+        WUIE_ID_CONNECTACK,
+        WUIE_ID_HOST_INFO,
+        WUIE_ID_CHANGE_ANNOUNCE,
+        WUIE_ID_DEVICE_DISCONNECT,
+        WUIE_ID_HOST_DISCONNECT,
+        WUIE_ID_KEEP_ALIVE = 0x89,
+        WUIE_ID_ISOCH_DISCARD,
+        WUIE_ID_RESET_DEVICE,
+};
+/**
+ * Maximum number of array elements in a WUSB IE.
+ *
+ * WUSB1.0[7.5 before table 7-38] says that in WUSB IEs that
+ * are "arrays" have to limited to 4 elements. So we define it
+ * like that to ease up and submit only the neeed size.
+ */
+#define WUIE_ELT_MAX 4
+/**
+ * Wrapper for the data that defines a CHID, a CDID or a CK
+ *
+ * WUSB defines that CHIDs, CDIDs and CKs are a 16 byte string of
+ * data. In order to avoid confusion and enforce types, we wrap it.
+ *
+ * Make it packed, as we use it in some hw defintions.
+ */
+struct wusb_ckhdid {
+        u8 data[16];
+} __attribute__((packed));
+const static
+struct wusb_ckhdid wusb_ckhdid_zero = { .data = { 0 } };
+#define WUSB_CKHDID_STRSIZE (3 * sizeof(struct wusb_ckhdid) + 1)
+/**
+ * WUSB IE: Host Information (WUSB1.0[7.5.2])
+ *
+ * Used to provide information about the host to the Wireless USB
+ * devices in range (CHID can be used as an ASCII string).
+ */
+struct wuie_host_info {
+        struct wuie_hdr hdr;
+        __le16 attributes;
+        struct wusb_ckhdid CHID;
+} __attribute__((packed));
+/**
+ * WUSB IE: Connect Ack (WUSB1.0[7.5.1])
+ *
+ * Used to acknowledge device connect requests. See note for
+ * WUIE_ELT_MAX.
+ */
+struct wuie_connect_ack {
+        struct wuie_hdr hdr;
+        struct {
+                struct wusb_ckhdid CDID;
+                u8 bDeviceAddress;      /* 0 means unused */
+                u8 bReserved;
+        } blk[WUIE_ELT_MAX];
+} __attribute__((packed));
+/**
+ * WUSB IE Host Information Element, Connect Availability
+ *
+ * WUSB1.0[7.5.2], bmAttributes description
+ */
+enum {
+        WUIE_HI_CAP_RECONNECT = 0,
+        WUIE_HI_CAP_LIMITED,
+        WUIE_HI_CAP_RESERVED,
+        WUIE_HI_CAP_ALL,
+};
+/**
+ * WUSB IE: Channel Stop (WUSB1.0[7.5.8])
+ *
+ * Tells devices the host is going to stop sending MMCs and will dissapear.
+ */
+struct wuie_channel_stop {
+        struct wuie_hdr hdr;
+        u8 attributes;
+        u8 timestamp[3];
+} __attribute__((packed));
+/**
+ * WUSB IE: Keepalive (WUSB1.0[7.5.9])
+ *
+ * Ask device(s) to send keepalives.
+ */
+struct wuie_keep_alive {
+        struct wuie_hdr hdr;
+        u8 bDeviceAddress[WUIE_ELT_MAX];
+} __attribute__((packed));
+/**
+ * WUSB IE: Reset device (WUSB1.0[7.5.11])
+ *
+ * Tell device to reset; in all truth, we can fit 4 CDIDs, but we only
+ * use it for one at the time...
+ *
+ * In any case, this request is a wee bit silly: why don't they target
+ * by address??
+ */
+struct wuie_reset {
+        struct wuie_hdr hdr;
+        struct wusb_ckhdid CDID;
+} __attribute__((packed));
+/**
+ * WUSB IE: Disconnect device (WUSB1.0[7.5.11])
+ *
+ * Tell device to disconnect; we can fit 4 addresses, but we only use
+ * it for one at the time...
+ */
+struct wuie_disconnect {
+        struct wuie_hdr hdr;
+        u8 bDeviceAddress;
+        u8 padding;
+} __attribute__((packed));
+/**
+ * WUSB IE: Host disconnect ([WUSB] section 7.5.5)
+ *
+ * Tells all connected devices to disconnect.
+ */
+struct wuie_host_disconnect {
+        struct wuie_hdr hdr;
+} __attribute__((packed));
+/**
+ * WUSB Device Notification header (WUSB1.0[7.6])
+ */
+struct wusb_dn_hdr {
+        u8 bType;
+        u8 notifdata[];
+} __attribute__((packed));
+/** Device Notification codes (WUSB1.0[Table 7-54]) */
+enum WUSB_DN {
+        WUSB_DN_CONNECT = 0x01,
+        WUSB_DN_DISCONNECT = 0x02,
+        WUSB_DN_EPRDY = 0x03,
+        WUSB_DN_MASAVAILCHANGED = 0x04,
+        WUSB_DN_RWAKE = 0x05,
+        WUSB_DN_SLEEP = 0x06,
+        WUSB_DN_ALIVE = 0x07,
+};
+/** WUSB Device Notification Connect */
+struct wusb_dn_connect {
+        struct wusb_dn_hdr hdr;
+        __le16 attributes;
+        struct wusb_ckhdid CDID;
+} __attribute__((packed));
+static inline int wusb_dn_connect_prev_dev_addr(const struct wusb_dn_connect *dn)
+{
+        return le16_to_cpu(dn->attributes) & 0xff;
+}
+static inline int wusb_dn_connect_new_connection(const struct wusb_dn_connect *dn)
+{
+        return (le16_to_cpu(dn->attributes) >> 8) & 0x1;
+}
+static inline int wusb_dn_connect_beacon_behavior(const struct wusb_dn_connect *dn)
+{
+        return (le16_to_cpu(dn->attributes) >> 9) & 0x03;
+}
+/** Device is alive (aka: pong) (WUSB1.0[7.6.7]) */
+struct wusb_dn_alive {
+        struct wusb_dn_hdr hdr;
+} __attribute__((packed));
+/** Device is disconnecting (WUSB1.0[7.6.2]) */
+struct wusb_dn_disconnect {
+        struct wusb_dn_hdr hdr;
+} __attribute__((packed));
+/* General constants */
+enum {
+        WUSB_TRUST_TIMEOUT_MS = 4000,   /* [WUSB] section 4.15.1 */
+};
+static inline size_t ckhdid_printf(char *pr_ckhdid, size_t size,
+                                   const struct wusb_ckhdid *ckhdid)
+{
+        return scnprintf(pr_ckhdid, size,
+                         "%02hx %02hx %02hx %02hx %02hx %02hx %02hx %02hx "
+                         "%02hx %02hx %02hx %02hx %02hx %02hx %02hx %02hx",
+                         ckhdid->data[0],  ckhdid->data[1],
+                         ckhdid->data[2],  ckhdid->data[3],
+                         ckhdid->data[4],  ckhdid->data[5],
+                         ckhdid->data[6],  ckhdid->data[7],
+                         ckhdid->data[8],  ckhdid->data[9],
+                         ckhdid->data[10], ckhdid->data[11],
+                         ckhdid->data[12], ckhdid->data[13],
+                         ckhdid->data[14], ckhdid->data[15]);
+}
+/*
+ * WUSB Crypto stuff (WUSB1.0[6])
+ */
+extern const char *wusb_et_name(u8);
+/**
+ * WUSB key index WUSB1.0[7.3.2.4], for usage when setting keys for
+ * the host or the device.
+ */
+static inline u8 wusb_key_index(int index, int type, int originator)
+{
+        return (originator << 6) | (type << 4) | index;
+}
+#define WUSB_KEY_INDEX_TYPE_PTK                 0 /* for HWA only */
+#define WUSB_KEY_INDEX_TYPE_ASSOC               1
+#define WUSB_KEY_INDEX_TYPE_GTK                 2
+#define WUSB_KEY_INDEX_ORIGINATOR_HOST          0
+#define WUSB_KEY_INDEX_ORIGINATOR_DEVICE        1
+/* A CCM Nonce, defined in WUSB1.0[6.4.1] */
+struct aes_ccm_nonce {
+        u8 sfn[6];              /* Little Endian */
+        u8 tkid[3];             /* LE */
+        struct uwb_dev_addr dest_addr;
+        struct uwb_dev_addr src_addr;
+} __attribute__((packed));
+/* A CCM operation label, defined on WUSB1.0[6.5.x] */
+struct aes_ccm_label {
+        u8 data[14];
+} __attribute__((packed));
+/*
+ * Input to the key derivation sequence defined in
+ * WUSB1.0[6.5.1]. Rest of the data is in the CCM Nonce passed to the
+ * PRF function.
+ */
+struct wusb_keydvt_in {
+        u8 hnonce[16];
+        u8 dnonce[16];
+} __attribute__((packed));
+/*
+ * Output from the key derivation sequence defined in
+ * WUSB1.0[6.5.1].
+ */
+struct wusb_keydvt_out {
+        u8 kck[16];
+        u8 ptk[16];
+} __attribute__((packed));
+/* Pseudo Random Function WUSB1.0[6.5] */
+extern int wusb_crypto_init(void);
+extern void wusb_crypto_exit(void);
+extern ssize_t wusb_prf(void *out, size_t out_size,
+                        const u8 key[16], const struct aes_ccm_nonce *_n,
+                        const struct aes_ccm_label *a,
+                        const void *b, size_t blen, size_t len);
+static inline int wusb_prf_64(void *out, size_t out_size, const u8 key[16],
+                              const struct aes_ccm_nonce *n,
+                              const struct aes_ccm_label *a,
+                              const void *b, size_t blen)
+{
+        return wusb_prf(out, out_size, key, n, a, b, blen, 64);
+}
+static inline int wusb_prf_128(void *out, size_t out_size, const u8 key[16],
+                               const struct aes_ccm_nonce *n,
+                               const struct aes_ccm_label *a,
+                               const void *b, size_t blen)
+{
+        return wusb_prf(out, out_size, key, n, a, b, blen, 128);
+}
+static inline int wusb_prf_256(void *out, size_t out_size, const u8 key[16],
+                               const struct aes_ccm_nonce *n,
+                               const struct aes_ccm_label *a,
+                               const void *b, size_t blen)
+{
+        return wusb_prf(out, out_size, key, n, a, b, blen, 256);
+}
+/* Key derivation WUSB1.0[6.5.1] */
+static inline int wusb_key_derive(struct wusb_keydvt_out *keydvt_out,
+                                  const u8 key[16],
+                                  const struct aes_ccm_nonce *n,
+                                  const struct wusb_keydvt_in *keydvt_in)
+{
+        const struct aes_ccm_label a = { .data = "Pair-wise keys" };
+        return wusb_prf_256(keydvt_out, sizeof(*keydvt_out), key, n, &a,
+                            keydvt_in, sizeof(*keydvt_in));
+}
+/*
+ * Out-of-band MIC Generation WUSB1.0[6.5.2]
+ *
+ * Compute the MIC over @key, @n and @hs and place it in @mic_out.
+ *
+ * @mic_out:  Where to place the 8 byte MIC tag
+ * @key:      KCK from the derivation process
+ * @n:        CCM nonce, n->sfn == 0, TKID as established in the
+ *            process.
+ * @hs:       Handshake struct for phase 2 of the 4-way.
+ *            hs->bStatus and hs->bReserved are zero.
+ *            hs->bMessageNumber is 2 (WUSB1.0[7.3.2.5.2]
+ *            hs->dest_addr is the device's USB address padded with 0
+ *            hs->src_addr is the hosts's UWB device address
+ *            hs->mic is ignored (as we compute that value).
+ */
+static inline int wusb_oob_mic(u8 mic_out[8], const u8 key[16],
+                               const struct aes_ccm_nonce *n,
+                               const struct usb_handshake *hs)
+{
+        const struct aes_ccm_label a = { .data = "out-of-bandMIC" };
+        return wusb_prf_64(mic_out, 8, key, n, &a,
+                           hs, sizeof(*hs) - sizeof(hs->MIC));
+}
+#endif /* #ifndef __WUSB_H__ */
diff --git a/include/linux/uwb.h b/include/linux/uwb.h
new file mode 100644
index 000000000000..f9ccbd9a2ced
--- /dev/null
+++ b/include/linux/uwb.h
@@ -0,0 +1,765 @@
+/*
+ * Ultra Wide Band
+ * UWB API
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * FIXME: doc: overview of the API, different parts and pointers
+ */
+#ifndef __LINUX__UWB_H__
+#define __LINUX__UWB_H__
+#include <linux/limits.h>
+#include <linux/device.h>
+#include <linux/mutex.h>
+#include <linux/timer.h>
+#include <linux/workqueue.h>
+#include <linux/uwb/spec.h>
+struct uwb_dev;
+struct uwb_beca_e;
+struct uwb_rc;
+struct uwb_rsv;
+struct uwb_dbg;
+/**
+ * struct uwb_dev - a UWB Device
+ * @rc: UWB Radio Controller that discovered the device (kind of its
+ *     parent).
+ * @bce: a beacon cache entry for this device; or NULL if the device
+ *     is a local radio controller.
+ * @mac_addr: the EUI-48 address of this device.
+ * @dev_addr: the current DevAddr used by this device.
+ * @beacon_slot: the slot number the beacon is using.
+ * @streams: bitmap of streams allocated to reservations targeted at
+ *     this device.  For an RC, this is the streams allocated for
+ *     reservations targeted at DevAddrs.
+ *
+ * A UWB device may either by a neighbor or part of a local radio
+ * controller.
+ */
+struct uwb_dev {
+        struct mutex mutex;
+        struct list_head list_node;
+        struct device dev;
+        struct uwb_rc *rc;              /* radio controller */
+        struct uwb_beca_e *bce;         /* Beacon Cache Entry */
+        struct uwb_mac_addr mac_addr;
+        struct uwb_dev_addr dev_addr;
+        int beacon_slot;
+        DECLARE_BITMAP(streams, UWB_NUM_STREAMS);
+};
+#define to_uwb_dev(d) container_of(d, struct uwb_dev, dev)
+/**
+ * UWB HWA/WHCI Radio Control {Command|Event} Block context IDs
+ *
+ * RC[CE]Bs have a 'context ID' field that matches the command with
+ * the event received to confirm it.
+ *
+ * Maximum number of context IDs
+ */
+enum { UWB_RC_CTX_MAX = 256 };
+/** Notification chain head for UWB generated events to listeners */
+struct uwb_notifs_chain {
+        struct list_head list;
+        struct mutex mutex;
+};
+/**
+ * struct uwb_mas_bm - a bitmap of all MAS in a superframe
+ * @bm: a bitmap of length #UWB_NUM_MAS
+ */
+struct uwb_mas_bm {
+        DECLARE_BITMAP(bm, UWB_NUM_MAS);
+};
+/**
+ * uwb_rsv_state - UWB Reservation state.
+ *
+ * NONE - reservation is not active (no DRP IE being transmitted).
+ *
+ * Owner reservation states:
+ *
+ * INITIATED - owner has sent an initial DRP request.
+ * PENDING - target responded with pending Reason Code.
+ * MODIFIED - reservation manager is modifying an established
+ * reservation with a different MAS allocation.
+ * ESTABLISHED - the reservation has been successfully negotiated.
+ *
+ * Target reservation states:
+ *
+ * DENIED - request is denied.
+ * ACCEPTED - request is accepted.
+ * PENDING - PAL has yet to make a decision to whether to accept or
+ * deny.
+ *
+ * FIXME: further target states TBD.
+ */
+enum uwb_rsv_state {
+        UWB_RSV_STATE_NONE,
+        UWB_RSV_STATE_O_INITIATED,
+        UWB_RSV_STATE_O_PENDING,
+        UWB_RSV_STATE_O_MODIFIED,
+        UWB_RSV_STATE_O_ESTABLISHED,
+        UWB_RSV_STATE_T_ACCEPTED,
+        UWB_RSV_STATE_T_DENIED,
+        UWB_RSV_STATE_T_PENDING,
+        UWB_RSV_STATE_LAST,
+};
+enum uwb_rsv_target_type {
+        UWB_RSV_TARGET_DEV,
+        UWB_RSV_TARGET_DEVADDR,
+};
+/**
+ * struct uwb_rsv_target - the target of a reservation.
+ *
+ * Reservations unicast and targeted at a single device
+ * (UWB_RSV_TARGET_DEV); or (e.g., in the case of WUSB) targeted at a
+ * specific (private) DevAddr (UWB_RSV_TARGET_DEVADDR).
+ */
+struct uwb_rsv_target {
+        enum uwb_rsv_target_type type;
+        union {
+                struct uwb_dev *dev;
+                struct uwb_dev_addr devaddr;
+        };
+};
+/*
+ * Number of streams reserved for reservations targeted at DevAddrs.
+ */
+#define UWB_NUM_GLOBAL_STREAMS 1
+typedef void (*uwb_rsv_cb_f)(struct uwb_rsv *rsv);
+/**
+ * struct uwb_rsv - a DRP reservation
+ *
+ * Data structure management:
+ *
+ * @rc:             the radio controller this reservation is for
+ *                  (as target or owner)
+ * @rc_node:        a list node for the RC
+ * @pal_node:       a list node for the PAL
+ *
+ * Owner and target parameters:
+ *
+ * @owner:          the UWB device owning this reservation
+ * @target:         the target UWB device
+ * @type:           reservation type
+ *
+ * Owner parameters:
+ *
+ * @max_mas:        maxiumum number of MAS
+ * @min_mas:        minimum number of MAS
+ * @sparsity:       owner selected sparsity
+ * @is_multicast:   true iff multicast
+ *
+ * @callback:       callback function when the reservation completes
+ * @pal_priv:       private data for the PAL making the reservation
+ *
+ * Reservation status:
+ *
+ * @status:         negotiation status
+ * @stream:         stream index allocated for this reservation
+ * @mas:            reserved MAS
+ * @drp_ie:         the DRP IE
+ * @ie_valid:       true iff the DRP IE matches the reservation parameters
+ *
+ * DRP reservations are uniquely identified by the owner, target and
+ * stream index.  However, when using a DevAddr as a target (e.g., for
+ * a WUSB cluster reservation) the responses may be received from
+ * devices with different DevAddrs.  In this case, reservations are
+ * uniquely identified by just the stream index.  A number of stream
+ * indexes (UWB_NUM_GLOBAL_STREAMS) are reserved for this.
+ */
+struct uwb_rsv {
+        struct uwb_rc *rc;
+        struct list_head rc_node;
+        struct list_head pal_node;
+        struct uwb_dev *owner;
+        struct uwb_rsv_target target;
+        enum uwb_drp_type type;
+        int max_mas;
+        int min_mas;
+        int sparsity;
+        bool is_multicast;
+        uwb_rsv_cb_f callback;
+        void *pal_priv;
+        enum uwb_rsv_state state;
+        u8 stream;
+        struct uwb_mas_bm mas;
+        struct uwb_ie_drp *drp_ie;
+        bool ie_valid;
+        struct timer_list timer;
+        bool expired;
+};
+static const
+struct uwb_mas_bm uwb_mas_bm_zero = { .bm = { 0 } };
+static inline void uwb_mas_bm_copy_le(void *dst, const struct uwb_mas_bm *mas)
+{
+        bitmap_copy_le(dst, mas->bm, UWB_NUM_MAS);
+}
+/**
+ * struct uwb_drp_avail - a radio controller's view of MAS usage
+ * @global:   MAS unused by neighbors (excluding reservations targetted
+ *            or owned by the local radio controller) or the beaon period
+ * @local:    MAS unused by local established reservations
+ * @pending:  MAS unused by local pending reservations
+ * @ie:       DRP Availability IE to be included in the beacon
+ * @ie_valid: true iff @ie is valid and does not need to regenerated from
+ *            @global and @local
+ *
+ * Each radio controller maintains a view of MAS usage or
+ * availability. MAS available for a new reservation are determined
+ * from the intersection of @global, @local, and @pending.
+ *
+ * The radio controller must transmit a DRP Availability IE that's the
+ * intersection of @global and @local.
+ *
+ * A set bit indicates the MAS is unused and available.
+ *
+ * rc->rsvs_mutex should be held before accessing this data structure.
+ *
+ * [ECMA-368] section 17.4.3.
+ */
+struct uwb_drp_avail {
+        DECLARE_BITMAP(global, UWB_NUM_MAS);
+        DECLARE_BITMAP(local, UWB_NUM_MAS);
+        DECLARE_BITMAP(pending, UWB_NUM_MAS);
+        struct uwb_ie_drp_avail ie;
+        bool ie_valid;
+};
+const char *uwb_rsv_state_str(enum uwb_rsv_state state);
+const char *uwb_rsv_type_str(enum uwb_drp_type type);
+struct uwb_rsv *uwb_rsv_create(struct uwb_rc *rc, uwb_rsv_cb_f cb,
+                               void *pal_priv);
+void uwb_rsv_destroy(struct uwb_rsv *rsv);
+int uwb_rsv_establish(struct uwb_rsv *rsv);
+int uwb_rsv_modify(struct uwb_rsv *rsv,
+                   int max_mas, int min_mas, int sparsity);
+void uwb_rsv_terminate(struct uwb_rsv *rsv);
+void uwb_rsv_accept(struct uwb_rsv *rsv, uwb_rsv_cb_f cb, void *pal_priv);
+/**
+ * Radio Control Interface instance
+ *
+ *
+ * Life cycle rules: those of the UWB Device.
+ *
+ * @index:    an index number for this radio controller, as used in the
+ *            device name.
+ * @version:  version of protocol supported by this device
+ * @priv:     Backend implementation; rw with uwb_dev.dev.sem taken.
+ * @cmd:      Backend implementation to execute commands; rw and call
+ *            only  with uwb_dev.dev.sem taken.
+ * @reset:    Hardware reset of radio controller and any PAL controllers.
+ * @filter:   Backend implementation to manipulate data to and from device
+ *            to be compliant to specification assumed by driver (WHCI
+ *            0.95).
+ *
+ *            uwb_dev.dev.mutex is used to execute commands and update
+ *            the corresponding structures; can't use a spinlock
+ *            because rc->cmd() can sleep.
+ * @ies:         This is a dynamically allocated array cacheing the
+ *               IEs (settable by the host) that the beacon of this
+ *               radio controller is currently sending.
+ *
+ *               In reality, we store here the full command we set to
+ *               the radio controller (which is basically a command
+ *               prefix followed by all the IEs the beacon currently
+ *               contains). This way we don't have to realloc and
+ *               memcpy when setting it.
+ *
+ *               We set this up in uwb_rc_ie_setup(), where we alloc
+ *               this struct, call get_ie() [so we know which IEs are
+ *               currently being sent, if any].
+ *
+ * @ies_capacity:Amount of space (in bytes) allocated in @ies. The
+ *               amount used is given by sizeof(*ies) plus ies->wIELength
+ *               (which is a little endian quantity all the time).
+ * @ies_mutex:   protect the IE cache
+ * @dbg:         information for the debug interface
+ */
+struct uwb_rc {
+        struct uwb_dev uwb_dev;
+        int index;
+        u16 version;
+        struct module *owner;
+        void *priv;
+        int (*start)(struct uwb_rc *rc);
+        void (*stop)(struct uwb_rc *rc);
+        int (*cmd)(struct uwb_rc *, const struct uwb_rccb *, size_t);
+        int (*reset)(struct uwb_rc *rc);
+        int (*filter_cmd)(struct uwb_rc *, struct uwb_rccb **, size_t *);
+        int (*filter_event)(struct uwb_rc *, struct uwb_rceb **, const size_t,
+                            size_t *, size_t *);
+        spinlock_t neh_lock;            /* protects neh_* and ctx_* */
+        struct list_head neh_list;      /* Open NE handles */
+        unsigned long ctx_bm[UWB_RC_CTX_MAX / 8 / sizeof(unsigned long)];
+        u8 ctx_roll;
+        int beaconing;                  /* Beaconing state [channel number] */
+        int scanning;
+        enum uwb_scan_type scan_type:3;
+        unsigned ready:1;
+        struct uwb_notifs_chain notifs_chain;
+        struct uwb_drp_avail drp_avail;
+        struct list_head reservations;
+        struct mutex rsvs_mutex;
+        struct workqueue_struct *rsv_workq;
+        struct work_struct rsv_update_work;
+        struct mutex ies_mutex;
+        struct uwb_rc_cmd_set_ie *ies;
+        size_t ies_capacity;
+        spinlock_t pal_lock;
+        struct list_head pals;
+        struct uwb_dbg *dbg;
+};
+/**
+ * struct uwb_pal - a UWB PAL
+ * @name:    descriptive name for this PAL (wushc, wlp, etc.).
+ * @device:  a device for the PAL.  Used to link the PAL and the radio
+ *           controller in sysfs.
+ * @new_rsv: called when a peer requests a reservation (may be NULL if
+ *           the PAL cannot accept reservation requests).
+ *
+ * A Protocol Adaptation Layer (PAL) is a user of the WiMedia UWB
+ * radio platform (e.g., WUSB, WLP or Bluetooth UWB AMP).
+ *
+ * The PALs using a radio controller must register themselves to
+ * permit the UWB stack to coordinate usage of the radio between the
+ * various PALs or to allow PALs to response to certain requests from
+ * peers.
+ *
+ * A struct uwb_pal should be embedded in a containing structure
+ * belonging to the PAL and initialized with uwb_pal_init()).  Fields
+ * should be set appropriately by the PAL before registering the PAL
+ * with uwb_pal_register().
+ */
+struct uwb_pal {
+        struct list_head node;
+        const char *name;
+        struct device *device;
+        void (*new_rsv)(struct uwb_rsv *rsv);
+};
+void uwb_pal_init(struct uwb_pal *pal);
+int uwb_pal_register(struct uwb_rc *rc, struct uwb_pal *pal);
+void uwb_pal_unregister(struct uwb_rc *rc, struct uwb_pal *pal);
+/*
+ * General public API
+ *
+ * This API can be used by UWB device drivers or by those implementing
+ * UWB Radio Controllers
+ */
+struct uwb_dev *uwb_dev_get_by_devaddr(struct uwb_rc *rc,
+                                       const struct uwb_dev_addr *devaddr);
+struct uwb_dev *uwb_dev_get_by_rc(struct uwb_dev *, struct uwb_rc *);
+static inline void uwb_dev_get(struct uwb_dev *uwb_dev)
+{
+        get_device(&uwb_dev->dev);
+}
+static inline void uwb_dev_put(struct uwb_dev *uwb_dev)
+{
+        put_device(&uwb_dev->dev);
+}
+struct uwb_dev *uwb_dev_try_get(struct uwb_rc *rc, struct uwb_dev *uwb_dev);
+/**
+ * Callback function for 'uwb_{dev,rc}_foreach()'.
+ *
+ * @dev:  Linux device instance
+ *        'uwb_dev = container_of(dev, struct uwb_dev, dev)'
+ * @priv: Data passed by the caller to 'uwb_{dev,rc}_foreach()'.
+ *
+ * @returns: 0 to continue the iterations, any other val to stop
+ *           iterating and return the value to the caller of
+ *           _foreach().
+ */
+typedef int (*uwb_dev_for_each_f)(struct device *dev, void *priv);
+int uwb_dev_for_each(struct uwb_rc *rc, uwb_dev_for_each_f func, void *priv);
+struct uwb_rc *uwb_rc_alloc(void);
+struct uwb_rc *uwb_rc_get_by_dev(const struct uwb_dev_addr *);
+struct uwb_rc *uwb_rc_get_by_grandpa(const struct device *);
+void uwb_rc_put(struct uwb_rc *rc);
+typedef void (*uwb_rc_cmd_cb_f)(struct uwb_rc *rc, void *arg,
+                                struct uwb_rceb *reply, ssize_t reply_size);
+int uwb_rc_cmd_async(struct uwb_rc *rc, const char *cmd_name,
+                     struct uwb_rccb *cmd, size_t cmd_size,
+                     u8 expected_type, u16 expected_event,
+                     uwb_rc_cmd_cb_f cb, void *arg);
+ssize_t uwb_rc_cmd(struct uwb_rc *rc, const char *cmd_name,
+                   struct uwb_rccb *cmd, size_t cmd_size,
+                   struct uwb_rceb *reply, size_t reply_size);
+ssize_t uwb_rc_vcmd(struct uwb_rc *rc, const char *cmd_name,
+                    struct uwb_rccb *cmd, size_t cmd_size,
+                    u8 expected_type, u16 expected_event,
+                    struct uwb_rceb **preply);
+ssize_t uwb_rc_get_ie(struct uwb_rc *, struct uwb_rc_evt_get_ie **);
+int uwb_bg_joined(struct uwb_rc *rc);
+size_t __uwb_addr_print(char *, size_t, const unsigned char *, int);
+int uwb_rc_dev_addr_set(struct uwb_rc *, const struct uwb_dev_addr *);
+int uwb_rc_dev_addr_get(struct uwb_rc *, struct uwb_dev_addr *);
+int uwb_rc_mac_addr_set(struct uwb_rc *, const struct uwb_mac_addr *);
+int uwb_rc_mac_addr_get(struct uwb_rc *, struct uwb_mac_addr *);
+int __uwb_mac_addr_assigned_check(struct device *, void *);
+int __uwb_dev_addr_assigned_check(struct device *, void *);
+/* Print in @buf a pretty repr of @addr */
+static inline size_t uwb_dev_addr_print(char *buf, size_t buf_size,
+                                        const struct uwb_dev_addr *addr)
+{
+        return __uwb_addr_print(buf, buf_size, addr->data, 0);
+}
+/* Print in @buf a pretty repr of @addr */
+static inline size_t uwb_mac_addr_print(char *buf, size_t buf_size,
+                                        const struct uwb_mac_addr *addr)
+{
+        return __uwb_addr_print(buf, buf_size, addr->data, 1);
+}
+/* @returns 0 if device addresses @addr2 and @addr1 are equal */
+static inline int uwb_dev_addr_cmp(const struct uwb_dev_addr *addr1,
+                                   const struct uwb_dev_addr *addr2)
+{
+        return memcmp(addr1, addr2, sizeof(*addr1));
+}
+/* @returns 0 if MAC addresses @addr2 and @addr1 are equal */
+static inline int uwb_mac_addr_cmp(const struct uwb_mac_addr *addr1,
+                                   const struct uwb_mac_addr *addr2)
+{
+        return memcmp(addr1, addr2, sizeof(*addr1));
+}
+/* @returns !0 if a MAC @addr is a broadcast address */
+static inline int uwb_mac_addr_bcast(const struct uwb_mac_addr *addr)
+{
+        struct uwb_mac_addr bcast = {
+                .data = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }
+        };
+        return !uwb_mac_addr_cmp(addr, &bcast);
+}
+/* @returns !0 if a MAC @addr is all zeroes*/
+static inline int uwb_mac_addr_unset(const struct uwb_mac_addr *addr)
+{
+        struct uwb_mac_addr unset = {
+                .data = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }
+        };
+        return !uwb_mac_addr_cmp(addr, &unset);
+}
+/* @returns !0 if the address is in use. */
+static inline unsigned __uwb_dev_addr_assigned(struct uwb_rc *rc,
+                                               struct uwb_dev_addr *addr)
+{
+        return uwb_dev_for_each(rc, __uwb_dev_addr_assigned_check, addr);
+}
+/*
+ * UWB Radio Controller API
+ *
+ * This API is used (in addition to the general API) to implement UWB
+ * Radio Controllers.
+ */
+void uwb_rc_init(struct uwb_rc *);
+int uwb_rc_add(struct uwb_rc *, struct device *dev, void *rc_priv);
+void uwb_rc_rm(struct uwb_rc *);
+void uwb_rc_neh_grok(struct uwb_rc *, void *, size_t);
+void uwb_rc_neh_error(struct uwb_rc *, int);
+void uwb_rc_reset_all(struct uwb_rc *rc);
+/**
+ * uwb_rsv_is_owner - is the owner of this reservation the RC?
+ * @rsv: the reservation
+ */
+static inline bool uwb_rsv_is_owner(struct uwb_rsv *rsv)
+{
+        return rsv->owner == &rsv->rc->uwb_dev;
+}
+/**
+ * Events generated by UWB that can be passed to any listeners
+ *
+ * Higher layers can register callback functions with the radio
+ * controller using uwb_notifs_register(). The radio controller
+ * maintains a list of all registered handlers and will notify all
+ * nodes when an event occurs.
+ */
+enum uwb_notifs {
+        UWB_NOTIF_BG_JOIN = 0,  /* radio controller joined a beacon group */
+        UWB_NOTIF_BG_LEAVE = 1, /* radio controller left a beacon group */
+        UWB_NOTIF_ONAIR,
+        UWB_NOTIF_OFFAIR,
+};
+/* Callback function registered with UWB */
+struct uwb_notifs_handler {
+        struct list_head list_node;
+        void (*cb)(void *, struct uwb_dev *, enum uwb_notifs);
+        void *data;
+};
+int uwb_notifs_register(struct uwb_rc *, struct uwb_notifs_handler *);
+int uwb_notifs_deregister(struct uwb_rc *, struct uwb_notifs_handler *);
+/**
+ * UWB radio controller Event Size Entry (for creating entry tables)
+ *
+ * WUSB and WHCI define events and notifications, and they might have
+ * fixed or variable size.
+ *
+ * Each event/notification has a size which is not necessarily known
+ * in advance based on the event code. As well, vendor specific
+ * events/notifications will have a size impossible to determine
+ * unless we know about the device's specific details.
+ *
+ * It was way too smart of the spec writers not to think that it would
+ * be impossible for a generic driver to skip over vendor specific
+ * events/notifications if there are no LENGTH fields in the HEADER of
+ * each message...the transaction size cannot be counted on as the
+ * spec does not forbid to pack more than one event in a single
+ * transaction.
+ *
+ * Thus, we guess sizes with tables (or for events, when you know the
+ * size ahead of time you can use uwb_rc_neh_extra_size*()). We
+ * register tables with the known events and their sizes, and then we
+ * traverse those tables. For those with variable length, we provide a
+ * way to lookup the size inside the event/notification's
+ * payload. This allows device-specific event size tables to be
+ * registered.
+ *
+ * @size:   Size of the payload
+ *
+ * @offset: if != 0, at offset @offset-1 starts a field with a length
+ *          that has to be added to @size. The format of the field is
+ *          given by @type.
+ *
+ * @type:   Type and length of the offset field. Most common is LE 16
+ *          bits (that's why that is zero); others are there mostly to
+ *          cover for bugs and weirdos.
+ */
+struct uwb_est_entry {
+        size_t size;
+        unsigned offset;
+        enum { UWB_EST_16 = 0, UWB_EST_8 = 1 } type;
+};
+int uwb_est_register(u8 type, u8 code_high, u16 vendor, u16 product,
+                     const struct uwb_est_entry *, size_t entries);
+int uwb_est_unregister(u8 type, u8 code_high, u16 vendor, u16 product,
+                       const struct uwb_est_entry *, size_t entries);
+ssize_t uwb_est_find_size(struct uwb_rc *rc, const struct uwb_rceb *rceb,
+                          size_t len);
+/* -- Misc */
+enum {
+        EDC_MAX_ERRORS = 10,
+        EDC_ERROR_TIMEFRAME = HZ,
+};
+/* error density counter */
+struct edc {
+        unsigned long timestart;
+        u16 errorcount;
+};
+static inline
+void edc_init(struct edc *edc)
+{
+        edc->timestart = jiffies;
+}
+/* Called when an error occured.
+ * This is way to determine if the number of acceptable errors per time
+ * period has been exceeded. It is not accurate as there are cases in which
+ * this scheme will not work, for example if there are periodic occurences
+ * of errors that straddle updates to the start time. This scheme is
+ * sufficient for our usage.
+ *
+ * @returns 1 if maximum acceptable errors per timeframe has been exceeded.
+ */
+static inline int edc_inc(struct edc *err_hist, u16 max_err, u16 timeframe)
+{
+        unsigned long now;
+        now = jiffies;
+        if (now - err_hist->timestart > timeframe) {
+                err_hist->errorcount = 1;
+                err_hist->timestart = now;
+        } else if (++err_hist->errorcount > max_err) {
+                        err_hist->errorcount = 0;
+                        err_hist->timestart = now;
+                        return 1;
+        }
+        return 0;
+}
+/* Information Element handling */
+/* For representing the state of writing to a buffer when iterating */
+struct uwb_buf_ctx {
+        char *buf;
+        size_t bytes, size;
+};
+typedef int (*uwb_ie_f)(struct uwb_dev *, const struct uwb_ie_hdr *,
+                        size_t, void *);
+struct uwb_ie_hdr *uwb_ie_next(void **ptr, size_t *len);
+ssize_t uwb_ie_for_each(struct uwb_dev *uwb_dev, uwb_ie_f fn, void *data,
+                        const void *buf, size_t size);
+int uwb_ie_dump_hex(struct uwb_dev *, const struct uwb_ie_hdr *,
+                    size_t, void *);
+int uwb_rc_set_ie(struct uwb_rc *, struct uwb_rc_cmd_set_ie *);
+struct uwb_ie_hdr *uwb_ie_next(void **ptr, size_t *len);
+/*
+ * Transmission statistics
+ *
+ * UWB uses LQI and RSSI (one byte values) for reporting radio signal
+ * strength and line quality indication. We do quick and dirty
+ * averages of those. They are signed values, btw.
+ *
+ * For 8 bit quantities, we keep the min, the max, an accumulator
+ * (@sigma) and a # of samples. When @samples gets to 255, we compute
+ * the average (@sigma / @samples), place it in @sigma and reset
+ * @samples to 1 (so we use it as the first sample).
+ *
+ * Now, statistically speaking, probably I am kicking the kidneys of
+ * some books I have in my shelves collecting dust, but I just want to
+ * get an approx, not the Nobel.
+ *
+ * LOCKING: there is no locking per se, but we try to keep a lockless
+ * schema. Only _add_samples() modifies the values--as long as you
+ * have other locking on top that makes sure that no two calls of
+ * _add_sample() happen at the same time, then we are fine. Now, for
+ * resetting the values we just set @samples to 0 and that makes the
+ * next _add_sample() to start with defaults. Reading the values in
+ * _show() currently can race, so you need to make sure the calls are
+ * under the same lock that protects calls to _add_sample(). FIXME:
+ * currently unlocked (It is not ultraprecise but does the trick. Bite
+ * me).
+ */
+struct stats {
+        s8 min, max;
+        s16 sigma;
+        atomic_t samples;
+};
+static inline
+void stats_init(struct stats *stats)
+{
+        atomic_set(&stats->samples, 0);
+        wmb();
+}
+static inline
+void stats_add_sample(struct stats *stats, s8 sample)
+{
+        s8 min, max;
+        s16 sigma;
+        unsigned samples = atomic_read(&stats->samples);
+        if (samples == 0) {     /* it was zero before, so we initialize */
+                min = 127;
+                max = -128;
+                sigma = 0;
+        } else {
+                min = stats->min;
+                max = stats->max;
+                sigma = stats->sigma;
+        }
+        if (sample < min)       /* compute new values */
+                min = sample;
+        else if (sample > max)
+                max = sample;
+        sigma += sample;
+        stats->min = min;       /* commit */
+        stats->max = max;
+        stats->sigma = sigma;
+        if (atomic_add_return(1, &stats->samples) > 255) {
+                /* wrapped around! reset */
+                stats->sigma = sigma / 256;
+                atomic_set(&stats->samples, 1);
+        }
+}
+static inline ssize_t stats_show(struct stats *stats, char *buf)
+{
+        int min, max, avg;
+        int samples = atomic_read(&stats->samples);
+        if (samples == 0)
+                min = max = avg = 0;
+        else {
+                min = stats->min;
+                max = stats->max;
+                avg = stats->sigma / samples;
+        }
+        return scnprintf(buf, PAGE_SIZE, "%d %d %d\n", min, max, avg);
+}
+static inline ssize_t stats_store(struct stats *stats, const char *buf,
+                                  size_t size)
+{
+        stats_init(stats);
+        return size;
+}
+#endif /* #ifndef __LINUX__UWB_H__ */
diff --git a/include/linux/uwb/debug-cmd.h b/include/linux/uwb/debug-cmd.h
new file mode 100644
index 000000000000..1141f41bab5c
--- /dev/null
+++ b/include/linux/uwb/debug-cmd.h
@@ -0,0 +1,57 @@
+/*
+ * Ultra Wide Band
+ * Debug interface commands
+ *
+ * Copyright (C) 2008 Cambridge Silicon Radio Ltd.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+#ifndef __LINUX__UWB__DEBUG_CMD_H__
+#define __LINUX__UWB__DEBUG_CMD_H__
+#include <linux/types.h>
+/*
+ * Debug interface commands
+ *
+ * UWB_DBG_CMD_RSV_ESTABLISH: Establish a new unicast reservation.
+ *
+ * UWB_DBG_CMD_RSV_TERMINATE: Terminate the Nth reservation.
+ */
+enum uwb_dbg_cmd_type {
+        UWB_DBG_CMD_RSV_ESTABLISH = 1,
+        UWB_DBG_CMD_RSV_TERMINATE = 2,
+};
+struct uwb_dbg_cmd_rsv_establish {
+        __u8  target[6];
+        __u8  type;
+        __u16 max_mas;
+        __u16 min_mas;
+        __u8  sparsity;
+};
+struct uwb_dbg_cmd_rsv_terminate {
+        int index;
+};
+struct uwb_dbg_cmd {
+        __u32 type;
+        union {
+                struct uwb_dbg_cmd_rsv_establish rsv_establish;
+                struct uwb_dbg_cmd_rsv_terminate rsv_terminate;
+        };
+};
+#endif /* #ifndef __LINUX__UWB__DEBUG_CMD_H__ */
diff --git a/include/linux/uwb/debug.h b/include/linux/uwb/debug.h
new file mode 100644
index 000000000000..a86a73fe303f
--- /dev/null
+++ b/include/linux/uwb/debug.h
@@ -0,0 +1,82 @@
+/*
+ * Ultra Wide Band
+ * Debug Support
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * FIXME: doc
+ * Invoke like:
+ *
+ * #define D_LOCAL 4
+ * #include <linux/uwb/debug.h>
+ *
+ * At the end of your include files.
+ */
+#include <linux/types.h>
+struct device;
+extern void dump_bytes(struct device *dev, const void *_buf, size_t rsize);
+/* Master debug switch; !0 enables, 0 disables */
+#define D_MASTER (!0)
+/* Local (per-file) debug switch; #define before #including */
+#ifndef D_LOCAL
+#define D_LOCAL 0
+#endif
+#undef __d_printf
+#undef d_fnstart
+#undef d_fnend
+#undef d_printf
+#undef d_dump
+#define __d_printf(l, _tag, _dev, f, a...)                              \
+do {                                                                    \
+        struct device *__dev = (_dev);                                  \
+        if (D_MASTER && D_LOCAL >= (l)) {                               \
+                char __head[64] = "";                                   \
+                if (_dev != NULL) {                                     \
+                        if ((unsigned long)__dev < 4096)                \
+                                printk(KERN_ERR "E: Corrupt dev %p\n",  \
+                                        __dev);                         \
+                        else                                            \
+                                snprintf(__head, sizeof(__head),        \
+                                         "%s %s: ",                     \
+                                         dev_driver_string(__dev),      \
+                                         __dev->bus_id);                \
+                }                                                       \
+                printk(KERN_ERR "%s%s" _tag ": " f, __head,             \
+                        __func__, ## a);                                \
+        }                                                               \
+} while (0 && _dev)
+#define d_fnstart(l, _dev, f, a...)     \
+        __d_printf(l, " FNSTART", _dev, f, ## a)
+#define d_fnend(l, _dev, f, a...)       \
+        __d_printf(l, " FNEND", _dev, f, ## a)
+#define d_printf(l, _dev, f, a...)      \
+        __d_printf(l, "", _dev, f, ## a)
+#define d_dump(l, _dev, ptr, size)              \
+do {                                            \
+        struct device *__dev = _dev;            \
+        if (D_MASTER && D_LOCAL >= (l))         \
+                dump_bytes(__dev, ptr, size);   \
+} while (0 && _dev)
+#define d_test(l) (D_MASTER && D_LOCAL >= (l))
diff --git a/include/linux/uwb/spec.h b/include/linux/uwb/spec.h
new file mode 100644
index 000000000000..198c15f8e251
--- /dev/null
+++ b/include/linux/uwb/spec.h
@@ -0,0 +1,727 @@
+/*
+ * Ultra Wide Band
+ * UWB Standard definitions
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * All these definitions are based on the ECMA-368 standard.
+ *
+ * Note all definitions are Little Endian in the wire, and we will
+ * convert them to host order before operating on the bitfields (that
+ * yes, we use extensively).
+ */
+#ifndef __LINUX__UWB_SPEC_H__
+#define __LINUX__UWB_SPEC_H__
+#include <linux/types.h>
+#include <linux/bitmap.h>
+#define i1480_FW 0x00000303
+/* #define i1480_FW 0x00000302 */
+/**
+ * Number of Medium Access Slots in a superframe.
+ *
+ * UWB divides time in SuperFrames, each one divided in 256 pieces, or
+ * Medium Access Slots. See MBOA MAC[5.4.5] for details. The MAS is the
+ * basic bandwidth allocation unit in UWB.
+ */
+enum { UWB_NUM_MAS = 256 };
+/**
+ * Number of Zones in superframe.
+ *
+ * UWB divides the superframe into zones with numbering starting from BPST.
+ * See MBOA MAC[16.8.6]
+ */
+enum { UWB_NUM_ZONES = 16 };
+/*
+ * Number of MAS in a zone.
+ */
+#define UWB_MAS_PER_ZONE (UWB_NUM_MAS / UWB_NUM_ZONES)
+/*
+ * Number of streams per DRP reservation between a pair of devices.
+ *
+ * [ECMA-368] section 16.8.6.
+ */
+enum { UWB_NUM_STREAMS = 8 };
+/*
+ * mMasLength
+ *
+ * The length of a MAS in microseconds.
+ *
+ * [ECMA-368] section 17.16.
+ */
+enum { UWB_MAS_LENGTH_US = 256 };
+/*
+ * mBeaconSlotLength
+ *
+ * The length of the beacon slot in microseconds.
+ *
+ * [ECMA-368] section 17.16
+ */
+enum { UWB_BEACON_SLOT_LENGTH_US = 85 };
+/*
+ * mMaxLostBeacons
+ *
+ * The number beacons missing in consecutive superframes before a
+ * device can be considered as unreachable.
+ *
+ * [ECMA-368] section 17.16
+ */
+enum { UWB_MAX_LOST_BEACONS = 3 };
+/*
+ * Length of a superframe in microseconds.
+ */
+#define UWB_SUPERFRAME_LENGTH_US (UWB_MAS_LENGTH_US * UWB_NUM_MAS)
+/**
+ * UWB MAC address
+ *
+ * It is *imperative* that this struct is exactly 6 packed bytes (as
+ * it is also used to define headers sent down and up the wire/radio).
+ */
+struct uwb_mac_addr {
+        u8 data[6];
+} __attribute__((packed));
+/**
+ * UWB device address
+ *
+ * It is *imperative* that this struct is exactly 6 packed bytes (as
+ * it is also used to define headers sent down and up the wire/radio).
+ */
+struct uwb_dev_addr {
+        u8 data[2];
+} __attribute__((packed));
+/**
+ * Types of UWB addresses
+ *
+ * Order matters (by size).
+ */
+enum uwb_addr_type {
+        UWB_ADDR_DEV = 0,
+        UWB_ADDR_MAC = 1,
+};
+/** Size of a char buffer for printing a MAC/device address */
+enum { UWB_ADDR_STRSIZE = 32 };
+/** UWB WiMedia protocol IDs. */
+enum uwb_prid {
+        UWB_PRID_WLP_RESERVED   = 0x0000,
+        UWB_PRID_WLP            = 0x0001,
+        UWB_PRID_WUSB_BOT       = 0x0010,
+        UWB_PRID_WUSB           = 0x0010,
+        UWB_PRID_WUSB_TOP       = 0x001F,
+};
+/** PHY Rate (MBOA MAC[7.8.12, Table 61]) */
+enum uwb_phy_rate {
+        UWB_PHY_RATE_53 = 0,
+        UWB_PHY_RATE_80,
+        UWB_PHY_RATE_106,
+        UWB_PHY_RATE_160,
+        UWB_PHY_RATE_200,
+        UWB_PHY_RATE_320,
+        UWB_PHY_RATE_400,
+        UWB_PHY_RATE_480,
+        UWB_PHY_RATE_INVALID
+};
+/**
+ * Different ways to scan (MBOA MAC[6.2.2, Table 8], WUSB[Table 8-78])
+ */
+enum uwb_scan_type {
+        UWB_SCAN_ONLY = 0,
+        UWB_SCAN_OUTSIDE_BP,
+        UWB_SCAN_WHILE_INACTIVE,
+        UWB_SCAN_DISABLED,
+        UWB_SCAN_ONLY_STARTTIME,
+        UWB_SCAN_TOP
+};
+/** ACK Policy types (MBOA MAC[7.2.1.3]) */
+enum uwb_ack_pol {
+        UWB_ACK_NO = 0,
+        UWB_ACK_INM = 1,
+        UWB_ACK_B = 2,
+        UWB_ACK_B_REQ = 3,
+};
+/** DRP reservation types ([ECMA-368 table 106) */
+enum uwb_drp_type {
+        UWB_DRP_TYPE_ALIEN_BP = 0,
+        UWB_DRP_TYPE_HARD,
+        UWB_DRP_TYPE_SOFT,
+        UWB_DRP_TYPE_PRIVATE,
+        UWB_DRP_TYPE_PCA,
+};
+/** DRP Reason Codes ([ECMA-368] table 107) */
+enum uwb_drp_reason {
+        UWB_DRP_REASON_ACCEPTED = 0,
+        UWB_DRP_REASON_CONFLICT,
+        UWB_DRP_REASON_PENDING,
+        UWB_DRP_REASON_DENIED,
+        UWB_DRP_REASON_MODIFIED,
+};
+/**
+ *  DRP Notification Reason Codes (WHCI 0.95 [3.1.4.9])
+ */
+enum uwb_drp_notif_reason {
+        UWB_DRP_NOTIF_DRP_IE_RCVD = 0,
+        UWB_DRP_NOTIF_CONFLICT,
+        UWB_DRP_NOTIF_TERMINATE,
+};
+/** Allocation of MAS slots in a DRP request MBOA MAC[7.8.7] */
+struct uwb_drp_alloc {
+        __le16 zone_bm;
+        __le16 mas_bm;
+} __attribute__((packed));
+/** General MAC Header format (ECMA-368[16.2]) */
+struct uwb_mac_frame_hdr {
+        __le16 Frame_Control;
+        struct uwb_dev_addr DestAddr;
+        struct uwb_dev_addr SrcAddr;
+        __le16 Sequence_Control;
+        __le16 Access_Information;
+} __attribute__((packed));
+/**
+ * uwb_beacon_frame - a beacon frame including MAC headers
+ *
+ * [ECMA] section 16.3.
+ */
+struct uwb_beacon_frame {
+        struct uwb_mac_frame_hdr hdr;
+        struct uwb_mac_addr Device_Identifier;  /* may be a NULL EUI-48 */
+        u8 Beacon_Slot_Number;
+        u8 Device_Control;
+        u8 IEData[];
+} __attribute__((packed));
+/** Information Element codes (MBOA MAC[T54]) */
+enum uwb_ie {
+        UWB_PCA_AVAILABILITY = 2,
+        UWB_IE_DRP_AVAILABILITY = 8,
+        UWB_IE_DRP = 9,
+        UWB_BP_SWITCH_IE = 11,
+        UWB_MAC_CAPABILITIES_IE = 12,
+        UWB_PHY_CAPABILITIES_IE = 13,
+        UWB_APP_SPEC_PROBE_IE = 15,
+        UWB_IDENTIFICATION_IE = 19,
+        UWB_MASTER_KEY_ID_IE = 20,
+        UWB_IE_WLP = 250, /* WiMedia Logical Link Control Protocol WLP 0.99 */
+        UWB_APP_SPEC_IE = 255,
+};
+/**
+ * Header common to all Information Elements (IEs)
+ */
+struct uwb_ie_hdr {
+        u8 element_id;  /* enum uwb_ie */
+        u8 length;
+} __attribute__((packed));
+/** Dynamic Reservation Protocol IE (MBOA MAC[7.8.6]) */
+struct uwb_ie_drp {
+        struct uwb_ie_hdr       hdr;
+        __le16                  drp_control;
+        struct uwb_dev_addr     dev_addr;
+        struct uwb_drp_alloc    allocs[];
+} __attribute__((packed));
+static inline int uwb_ie_drp_type(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 0) & 0x7;
+}
+static inline int uwb_ie_drp_stream_index(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 3) & 0x7;
+}
+static inline int uwb_ie_drp_reason_code(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 6) & 0x7;
+}
+static inline int uwb_ie_drp_status(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 9) & 0x1;
+}
+static inline int uwb_ie_drp_owner(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 10) & 0x1;
+}
+static inline int uwb_ie_drp_tiebreaker(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 11) & 0x1;
+}
+static inline int uwb_ie_drp_unsafe(struct uwb_ie_drp *ie)
+{
+        return (le16_to_cpu(ie->drp_control) >> 12) & 0x1;
+}
+static inline void uwb_ie_drp_set_type(struct uwb_ie_drp *ie, enum uwb_drp_type type)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x7 << 0)) | (type << 0);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_stream_index(struct uwb_ie_drp *ie, int stream_index)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x7 << 3)) | (stream_index << 3);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_reason_code(struct uwb_ie_drp *ie,
+                                       enum uwb_drp_reason reason_code)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (ie->drp_control & ~(0x7 << 6)) | (reason_code << 6);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_status(struct uwb_ie_drp *ie, int status)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x1 << 9)) | (status << 9);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_owner(struct uwb_ie_drp *ie, int owner)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x1 << 10)) | (owner << 10);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_tiebreaker(struct uwb_ie_drp *ie, int tiebreaker)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x1 << 11)) | (tiebreaker << 11);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+static inline void uwb_ie_drp_set_unsafe(struct uwb_ie_drp *ie, int unsafe)
+{
+        u16 drp_control = le16_to_cpu(ie->drp_control);
+        drp_control = (drp_control & ~(0x1 << 12)) | (unsafe << 12);
+        ie->drp_control = cpu_to_le16(drp_control);
+}
+/** Dynamic Reservation Protocol IE (MBOA MAC[7.8.7]) */
+struct uwb_ie_drp_avail {
+        struct uwb_ie_hdr       hdr;
+        DECLARE_BITMAP(bmp, UWB_NUM_MAS);
+} __attribute__((packed));
+/**
+ * The Vendor ID is set to an OUI that indicates the vendor of the device.
+ * ECMA-368 [16.8.10]
+ */
+struct uwb_vendor_id {
+        u8 data[3];
+} __attribute__((packed));
+/**
+ * The device type ID
+ * FIXME: clarify what this means
+ * ECMA-368 [16.8.10]
+ */
+struct uwb_device_type_id {
+        u8 data[3];
+} __attribute__((packed));
+/**
+ * UWB device information types
+ * ECMA-368 [16.8.10]
+ */
+enum uwb_dev_info_type {
+        UWB_DEV_INFO_VENDOR_ID = 0,
+        UWB_DEV_INFO_VENDOR_TYPE,
+        UWB_DEV_INFO_NAME,
+};
+/**
+ * UWB device information found in Identification IE
+ * ECMA-368 [16.8.10]
+ */
+struct uwb_dev_info {
+        u8 type;        /* enum uwb_dev_info_type */
+        u8 length;
+        u8 data[];
+} __attribute__((packed));
+/**
+ * UWB Identification IE
+ * ECMA-368 [16.8.10]
+ */
+struct uwb_identification_ie {
+        struct uwb_ie_hdr hdr;
+        struct uwb_dev_info info[];
+} __attribute__((packed));
+/*
+ * UWB Radio Controller
+ *
+ * These definitions are common to the Radio Control layers as
+ * exported by the WUSB1.0 HWA and WHCI interfaces.
+ */
+/** Radio Control Command Block (WUSB1.0[Table 8-65] and WHCI 0.95) */
+struct uwb_rccb {
+        u8 bCommandType;                /* enum hwa_cet */
+        __le16 wCommand;                /* Command code */
+        u8 bCommandContext;             /* Context ID */
+} __attribute__((packed));
+/** Radio Control Event Block (WUSB[table 8-66], WHCI 0.95) */
+struct uwb_rceb {
+        u8 bEventType;                  /* enum hwa_cet */
+        __le16 wEvent;                  /* Event code */
+        u8 bEventContext;               /* Context ID */
+} __attribute__((packed));
+enum {
+        UWB_RC_CET_GENERAL = 0,         /* General Command/Event type */
+        UWB_RC_CET_EX_TYPE_1 = 1,       /* Extended Type 1 Command/Event type */
+};
+/* Commands to the radio controller */
+enum uwb_rc_cmd {
+        UWB_RC_CMD_CHANNEL_CHANGE = 16,
+        UWB_RC_CMD_DEV_ADDR_MGMT = 17,  /* Device Address Management */
+        UWB_RC_CMD_GET_IE = 18,         /* GET Information Elements */
+        UWB_RC_CMD_RESET = 19,
+        UWB_RC_CMD_SCAN = 20,           /* Scan management  */
+        UWB_RC_CMD_SET_BEACON_FILTER = 21,
+        UWB_RC_CMD_SET_DRP_IE = 22,     /* Dynamic Reservation Protocol IEs */
+        UWB_RC_CMD_SET_IE = 23,         /* Information Element management */
+        UWB_RC_CMD_SET_NOTIFICATION_FILTER = 24,
+        UWB_RC_CMD_SET_TX_POWER = 25,
+        UWB_RC_CMD_SLEEP = 26,
+        UWB_RC_CMD_START_BEACON = 27,
+        UWB_RC_CMD_STOP_BEACON = 28,
+        UWB_RC_CMD_BP_MERGE = 29,
+        UWB_RC_CMD_SEND_COMMAND_FRAME = 30,
+        UWB_RC_CMD_SET_ASIE_NOTIF = 31,
+};
+/* Notifications from the radio controller */
+enum uwb_rc_evt {
+        UWB_RC_EVT_IE_RCV = 0,
+        UWB_RC_EVT_BEACON = 1,
+        UWB_RC_EVT_BEACON_SIZE = 2,
+        UWB_RC_EVT_BPOIE_CHANGE = 3,
+        UWB_RC_EVT_BP_SLOT_CHANGE = 4,
+        UWB_RC_EVT_BP_SWITCH_IE_RCV = 5,
+        UWB_RC_EVT_DEV_ADDR_CONFLICT = 6,
+        UWB_RC_EVT_DRP_AVAIL = 7,
+        UWB_RC_EVT_DRP = 8,
+        UWB_RC_EVT_BP_SWITCH_STATUS = 9,
+        UWB_RC_EVT_CMD_FRAME_RCV = 10,
+        UWB_RC_EVT_CHANNEL_CHANGE_IE_RCV = 11,
+        /* Events (command responses) use the same code as the command */
+        UWB_RC_EVT_UNKNOWN_CMD_RCV = 65535,
+};
+enum uwb_rc_extended_type_1_cmd {
+        UWB_RC_SET_DAA_ENERGY_MASK = 32,
+        UWB_RC_SET_NOTIFICATION_FILTER_EX = 33,
+};
+enum uwb_rc_extended_type_1_evt {
+        UWB_RC_DAA_ENERGY_DETECTED = 0,
+};
+/* Radio Control Result Code. [WHCI] table 3-3. */
+enum {
+        UWB_RC_RES_SUCCESS = 0,
+        UWB_RC_RES_FAIL,
+        UWB_RC_RES_FAIL_HARDWARE,
+        UWB_RC_RES_FAIL_NO_SLOTS,
+        UWB_RC_RES_FAIL_BEACON_TOO_LARGE,
+        UWB_RC_RES_FAIL_INVALID_PARAMETER,
+        UWB_RC_RES_FAIL_UNSUPPORTED_PWR_LEVEL,
+        UWB_RC_RES_FAIL_INVALID_IE_DATA,
+        UWB_RC_RES_FAIL_BEACON_SIZE_EXCEEDED,
+        UWB_RC_RES_FAIL_CANCELLED,
+        UWB_RC_RES_FAIL_INVALID_STATE,
+        UWB_RC_RES_FAIL_INVALID_SIZE,
+        UWB_RC_RES_FAIL_ACK_NOT_RECEIVED,
+        UWB_RC_RES_FAIL_NO_MORE_ASIE_NOTIF,
+        UWB_RC_RES_FAIL_TIME_OUT = 255,
+};
+/* Confirm event. [WHCI] section 3.1.3.1 etc. */
+struct uwb_rc_evt_confirm {
+        struct uwb_rceb rceb;
+        u8 bResultCode;
+} __attribute__((packed));
+/* Device Address Management event. [WHCI] section 3.1.3.2. */
+struct uwb_rc_evt_dev_addr_mgmt {
+        struct uwb_rceb rceb;
+        u8 baAddr[6];
+        u8 bResultCode;
+} __attribute__((packed));
+/* Get IE Event. [WHCI] section 3.1.3.3. */
+struct uwb_rc_evt_get_ie {
+        struct uwb_rceb rceb;
+        __le16 wIELength;
+        u8 IEData[];
+} __attribute__((packed));
+/* Set DRP IE Event. [WHCI] section 3.1.3.7. */
+struct uwb_rc_evt_set_drp_ie {
+        struct uwb_rceb rceb;
+        __le16 wRemainingSpace;
+        u8 bResultCode;
+} __attribute__((packed));
+/* Set IE Event. [WHCI] section 3.1.3.8. */
+struct uwb_rc_evt_set_ie {
+        struct uwb_rceb rceb;
+        __le16 RemainingSpace;
+        u8 bResultCode;
+} __attribute__((packed));
+/* Scan command. [WHCI] 3.1.3.5. */
+struct uwb_rc_cmd_scan {
+        struct uwb_rccb rccb;
+        u8 bChannelNumber;
+        u8 bScanState;
+        __le16 wStartTime;
+} __attribute__((packed));
+/* Set DRP IE command. [WHCI] section 3.1.3.7. */
+struct uwb_rc_cmd_set_drp_ie {
+        struct uwb_rccb rccb;
+        __le16 wIELength;
+        struct uwb_ie_drp IEData[];
+} __attribute__((packed));
+/* Set IE command. [WHCI] section 3.1.3.8. */
+struct uwb_rc_cmd_set_ie {
+        struct uwb_rccb rccb;
+        __le16 wIELength;
+        u8 IEData[];
+} __attribute__((packed));
+/* Set DAA Energy Mask event. [WHCI 0.96] section 3.1.3.17. */
+struct uwb_rc_evt_set_daa_energy_mask {
+        struct uwb_rceb rceb;
+        __le16 wLength;
+        u8 result;
+} __attribute__((packed));
+/* Set Notification Filter Extended event. [WHCI 0.96] section 3.1.3.18. */
+struct uwb_rc_evt_set_notification_filter_ex {
+        struct uwb_rceb rceb;
+        __le16 wLength;
+        u8 result;
+} __attribute__((packed));
+/* IE Received notification. [WHCI] section 3.1.4.1. */
+struct uwb_rc_evt_ie_rcv {
+        struct uwb_rceb rceb;
+        struct uwb_dev_addr SrcAddr;
+        __le16 wIELength;
+        u8 IEData[];
+} __attribute__((packed));
+/* Type of the received beacon. [WHCI] section 3.1.4.2. */
+enum uwb_rc_beacon_type {
+        UWB_RC_BEACON_TYPE_SCAN = 0,
+        UWB_RC_BEACON_TYPE_NEIGHBOR,
+        UWB_RC_BEACON_TYPE_OL_ALIEN,
+        UWB_RC_BEACON_TYPE_NOL_ALIEN,
+};
+/* Beacon received notification. [WHCI] 3.1.4.2. */
+struct uwb_rc_evt_beacon {
+        struct uwb_rceb rceb;
+        u8      bChannelNumber;
+        u8      bBeaconType;
+        __le16  wBPSTOffset;
+        u8      bLQI;
+        u8      bRSSI;
+        __le16  wBeaconInfoLength;
+        u8      BeaconInfo[];
+} __attribute__((packed));
+/* Beacon Size Change notification. [WHCI] section 3.1.4.3 */
+struct uwb_rc_evt_beacon_size {
+        struct uwb_rceb rceb;
+        __le16 wNewBeaconSize;
+} __attribute__((packed));
+/* BPOIE Change notification. [WHCI] section 3.1.4.4. */
+struct uwb_rc_evt_bpoie_change {
+        struct uwb_rceb rceb;
+        __le16 wBPOIELength;
+        u8 BPOIE[];
+} __attribute__((packed));
+/* Beacon Slot Change notification. [WHCI] section 3.1.4.5. */
+struct uwb_rc_evt_bp_slot_change {
+        struct uwb_rceb rceb;
+        u8 slot_info;
+} __attribute__((packed));
+static inline int uwb_rc_evt_bp_slot_change_slot_num(
+        const struct uwb_rc_evt_bp_slot_change *evt)
+{
+        return evt->slot_info & 0x7f;
+}
+static inline int uwb_rc_evt_bp_slot_change_no_slot(
+        const struct uwb_rc_evt_bp_slot_change *evt)
+{
+        return (evt->slot_info & 0x80) >> 7;
+}
+/* BP Switch IE Received notification. [WHCI] section 3.1.4.6. */
+struct uwb_rc_evt_bp_switch_ie_rcv {
+        struct uwb_rceb rceb;
+        struct uwb_dev_addr wSrcAddr;
+        __le16 wIELength;
+        u8 IEData[];
+} __attribute__((packed));
+/* DevAddr Conflict notification. [WHCI] section 3.1.4.7. */
+struct uwb_rc_evt_dev_addr_conflict {
+        struct uwb_rceb rceb;
+} __attribute__((packed));
+/* DRP notification. [WHCI] section 3.1.4.9. */
+struct uwb_rc_evt_drp {
+        struct uwb_rceb           rceb;
+        struct uwb_dev_addr       src_addr;
+        u8                        reason;
+        u8                        beacon_slot_number;
+        __le16                    ie_length;
+        u8                        ie_data[];
+} __attribute__((packed));
+static inline enum uwb_drp_notif_reason uwb_rc_evt_drp_reason(struct uwb_rc_evt_drp *evt)
+{
+        return evt->reason & 0x0f;
+}
+/* DRP Availability Change notification. [WHCI] section 3.1.4.8. */
+struct uwb_rc_evt_drp_avail {
+        struct uwb_rceb rceb;
+        DECLARE_BITMAP(bmp, UWB_NUM_MAS);
+} __attribute__((packed));
+/* BP switch status notification. [WHCI] section 3.1.4.10. */
+struct uwb_rc_evt_bp_switch_status {
+        struct uwb_rceb rceb;
+        u8 status;
+        u8 slot_offset;
+        __le16 bpst_offset;
+        u8 move_countdown;
+} __attribute__((packed));
+/* Command Frame Received notification. [WHCI] section 3.1.4.11. */
+struct uwb_rc_evt_cmd_frame_rcv {
+        struct uwb_rceb rceb;
+        __le16 receive_time;
+        struct uwb_dev_addr wSrcAddr;
+        struct uwb_dev_addr wDstAddr;
+        __le16 control;
+        __le16 reserved;
+        __le16 dataLength;
+        u8 data[];
+} __attribute__((packed));
+/* Channel Change IE Received notification. [WHCI] section 3.1.4.12. */
+struct uwb_rc_evt_channel_change_ie_rcv {
+        struct uwb_rceb rceb;
+        struct uwb_dev_addr wSrcAddr;
+        __le16 wIELength;
+        u8 IEData[];
+} __attribute__((packed));
+/* DAA Energy Detected notification. [WHCI 0.96] section 3.1.4.14. */
+struct uwb_rc_evt_daa_energy_detected {
+        struct uwb_rceb rceb;
+        __le16 wLength;
+        u8 bandID;
+        u8 reserved;
+        u8 toneBmp[16];
+} __attribute__((packed));
+/**
+ * Radio Control Interface Class Descriptor
+ *
+ *  WUSB 1.0 [8.6.1.2]
+ */
+struct uwb_rc_control_intf_class_desc {
+        u8 bLength;
+        u8 bDescriptorType;
+        __le16 bcdRCIVersion;
+} __attribute__((packed));
+#endif /* #ifndef __LINUX__UWB_SPEC_H__ */
diff --git a/include/linux/uwb/umc.h b/include/linux/uwb/umc.h
new file mode 100644
index 000000000000..36a39e34f8d7
--- /dev/null
+++ b/include/linux/uwb/umc.h
@@ -0,0 +1,194 @@
+/*
+ * UWB Multi-interface Controller support.
+ *
+ * Copyright (C) 2007 Cambridge Silicon Radio Ltd.
+ *
+ * This file is released under the GPLv2
+ *
+ * UMC (UWB Multi-interface Controller) capabilities (e.g., radio
+ * controller, host controller) are presented as devices on the "umc"
+ * bus.
+ *
+ * The radio controller is not strictly a UMC capability but it's
+ * useful to present it as such.
+ *
+ * References:
+ *
+ *   [WHCI] Wireless Host Controller Interface Specification for
+ *          Certified Wireless Universal Serial Bus, revision 0.95.
+ *
+ * How this works is kind of convoluted but simple. The whci.ko driver
+ * loads when WHCI devices are detected. These WHCI devices expose
+ * many devices in the same PCI function (they couldn't have reused
+ * functions, no), so for each PCI function that exposes these many
+ * devices, whci ceates a umc_dev [whci_probe() -> whci_add_cap()]
+ * with umc_device_create() and adds it to the bus with
+ * umc_device_register().
+ *
+ * umc_device_register() calls device_register() which will push the
+ * bus management code to load your UMC driver's somehting_probe()
+ * that you have registered for that capability code.
+ *
+ * Now when the WHCI device is removed, whci_remove() will go over
+ * each umc_dev assigned to each of the PCI function's capabilities
+ * and through whci_del_cap() call umc_device_unregister() each
+ * created umc_dev. Of course, if you are bound to the device, your
+ * driver's something_remove() will be called.
+ */
+#ifndef _LINUX_UWB_UMC_H_
+#define _LINUX_UWB_UMC_H_
+#include <linux/device.h>
+#include <linux/pci.h>
+/*
+ * UMC capability IDs.
+ *
+ * 0x00 is reserved so use it for the radio controller device.
+ *
+ * [WHCI] table 2-8
+ */
+#define UMC_CAP_ID_WHCI_RC      0x00 /* radio controller */
+#define UMC_CAP_ID_WHCI_WUSB_HC 0x01 /* WUSB host controller */
+/**
+ * struct umc_dev - UMC capability device
+ *
+ * @version:  version of the specification this capability conforms to.
+ * @cap_id:   capability ID.
+ * @bar:      PCI Bar (64 bit) where the resource lies
+ * @resource: register space resource.
+ * @irq:      interrupt line.
+ */
+struct umc_dev {
+        u16             version;
+        u8              cap_id;
+        u8              bar;
+        struct resource resource;
+        unsigned        irq;
+        struct device   dev;
+};
+#define to_umc_dev(d) container_of(d, struct umc_dev, dev)
+/**
+ * struct umc_driver - UMC capability driver
+ * @cap_id: supported capability ID.
+ * @match: driver specific capability matching function.
+ * @match_data: driver specific data for match() (e.g., a
+ * table of pci_device_id's if umc_match_pci_id() is used).
+ */
+struct umc_driver {
+        char *name;
+        u8 cap_id;
+        int (*match)(struct umc_driver *, struct umc_dev *);
+        const void *match_data;
+        int  (*probe)(struct umc_dev *);
+        void (*remove)(struct umc_dev *);
+        int  (*suspend)(struct umc_dev *, pm_message_t state);
+        int  (*resume)(struct umc_dev *);
+        struct device_driver driver;
+};
+#define to_umc_driver(d) container_of(d, struct umc_driver, driver)
+extern struct bus_type umc_bus_type;
+struct umc_dev *umc_device_create(struct device *parent, int n);
+int __must_check umc_device_register(struct umc_dev *umc);
+void umc_device_unregister(struct umc_dev *umc);
+int __must_check __umc_driver_register(struct umc_driver *umc_drv,
+                                       struct module *mod,
+                                       const char *mod_name);
+/**
+ * umc_driver_register - register a UMC capabiltity driver.
+ * @umc_drv:  pointer to the driver.
+ */
+static inline int __must_check umc_driver_register(struct umc_driver *umc_drv)
+{
+        return __umc_driver_register(umc_drv, THIS_MODULE, KBUILD_MODNAME);
+}
+void umc_driver_unregister(struct umc_driver *umc_drv);
+/*
+ * Utility function you can use to match (umc_driver->match) against a
+ * null-terminated array of 'struct pci_device_id' in
+ * umc_driver->match_data.
+ */
+int umc_match_pci_id(struct umc_driver *umc_drv, struct umc_dev *umc);
+/**
+ * umc_parent_pci_dev - return the UMC's parent PCI device or NULL if none
+ * @umc_dev: UMC device whose parent PCI device we are looking for
+ *
+ * DIRTY!!! DON'T RELY ON THIS
+ *
+ * FIXME: This is as dirty as it gets, but we need some way to check
+ * the correct type of umc_dev->parent (so that for example, we can
+ * cast to pci_dev). Casting to pci_dev is necesary because at some
+ * point we need to request resources from the device. Mapping is
+ * easily over come (ioremap and stuff are bus agnostic), but hooking
+ * up to some error handlers (such as pci error handlers) might need
+ * this.
+ *
+ * THIS might (probably will) be removed in the future, so don't count
+ * on it.
+ */
+static inline struct pci_dev *umc_parent_pci_dev(struct umc_dev *umc_dev)
+{
+        struct pci_dev *pci_dev = NULL;
+        if (umc_dev->dev.parent->bus == &pci_bus_type)
+                pci_dev = to_pci_dev(umc_dev->dev.parent);
+        return pci_dev;
+}
+/**
+ * umc_dev_get() - reference a UMC device.
+ * @umc_dev: Pointer to UMC device.
+ *
+ * NOTE: we are assuming in this whole scheme that the parent device
+ *       is referenced at _probe() time and unreferenced at _remove()
+ *       time by the parent's subsystem.
+ */
+static inline struct umc_dev *umc_dev_get(struct umc_dev *umc_dev)
+{
+        get_device(&umc_dev->dev);
+        return umc_dev;
+}
+/**
+ * umc_dev_put() - unreference a UMC device.
+ * @umc_dev: Pointer to UMC device.
+ */
+static inline void umc_dev_put(struct umc_dev *umc_dev)
+{
+        put_device(&umc_dev->dev);
+}
+/**
+ * umc_set_drvdata - set UMC device's driver data.
+ * @umc_dev: Pointer to UMC device.
+ * @data:    Data to set.
+ */
+static inline void umc_set_drvdata(struct umc_dev *umc_dev, void *data)
+{
+        dev_set_drvdata(&umc_dev->dev, data);
+}
+/**
+ * umc_get_drvdata - recover UMC device's driver data.
+ * @umc_dev: Pointer to UMC device.
+ */
+static inline void *umc_get_drvdata(struct umc_dev *umc_dev)
+{
+        return dev_get_drvdata(&umc_dev->dev);
+}
+int umc_controller_reset(struct umc_dev *umc);
+#endif /* #ifndef _LINUX_UWB_UMC_H_ */
diff --git a/include/linux/uwb/whci.h b/include/linux/uwb/whci.h
new file mode 100644
index 000000000000..915ec23042d4
--- /dev/null
+++ b/include/linux/uwb/whci.h
@@ -0,0 +1,117 @@
+/*
+ * Wireless Host Controller Interface for Ultra-Wide-Band and Wireless USB
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ *
+ * References:
+ *   [WHCI] Wireless Host Controller Interface Specification for
+ *          Certified Wireless Universal Serial Bus, revision 0.95.
+ */
+#ifndef _LINUX_UWB_WHCI_H_
+#define _LINUX_UWB_WHCI_H_
+#include <linux/pci.h>
+/*
+ * UWB interface capability registers (offsets from UWBBASE)
+ *
+ * [WHCI] section 2.2
+ */
+#define UWBCAPINFO      0x00 /* == UWBCAPDATA(0) */
+#  define UWBCAPINFO_TO_N_CAPS(c)       (((c) >> 0)  & 0xFull)
+#define UWBCAPDATA(n)   (8*(n))
+#  define UWBCAPDATA_TO_VERSION(c)      (((c) >> 32) & 0xFFFFull)
+#  define UWBCAPDATA_TO_OFFSET(c)       (((c) >> 18) & 0x3FFFull)
+#  define UWBCAPDATA_TO_BAR(c)          (((c) >> 16) & 0x3ull)
+#  define UWBCAPDATA_TO_SIZE(c)         ((((c) >> 8) & 0xFFull) * sizeof(u32))
+#  define UWBCAPDATA_TO_CAP_ID(c)       (((c) >> 0)  & 0xFFull)
+/* Size of the WHCI capability data (including the RC capability) for
+   a device with n capabilities. */
+#define UWBCAPDATA_SIZE(n) (8 + 8*(n))
+/*
+ * URC registers (offsets from URCBASE)
+ *
+ * [WHCI] section 2.3
+ */
+#define URCCMD          0x00
+#  define URCCMD_RESET          (1 << 31)  /* UMC Hardware reset */
+#  define URCCMD_RS             (1 << 30)  /* Run/Stop */
+#  define URCCMD_EARV           (1 << 29)  /* Event Address Register Valid */
+#  define URCCMD_ACTIVE         (1 << 15)  /* Command is active */
+#  define URCCMD_IWR            (1 << 14)  /* Interrupt When Ready */
+#  define URCCMD_SIZE_MASK      0x00000fff /* Command size mask */
+#define URCSTS          0x04
+#  define URCSTS_EPS            (1 << 17)  /* Event Processing Status */
+#  define URCSTS_HALTED         (1 << 16)  /* RC halted */
+#  define URCSTS_HSE            (1 << 10)  /* Host System Error...fried */
+#  define URCSTS_ER             (1 <<  9)  /* Event Ready */
+#  define URCSTS_RCI            (1 <<  8)  /* Ready for Command Interrupt */
+#  define URCSTS_INT_MASK       0x00000700 /* URC interrupt sources */
+#  define URCSTS_ISI            0x000000ff /* Interrupt Source Identification */
+#define URCINTR         0x08
+#  define URCINTR_EN_ALL        0x000007ff /* Enable all interrupt sources */
+#define URCCMDADDR      0x10
+#define URCEVTADDR      0x18
+#  define URCEVTADDR_OFFSET_MASK 0xfff    /* Event pointer offset mask */
+/** Write 32 bit @value to little endian register at @addr */
+static inline
+void le_writel(u32 value, void __iomem *addr)
+{
+        iowrite32(value, addr);
+}
+/** Read from 32 bit little endian register at @addr */
+static inline
+u32 le_readl(void __iomem *addr)
+{
+        return ioread32(addr);
+}
+/** Write 64 bit @value to little endian register at @addr */
+static inline
+void le_writeq(u64 value, void __iomem *addr)
+{
+        iowrite32(value, addr);
+        iowrite32(value >> 32, addr + 4);
+}
+/** Read from 64 bit little endian register at @addr */
+static inline
+u64 le_readq(void __iomem *addr)
+{
+        u64 value;
+        value  = ioread32(addr);
+        value |= (u64)ioread32(addr + 4) << 32;
+        return value;
+}
+extern int whci_wait_for(struct device *dev, u32 __iomem *reg,
+                         u32 mask, u32 result,
+                         unsigned long max_ms,  const char *tag);
+#endif /* #ifndef _LINUX_UWB_WHCI_H_ */
diff --git a/include/linux/videodev2.h b/include/linux/videodev2.h
index d4b03034ee73..4669d7e72e75 100644
--- a/include/linux/videodev2.h
+++ b/include/linux/videodev2.h
@@ -315,6 +315,13 @@ struct v4l2_pix_format {
 /* see http://www.siliconimaging.com/RGB%20Bayer.htm */
 #define V4L2_PIX_FMT_SBGGR8  v4l2_fourcc('B', 'A', '8', '1') /*  8  BGBG.. GRGR.. */
 #define V4L2_PIX_FMT_SGBRG8  v4l2_fourcc('G', 'B', 'R', 'G') /*  8  GBGB.. RGRG.. */
+/*
+ * 10bit raw bayer, expanded to 16 bits
+ * xxxxrrrrrrrrrrxxxxgggggggggg xxxxggggggggggxxxxbbbbbbbbbb...
+ */
+#define V4L2_PIX_FMT_SGRBG10 v4l2_fourcc('B', 'A', '1', '0')
+/* 10bit raw bayer DPCM compressed to 8 bits */
+#define V4L2_PIX_FMT_SGRBG10DPCM8 v4l2_fourcc('B', 'D', '1', '0')
 #define V4L2_PIX_FMT_SBGGR16 v4l2_fourcc('B', 'Y', 'R', '2') /* 16  BGBG.. GRGR.. */
 /* compressed formats */
diff --git a/include/linux/wlp.h b/include/linux/wlp.h
new file mode 100644
index 000000000000..033545e145c7
--- /dev/null
+++ b/include/linux/wlp.h
@@ -0,0 +1,735 @@
+/*
+ * WiMedia Logical Link Control Protocol (WLP)
+ *
+ * Copyright (C) 2005-2006 Intel Corporation
+ * Reinette Chatre <reinette.chatre@intel.com>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License version
+ * 2 as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+ * 02110-1301, USA.
+ *
+ *
+ * FIXME: docs
+ *
+ * - Does not (yet) include support for WLP control frames
+ *   WLP Draft 0.99 [6.5].
+ *
+ *   A visual representation of the data structures.
+ *
+ *                              wssidB      wssidB
+ *                               ^           ^
+ *                               |           |
+ *                              wssidA      wssidA
+ *   wlp interface {             ^           ^
+ *       ...                     |           |
+ *       ...               ...  wssid      wssid ...
+ *       wlp --- ...             |           |
+ *   };          neighbors --> neighbA --> neighbB
+ *               ...
+ *               wss
+ *               ...
+ *               eda cache  --> neighborA --> neighborB --> neighborC ...
+ */
+#ifndef __LINUX__WLP_H_
+#define __LINUX__WLP_H_
+#include <linux/netdevice.h>
+#include <linux/skbuff.h>
+#include <linux/list.h>
+#include <linux/uwb.h>
+/**
+ * WLP Protocol ID
+ * WLP Draft 0.99 [6.2]
+ *
+ * The MUX header for all WLP frames
+ */
+#define WLP_PROTOCOL_ID 0x0100
+/**
+ * WLP Version
+ * WLP version placed in the association frames (WLP 0.99 [6.6])
+ */
+#define WLP_VERSION 0x10
+/**
+ * Bytes needed to print UUID as string
+ */
+#define WLP_WSS_UUID_STRSIZE 48
+/**
+ * Bytes needed to print nonce as string
+ */
+#define WLP_WSS_NONCE_STRSIZE 48
+/**
+ * Size used for WLP name size
+ *
+ * The WSS name is set to 65 bytes, 1 byte larger than the maximum
+ * allowed by the WLP spec. This is to have a null terminated string
+ * for display to the user. A maximum of 64 bytes will still be used
+ * when placing the WSS name field in association frames.
+ */
+#define WLP_WSS_NAME_SIZE 65
+/**
+ * Number of bytes added by WLP to data frame
+ *
+ * A data frame transmitted from a host will be placed in a Standard or
+ * Abbreviated WLP frame. These have an extra 4 bytes of header (struct
+ * wlp_frame_std_abbrv_hdr).
+ * When the stack sends this data frame for transmission it needs to ensure
+ * there is enough headroom for this header.
+ */
+#define WLP_DATA_HLEN 4
+/**
+ * State of device regarding WLP Service Set
+ *
+ * WLP_WSS_STATE_NONE: the host does not participate in any WSS
+ * WLP_WSS_STATE_PART_ENROLLED: used as part of the enrollment sequence
+ *                            ("Partial Enroll"). This state is used to
+ *                            indicate the first part of enrollment that is
+ *                            unsecure. If the WSS is unsecure then the
+ *                            state will promptly go to WLP_WSS_STATE_ENROLLED,
+ *                            if the WSS is not secure then the enrollment
+ *                            procedure is a few more steps before we are
+ *                            enrolled.
+ * WLP_WSS_STATE_ENROLLED: the host is enrolled in a WSS
+ * WLP_WSS_STATE_ACTIVE: WSS is activated
+ * WLP_WSS_STATE_CONNECTED: host is connected to neighbor in WSS
+ *
+ */
+enum wlp_wss_state {
+        WLP_WSS_STATE_NONE = 0,
+        WLP_WSS_STATE_PART_ENROLLED,
+        WLP_WSS_STATE_ENROLLED,
+        WLP_WSS_STATE_ACTIVE,
+        WLP_WSS_STATE_CONNECTED,
+};
+/**
+ * WSS Secure status
+ * WLP 0.99 Table 6
+ *
+ * Set to one if the WSS is secure, zero if it is not secure
+ */
+enum wlp_wss_sec_status {
+        WLP_WSS_UNSECURE = 0,
+        WLP_WSS_SECURE,
+};
+/**
+ * WLP frame type
+ * WLP Draft 0.99 [6.2 Table 1]
+ */
+enum wlp_frame_type {
+        WLP_FRAME_STANDARD = 0,
+        WLP_FRAME_ABBREVIATED,
+        WLP_FRAME_CONTROL,
+        WLP_FRAME_ASSOCIATION,
+};
+/**
+ * WLP Association Message Type
+ * WLP Draft 0.99 [6.6.1.2 Table 8]
+ */
+enum wlp_assoc_type {
+        WLP_ASSOC_D1 = 2,
+        WLP_ASSOC_D2 = 3,
+        WLP_ASSOC_M1 = 4,
+        WLP_ASSOC_M2 = 5,
+        WLP_ASSOC_M3 = 7,
+        WLP_ASSOC_M4 = 8,
+        WLP_ASSOC_M5 = 9,
+        WLP_ASSOC_M6 = 10,
+        WLP_ASSOC_M7 = 11,
+        WLP_ASSOC_M8 = 12,
+        WLP_ASSOC_F0 = 14,
+        WLP_ASSOC_E1 = 32,
+        WLP_ASSOC_E2 = 33,
+        WLP_ASSOC_C1 = 34,
+        WLP_ASSOC_C2 = 35,
+        WLP_ASSOC_C3 = 36,
+        WLP_ASSOC_C4 = 37,
+};
+/**
+ * WLP Attribute Type
+ * WLP Draft 0.99 [6.6.1 Table 6]
+ */
+enum wlp_attr_type {
+        WLP_ATTR_AUTH           = 0x1005, /* Authenticator */
+        WLP_ATTR_DEV_NAME       = 0x1011, /* Device Name */
+        WLP_ATTR_DEV_PWD_ID     = 0x1012, /* Device Password ID */
+        WLP_ATTR_E_HASH1        = 0x1014, /* E-Hash1 */
+        WLP_ATTR_E_HASH2        = 0x1015, /* E-Hash2 */
+        WLP_ATTR_E_SNONCE1      = 0x1016, /* E-SNonce1 */
+        WLP_ATTR_E_SNONCE2      = 0x1017, /* E-SNonce2 */
+        WLP_ATTR_ENCR_SET       = 0x1018, /* Encrypted Settings */
+        WLP_ATTR_ENRL_NONCE     = 0x101A, /* Enrollee Nonce */
+        WLP_ATTR_KEYWRAP_AUTH   = 0x101E, /* Key Wrap Authenticator */
+        WLP_ATTR_MANUF          = 0x1021, /* Manufacturer */
+        WLP_ATTR_MSG_TYPE       = 0x1022, /* Message Type */
+        WLP_ATTR_MODEL_NAME     = 0x1023, /* Model Name */
+        WLP_ATTR_MODEL_NR       = 0x1024, /* Model Number */
+        WLP_ATTR_PUB_KEY        = 0x1032, /* Public Key */
+        WLP_ATTR_REG_NONCE      = 0x1039, /* Registrar Nonce */
+        WLP_ATTR_R_HASH1        = 0x103D, /* R-Hash1 */
+        WLP_ATTR_R_HASH2        = 0x103E, /* R-Hash2 */
+        WLP_ATTR_R_SNONCE1      = 0x103F, /* R-SNonce1 */
+        WLP_ATTR_R_SNONCE2      = 0x1040, /* R-SNonce2 */
+        WLP_ATTR_SERIAL         = 0x1042, /* Serial number */
+        WLP_ATTR_UUID_E         = 0x1047, /* UUID-E */
+        WLP_ATTR_UUID_R         = 0x1048, /* UUID-R */
+        WLP_ATTR_PRI_DEV_TYPE   = 0x1054, /* Primary Device Type */
+        WLP_ATTR_SEC_DEV_TYPE   = 0x1055, /* Secondary Device Type */
+        WLP_ATTR_PORT_DEV       = 0x1056, /* Portable Device */
+        WLP_ATTR_APP_EXT        = 0x1058, /* Application Extension */
+        WLP_ATTR_WLP_VER        = 0x2000, /* WLP Version */
+        WLP_ATTR_WSSID          = 0x2001, /* WSSID */
+        WLP_ATTR_WSS_NAME       = 0x2002, /* WSS Name */
+        WLP_ATTR_WSS_SEC_STAT   = 0x2003, /* WSS Secure Status */
+        WLP_ATTR_WSS_BCAST      = 0x2004, /* WSS Broadcast Address */
+        WLP_ATTR_WSS_M_KEY      = 0x2005, /* WSS Master Key */
+        WLP_ATTR_ACC_ENRL       = 0x2006, /* Accepting Enrollment */
+        WLP_ATTR_WSS_INFO       = 0x2007, /* WSS Information */
+        WLP_ATTR_WSS_SEL_MTHD   = 0x2008, /* WSS Selection Method */
+        WLP_ATTR_ASSC_MTHD_LIST = 0x2009, /* Association Methods List */
+        WLP_ATTR_SEL_ASSC_MTHD  = 0x200A, /* Selected Association Method */
+        WLP_ATTR_ENRL_HASH_COMM = 0x200B, /* Enrollee Hash Commitment */
+        WLP_ATTR_WSS_TAG        = 0x200C, /* WSS Tag */
+        WLP_ATTR_WSS_VIRT       = 0x200D, /* WSS Virtual EUI-48 */
+        WLP_ATTR_WLP_ASSC_ERR   = 0x200E, /* WLP Association Error */
+        WLP_ATTR_VNDR_EXT       = 0x200F, /* Vendor Extension */
+};
+/**
+ * WLP Category ID of primary/secondary device
+ * WLP Draft 0.99 [6.6.1.8 Table 12]
+ */
+enum wlp_dev_category_id {
+        WLP_DEV_CAT_COMPUTER = 1,
+        WLP_DEV_CAT_INPUT,
+        WLP_DEV_CAT_PRINT_SCAN_FAX_COPIER,
+        WLP_DEV_CAT_CAMERA,
+        WLP_DEV_CAT_STORAGE,
+        WLP_DEV_CAT_INFRASTRUCTURE,
+        WLP_DEV_CAT_DISPLAY,
+        WLP_DEV_CAT_MULTIM,
+        WLP_DEV_CAT_GAMING,
+        WLP_DEV_CAT_TELEPHONE,
+        WLP_DEV_CAT_OTHER = 65535,
+};
+/**
+ * WLP WSS selection method
+ * WLP Draft 0.99 [6.6.1.6 Table 10]
+ */
+enum wlp_wss_sel_mthd {
+        WLP_WSS_ENRL_SELECT = 1,        /* Enrollee selects */
+        WLP_WSS_REG_SELECT,             /* Registrar selects */
+};
+/**
+ * WLP association error values
+ * WLP Draft 0.99 [6.6.1.5 Table 9]
+ */
+enum wlp_assc_error {
+        WLP_ASSOC_ERROR_NONE,
+        WLP_ASSOC_ERROR_AUTH,           /* Authenticator Failure */
+        WLP_ASSOC_ERROR_ROGUE,          /* Rogue activity suspected */
+        WLP_ASSOC_ERROR_BUSY,           /* Device busy */
+        WLP_ASSOC_ERROR_LOCK,           /* Setup Locked */
+        WLP_ASSOC_ERROR_NOT_READY,      /* Registrar not ready */
+        WLP_ASSOC_ERROR_INV,            /* Invalid WSS selection */
+        WLP_ASSOC_ERROR_MSG_TIME,       /* Message timeout */
+        WLP_ASSOC_ERROR_ENR_TIME,       /* Enrollment session timeout */
+        WLP_ASSOC_ERROR_PW,             /* Device password invalid */
+        WLP_ASSOC_ERROR_VER,            /* Unsupported version */
+        WLP_ASSOC_ERROR_INT,            /* Internal error */
+        WLP_ASSOC_ERROR_UNDEF,          /* Undefined error */
+        WLP_ASSOC_ERROR_NUM,            /* Numeric comparison failure */
+        WLP_ASSOC_ERROR_WAIT,           /* Waiting for user input */
+};
+/**
+ * WLP Parameters
+ * WLP 0.99 [7.7]
+ */
+enum wlp_parameters {
+        WLP_PER_MSG_TIMEOUT = 15,       /* Seconds to wait for response to
+                                           association message. */
+};
+/**
+ * WLP IE
+ *
+ * The WLP IE should be included in beacons by all devices.
+ *
+ * The driver can set only a few of the fields in this information element,
+ * most fields are managed by the device self. When the driver needs to set
+ * a field it will only provide values for the fields of interest, the rest
+ * will be filled with zeroes. The fields of interest are:
+ *
+ * Element ID
+ * Length
+ * Capabilities (only to include WSSID Hash list length)
+ * WSSID Hash List fields
+ *
+ * WLP 0.99 [6.7]
+ *
+ * Only the fields that will be used are detailed in this structure, rest
+ * are not detailed or marked as "notused".
+ */
+struct wlp_ie {
+        struct uwb_ie_hdr hdr;
+        __le16 capabilities;
+        __le16 cycle_param;
+        __le16 acw_anchor_addr;
+        u8 wssid_hash_list[];
+} __attribute__((packed));
+static inline int wlp_ie_hash_length(struct wlp_ie *ie)
+{
+        return (le16_to_cpu(ie->capabilities) >> 12) & 0xf;
+}
+static inline void wlp_ie_set_hash_length(struct wlp_ie *ie, int hash_length)
+{
+        u16 caps = le16_to_cpu(ie->capabilities);
+        caps = (caps & ~(0xf << 12)) | (hash_length << 12);
+        ie->capabilities = cpu_to_le16(caps);
+}
+/**
+ * WLP nonce
+ * WLP Draft 0.99 [6.6.1 Table 6]
+ *
+ * A 128-bit random number often used (E-SNonce1, E-SNonce2, Enrollee
+ * Nonce, Registrar Nonce, R-SNonce1, R-SNonce2). It is passed to HW so
+ * it is packed.
+ */
+struct wlp_nonce {
+        u8 data[16];
+} __attribute__((packed));
+/**
+ * WLP UUID
+ * WLP Draft 0.99 [6.6.1 Table 6]
+ *
+ * Universally Unique Identifier (UUID) encoded as an octet string in the
+ * order the octets are shown in string representation in RFC4122. A UUID
+ * is often used (UUID-E, UUID-R, WSSID). It is passed to HW so it is packed.
+ */
+struct wlp_uuid {
+        u8 data[16];
+} __attribute__((packed));
+/**
+ * Primary and secondary device type attributes
+ * WLP Draft 0.99 [6.6.1.8]
+ */
+struct wlp_dev_type {
+        enum wlp_dev_category_id category:16;
+        u8 OUI[3];
+        u8 OUIsubdiv;
+        __le16 subID;
+} __attribute__((packed));
+/**
+ * WLP frame header
+ * WLP Draft 0.99 [6.2]
+ */
+struct wlp_frame_hdr {
+        __le16 mux_hdr;                 /* WLP_PROTOCOL_ID */
+        enum wlp_frame_type type:8;
+} __attribute__((packed));
+/**
+ * WLP attribute field header
+ * WLP Draft 0.99 [6.6.1]
+ *
+ * Header of each attribute found in an association frame
+ */
+struct wlp_attr_hdr {
+        __le16 type;
+        __le16 length;
+} __attribute__((packed));
+/**
+ * Device information commonly used together
+ *
+ * Each of these device information elements has a specified range in which it
+ * should fit (WLP 0.99 [Table 6]). This range provided in the spec does not
+ * include the termination null '\0' character (when used in the
+ * association protocol the attribute fields are accompanied
+ * with a "length" field so the full range from the spec can be used for
+ * the value). We thus allocate an extra byte to be able to store a string
+ * of max length with a terminating '\0'.
+ */
+struct wlp_device_info {
+        char name[33];
+        char model_name[33];
+        char manufacturer[65];
+        char model_nr[33];
+        char serial[33];
+        struct wlp_dev_type prim_dev_type;
+};
+/**
+ * Macros for the WLP attributes
+ *
+ * There are quite a few attributes (total is 43). The attribute layout can be
+ * in one of three categories: one value, an array, an enum forced to 8 bits.
+ * These macros help with their definitions.
+ */
+#define wlp_attr(type, name)                                            \
+struct wlp_attr_##name {                                                \
+        struct wlp_attr_hdr hdr;                                        \
+        type name;                                                      \
+} __attribute__((packed));
+#define wlp_attr_array(type, name)                                      \
+struct wlp_attr_##name {                                                \
+        struct wlp_attr_hdr hdr;                                        \
+        type name[];                                                    \
+} __attribute__((packed));
+/**
+ * WLP association attribute fields
+ * WLP Draft 0.99 [6.6.1 Table 6]
+ *
+ * Attributes appear in same order as the Table in the spec
+ * FIXME Does not define all attributes yet
+ */
+/* Device name: Friendly name of sending device */
+wlp_attr_array(u8, dev_name)
+/* Enrollee Nonce: Random number generated by enrollee for an enrollment
+ * session */
+wlp_attr(struct wlp_nonce, enonce)
+/* Manufacturer name: Name of manufacturer of the sending device */
+wlp_attr_array(u8, manufacturer)
+/* WLP Message Type */
+wlp_attr(u8, msg_type)
+/* WLP Model name: Model name of sending device */
+wlp_attr_array(u8, model_name)
+/* WLP Model number: Model number of sending device */
+wlp_attr_array(u8, model_nr)
+/* Registrar Nonce: Random number generated by registrar for an enrollment
+ * session */
+wlp_attr(struct wlp_nonce, rnonce)
+/* Serial number of device */
+wlp_attr_array(u8, serial)
+/* UUID of enrollee */
+wlp_attr(struct wlp_uuid, uuid_e)
+/* UUID of registrar */
+wlp_attr(struct wlp_uuid, uuid_r)
+/* WLP Primary device type */
+wlp_attr(struct wlp_dev_type, prim_dev_type)
+/* WLP Secondary device type */
+wlp_attr(struct wlp_dev_type, sec_dev_type)
+/* WLP protocol version */
+wlp_attr(u8, version)
+/* WLP service set identifier */
+wlp_attr(struct wlp_uuid, wssid)
+/* WLP WSS name */
+wlp_attr_array(u8, wss_name)
+/* WLP WSS Secure Status */
+wlp_attr(u8, wss_sec_status)
+/* WSS Broadcast Address */
+wlp_attr(struct uwb_mac_addr, wss_bcast)
+/* WLP Accepting Enrollment */
+wlp_attr(u8, accept_enrl)
+/**
+ * WSS information attributes
+ * WLP Draft 0.99 [6.6.3 Table 15]
+ */
+struct wlp_wss_info {
+        struct wlp_attr_wssid wssid;
+        struct wlp_attr_wss_name name;
+        struct wlp_attr_accept_enrl accept;
+        struct wlp_attr_wss_sec_status sec_stat;
+        struct wlp_attr_wss_bcast bcast;
+} __attribute__((packed));
+/* WLP WSS Information */
+wlp_attr_array(struct wlp_wss_info, wss_info)
+/* WLP WSS Selection method */
+wlp_attr(u8, wss_sel_mthd)
+/* WLP WSS tag */
+wlp_attr(u8, wss_tag)
+/* WSS Virtual Address */
+wlp_attr(struct uwb_mac_addr, wss_virt)
+/* WLP association error */
+wlp_attr(u8, wlp_assc_err)
+/**
+ * WLP standard and abbreviated frames
+ *
+ * WLP Draft 0.99 [6.3] and [6.4]
+ *
+ * The difference between the WLP standard frame and the WLP
+ * abbreviated frame is that the standard frame includes the src
+ * and dest addresses from the Ethernet header, the abbreviated frame does
+ * not.
+ * The src/dest (as well as the type/length and client data) are already
+ * defined as part of the Ethernet header, we do not do this here.
+ * From this perspective the standard and abbreviated frames appear the
+ * same - they will be treated differently though.
+ *
+ * The size of this header is also captured in WLP_DATA_HLEN to enable
+ * interfaces to prepare their headroom.
+ */
+struct wlp_frame_std_abbrv_hdr {
+        struct wlp_frame_hdr hdr;
+        u8 tag;
+} __attribute__((packed));
+/**
+ * WLP association frames
+ *
+ * WLP Draft 0.99 [6.6]
+ */
+struct wlp_frame_assoc {
+        struct wlp_frame_hdr hdr;
+        enum wlp_assoc_type type:8;
+        struct wlp_attr_version version;
+        struct wlp_attr_msg_type msg_type;
+        u8 attr[];
+} __attribute__((packed));
+/* Ethernet to dev address mapping */
+struct wlp_eda {
+        spinlock_t lock;
+        struct list_head cache; /* Eth<->Dev Addr cache */
+};
+/**
+ * WSS information temporary storage
+ *
+ * This information is only stored temporarily during discovery. It should
+ * not be stored unless the device is enrolled in the advertised WSS. This
+ * is done mainly because we follow the letter of the spec in this regard.
+ * See WLP 0.99 [7.2.3].
+ * When the device does become enrolled in a WSS the WSS information will
+ * be stored as part of the more comprehensive struct wlp_wss.
+ */
+struct wlp_wss_tmp_info {
+        char name[WLP_WSS_NAME_SIZE];
+        u8 accept_enroll;
+        u8 sec_status;
+        struct uwb_mac_addr bcast;
+};
+struct wlp_wssid_e {
+        struct list_head node;
+        struct wlp_uuid wssid;
+        struct wlp_wss_tmp_info *info;
+};
+/**
+ * A cache entry of WLP neighborhood
+ *
+ * @node: head of list is wlp->neighbors
+ * @wssid: list of wssids of this neighbor, element is wlp_wssid_e
+ * @info:  temporary storage for information learned during discovery. This
+ *         storage is used together with the wssid_e temporary storage
+ *         during discovery.
+ */
+struct wlp_neighbor_e {
+        struct list_head node;
+        struct wlp_uuid uuid;
+        struct uwb_dev *uwb_dev;
+        struct list_head wssid; /* Elements are wlp_wssid_e */
+        struct wlp_device_info *info;
+};
+struct wlp;
+/**
+ * Information for an association session in progress.
+ *
+ * @exp_message: The type of the expected message. Both this message and a
+ *               F0 message (which can be sent in response to any
+ *               association frame) will be accepted as a valid message for
+ *               this session.
+ * @cb:          The function that will be called upon receipt of this
+ *               message.
+ * @cb_priv:     Private data of callback
+ * @data:        Data used in association process (always a sk_buff?)
+ * @neighbor:    Address of neighbor with which association session is in
+ *               progress.
+ */
+struct wlp_session {
+        enum wlp_assoc_type exp_message;
+        void (*cb)(struct wlp *);
+        void *cb_priv;
+        void *data;
+        struct uwb_dev_addr neighbor_addr;
+};
+/**
+ * WLP Service Set
+ *
+ * @mutex: used to protect entire WSS structure.
+ *
+ * @name: The WSS name is set to 65 bytes, 1 byte larger than the maximum
+ *        allowed by the WLP spec. This is to have a null terminated string
+ *        for display to the user. A maximum of 64 bytes will still be used
+ *        when placing the WSS name field in association frames.
+ *
+ * @accept_enroll: Accepting enrollment: Set to one if registrar is
+ *                 accepting enrollment in WSS, or zero otherwise.
+ *
+ * Global and local information for each WSS in which we are enrolled.
+ * WLP 0.99 Section 7.2.1 and Section 7.2.2
+ */
+struct wlp_wss {
+        struct mutex mutex;
+        struct kobject kobj;
+        /* Global properties. */
+        struct wlp_uuid wssid;
+        u8 hash;
+        char name[WLP_WSS_NAME_SIZE];
+        struct uwb_mac_addr bcast;
+        u8 secure_status:1;
+        u8 master_key[16];
+        /* Local properties. */
+        u8 tag;
+        struct uwb_mac_addr virtual_addr;
+        /* Extra */
+        u8 accept_enroll:1;
+        enum wlp_wss_state state;
+};
+/**
+ * WLP main structure
+ * @mutex: protect changes to WLP structure. We only allow changes to the
+ *         uuid, so currently this mutex only protects this field.
+ */
+struct wlp {
+        struct mutex mutex;
+        struct uwb_rc *rc;              /* UWB radio controller */
+        struct uwb_pal pal;
+        struct wlp_eda eda;
+        struct wlp_uuid uuid;
+        struct wlp_session *session;
+        struct wlp_wss wss;
+        struct mutex nbmutex; /* Neighbor mutex protects neighbors list */
+        struct list_head neighbors; /* Elements are wlp_neighbor_e */
+        struct uwb_notifs_handler uwb_notifs_handler;
+        struct wlp_device_info *dev_info;
+        void (*fill_device_info)(struct wlp *wlp, struct wlp_device_info *info);
+        int (*xmit_frame)(struct wlp *, struct sk_buff *,
+                          struct uwb_dev_addr *);
+        void (*stop_queue)(struct wlp *);
+        void (*start_queue)(struct wlp *);
+};
+/* sysfs */
+struct wlp_wss_attribute {
+        struct attribute attr;
+        ssize_t (*show)(struct wlp_wss *wss, char *buf);
+        ssize_t (*store)(struct wlp_wss *wss, const char *buf, size_t count);
+};
+#define WSS_ATTR(_name, _mode, _show, _store) \
+static struct wlp_wss_attribute wss_attr_##_name = __ATTR(_name, _mode, \
+                                                          _show, _store)
+extern int wlp_setup(struct wlp *, struct uwb_rc *);
+extern void wlp_remove(struct wlp *);
+extern ssize_t wlp_neighborhood_show(struct wlp *, char *);
+extern int wlp_wss_setup(struct net_device *, struct wlp_wss *);
+extern void wlp_wss_remove(struct wlp_wss *);
+extern ssize_t wlp_wss_activate_show(struct wlp_wss *, char *);
+extern ssize_t wlp_wss_activate_store(struct wlp_wss *, const char *, size_t);
+extern ssize_t wlp_eda_show(struct wlp *, char *);
+extern ssize_t wlp_eda_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_uuid_show(struct wlp *, char *);
+extern ssize_t wlp_uuid_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_name_show(struct wlp *, char *);
+extern ssize_t wlp_dev_name_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_manufacturer_show(struct wlp *, char *);
+extern ssize_t wlp_dev_manufacturer_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_model_name_show(struct wlp *, char *);
+extern ssize_t wlp_dev_model_name_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_model_nr_show(struct wlp *, char *);
+extern ssize_t wlp_dev_model_nr_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_serial_show(struct wlp *, char *);
+extern ssize_t wlp_dev_serial_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_prim_category_show(struct wlp *, char *);
+extern ssize_t wlp_dev_prim_category_store(struct wlp *, const char *,
+                                           size_t);
+extern ssize_t wlp_dev_prim_OUI_show(struct wlp *, char *);
+extern ssize_t wlp_dev_prim_OUI_store(struct wlp *, const char *, size_t);
+extern ssize_t wlp_dev_prim_OUI_sub_show(struct wlp *, char *);
+extern ssize_t wlp_dev_prim_OUI_sub_store(struct wlp *, const char *,
+                                          size_t);
+extern ssize_t wlp_dev_prim_subcat_show(struct wlp *, char *);
+extern ssize_t wlp_dev_prim_subcat_store(struct wlp *, const char *,
+                                         size_t);
+extern int wlp_receive_frame(struct device *, struct wlp *, struct sk_buff *,
+                             struct uwb_dev_addr *);
+extern int wlp_prepare_tx_frame(struct device *, struct wlp *,
+                               struct sk_buff *, struct uwb_dev_addr *);
+void wlp_reset_all(struct wlp *wlp);
+/**
+ * Initialize WSS
+ */
+static inline
+void wlp_wss_init(struct wlp_wss *wss)
+{
+        mutex_init(&wss->mutex);
+}
+static inline
+void wlp_init(struct wlp *wlp)
+{
+        INIT_LIST_HEAD(&wlp->neighbors);
+        mutex_init(&wlp->mutex);
+        mutex_init(&wlp->nbmutex);
+        wlp_wss_init(&wlp->wss);
+}
+#endif /* #ifndef __LINUX__WLP_H_ */
diff --git a/include/linux/workqueue.h b/include/linux/workqueue.h
index 5c158c477ac7..89a5a1231ffb 100644
--- a/include/linux/workqueue.h
+++ b/include/linux/workqueue.h
@@ -149,11 +149,11 @@ struct execute_work {
 extern struct workqueue_struct *
 __create_workqueue_key(const char *name, int singlethread,
-                       int freezeable, struct lock_class_key *key,
+                       int freezeable, int rt, struct lock_class_key *key,
                       const char *lock_name);
 #ifdef CONFIG_LOCKDEP
-#define __create_workqueue(name, singlethread, freezeable)      \
+#define __create_workqueue(name, singlethread, freezeable, rt)  \
 ({                                                              \
        static struct lock_class_key __key;                     \
        const char *__lock_name;                                \
@@ -164,17 +164,19 @@ __create_workqueue_key(const char *name, int singlethread,
                __lock_name = #name;                            \
                                                                \
        __create_workqueue_key((name), (singlethread),          \
-                               (freezeable), &__key,            \
+                               (freezeable), (rt), &__key,      \
                               __lock_name);                    \
 })
 #else
-#define __create_workqueue(name, singlethread, freezeable)      \
+#define __create_workqueue(name, singlethread, freezeable, rt)  \
-        __create_workqueue_key((name), (singlethread), (freezeable), NULL, NULL)
+        __create_workqueue_key((name), (singlethread), (freezeable), (rt), \
+                               NULL, NULL)
 #endif
-#define create_workqueue(name) __create_workqueue((name), 0, 0)
+#define create_workqueue(name) __create_workqueue((name), 0, 0, 0)
-#define create_freezeable_workqueue(name) __create_workqueue((name), 1, 1)
+#define create_rt_workqueue(name) __create_workqueue((name), 0, 0, 1)
-#define create_singlethread_workqueue(name) __create_workqueue((name), 1, 0)
+#define create_freezeable_workqueue(name) __create_workqueue((name), 1, 1, 0)
+#define create_singlethread_workqueue(name) __create_workqueue((name), 1, 0, 0)
 extern void destroy_workqueue(struct workqueue_struct *wq);