xref: /openbmc/linux/drivers/usb/core/hub.c (revision ff33299ec8bb80cdcc073ad9c506bd79bb2ed20b)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * USB hub driver.
4  *
5  * (C) Copyright 1999 Linus Torvalds
6  * (C) Copyright 1999 Johannes Erdfelt
7  * (C) Copyright 1999 Gregory P. Smith
8  * (C) Copyright 2001 Brad Hards (bhards@bigpond.net.au)
9  *
10  * Released under the GPLv2 only.
11  */
12 
13 #include <linux/kernel.h>
14 #include <linux/errno.h>
15 #include <linux/module.h>
16 #include <linux/moduleparam.h>
17 #include <linux/completion.h>
18 #include <linux/sched/mm.h>
19 #include <linux/list.h>
20 #include <linux/slab.h>
21 #include <linux/kcov.h>
22 #include <linux/ioctl.h>
23 #include <linux/usb.h>
24 #include <linux/usbdevice_fs.h>
25 #include <linux/usb/hcd.h>
26 #include <linux/usb/onboard_hub.h>
27 #include <linux/usb/otg.h>
28 #include <linux/usb/quirks.h>
29 #include <linux/workqueue.h>
30 #include <linux/mutex.h>
31 #include <linux/random.h>
32 #include <linux/pm_qos.h>
33 #include <linux/kobject.h>
34 
35 #include <linux/bitfield.h>
36 #include <linux/uaccess.h>
37 #include <asm/byteorder.h>
38 
39 #include "hub.h"
40 #include "otg_productlist.h"
41 
42 #define USB_VENDOR_GENESYS_LOGIC		0x05e3
43 #define USB_VENDOR_SMSC				0x0424
44 #define USB_PRODUCT_USB5534B			0x5534
45 #define USB_VENDOR_CYPRESS			0x04b4
46 #define USB_PRODUCT_CY7C65632			0x6570
47 #define USB_VENDOR_TEXAS_INSTRUMENTS		0x0451
48 #define USB_PRODUCT_TUSB8041_USB3		0x8140
49 #define USB_PRODUCT_TUSB8041_USB2		0x8142
50 #define HUB_QUIRK_CHECK_PORT_AUTOSUSPEND	0x01
51 #define HUB_QUIRK_DISABLE_AUTOSUSPEND		0x02
52 
53 #define USB_TP_TRANSMISSION_DELAY	40	/* ns */
54 #define USB_TP_TRANSMISSION_DELAY_MAX	65535	/* ns */
55 #define USB_PING_RESPONSE_TIME		400	/* ns */
56 
57 /* Protect struct usb_device->state and ->children members
58  * Note: Both are also protected by ->dev.sem, except that ->state can
59  * change to USB_STATE_NOTATTACHED even when the semaphore isn't held. */
60 static DEFINE_SPINLOCK(device_state_lock);
61 
62 /* workqueue to process hub events */
63 static struct workqueue_struct *hub_wq;
64 static void hub_event(struct work_struct *work);
65 
66 /* synchronize hub-port add/remove and peering operations */
67 DEFINE_MUTEX(usb_port_peer_mutex);
68 
69 /* cycle leds on hubs that aren't blinking for attention */
70 static bool blinkenlights;
71 module_param(blinkenlights, bool, S_IRUGO);
72 MODULE_PARM_DESC(blinkenlights, "true to cycle leds on hubs");
73 
74 /*
75  * Device SATA8000 FW1.0 from DATAST0R Technology Corp requires about
76  * 10 seconds to send reply for the initial 64-byte descriptor request.
77  */
78 /* define initial 64-byte descriptor request timeout in milliseconds */
79 static int initial_descriptor_timeout = USB_CTRL_GET_TIMEOUT;
80 module_param(initial_descriptor_timeout, int, S_IRUGO|S_IWUSR);
81 MODULE_PARM_DESC(initial_descriptor_timeout,
82 		"initial 64-byte descriptor request timeout in milliseconds "
83 		"(default 5000 - 5.0 seconds)");
84 
85 /*
86  * As of 2.6.10 we introduce a new USB device initialization scheme which
87  * closely resembles the way Windows works.  Hopefully it will be compatible
88  * with a wider range of devices than the old scheme.  However some previously
89  * working devices may start giving rise to "device not accepting address"
90  * errors; if that happens the user can try the old scheme by adjusting the
91  * following module parameters.
92  *
93  * For maximum flexibility there are two boolean parameters to control the
94  * hub driver's behavior.  On the first initialization attempt, if the
95  * "old_scheme_first" parameter is set then the old scheme will be used,
96  * otherwise the new scheme is used.  If that fails and "use_both_schemes"
97  * is set, then the driver will make another attempt, using the other scheme.
98  */
99 static bool old_scheme_first;
100 module_param(old_scheme_first, bool, S_IRUGO | S_IWUSR);
101 MODULE_PARM_DESC(old_scheme_first,
102 		 "start with the old device initialization scheme");
103 
104 static bool use_both_schemes = true;
105 module_param(use_both_schemes, bool, S_IRUGO | S_IWUSR);
106 MODULE_PARM_DESC(use_both_schemes,
107 		"try the other device initialization scheme if the "
108 		"first one fails");
109 
110 /* Mutual exclusion for EHCI CF initialization.  This interferes with
111  * port reset on some companion controllers.
112  */
113 DECLARE_RWSEM(ehci_cf_port_reset_rwsem);
114 EXPORT_SYMBOL_GPL(ehci_cf_port_reset_rwsem);
115 
116 #define HUB_DEBOUNCE_TIMEOUT	2000
117 #define HUB_DEBOUNCE_STEP	  25
118 #define HUB_DEBOUNCE_STABLE	 100
119 
120 static void hub_release(struct kref *kref);
121 static int usb_reset_and_verify_device(struct usb_device *udev);
122 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state);
123 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
124 		u16 portstatus);
125 
126 static inline char *portspeed(struct usb_hub *hub, int portstatus)
127 {
128 	if (hub_is_superspeedplus(hub->hdev))
129 		return "10.0 Gb/s";
130 	if (hub_is_superspeed(hub->hdev))
131 		return "5.0 Gb/s";
132 	if (portstatus & USB_PORT_STAT_HIGH_SPEED)
133 		return "480 Mb/s";
134 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
135 		return "1.5 Mb/s";
136 	else
137 		return "12 Mb/s";
138 }
139 
140 /* Note that hdev or one of its children must be locked! */
141 struct usb_hub *usb_hub_to_struct_hub(struct usb_device *hdev)
142 {
143 	if (!hdev || !hdev->actconfig || !hdev->maxchild)
144 		return NULL;
145 	return usb_get_intfdata(hdev->actconfig->interface[0]);
146 }
147 
148 int usb_device_supports_lpm(struct usb_device *udev)
149 {
150 	/* Some devices have trouble with LPM */
151 	if (udev->quirks & USB_QUIRK_NO_LPM)
152 		return 0;
153 
154 	/* USB 2.1 (and greater) devices indicate LPM support through
155 	 * their USB 2.0 Extended Capabilities BOS descriptor.
156 	 */
157 	if (udev->speed == USB_SPEED_HIGH || udev->speed == USB_SPEED_FULL) {
158 		if (udev->bos->ext_cap &&
159 			(USB_LPM_SUPPORT &
160 			 le32_to_cpu(udev->bos->ext_cap->bmAttributes)))
161 			return 1;
162 		return 0;
163 	}
164 
165 	/*
166 	 * According to the USB 3.0 spec, all USB 3.0 devices must support LPM.
167 	 * However, there are some that don't, and they set the U1/U2 exit
168 	 * latencies to zero.
169 	 */
170 	if (!udev->bos->ss_cap) {
171 		dev_info(&udev->dev, "No LPM exit latency info found, disabling LPM.\n");
172 		return 0;
173 	}
174 
175 	if (udev->bos->ss_cap->bU1devExitLat == 0 &&
176 			udev->bos->ss_cap->bU2DevExitLat == 0) {
177 		if (udev->parent)
178 			dev_info(&udev->dev, "LPM exit latency is zeroed, disabling LPM.\n");
179 		else
180 			dev_info(&udev->dev, "We don't know the algorithms for LPM for this host, disabling LPM.\n");
181 		return 0;
182 	}
183 
184 	if (!udev->parent || udev->parent->lpm_capable)
185 		return 1;
186 	return 0;
187 }
188 
189 /*
190  * Set the Maximum Exit Latency (MEL) for the host to wakup up the path from
191  * U1/U2, send a PING to the device and receive a PING_RESPONSE.
192  * See USB 3.1 section C.1.5.2
193  */
194 static void usb_set_lpm_mel(struct usb_device *udev,
195 		struct usb3_lpm_parameters *udev_lpm_params,
196 		unsigned int udev_exit_latency,
197 		struct usb_hub *hub,
198 		struct usb3_lpm_parameters *hub_lpm_params,
199 		unsigned int hub_exit_latency)
200 {
201 	unsigned int total_mel;
202 
203 	/*
204 	 * tMEL1. time to transition path from host to device into U0.
205 	 * MEL for parent already contains the delay up to parent, so only add
206 	 * the exit latency for the last link (pick the slower exit latency),
207 	 * and the hub header decode latency. See USB 3.1 section C 2.2.1
208 	 * Store MEL in nanoseconds
209 	 */
210 	total_mel = hub_lpm_params->mel +
211 		max(udev_exit_latency, hub_exit_latency) * 1000 +
212 		hub->descriptor->u.ss.bHubHdrDecLat * 100;
213 
214 	/*
215 	 * tMEL2. Time to submit PING packet. Sum of tTPTransmissionDelay for
216 	 * each link + wHubDelay for each hub. Add only for last link.
217 	 * tMEL4, the time for PING_RESPONSE to traverse upstream is similar.
218 	 * Multiply by 2 to include it as well.
219 	 */
220 	total_mel += (__le16_to_cpu(hub->descriptor->u.ss.wHubDelay) +
221 		      USB_TP_TRANSMISSION_DELAY) * 2;
222 
223 	/*
224 	 * tMEL3, tPingResponse. Time taken by device to generate PING_RESPONSE
225 	 * after receiving PING. Also add 2100ns as stated in USB 3.1 C 1.5.2.4
226 	 * to cover the delay if the PING_RESPONSE is queued behind a Max Packet
227 	 * Size DP.
228 	 * Note these delays should be added only once for the entire path, so
229 	 * add them to the MEL of the device connected to the roothub.
230 	 */
231 	if (!hub->hdev->parent)
232 		total_mel += USB_PING_RESPONSE_TIME + 2100;
233 
234 	udev_lpm_params->mel = total_mel;
235 }
236 
237 /*
238  * Set the maximum Device to Host Exit Latency (PEL) for the device to initiate
239  * a transition from either U1 or U2.
240  */
241 static void usb_set_lpm_pel(struct usb_device *udev,
242 		struct usb3_lpm_parameters *udev_lpm_params,
243 		unsigned int udev_exit_latency,
244 		struct usb_hub *hub,
245 		struct usb3_lpm_parameters *hub_lpm_params,
246 		unsigned int hub_exit_latency,
247 		unsigned int port_to_port_exit_latency)
248 {
249 	unsigned int first_link_pel;
250 	unsigned int hub_pel;
251 
252 	/*
253 	 * First, the device sends an LFPS to transition the link between the
254 	 * device and the parent hub into U0.  The exit latency is the bigger of
255 	 * the device exit latency or the hub exit latency.
256 	 */
257 	if (udev_exit_latency > hub_exit_latency)
258 		first_link_pel = udev_exit_latency * 1000;
259 	else
260 		first_link_pel = hub_exit_latency * 1000;
261 
262 	/*
263 	 * When the hub starts to receive the LFPS, there is a slight delay for
264 	 * it to figure out that one of the ports is sending an LFPS.  Then it
265 	 * will forward the LFPS to its upstream link.  The exit latency is the
266 	 * delay, plus the PEL that we calculated for this hub.
267 	 */
268 	hub_pel = port_to_port_exit_latency * 1000 + hub_lpm_params->pel;
269 
270 	/*
271 	 * According to figure C-7 in the USB 3.0 spec, the PEL for this device
272 	 * is the greater of the two exit latencies.
273 	 */
274 	if (first_link_pel > hub_pel)
275 		udev_lpm_params->pel = first_link_pel;
276 	else
277 		udev_lpm_params->pel = hub_pel;
278 }
279 
280 /*
281  * Set the System Exit Latency (SEL) to indicate the total worst-case time from
282  * when a device initiates a transition to U0, until when it will receive the
283  * first packet from the host controller.
284  *
285  * Section C.1.5.1 describes the four components to this:
286  *  - t1: device PEL
287  *  - t2: time for the ERDY to make it from the device to the host.
288  *  - t3: a host-specific delay to process the ERDY.
289  *  - t4: time for the packet to make it from the host to the device.
290  *
291  * t3 is specific to both the xHCI host and the platform the host is integrated
292  * into.  The Intel HW folks have said it's negligible, FIXME if a different
293  * vendor says otherwise.
294  */
295 static void usb_set_lpm_sel(struct usb_device *udev,
296 		struct usb3_lpm_parameters *udev_lpm_params)
297 {
298 	struct usb_device *parent;
299 	unsigned int num_hubs;
300 	unsigned int total_sel;
301 
302 	/* t1 = device PEL */
303 	total_sel = udev_lpm_params->pel;
304 	/* How many external hubs are in between the device & the root port. */
305 	for (parent = udev->parent, num_hubs = 0; parent->parent;
306 			parent = parent->parent)
307 		num_hubs++;
308 	/* t2 = 2.1us + 250ns * (num_hubs - 1) */
309 	if (num_hubs > 0)
310 		total_sel += 2100 + 250 * (num_hubs - 1);
311 
312 	/* t4 = 250ns * num_hubs */
313 	total_sel += 250 * num_hubs;
314 
315 	udev_lpm_params->sel = total_sel;
316 }
317 
318 static void usb_set_lpm_parameters(struct usb_device *udev)
319 {
320 	struct usb_hub *hub;
321 	unsigned int port_to_port_delay;
322 	unsigned int udev_u1_del;
323 	unsigned int udev_u2_del;
324 	unsigned int hub_u1_del;
325 	unsigned int hub_u2_del;
326 
327 	if (!udev->lpm_capable || udev->speed < USB_SPEED_SUPER)
328 		return;
329 
330 	hub = usb_hub_to_struct_hub(udev->parent);
331 	/* It doesn't take time to transition the roothub into U0, since it
332 	 * doesn't have an upstream link.
333 	 */
334 	if (!hub)
335 		return;
336 
337 	udev_u1_del = udev->bos->ss_cap->bU1devExitLat;
338 	udev_u2_del = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat);
339 	hub_u1_del = udev->parent->bos->ss_cap->bU1devExitLat;
340 	hub_u2_del = le16_to_cpu(udev->parent->bos->ss_cap->bU2DevExitLat);
341 
342 	usb_set_lpm_mel(udev, &udev->u1_params, udev_u1_del,
343 			hub, &udev->parent->u1_params, hub_u1_del);
344 
345 	usb_set_lpm_mel(udev, &udev->u2_params, udev_u2_del,
346 			hub, &udev->parent->u2_params, hub_u2_del);
347 
348 	/*
349 	 * Appendix C, section C.2.2.2, says that there is a slight delay from
350 	 * when the parent hub notices the downstream port is trying to
351 	 * transition to U0 to when the hub initiates a U0 transition on its
352 	 * upstream port.  The section says the delays are tPort2PortU1EL and
353 	 * tPort2PortU2EL, but it doesn't define what they are.
354 	 *
355 	 * The hub chapter, sections 10.4.2.4 and 10.4.2.5 seem to be talking
356 	 * about the same delays.  Use the maximum delay calculations from those
357 	 * sections.  For U1, it's tHubPort2PortExitLat, which is 1us max.  For
358 	 * U2, it's tHubPort2PortExitLat + U2DevExitLat - U1DevExitLat.  I
359 	 * assume the device exit latencies they are talking about are the hub
360 	 * exit latencies.
361 	 *
362 	 * What do we do if the U2 exit latency is less than the U1 exit
363 	 * latency?  It's possible, although not likely...
364 	 */
365 	port_to_port_delay = 1;
366 
367 	usb_set_lpm_pel(udev, &udev->u1_params, udev_u1_del,
368 			hub, &udev->parent->u1_params, hub_u1_del,
369 			port_to_port_delay);
370 
371 	if (hub_u2_del > hub_u1_del)
372 		port_to_port_delay = 1 + hub_u2_del - hub_u1_del;
373 	else
374 		port_to_port_delay = 1 + hub_u1_del;
375 
376 	usb_set_lpm_pel(udev, &udev->u2_params, udev_u2_del,
377 			hub, &udev->parent->u2_params, hub_u2_del,
378 			port_to_port_delay);
379 
380 	/* Now that we've got PEL, calculate SEL. */
381 	usb_set_lpm_sel(udev, &udev->u1_params);
382 	usb_set_lpm_sel(udev, &udev->u2_params);
383 }
384 
385 /* USB 2.0 spec Section 11.24.4.5 */
386 static int get_hub_descriptor(struct usb_device *hdev,
387 		struct usb_hub_descriptor *desc)
388 {
389 	int i, ret, size;
390 	unsigned dtype;
391 
392 	if (hub_is_superspeed(hdev)) {
393 		dtype = USB_DT_SS_HUB;
394 		size = USB_DT_SS_HUB_SIZE;
395 	} else {
396 		dtype = USB_DT_HUB;
397 		size = sizeof(struct usb_hub_descriptor);
398 	}
399 
400 	for (i = 0; i < 3; i++) {
401 		ret = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
402 			USB_REQ_GET_DESCRIPTOR, USB_DIR_IN | USB_RT_HUB,
403 			dtype << 8, 0, desc, size,
404 			USB_CTRL_GET_TIMEOUT);
405 		if (hub_is_superspeed(hdev)) {
406 			if (ret == size)
407 				return ret;
408 		} else if (ret >= USB_DT_HUB_NONVAR_SIZE + 2) {
409 			/* Make sure we have the DeviceRemovable field. */
410 			size = USB_DT_HUB_NONVAR_SIZE + desc->bNbrPorts / 8 + 1;
411 			if (ret < size)
412 				return -EMSGSIZE;
413 			return ret;
414 		}
415 	}
416 	return -EINVAL;
417 }
418 
419 /*
420  * USB 2.0 spec Section 11.24.2.1
421  */
422 static int clear_hub_feature(struct usb_device *hdev, int feature)
423 {
424 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
425 		USB_REQ_CLEAR_FEATURE, USB_RT_HUB, feature, 0, NULL, 0, 1000);
426 }
427 
428 /*
429  * USB 2.0 spec Section 11.24.2.2
430  */
431 int usb_clear_port_feature(struct usb_device *hdev, int port1, int feature)
432 {
433 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
434 		USB_REQ_CLEAR_FEATURE, USB_RT_PORT, feature, port1,
435 		NULL, 0, 1000);
436 }
437 
438 /*
439  * USB 2.0 spec Section 11.24.2.13
440  */
441 static int set_port_feature(struct usb_device *hdev, int port1, int feature)
442 {
443 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
444 		USB_REQ_SET_FEATURE, USB_RT_PORT, feature, port1,
445 		NULL, 0, 1000);
446 }
447 
448 static char *to_led_name(int selector)
449 {
450 	switch (selector) {
451 	case HUB_LED_AMBER:
452 		return "amber";
453 	case HUB_LED_GREEN:
454 		return "green";
455 	case HUB_LED_OFF:
456 		return "off";
457 	case HUB_LED_AUTO:
458 		return "auto";
459 	default:
460 		return "??";
461 	}
462 }
463 
464 /*
465  * USB 2.0 spec Section 11.24.2.7.1.10 and table 11-7
466  * for info about using port indicators
467  */
468 static void set_port_led(struct usb_hub *hub, int port1, int selector)
469 {
470 	struct usb_port *port_dev = hub->ports[port1 - 1];
471 	int status;
472 
473 	status = set_port_feature(hub->hdev, (selector << 8) | port1,
474 			USB_PORT_FEAT_INDICATOR);
475 	dev_dbg(&port_dev->dev, "indicator %s status %d\n",
476 		to_led_name(selector), status);
477 }
478 
479 #define	LED_CYCLE_PERIOD	((2*HZ)/3)
480 
481 static void led_work(struct work_struct *work)
482 {
483 	struct usb_hub		*hub =
484 		container_of(work, struct usb_hub, leds.work);
485 	struct usb_device	*hdev = hub->hdev;
486 	unsigned		i;
487 	unsigned		changed = 0;
488 	int			cursor = -1;
489 
490 	if (hdev->state != USB_STATE_CONFIGURED || hub->quiescing)
491 		return;
492 
493 	for (i = 0; i < hdev->maxchild; i++) {
494 		unsigned	selector, mode;
495 
496 		/* 30%-50% duty cycle */
497 
498 		switch (hub->indicator[i]) {
499 		/* cycle marker */
500 		case INDICATOR_CYCLE:
501 			cursor = i;
502 			selector = HUB_LED_AUTO;
503 			mode = INDICATOR_AUTO;
504 			break;
505 		/* blinking green = sw attention */
506 		case INDICATOR_GREEN_BLINK:
507 			selector = HUB_LED_GREEN;
508 			mode = INDICATOR_GREEN_BLINK_OFF;
509 			break;
510 		case INDICATOR_GREEN_BLINK_OFF:
511 			selector = HUB_LED_OFF;
512 			mode = INDICATOR_GREEN_BLINK;
513 			break;
514 		/* blinking amber = hw attention */
515 		case INDICATOR_AMBER_BLINK:
516 			selector = HUB_LED_AMBER;
517 			mode = INDICATOR_AMBER_BLINK_OFF;
518 			break;
519 		case INDICATOR_AMBER_BLINK_OFF:
520 			selector = HUB_LED_OFF;
521 			mode = INDICATOR_AMBER_BLINK;
522 			break;
523 		/* blink green/amber = reserved */
524 		case INDICATOR_ALT_BLINK:
525 			selector = HUB_LED_GREEN;
526 			mode = INDICATOR_ALT_BLINK_OFF;
527 			break;
528 		case INDICATOR_ALT_BLINK_OFF:
529 			selector = HUB_LED_AMBER;
530 			mode = INDICATOR_ALT_BLINK;
531 			break;
532 		default:
533 			continue;
534 		}
535 		if (selector != HUB_LED_AUTO)
536 			changed = 1;
537 		set_port_led(hub, i + 1, selector);
538 		hub->indicator[i] = mode;
539 	}
540 	if (!changed && blinkenlights) {
541 		cursor++;
542 		cursor %= hdev->maxchild;
543 		set_port_led(hub, cursor + 1, HUB_LED_GREEN);
544 		hub->indicator[cursor] = INDICATOR_CYCLE;
545 		changed++;
546 	}
547 	if (changed)
548 		queue_delayed_work(system_power_efficient_wq,
549 				&hub->leds, LED_CYCLE_PERIOD);
550 }
551 
552 /* use a short timeout for hub/port status fetches */
553 #define	USB_STS_TIMEOUT		1000
554 #define	USB_STS_RETRIES		5
555 
556 /*
557  * USB 2.0 spec Section 11.24.2.6
558  */
559 static int get_hub_status(struct usb_device *hdev,
560 		struct usb_hub_status *data)
561 {
562 	int i, status = -ETIMEDOUT;
563 
564 	for (i = 0; i < USB_STS_RETRIES &&
565 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
566 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
567 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_HUB, 0, 0,
568 			data, sizeof(*data), USB_STS_TIMEOUT);
569 	}
570 	return status;
571 }
572 
573 /*
574  * USB 2.0 spec Section 11.24.2.7
575  * USB 3.1 takes into use the wValue and wLength fields, spec Section 10.16.2.6
576  */
577 static int get_port_status(struct usb_device *hdev, int port1,
578 			   void *data, u16 value, u16 length)
579 {
580 	int i, status = -ETIMEDOUT;
581 
582 	for (i = 0; i < USB_STS_RETRIES &&
583 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
584 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
585 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_PORT, value,
586 			port1, data, length, USB_STS_TIMEOUT);
587 	}
588 	return status;
589 }
590 
591 static int hub_ext_port_status(struct usb_hub *hub, int port1, int type,
592 			       u16 *status, u16 *change, u32 *ext_status)
593 {
594 	int ret;
595 	int len = 4;
596 
597 	if (type != HUB_PORT_STATUS)
598 		len = 8;
599 
600 	mutex_lock(&hub->status_mutex);
601 	ret = get_port_status(hub->hdev, port1, &hub->status->port, type, len);
602 	if (ret < len) {
603 		if (ret != -ENODEV)
604 			dev_err(hub->intfdev,
605 				"%s failed (err = %d)\n", __func__, ret);
606 		if (ret >= 0)
607 			ret = -EIO;
608 	} else {
609 		*status = le16_to_cpu(hub->status->port.wPortStatus);
610 		*change = le16_to_cpu(hub->status->port.wPortChange);
611 		if (type != HUB_PORT_STATUS && ext_status)
612 			*ext_status = le32_to_cpu(
613 				hub->status->port.dwExtPortStatus);
614 		ret = 0;
615 	}
616 	mutex_unlock(&hub->status_mutex);
617 
618 	/*
619 	 * There is no need to lock status_mutex here, because status_mutex
620 	 * protects hub->status, and the phy driver only checks the port
621 	 * status without changing the status.
622 	 */
623 	if (!ret) {
624 		struct usb_device *hdev = hub->hdev;
625 
626 		/*
627 		 * Only roothub will be notified of port state changes,
628 		 * since the USB PHY only cares about changes at the next
629 		 * level.
630 		 */
631 		if (is_root_hub(hdev)) {
632 			struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
633 
634 			if (hcd->usb_phy)
635 				usb_phy_notify_port_status(hcd->usb_phy,
636 							   port1 - 1, *status, *change);
637 		}
638 	}
639 
640 	return ret;
641 }
642 
643 int usb_hub_port_status(struct usb_hub *hub, int port1,
644 		u16 *status, u16 *change)
645 {
646 	return hub_ext_port_status(hub, port1, HUB_PORT_STATUS,
647 				   status, change, NULL);
648 }
649 
650 static void hub_resubmit_irq_urb(struct usb_hub *hub)
651 {
652 	unsigned long flags;
653 	int status;
654 
655 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
656 
657 	if (hub->quiescing) {
658 		spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
659 		return;
660 	}
661 
662 	status = usb_submit_urb(hub->urb, GFP_ATOMIC);
663 	if (status && status != -ENODEV && status != -EPERM &&
664 	    status != -ESHUTDOWN) {
665 		dev_err(hub->intfdev, "resubmit --> %d\n", status);
666 		mod_timer(&hub->irq_urb_retry, jiffies + HZ);
667 	}
668 
669 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
670 }
671 
672 static void hub_retry_irq_urb(struct timer_list *t)
673 {
674 	struct usb_hub *hub = from_timer(hub, t, irq_urb_retry);
675 
676 	hub_resubmit_irq_urb(hub);
677 }
678 
679 
680 static void kick_hub_wq(struct usb_hub *hub)
681 {
682 	struct usb_interface *intf;
683 
684 	if (hub->disconnected || work_pending(&hub->events))
685 		return;
686 
687 	/*
688 	 * Suppress autosuspend until the event is proceed.
689 	 *
690 	 * Be careful and make sure that the symmetric operation is
691 	 * always called. We are here only when there is no pending
692 	 * work for this hub. Therefore put the interface either when
693 	 * the new work is called or when it is canceled.
694 	 */
695 	intf = to_usb_interface(hub->intfdev);
696 	usb_autopm_get_interface_no_resume(intf);
697 	kref_get(&hub->kref);
698 
699 	if (queue_work(hub_wq, &hub->events))
700 		return;
701 
702 	/* the work has already been scheduled */
703 	usb_autopm_put_interface_async(intf);
704 	kref_put(&hub->kref, hub_release);
705 }
706 
707 void usb_kick_hub_wq(struct usb_device *hdev)
708 {
709 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
710 
711 	if (hub)
712 		kick_hub_wq(hub);
713 }
714 
715 /*
716  * Let the USB core know that a USB 3.0 device has sent a Function Wake Device
717  * Notification, which indicates it had initiated remote wakeup.
718  *
719  * USB 3.0 hubs do not report the port link state change from U3 to U0 when the
720  * device initiates resume, so the USB core will not receive notice of the
721  * resume through the normal hub interrupt URB.
722  */
723 void usb_wakeup_notification(struct usb_device *hdev,
724 		unsigned int portnum)
725 {
726 	struct usb_hub *hub;
727 	struct usb_port *port_dev;
728 
729 	if (!hdev)
730 		return;
731 
732 	hub = usb_hub_to_struct_hub(hdev);
733 	if (hub) {
734 		port_dev = hub->ports[portnum - 1];
735 		if (port_dev && port_dev->child)
736 			pm_wakeup_event(&port_dev->child->dev, 0);
737 
738 		set_bit(portnum, hub->wakeup_bits);
739 		kick_hub_wq(hub);
740 	}
741 }
742 EXPORT_SYMBOL_GPL(usb_wakeup_notification);
743 
744 /* completion function, fires on port status changes and various faults */
745 static void hub_irq(struct urb *urb)
746 {
747 	struct usb_hub *hub = urb->context;
748 	int status = urb->status;
749 	unsigned i;
750 	unsigned long bits;
751 
752 	switch (status) {
753 	case -ENOENT:		/* synchronous unlink */
754 	case -ECONNRESET:	/* async unlink */
755 	case -ESHUTDOWN:	/* hardware going away */
756 		return;
757 
758 	default:		/* presumably an error */
759 		/* Cause a hub reset after 10 consecutive errors */
760 		dev_dbg(hub->intfdev, "transfer --> %d\n", status);
761 		if ((++hub->nerrors < 10) || hub->error)
762 			goto resubmit;
763 		hub->error = status;
764 		fallthrough;
765 
766 	/* let hub_wq handle things */
767 	case 0:			/* we got data:  port status changed */
768 		bits = 0;
769 		for (i = 0; i < urb->actual_length; ++i)
770 			bits |= ((unsigned long) ((*hub->buffer)[i]))
771 					<< (i*8);
772 		hub->event_bits[0] = bits;
773 		break;
774 	}
775 
776 	hub->nerrors = 0;
777 
778 	/* Something happened, let hub_wq figure it out */
779 	kick_hub_wq(hub);
780 
781 resubmit:
782 	hub_resubmit_irq_urb(hub);
783 }
784 
785 /* USB 2.0 spec Section 11.24.2.3 */
786 static inline int
787 hub_clear_tt_buffer(struct usb_device *hdev, u16 devinfo, u16 tt)
788 {
789 	/* Need to clear both directions for control ep */
790 	if (((devinfo >> 11) & USB_ENDPOINT_XFERTYPE_MASK) ==
791 			USB_ENDPOINT_XFER_CONTROL) {
792 		int status = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
793 				HUB_CLEAR_TT_BUFFER, USB_RT_PORT,
794 				devinfo ^ 0x8000, tt, NULL, 0, 1000);
795 		if (status)
796 			return status;
797 	}
798 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
799 			       HUB_CLEAR_TT_BUFFER, USB_RT_PORT, devinfo,
800 			       tt, NULL, 0, 1000);
801 }
802 
803 /*
804  * enumeration blocks hub_wq for a long time. we use keventd instead, since
805  * long blocking there is the exception, not the rule.  accordingly, HCDs
806  * talking to TTs must queue control transfers (not just bulk and iso), so
807  * both can talk to the same hub concurrently.
808  */
809 static void hub_tt_work(struct work_struct *work)
810 {
811 	struct usb_hub		*hub =
812 		container_of(work, struct usb_hub, tt.clear_work);
813 	unsigned long		flags;
814 
815 	spin_lock_irqsave(&hub->tt.lock, flags);
816 	while (!list_empty(&hub->tt.clear_list)) {
817 		struct list_head	*next;
818 		struct usb_tt_clear	*clear;
819 		struct usb_device	*hdev = hub->hdev;
820 		const struct hc_driver	*drv;
821 		int			status;
822 
823 		next = hub->tt.clear_list.next;
824 		clear = list_entry(next, struct usb_tt_clear, clear_list);
825 		list_del(&clear->clear_list);
826 
827 		/* drop lock so HCD can concurrently report other TT errors */
828 		spin_unlock_irqrestore(&hub->tt.lock, flags);
829 		status = hub_clear_tt_buffer(hdev, clear->devinfo, clear->tt);
830 		if (status && status != -ENODEV)
831 			dev_err(&hdev->dev,
832 				"clear tt %d (%04x) error %d\n",
833 				clear->tt, clear->devinfo, status);
834 
835 		/* Tell the HCD, even if the operation failed */
836 		drv = clear->hcd->driver;
837 		if (drv->clear_tt_buffer_complete)
838 			(drv->clear_tt_buffer_complete)(clear->hcd, clear->ep);
839 
840 		kfree(clear);
841 		spin_lock_irqsave(&hub->tt.lock, flags);
842 	}
843 	spin_unlock_irqrestore(&hub->tt.lock, flags);
844 }
845 
846 /**
847  * usb_hub_set_port_power - control hub port's power state
848  * @hdev: USB device belonging to the usb hub
849  * @hub: target hub
850  * @port1: port index
851  * @set: expected status
852  *
853  * call this function to control port's power via setting or
854  * clearing the port's PORT_POWER feature.
855  *
856  * Return: 0 if successful. A negative error code otherwise.
857  */
858 int usb_hub_set_port_power(struct usb_device *hdev, struct usb_hub *hub,
859 			   int port1, bool set)
860 {
861 	int ret;
862 
863 	if (set)
864 		ret = set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
865 	else
866 		ret = usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
867 
868 	if (ret)
869 		return ret;
870 
871 	if (set)
872 		set_bit(port1, hub->power_bits);
873 	else
874 		clear_bit(port1, hub->power_bits);
875 	return 0;
876 }
877 
878 /**
879  * usb_hub_clear_tt_buffer - clear control/bulk TT state in high speed hub
880  * @urb: an URB associated with the failed or incomplete split transaction
881  *
882  * High speed HCDs use this to tell the hub driver that some split control or
883  * bulk transaction failed in a way that requires clearing internal state of
884  * a transaction translator.  This is normally detected (and reported) from
885  * interrupt context.
886  *
887  * It may not be possible for that hub to handle additional full (or low)
888  * speed transactions until that state is fully cleared out.
889  *
890  * Return: 0 if successful. A negative error code otherwise.
891  */
892 int usb_hub_clear_tt_buffer(struct urb *urb)
893 {
894 	struct usb_device	*udev = urb->dev;
895 	int			pipe = urb->pipe;
896 	struct usb_tt		*tt = udev->tt;
897 	unsigned long		flags;
898 	struct usb_tt_clear	*clear;
899 
900 	/* we've got to cope with an arbitrary number of pending TT clears,
901 	 * since each TT has "at least two" buffers that can need it (and
902 	 * there can be many TTs per hub).  even if they're uncommon.
903 	 */
904 	clear = kmalloc(sizeof *clear, GFP_ATOMIC);
905 	if (clear == NULL) {
906 		dev_err(&udev->dev, "can't save CLEAR_TT_BUFFER state\n");
907 		/* FIXME recover somehow ... RESET_TT? */
908 		return -ENOMEM;
909 	}
910 
911 	/* info that CLEAR_TT_BUFFER needs */
912 	clear->tt = tt->multi ? udev->ttport : 1;
913 	clear->devinfo = usb_pipeendpoint (pipe);
914 	clear->devinfo |= ((u16)udev->devaddr) << 4;
915 	clear->devinfo |= usb_pipecontrol(pipe)
916 			? (USB_ENDPOINT_XFER_CONTROL << 11)
917 			: (USB_ENDPOINT_XFER_BULK << 11);
918 	if (usb_pipein(pipe))
919 		clear->devinfo |= 1 << 15;
920 
921 	/* info for completion callback */
922 	clear->hcd = bus_to_hcd(udev->bus);
923 	clear->ep = urb->ep;
924 
925 	/* tell keventd to clear state for this TT */
926 	spin_lock_irqsave(&tt->lock, flags);
927 	list_add_tail(&clear->clear_list, &tt->clear_list);
928 	schedule_work(&tt->clear_work);
929 	spin_unlock_irqrestore(&tt->lock, flags);
930 	return 0;
931 }
932 EXPORT_SYMBOL_GPL(usb_hub_clear_tt_buffer);
933 
934 static void hub_power_on(struct usb_hub *hub, bool do_delay)
935 {
936 	int port1;
937 
938 	/* Enable power on each port.  Some hubs have reserved values
939 	 * of LPSM (> 2) in their descriptors, even though they are
940 	 * USB 2.0 hubs.  Some hubs do not implement port-power switching
941 	 * but only emulate it.  In all cases, the ports won't work
942 	 * unless we send these messages to the hub.
943 	 */
944 	if (hub_is_port_power_switchable(hub))
945 		dev_dbg(hub->intfdev, "enabling power on all ports\n");
946 	else
947 		dev_dbg(hub->intfdev, "trying to enable port power on "
948 				"non-switchable hub\n");
949 	for (port1 = 1; port1 <= hub->hdev->maxchild; port1++)
950 		if (test_bit(port1, hub->power_bits))
951 			set_port_feature(hub->hdev, port1, USB_PORT_FEAT_POWER);
952 		else
953 			usb_clear_port_feature(hub->hdev, port1,
954 						USB_PORT_FEAT_POWER);
955 	if (do_delay)
956 		msleep(hub_power_on_good_delay(hub));
957 }
958 
959 static int hub_hub_status(struct usb_hub *hub,
960 		u16 *status, u16 *change)
961 {
962 	int ret;
963 
964 	mutex_lock(&hub->status_mutex);
965 	ret = get_hub_status(hub->hdev, &hub->status->hub);
966 	if (ret < 0) {
967 		if (ret != -ENODEV)
968 			dev_err(hub->intfdev,
969 				"%s failed (err = %d)\n", __func__, ret);
970 	} else {
971 		*status = le16_to_cpu(hub->status->hub.wHubStatus);
972 		*change = le16_to_cpu(hub->status->hub.wHubChange);
973 		ret = 0;
974 	}
975 	mutex_unlock(&hub->status_mutex);
976 	return ret;
977 }
978 
979 static int hub_set_port_link_state(struct usb_hub *hub, int port1,
980 			unsigned int link_status)
981 {
982 	return set_port_feature(hub->hdev,
983 			port1 | (link_status << 3),
984 			USB_PORT_FEAT_LINK_STATE);
985 }
986 
987 /*
988  * Disable a port and mark a logical connect-change event, so that some
989  * time later hub_wq will disconnect() any existing usb_device on the port
990  * and will re-enumerate if there actually is a device attached.
991  */
992 static void hub_port_logical_disconnect(struct usb_hub *hub, int port1)
993 {
994 	dev_dbg(&hub->ports[port1 - 1]->dev, "logical disconnect\n");
995 	hub_port_disable(hub, port1, 1);
996 
997 	/* FIXME let caller ask to power down the port:
998 	 *  - some devices won't enumerate without a VBUS power cycle
999 	 *  - SRP saves power that way
1000 	 *  - ... new call, TBD ...
1001 	 * That's easy if this hub can switch power per-port, and
1002 	 * hub_wq reactivates the port later (timer, SRP, etc).
1003 	 * Powerdown must be optional, because of reset/DFU.
1004 	 */
1005 
1006 	set_bit(port1, hub->change_bits);
1007 	kick_hub_wq(hub);
1008 }
1009 
1010 /**
1011  * usb_remove_device - disable a device's port on its parent hub
1012  * @udev: device to be disabled and removed
1013  * Context: @udev locked, must be able to sleep.
1014  *
1015  * After @udev's port has been disabled, hub_wq is notified and it will
1016  * see that the device has been disconnected.  When the device is
1017  * physically unplugged and something is plugged in, the events will
1018  * be received and processed normally.
1019  *
1020  * Return: 0 if successful. A negative error code otherwise.
1021  */
1022 int usb_remove_device(struct usb_device *udev)
1023 {
1024 	struct usb_hub *hub;
1025 	struct usb_interface *intf;
1026 	int ret;
1027 
1028 	if (!udev->parent)	/* Can't remove a root hub */
1029 		return -EINVAL;
1030 	hub = usb_hub_to_struct_hub(udev->parent);
1031 	intf = to_usb_interface(hub->intfdev);
1032 
1033 	ret = usb_autopm_get_interface(intf);
1034 	if (ret < 0)
1035 		return ret;
1036 
1037 	set_bit(udev->portnum, hub->removed_bits);
1038 	hub_port_logical_disconnect(hub, udev->portnum);
1039 	usb_autopm_put_interface(intf);
1040 	return 0;
1041 }
1042 
1043 enum hub_activation_type {
1044 	HUB_INIT, HUB_INIT2, HUB_INIT3,		/* INITs must come first */
1045 	HUB_POST_RESET, HUB_RESUME, HUB_RESET_RESUME,
1046 };
1047 
1048 static void hub_init_func2(struct work_struct *ws);
1049 static void hub_init_func3(struct work_struct *ws);
1050 
1051 static void hub_activate(struct usb_hub *hub, enum hub_activation_type type)
1052 {
1053 	struct usb_device *hdev = hub->hdev;
1054 	struct usb_hcd *hcd;
1055 	int ret;
1056 	int port1;
1057 	int status;
1058 	bool need_debounce_delay = false;
1059 	unsigned delay;
1060 
1061 	/* Continue a partial initialization */
1062 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1063 		device_lock(&hdev->dev);
1064 
1065 		/* Was the hub disconnected while we were waiting? */
1066 		if (hub->disconnected)
1067 			goto disconnected;
1068 		if (type == HUB_INIT2)
1069 			goto init2;
1070 		goto init3;
1071 	}
1072 	kref_get(&hub->kref);
1073 
1074 	/* The superspeed hub except for root hub has to use Hub Depth
1075 	 * value as an offset into the route string to locate the bits
1076 	 * it uses to determine the downstream port number. So hub driver
1077 	 * should send a set hub depth request to superspeed hub after
1078 	 * the superspeed hub is set configuration in initialization or
1079 	 * reset procedure.
1080 	 *
1081 	 * After a resume, port power should still be on.
1082 	 * For any other type of activation, turn it on.
1083 	 */
1084 	if (type != HUB_RESUME) {
1085 		if (hdev->parent && hub_is_superspeed(hdev)) {
1086 			ret = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
1087 					HUB_SET_DEPTH, USB_RT_HUB,
1088 					hdev->level - 1, 0, NULL, 0,
1089 					USB_CTRL_SET_TIMEOUT);
1090 			if (ret < 0)
1091 				dev_err(hub->intfdev,
1092 						"set hub depth failed\n");
1093 		}
1094 
1095 		/* Speed up system boot by using a delayed_work for the
1096 		 * hub's initial power-up delays.  This is pretty awkward
1097 		 * and the implementation looks like a home-brewed sort of
1098 		 * setjmp/longjmp, but it saves at least 100 ms for each
1099 		 * root hub (assuming usbcore is compiled into the kernel
1100 		 * rather than as a module).  It adds up.
1101 		 *
1102 		 * This can't be done for HUB_RESUME or HUB_RESET_RESUME
1103 		 * because for those activation types the ports have to be
1104 		 * operational when we return.  In theory this could be done
1105 		 * for HUB_POST_RESET, but it's easier not to.
1106 		 */
1107 		if (type == HUB_INIT) {
1108 			delay = hub_power_on_good_delay(hub);
1109 
1110 			hub_power_on(hub, false);
1111 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func2);
1112 			queue_delayed_work(system_power_efficient_wq,
1113 					&hub->init_work,
1114 					msecs_to_jiffies(delay));
1115 
1116 			/* Suppress autosuspend until init is done */
1117 			usb_autopm_get_interface_no_resume(
1118 					to_usb_interface(hub->intfdev));
1119 			return;		/* Continues at init2: below */
1120 		} else if (type == HUB_RESET_RESUME) {
1121 			/* The internal host controller state for the hub device
1122 			 * may be gone after a host power loss on system resume.
1123 			 * Update the device's info so the HW knows it's a hub.
1124 			 */
1125 			hcd = bus_to_hcd(hdev->bus);
1126 			if (hcd->driver->update_hub_device) {
1127 				ret = hcd->driver->update_hub_device(hcd, hdev,
1128 						&hub->tt, GFP_NOIO);
1129 				if (ret < 0) {
1130 					dev_err(hub->intfdev,
1131 						"Host not accepting hub info update\n");
1132 					dev_err(hub->intfdev,
1133 						"LS/FS devices and hubs may not work under this hub\n");
1134 				}
1135 			}
1136 			hub_power_on(hub, true);
1137 		} else {
1138 			hub_power_on(hub, true);
1139 		}
1140 	/* Give some time on remote wakeup to let links to transit to U0 */
1141 	} else if (hub_is_superspeed(hub->hdev))
1142 		msleep(20);
1143 
1144  init2:
1145 
1146 	/*
1147 	 * Check each port and set hub->change_bits to let hub_wq know
1148 	 * which ports need attention.
1149 	 */
1150 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
1151 		struct usb_port *port_dev = hub->ports[port1 - 1];
1152 		struct usb_device *udev = port_dev->child;
1153 		u16 portstatus, portchange;
1154 
1155 		portstatus = portchange = 0;
1156 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
1157 		if (status)
1158 			goto abort;
1159 
1160 		if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
1161 			dev_dbg(&port_dev->dev, "status %04x change %04x\n",
1162 					portstatus, portchange);
1163 
1164 		/*
1165 		 * After anything other than HUB_RESUME (i.e., initialization
1166 		 * or any sort of reset), every port should be disabled.
1167 		 * Unconnected ports should likewise be disabled (paranoia),
1168 		 * and so should ports for which we have no usb_device.
1169 		 */
1170 		if ((portstatus & USB_PORT_STAT_ENABLE) && (
1171 				type != HUB_RESUME ||
1172 				!(portstatus & USB_PORT_STAT_CONNECTION) ||
1173 				!udev ||
1174 				udev->state == USB_STATE_NOTATTACHED)) {
1175 			/*
1176 			 * USB3 protocol ports will automatically transition
1177 			 * to Enabled state when detect an USB3.0 device attach.
1178 			 * Do not disable USB3 protocol ports, just pretend
1179 			 * power was lost
1180 			 */
1181 			portstatus &= ~USB_PORT_STAT_ENABLE;
1182 			if (!hub_is_superspeed(hdev))
1183 				usb_clear_port_feature(hdev, port1,
1184 						   USB_PORT_FEAT_ENABLE);
1185 		}
1186 
1187 		/* Make sure a warm-reset request is handled by port_event */
1188 		if (type == HUB_RESUME &&
1189 		    hub_port_warm_reset_required(hub, port1, portstatus))
1190 			set_bit(port1, hub->event_bits);
1191 
1192 		/*
1193 		 * Add debounce if USB3 link is in polling/link training state.
1194 		 * Link will automatically transition to Enabled state after
1195 		 * link training completes.
1196 		 */
1197 		if (hub_is_superspeed(hdev) &&
1198 		    ((portstatus & USB_PORT_STAT_LINK_STATE) ==
1199 						USB_SS_PORT_LS_POLLING))
1200 			need_debounce_delay = true;
1201 
1202 		/* Clear status-change flags; we'll debounce later */
1203 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
1204 			need_debounce_delay = true;
1205 			usb_clear_port_feature(hub->hdev, port1,
1206 					USB_PORT_FEAT_C_CONNECTION);
1207 		}
1208 		if (portchange & USB_PORT_STAT_C_ENABLE) {
1209 			need_debounce_delay = true;
1210 			usb_clear_port_feature(hub->hdev, port1,
1211 					USB_PORT_FEAT_C_ENABLE);
1212 		}
1213 		if (portchange & USB_PORT_STAT_C_RESET) {
1214 			need_debounce_delay = true;
1215 			usb_clear_port_feature(hub->hdev, port1,
1216 					USB_PORT_FEAT_C_RESET);
1217 		}
1218 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
1219 				hub_is_superspeed(hub->hdev)) {
1220 			need_debounce_delay = true;
1221 			usb_clear_port_feature(hub->hdev, port1,
1222 					USB_PORT_FEAT_C_BH_PORT_RESET);
1223 		}
1224 		/* We can forget about a "removed" device when there's a
1225 		 * physical disconnect or the connect status changes.
1226 		 */
1227 		if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
1228 				(portchange & USB_PORT_STAT_C_CONNECTION))
1229 			clear_bit(port1, hub->removed_bits);
1230 
1231 		if (!udev || udev->state == USB_STATE_NOTATTACHED) {
1232 			/* Tell hub_wq to disconnect the device or
1233 			 * check for a new connection or over current condition.
1234 			 * Based on USB2.0 Spec Section 11.12.5,
1235 			 * C_PORT_OVER_CURRENT could be set while
1236 			 * PORT_OVER_CURRENT is not. So check for any of them.
1237 			 */
1238 			if (udev || (portstatus & USB_PORT_STAT_CONNECTION) ||
1239 			    (portchange & USB_PORT_STAT_C_CONNECTION) ||
1240 			    (portstatus & USB_PORT_STAT_OVERCURRENT) ||
1241 			    (portchange & USB_PORT_STAT_C_OVERCURRENT))
1242 				set_bit(port1, hub->change_bits);
1243 
1244 		} else if (portstatus & USB_PORT_STAT_ENABLE) {
1245 			bool port_resumed = (portstatus &
1246 					USB_PORT_STAT_LINK_STATE) ==
1247 				USB_SS_PORT_LS_U0;
1248 			/* The power session apparently survived the resume.
1249 			 * If there was an overcurrent or suspend change
1250 			 * (i.e., remote wakeup request), have hub_wq
1251 			 * take care of it.  Look at the port link state
1252 			 * for USB 3.0 hubs, since they don't have a suspend
1253 			 * change bit, and they don't set the port link change
1254 			 * bit on device-initiated resume.
1255 			 */
1256 			if (portchange || (hub_is_superspeed(hub->hdev) &&
1257 						port_resumed))
1258 				set_bit(port1, hub->event_bits);
1259 
1260 		} else if (udev->persist_enabled) {
1261 #ifdef CONFIG_PM
1262 			udev->reset_resume = 1;
1263 #endif
1264 			/* Don't set the change_bits when the device
1265 			 * was powered off.
1266 			 */
1267 			if (test_bit(port1, hub->power_bits))
1268 				set_bit(port1, hub->change_bits);
1269 
1270 		} else {
1271 			/* The power session is gone; tell hub_wq */
1272 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1273 			set_bit(port1, hub->change_bits);
1274 		}
1275 	}
1276 
1277 	/* If no port-status-change flags were set, we don't need any
1278 	 * debouncing.  If flags were set we can try to debounce the
1279 	 * ports all at once right now, instead of letting hub_wq do them
1280 	 * one at a time later on.
1281 	 *
1282 	 * If any port-status changes do occur during this delay, hub_wq
1283 	 * will see them later and handle them normally.
1284 	 */
1285 	if (need_debounce_delay) {
1286 		delay = HUB_DEBOUNCE_STABLE;
1287 
1288 		/* Don't do a long sleep inside a workqueue routine */
1289 		if (type == HUB_INIT2) {
1290 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func3);
1291 			queue_delayed_work(system_power_efficient_wq,
1292 					&hub->init_work,
1293 					msecs_to_jiffies(delay));
1294 			device_unlock(&hdev->dev);
1295 			return;		/* Continues at init3: below */
1296 		} else {
1297 			msleep(delay);
1298 		}
1299 	}
1300  init3:
1301 	hub->quiescing = 0;
1302 
1303 	status = usb_submit_urb(hub->urb, GFP_NOIO);
1304 	if (status < 0)
1305 		dev_err(hub->intfdev, "activate --> %d\n", status);
1306 	if (hub->has_indicators && blinkenlights)
1307 		queue_delayed_work(system_power_efficient_wq,
1308 				&hub->leds, LED_CYCLE_PERIOD);
1309 
1310 	/* Scan all ports that need attention */
1311 	kick_hub_wq(hub);
1312  abort:
1313 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1314 		/* Allow autosuspend if it was suppressed */
1315  disconnected:
1316 		usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
1317 		device_unlock(&hdev->dev);
1318 	}
1319 
1320 	kref_put(&hub->kref, hub_release);
1321 }
1322 
1323 /* Implement the continuations for the delays above */
1324 static void hub_init_func2(struct work_struct *ws)
1325 {
1326 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1327 
1328 	hub_activate(hub, HUB_INIT2);
1329 }
1330 
1331 static void hub_init_func3(struct work_struct *ws)
1332 {
1333 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1334 
1335 	hub_activate(hub, HUB_INIT3);
1336 }
1337 
1338 enum hub_quiescing_type {
1339 	HUB_DISCONNECT, HUB_PRE_RESET, HUB_SUSPEND
1340 };
1341 
1342 static void hub_quiesce(struct usb_hub *hub, enum hub_quiescing_type type)
1343 {
1344 	struct usb_device *hdev = hub->hdev;
1345 	unsigned long flags;
1346 	int i;
1347 
1348 	/* hub_wq and related activity won't re-trigger */
1349 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
1350 	hub->quiescing = 1;
1351 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
1352 
1353 	if (type != HUB_SUSPEND) {
1354 		/* Disconnect all the children */
1355 		for (i = 0; i < hdev->maxchild; ++i) {
1356 			if (hub->ports[i]->child)
1357 				usb_disconnect(&hub->ports[i]->child);
1358 		}
1359 	}
1360 
1361 	/* Stop hub_wq and related activity */
1362 	del_timer_sync(&hub->irq_urb_retry);
1363 	usb_kill_urb(hub->urb);
1364 	if (hub->has_indicators)
1365 		cancel_delayed_work_sync(&hub->leds);
1366 	if (hub->tt.hub)
1367 		flush_work(&hub->tt.clear_work);
1368 }
1369 
1370 static void hub_pm_barrier_for_all_ports(struct usb_hub *hub)
1371 {
1372 	int i;
1373 
1374 	for (i = 0; i < hub->hdev->maxchild; ++i)
1375 		pm_runtime_barrier(&hub->ports[i]->dev);
1376 }
1377 
1378 /* caller has locked the hub device */
1379 static int hub_pre_reset(struct usb_interface *intf)
1380 {
1381 	struct usb_hub *hub = usb_get_intfdata(intf);
1382 
1383 	hub_quiesce(hub, HUB_PRE_RESET);
1384 	hub->in_reset = 1;
1385 	hub_pm_barrier_for_all_ports(hub);
1386 	return 0;
1387 }
1388 
1389 /* caller has locked the hub device */
1390 static int hub_post_reset(struct usb_interface *intf)
1391 {
1392 	struct usb_hub *hub = usb_get_intfdata(intf);
1393 
1394 	hub->in_reset = 0;
1395 	hub_pm_barrier_for_all_ports(hub);
1396 	hub_activate(hub, HUB_POST_RESET);
1397 	return 0;
1398 }
1399 
1400 static int hub_configure(struct usb_hub *hub,
1401 	struct usb_endpoint_descriptor *endpoint)
1402 {
1403 	struct usb_hcd *hcd;
1404 	struct usb_device *hdev = hub->hdev;
1405 	struct device *hub_dev = hub->intfdev;
1406 	u16 hubstatus, hubchange;
1407 	u16 wHubCharacteristics;
1408 	unsigned int pipe;
1409 	int maxp, ret, i;
1410 	char *message = "out of memory";
1411 	unsigned unit_load;
1412 	unsigned full_load;
1413 	unsigned maxchild;
1414 
1415 	hub->buffer = kmalloc(sizeof(*hub->buffer), GFP_KERNEL);
1416 	if (!hub->buffer) {
1417 		ret = -ENOMEM;
1418 		goto fail;
1419 	}
1420 
1421 	hub->status = kmalloc(sizeof(*hub->status), GFP_KERNEL);
1422 	if (!hub->status) {
1423 		ret = -ENOMEM;
1424 		goto fail;
1425 	}
1426 	mutex_init(&hub->status_mutex);
1427 
1428 	hub->descriptor = kzalloc(sizeof(*hub->descriptor), GFP_KERNEL);
1429 	if (!hub->descriptor) {
1430 		ret = -ENOMEM;
1431 		goto fail;
1432 	}
1433 
1434 	/* Request the entire hub descriptor.
1435 	 * hub->descriptor can handle USB_MAXCHILDREN ports,
1436 	 * but a (non-SS) hub can/will return fewer bytes here.
1437 	 */
1438 	ret = get_hub_descriptor(hdev, hub->descriptor);
1439 	if (ret < 0) {
1440 		message = "can't read hub descriptor";
1441 		goto fail;
1442 	}
1443 
1444 	maxchild = USB_MAXCHILDREN;
1445 	if (hub_is_superspeed(hdev))
1446 		maxchild = min_t(unsigned, maxchild, USB_SS_MAXPORTS);
1447 
1448 	if (hub->descriptor->bNbrPorts > maxchild) {
1449 		message = "hub has too many ports!";
1450 		ret = -ENODEV;
1451 		goto fail;
1452 	} else if (hub->descriptor->bNbrPorts == 0) {
1453 		message = "hub doesn't have any ports!";
1454 		ret = -ENODEV;
1455 		goto fail;
1456 	}
1457 
1458 	/*
1459 	 * Accumulate wHubDelay + 40ns for every hub in the tree of devices.
1460 	 * The resulting value will be used for SetIsochDelay() request.
1461 	 */
1462 	if (hub_is_superspeed(hdev) || hub_is_superspeedplus(hdev)) {
1463 		u32 delay = __le16_to_cpu(hub->descriptor->u.ss.wHubDelay);
1464 
1465 		if (hdev->parent)
1466 			delay += hdev->parent->hub_delay;
1467 
1468 		delay += USB_TP_TRANSMISSION_DELAY;
1469 		hdev->hub_delay = min_t(u32, delay, USB_TP_TRANSMISSION_DELAY_MAX);
1470 	}
1471 
1472 	maxchild = hub->descriptor->bNbrPorts;
1473 	dev_info(hub_dev, "%d port%s detected\n", maxchild,
1474 			(maxchild == 1) ? "" : "s");
1475 
1476 	hub->ports = kcalloc(maxchild, sizeof(struct usb_port *), GFP_KERNEL);
1477 	if (!hub->ports) {
1478 		ret = -ENOMEM;
1479 		goto fail;
1480 	}
1481 
1482 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
1483 	if (hub_is_superspeed(hdev)) {
1484 		unit_load = 150;
1485 		full_load = 900;
1486 	} else {
1487 		unit_load = 100;
1488 		full_load = 500;
1489 	}
1490 
1491 	/* FIXME for USB 3.0, skip for now */
1492 	if ((wHubCharacteristics & HUB_CHAR_COMPOUND) &&
1493 			!(hub_is_superspeed(hdev))) {
1494 		char	portstr[USB_MAXCHILDREN + 1];
1495 
1496 		for (i = 0; i < maxchild; i++)
1497 			portstr[i] = hub->descriptor->u.hs.DeviceRemovable
1498 				    [((i + 1) / 8)] & (1 << ((i + 1) % 8))
1499 				? 'F' : 'R';
1500 		portstr[maxchild] = 0;
1501 		dev_dbg(hub_dev, "compound device; port removable status: %s\n", portstr);
1502 	} else
1503 		dev_dbg(hub_dev, "standalone hub\n");
1504 
1505 	switch (wHubCharacteristics & HUB_CHAR_LPSM) {
1506 	case HUB_CHAR_COMMON_LPSM:
1507 		dev_dbg(hub_dev, "ganged power switching\n");
1508 		break;
1509 	case HUB_CHAR_INDV_PORT_LPSM:
1510 		dev_dbg(hub_dev, "individual port power switching\n");
1511 		break;
1512 	case HUB_CHAR_NO_LPSM:
1513 	case HUB_CHAR_LPSM:
1514 		dev_dbg(hub_dev, "no power switching (usb 1.0)\n");
1515 		break;
1516 	}
1517 
1518 	switch (wHubCharacteristics & HUB_CHAR_OCPM) {
1519 	case HUB_CHAR_COMMON_OCPM:
1520 		dev_dbg(hub_dev, "global over-current protection\n");
1521 		break;
1522 	case HUB_CHAR_INDV_PORT_OCPM:
1523 		dev_dbg(hub_dev, "individual port over-current protection\n");
1524 		break;
1525 	case HUB_CHAR_NO_OCPM:
1526 	case HUB_CHAR_OCPM:
1527 		dev_dbg(hub_dev, "no over-current protection\n");
1528 		break;
1529 	}
1530 
1531 	spin_lock_init(&hub->tt.lock);
1532 	INIT_LIST_HEAD(&hub->tt.clear_list);
1533 	INIT_WORK(&hub->tt.clear_work, hub_tt_work);
1534 	switch (hdev->descriptor.bDeviceProtocol) {
1535 	case USB_HUB_PR_FS:
1536 		break;
1537 	case USB_HUB_PR_HS_SINGLE_TT:
1538 		dev_dbg(hub_dev, "Single TT\n");
1539 		hub->tt.hub = hdev;
1540 		break;
1541 	case USB_HUB_PR_HS_MULTI_TT:
1542 		ret = usb_set_interface(hdev, 0, 1);
1543 		if (ret == 0) {
1544 			dev_dbg(hub_dev, "TT per port\n");
1545 			hub->tt.multi = 1;
1546 		} else
1547 			dev_err(hub_dev, "Using single TT (err %d)\n",
1548 				ret);
1549 		hub->tt.hub = hdev;
1550 		break;
1551 	case USB_HUB_PR_SS:
1552 		/* USB 3.0 hubs don't have a TT */
1553 		break;
1554 	default:
1555 		dev_dbg(hub_dev, "Unrecognized hub protocol %d\n",
1556 			hdev->descriptor.bDeviceProtocol);
1557 		break;
1558 	}
1559 
1560 	/* Note 8 FS bit times == (8 bits / 12000000 bps) ~= 666ns */
1561 	switch (wHubCharacteristics & HUB_CHAR_TTTT) {
1562 	case HUB_TTTT_8_BITS:
1563 		if (hdev->descriptor.bDeviceProtocol != 0) {
1564 			hub->tt.think_time = 666;
1565 			dev_dbg(hub_dev, "TT requires at most %d "
1566 					"FS bit times (%d ns)\n",
1567 				8, hub->tt.think_time);
1568 		}
1569 		break;
1570 	case HUB_TTTT_16_BITS:
1571 		hub->tt.think_time = 666 * 2;
1572 		dev_dbg(hub_dev, "TT requires at most %d "
1573 				"FS bit times (%d ns)\n",
1574 			16, hub->tt.think_time);
1575 		break;
1576 	case HUB_TTTT_24_BITS:
1577 		hub->tt.think_time = 666 * 3;
1578 		dev_dbg(hub_dev, "TT requires at most %d "
1579 				"FS bit times (%d ns)\n",
1580 			24, hub->tt.think_time);
1581 		break;
1582 	case HUB_TTTT_32_BITS:
1583 		hub->tt.think_time = 666 * 4;
1584 		dev_dbg(hub_dev, "TT requires at most %d "
1585 				"FS bit times (%d ns)\n",
1586 			32, hub->tt.think_time);
1587 		break;
1588 	}
1589 
1590 	/* probe() zeroes hub->indicator[] */
1591 	if (wHubCharacteristics & HUB_CHAR_PORTIND) {
1592 		hub->has_indicators = 1;
1593 		dev_dbg(hub_dev, "Port indicators are supported\n");
1594 	}
1595 
1596 	dev_dbg(hub_dev, "power on to power good time: %dms\n",
1597 		hub->descriptor->bPwrOn2PwrGood * 2);
1598 
1599 	/* power budgeting mostly matters with bus-powered hubs,
1600 	 * and battery-powered root hubs (may provide just 8 mA).
1601 	 */
1602 	ret = usb_get_std_status(hdev, USB_RECIP_DEVICE, 0, &hubstatus);
1603 	if (ret) {
1604 		message = "can't get hub status";
1605 		goto fail;
1606 	}
1607 	hcd = bus_to_hcd(hdev->bus);
1608 	if (hdev == hdev->bus->root_hub) {
1609 		if (hcd->power_budget > 0)
1610 			hdev->bus_mA = hcd->power_budget;
1611 		else
1612 			hdev->bus_mA = full_load * maxchild;
1613 		if (hdev->bus_mA >= full_load)
1614 			hub->mA_per_port = full_load;
1615 		else {
1616 			hub->mA_per_port = hdev->bus_mA;
1617 			hub->limited_power = 1;
1618 		}
1619 	} else if ((hubstatus & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
1620 		int remaining = hdev->bus_mA -
1621 			hub->descriptor->bHubContrCurrent;
1622 
1623 		dev_dbg(hub_dev, "hub controller current requirement: %dmA\n",
1624 			hub->descriptor->bHubContrCurrent);
1625 		hub->limited_power = 1;
1626 
1627 		if (remaining < maxchild * unit_load)
1628 			dev_warn(hub_dev,
1629 					"insufficient power available "
1630 					"to use all downstream ports\n");
1631 		hub->mA_per_port = unit_load;	/* 7.2.1 */
1632 
1633 	} else {	/* Self-powered external hub */
1634 		/* FIXME: What about battery-powered external hubs that
1635 		 * provide less current per port? */
1636 		hub->mA_per_port = full_load;
1637 	}
1638 	if (hub->mA_per_port < full_load)
1639 		dev_dbg(hub_dev, "%umA bus power budget for each child\n",
1640 				hub->mA_per_port);
1641 
1642 	ret = hub_hub_status(hub, &hubstatus, &hubchange);
1643 	if (ret < 0) {
1644 		message = "can't get hub status";
1645 		goto fail;
1646 	}
1647 
1648 	/* local power status reports aren't always correct */
1649 	if (hdev->actconfig->desc.bmAttributes & USB_CONFIG_ATT_SELFPOWER)
1650 		dev_dbg(hub_dev, "local power source is %s\n",
1651 			(hubstatus & HUB_STATUS_LOCAL_POWER)
1652 			? "lost (inactive)" : "good");
1653 
1654 	if ((wHubCharacteristics & HUB_CHAR_OCPM) == 0)
1655 		dev_dbg(hub_dev, "%sover-current condition exists\n",
1656 			(hubstatus & HUB_STATUS_OVERCURRENT) ? "" : "no ");
1657 
1658 	/* set up the interrupt endpoint
1659 	 * We use the EP's maxpacket size instead of (PORTS+1+7)/8
1660 	 * bytes as USB2.0[11.12.3] says because some hubs are known
1661 	 * to send more data (and thus cause overflow). For root hubs,
1662 	 * maxpktsize is defined in hcd.c's fake endpoint descriptors
1663 	 * to be big enough for at least USB_MAXCHILDREN ports. */
1664 	pipe = usb_rcvintpipe(hdev, endpoint->bEndpointAddress);
1665 	maxp = usb_maxpacket(hdev, pipe);
1666 
1667 	if (maxp > sizeof(*hub->buffer))
1668 		maxp = sizeof(*hub->buffer);
1669 
1670 	hub->urb = usb_alloc_urb(0, GFP_KERNEL);
1671 	if (!hub->urb) {
1672 		ret = -ENOMEM;
1673 		goto fail;
1674 	}
1675 
1676 	usb_fill_int_urb(hub->urb, hdev, pipe, *hub->buffer, maxp, hub_irq,
1677 		hub, endpoint->bInterval);
1678 
1679 	/* maybe cycle the hub leds */
1680 	if (hub->has_indicators && blinkenlights)
1681 		hub->indicator[0] = INDICATOR_CYCLE;
1682 
1683 	mutex_lock(&usb_port_peer_mutex);
1684 	for (i = 0; i < maxchild; i++) {
1685 		ret = usb_hub_create_port_device(hub, i + 1);
1686 		if (ret < 0) {
1687 			dev_err(hub->intfdev,
1688 				"couldn't create port%d device.\n", i + 1);
1689 			break;
1690 		}
1691 	}
1692 	hdev->maxchild = i;
1693 	for (i = 0; i < hdev->maxchild; i++) {
1694 		struct usb_port *port_dev = hub->ports[i];
1695 
1696 		pm_runtime_put(&port_dev->dev);
1697 	}
1698 
1699 	mutex_unlock(&usb_port_peer_mutex);
1700 	if (ret < 0)
1701 		goto fail;
1702 
1703 	/* Update the HCD's internal representation of this hub before hub_wq
1704 	 * starts getting port status changes for devices under the hub.
1705 	 */
1706 	if (hcd->driver->update_hub_device) {
1707 		ret = hcd->driver->update_hub_device(hcd, hdev,
1708 				&hub->tt, GFP_KERNEL);
1709 		if (ret < 0) {
1710 			message = "can't update HCD hub info";
1711 			goto fail;
1712 		}
1713 	}
1714 
1715 	usb_hub_adjust_deviceremovable(hdev, hub->descriptor);
1716 
1717 	hub_activate(hub, HUB_INIT);
1718 	return 0;
1719 
1720 fail:
1721 	dev_err(hub_dev, "config failed, %s (err %d)\n",
1722 			message, ret);
1723 	/* hub_disconnect() frees urb and descriptor */
1724 	return ret;
1725 }
1726 
1727 static void hub_release(struct kref *kref)
1728 {
1729 	struct usb_hub *hub = container_of(kref, struct usb_hub, kref);
1730 
1731 	usb_put_dev(hub->hdev);
1732 	usb_put_intf(to_usb_interface(hub->intfdev));
1733 	kfree(hub);
1734 }
1735 
1736 static unsigned highspeed_hubs;
1737 
1738 static void hub_disconnect(struct usb_interface *intf)
1739 {
1740 	struct usb_hub *hub = usb_get_intfdata(intf);
1741 	struct usb_device *hdev = interface_to_usbdev(intf);
1742 	int port1;
1743 
1744 	/*
1745 	 * Stop adding new hub events. We do not want to block here and thus
1746 	 * will not try to remove any pending work item.
1747 	 */
1748 	hub->disconnected = 1;
1749 
1750 	/* Disconnect all children and quiesce the hub */
1751 	hub->error = 0;
1752 	hub_quiesce(hub, HUB_DISCONNECT);
1753 
1754 	mutex_lock(&usb_port_peer_mutex);
1755 
1756 	/* Avoid races with recursively_mark_NOTATTACHED() */
1757 	spin_lock_irq(&device_state_lock);
1758 	port1 = hdev->maxchild;
1759 	hdev->maxchild = 0;
1760 	usb_set_intfdata(intf, NULL);
1761 	spin_unlock_irq(&device_state_lock);
1762 
1763 	for (; port1 > 0; --port1)
1764 		usb_hub_remove_port_device(hub, port1);
1765 
1766 	mutex_unlock(&usb_port_peer_mutex);
1767 
1768 	if (hub->hdev->speed == USB_SPEED_HIGH)
1769 		highspeed_hubs--;
1770 
1771 	usb_free_urb(hub->urb);
1772 	kfree(hub->ports);
1773 	kfree(hub->descriptor);
1774 	kfree(hub->status);
1775 	kfree(hub->buffer);
1776 
1777 	pm_suspend_ignore_children(&intf->dev, false);
1778 
1779 	if (hub->quirk_disable_autosuspend)
1780 		usb_autopm_put_interface(intf);
1781 
1782 	onboard_hub_destroy_pdevs(&hub->onboard_hub_devs);
1783 
1784 	kref_put(&hub->kref, hub_release);
1785 }
1786 
1787 static bool hub_descriptor_is_sane(struct usb_host_interface *desc)
1788 {
1789 	/* Some hubs have a subclass of 1, which AFAICT according to the */
1790 	/*  specs is not defined, but it works */
1791 	if (desc->desc.bInterfaceSubClass != 0 &&
1792 	    desc->desc.bInterfaceSubClass != 1)
1793 		return false;
1794 
1795 	/* Multiple endpoints? What kind of mutant ninja-hub is this? */
1796 	if (desc->desc.bNumEndpoints != 1)
1797 		return false;
1798 
1799 	/* If the first endpoint is not interrupt IN, we'd better punt! */
1800 	if (!usb_endpoint_is_int_in(&desc->endpoint[0].desc))
1801 		return false;
1802 
1803         return true;
1804 }
1805 
1806 static int hub_probe(struct usb_interface *intf, const struct usb_device_id *id)
1807 {
1808 	struct usb_host_interface *desc;
1809 	struct usb_device *hdev;
1810 	struct usb_hub *hub;
1811 
1812 	desc = intf->cur_altsetting;
1813 	hdev = interface_to_usbdev(intf);
1814 
1815 	/*
1816 	 * Set default autosuspend delay as 0 to speedup bus suspend,
1817 	 * based on the below considerations:
1818 	 *
1819 	 * - Unlike other drivers, the hub driver does not rely on the
1820 	 *   autosuspend delay to provide enough time to handle a wakeup
1821 	 *   event, and the submitted status URB is just to check future
1822 	 *   change on hub downstream ports, so it is safe to do it.
1823 	 *
1824 	 * - The patch might cause one or more auto supend/resume for
1825 	 *   below very rare devices when they are plugged into hub
1826 	 *   first time:
1827 	 *
1828 	 *   	devices having trouble initializing, and disconnect
1829 	 *   	themselves from the bus and then reconnect a second
1830 	 *   	or so later
1831 	 *
1832 	 *   	devices just for downloading firmware, and disconnects
1833 	 *   	themselves after completing it
1834 	 *
1835 	 *   For these quite rare devices, their drivers may change the
1836 	 *   autosuspend delay of their parent hub in the probe() to one
1837 	 *   appropriate value to avoid the subtle problem if someone
1838 	 *   does care it.
1839 	 *
1840 	 * - The patch may cause one or more auto suspend/resume on
1841 	 *   hub during running 'lsusb', but it is probably too
1842 	 *   infrequent to worry about.
1843 	 *
1844 	 * - Change autosuspend delay of hub can avoid unnecessary auto
1845 	 *   suspend timer for hub, also may decrease power consumption
1846 	 *   of USB bus.
1847 	 *
1848 	 * - If user has indicated to prevent autosuspend by passing
1849 	 *   usbcore.autosuspend = -1 then keep autosuspend disabled.
1850 	 */
1851 #ifdef CONFIG_PM
1852 	if (hdev->dev.power.autosuspend_delay >= 0)
1853 		pm_runtime_set_autosuspend_delay(&hdev->dev, 0);
1854 #endif
1855 
1856 	/*
1857 	 * Hubs have proper suspend/resume support, except for root hubs
1858 	 * where the controller driver doesn't have bus_suspend and
1859 	 * bus_resume methods.
1860 	 */
1861 	if (hdev->parent) {		/* normal device */
1862 		usb_enable_autosuspend(hdev);
1863 	} else {			/* root hub */
1864 		const struct hc_driver *drv = bus_to_hcd(hdev->bus)->driver;
1865 
1866 		if (drv->bus_suspend && drv->bus_resume)
1867 			usb_enable_autosuspend(hdev);
1868 	}
1869 
1870 	if (hdev->level == MAX_TOPO_LEVEL) {
1871 		dev_err(&intf->dev,
1872 			"Unsupported bus topology: hub nested too deep\n");
1873 		return -E2BIG;
1874 	}
1875 
1876 #ifdef	CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB
1877 	if (hdev->parent) {
1878 		dev_warn(&intf->dev, "ignoring external hub\n");
1879 		return -ENODEV;
1880 	}
1881 #endif
1882 
1883 	if (!hub_descriptor_is_sane(desc)) {
1884 		dev_err(&intf->dev, "bad descriptor, ignoring hub\n");
1885 		return -EIO;
1886 	}
1887 
1888 	/* We found a hub */
1889 	dev_info(&intf->dev, "USB hub found\n");
1890 
1891 	hub = kzalloc(sizeof(*hub), GFP_KERNEL);
1892 	if (!hub)
1893 		return -ENOMEM;
1894 
1895 	kref_init(&hub->kref);
1896 	hub->intfdev = &intf->dev;
1897 	hub->hdev = hdev;
1898 	INIT_DELAYED_WORK(&hub->leds, led_work);
1899 	INIT_DELAYED_WORK(&hub->init_work, NULL);
1900 	INIT_WORK(&hub->events, hub_event);
1901 	INIT_LIST_HEAD(&hub->onboard_hub_devs);
1902 	spin_lock_init(&hub->irq_urb_lock);
1903 	timer_setup(&hub->irq_urb_retry, hub_retry_irq_urb, 0);
1904 	usb_get_intf(intf);
1905 	usb_get_dev(hdev);
1906 
1907 	usb_set_intfdata(intf, hub);
1908 	intf->needs_remote_wakeup = 1;
1909 	pm_suspend_ignore_children(&intf->dev, true);
1910 
1911 	if (hdev->speed == USB_SPEED_HIGH)
1912 		highspeed_hubs++;
1913 
1914 	if (id->driver_info & HUB_QUIRK_CHECK_PORT_AUTOSUSPEND)
1915 		hub->quirk_check_port_auto_suspend = 1;
1916 
1917 	if (id->driver_info & HUB_QUIRK_DISABLE_AUTOSUSPEND) {
1918 		hub->quirk_disable_autosuspend = 1;
1919 		usb_autopm_get_interface_no_resume(intf);
1920 	}
1921 
1922 	if (hub_configure(hub, &desc->endpoint[0].desc) >= 0) {
1923 		onboard_hub_create_pdevs(hdev, &hub->onboard_hub_devs);
1924 
1925 		return 0;
1926 	}
1927 
1928 	hub_disconnect(intf);
1929 	return -ENODEV;
1930 }
1931 
1932 static int
1933 hub_ioctl(struct usb_interface *intf, unsigned int code, void *user_data)
1934 {
1935 	struct usb_device *hdev = interface_to_usbdev(intf);
1936 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1937 
1938 	/* assert ifno == 0 (part of hub spec) */
1939 	switch (code) {
1940 	case USBDEVFS_HUB_PORTINFO: {
1941 		struct usbdevfs_hub_portinfo *info = user_data;
1942 		int i;
1943 
1944 		spin_lock_irq(&device_state_lock);
1945 		if (hdev->devnum <= 0)
1946 			info->nports = 0;
1947 		else {
1948 			info->nports = hdev->maxchild;
1949 			for (i = 0; i < info->nports; i++) {
1950 				if (hub->ports[i]->child == NULL)
1951 					info->port[i] = 0;
1952 				else
1953 					info->port[i] =
1954 						hub->ports[i]->child->devnum;
1955 			}
1956 		}
1957 		spin_unlock_irq(&device_state_lock);
1958 
1959 		return info->nports + 1;
1960 		}
1961 
1962 	default:
1963 		return -ENOSYS;
1964 	}
1965 }
1966 
1967 /*
1968  * Allow user programs to claim ports on a hub.  When a device is attached
1969  * to one of these "claimed" ports, the program will "own" the device.
1970  */
1971 static int find_port_owner(struct usb_device *hdev, unsigned port1,
1972 		struct usb_dev_state ***ppowner)
1973 {
1974 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1975 
1976 	if (hdev->state == USB_STATE_NOTATTACHED)
1977 		return -ENODEV;
1978 	if (port1 == 0 || port1 > hdev->maxchild)
1979 		return -EINVAL;
1980 
1981 	/* Devices not managed by the hub driver
1982 	 * will always have maxchild equal to 0.
1983 	 */
1984 	*ppowner = &(hub->ports[port1 - 1]->port_owner);
1985 	return 0;
1986 }
1987 
1988 /* In the following three functions, the caller must hold hdev's lock */
1989 int usb_hub_claim_port(struct usb_device *hdev, unsigned port1,
1990 		       struct usb_dev_state *owner)
1991 {
1992 	int rc;
1993 	struct usb_dev_state **powner;
1994 
1995 	rc = find_port_owner(hdev, port1, &powner);
1996 	if (rc)
1997 		return rc;
1998 	if (*powner)
1999 		return -EBUSY;
2000 	*powner = owner;
2001 	return rc;
2002 }
2003 EXPORT_SYMBOL_GPL(usb_hub_claim_port);
2004 
2005 int usb_hub_release_port(struct usb_device *hdev, unsigned port1,
2006 			 struct usb_dev_state *owner)
2007 {
2008 	int rc;
2009 	struct usb_dev_state **powner;
2010 
2011 	rc = find_port_owner(hdev, port1, &powner);
2012 	if (rc)
2013 		return rc;
2014 	if (*powner != owner)
2015 		return -ENOENT;
2016 	*powner = NULL;
2017 	return rc;
2018 }
2019 EXPORT_SYMBOL_GPL(usb_hub_release_port);
2020 
2021 void usb_hub_release_all_ports(struct usb_device *hdev, struct usb_dev_state *owner)
2022 {
2023 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
2024 	int n;
2025 
2026 	for (n = 0; n < hdev->maxchild; n++) {
2027 		if (hub->ports[n]->port_owner == owner)
2028 			hub->ports[n]->port_owner = NULL;
2029 	}
2030 
2031 }
2032 
2033 /* The caller must hold udev's lock */
2034 bool usb_device_is_owned(struct usb_device *udev)
2035 {
2036 	struct usb_hub *hub;
2037 
2038 	if (udev->state == USB_STATE_NOTATTACHED || !udev->parent)
2039 		return false;
2040 	hub = usb_hub_to_struct_hub(udev->parent);
2041 	return !!hub->ports[udev->portnum - 1]->port_owner;
2042 }
2043 
2044 static void update_port_device_state(struct usb_device *udev)
2045 {
2046 	struct usb_hub *hub;
2047 	struct usb_port *port_dev;
2048 
2049 	if (udev->parent) {
2050 		hub = usb_hub_to_struct_hub(udev->parent);
2051 		port_dev = hub->ports[udev->portnum - 1];
2052 		WRITE_ONCE(port_dev->state, udev->state);
2053 		sysfs_notify_dirent(port_dev->state_kn);
2054 	}
2055 }
2056 
2057 static void recursively_mark_NOTATTACHED(struct usb_device *udev)
2058 {
2059 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2060 	int i;
2061 
2062 	for (i = 0; i < udev->maxchild; ++i) {
2063 		if (hub->ports[i]->child)
2064 			recursively_mark_NOTATTACHED(hub->ports[i]->child);
2065 	}
2066 	if (udev->state == USB_STATE_SUSPENDED)
2067 		udev->active_duration -= jiffies;
2068 	udev->state = USB_STATE_NOTATTACHED;
2069 	update_port_device_state(udev);
2070 }
2071 
2072 /**
2073  * usb_set_device_state - change a device's current state (usbcore, hcds)
2074  * @udev: pointer to device whose state should be changed
2075  * @new_state: new state value to be stored
2076  *
2077  * udev->state is _not_ fully protected by the device lock.  Although
2078  * most transitions are made only while holding the lock, the state can
2079  * can change to USB_STATE_NOTATTACHED at almost any time.  This
2080  * is so that devices can be marked as disconnected as soon as possible,
2081  * without having to wait for any semaphores to be released.  As a result,
2082  * all changes to any device's state must be protected by the
2083  * device_state_lock spinlock.
2084  *
2085  * Once a device has been added to the device tree, all changes to its state
2086  * should be made using this routine.  The state should _not_ be set directly.
2087  *
2088  * If udev->state is already USB_STATE_NOTATTACHED then no change is made.
2089  * Otherwise udev->state is set to new_state, and if new_state is
2090  * USB_STATE_NOTATTACHED then all of udev's descendants' states are also set
2091  * to USB_STATE_NOTATTACHED.
2092  */
2093 void usb_set_device_state(struct usb_device *udev,
2094 		enum usb_device_state new_state)
2095 {
2096 	unsigned long flags;
2097 	int wakeup = -1;
2098 
2099 	spin_lock_irqsave(&device_state_lock, flags);
2100 	if (udev->state == USB_STATE_NOTATTACHED)
2101 		;	/* do nothing */
2102 	else if (new_state != USB_STATE_NOTATTACHED) {
2103 
2104 		/* root hub wakeup capabilities are managed out-of-band
2105 		 * and may involve silicon errata ... ignore them here.
2106 		 */
2107 		if (udev->parent) {
2108 			if (udev->state == USB_STATE_SUSPENDED
2109 					|| new_state == USB_STATE_SUSPENDED)
2110 				;	/* No change to wakeup settings */
2111 			else if (new_state == USB_STATE_CONFIGURED)
2112 				wakeup = (udev->quirks &
2113 					USB_QUIRK_IGNORE_REMOTE_WAKEUP) ? 0 :
2114 					udev->actconfig->desc.bmAttributes &
2115 					USB_CONFIG_ATT_WAKEUP;
2116 			else
2117 				wakeup = 0;
2118 		}
2119 		if (udev->state == USB_STATE_SUSPENDED &&
2120 			new_state != USB_STATE_SUSPENDED)
2121 			udev->active_duration -= jiffies;
2122 		else if (new_state == USB_STATE_SUSPENDED &&
2123 				udev->state != USB_STATE_SUSPENDED)
2124 			udev->active_duration += jiffies;
2125 		udev->state = new_state;
2126 		update_port_device_state(udev);
2127 	} else
2128 		recursively_mark_NOTATTACHED(udev);
2129 	spin_unlock_irqrestore(&device_state_lock, flags);
2130 	if (wakeup >= 0)
2131 		device_set_wakeup_capable(&udev->dev, wakeup);
2132 }
2133 EXPORT_SYMBOL_GPL(usb_set_device_state);
2134 
2135 /*
2136  * Choose a device number.
2137  *
2138  * Device numbers are used as filenames in usbfs.  On USB-1.1 and
2139  * USB-2.0 buses they are also used as device addresses, however on
2140  * USB-3.0 buses the address is assigned by the controller hardware
2141  * and it usually is not the same as the device number.
2142  *
2143  * WUSB devices are simple: they have no hubs behind, so the mapping
2144  * device <-> virtual port number becomes 1:1. Why? to simplify the
2145  * life of the device connection logic in
2146  * drivers/usb/wusbcore/devconnect.c. When we do the initial secret
2147  * handshake we need to assign a temporary address in the unauthorized
2148  * space. For simplicity we use the first virtual port number found to
2149  * be free [drivers/usb/wusbcore/devconnect.c:wusbhc_devconnect_ack()]
2150  * and that becomes it's address [X < 128] or its unauthorized address
2151  * [X | 0x80].
2152  *
2153  * We add 1 as an offset to the one-based USB-stack port number
2154  * (zero-based wusb virtual port index) for two reasons: (a) dev addr
2155  * 0 is reserved by USB for default address; (b) Linux's USB stack
2156  * uses always #1 for the root hub of the controller. So USB stack's
2157  * port #1, which is wusb virtual-port #0 has address #2.
2158  *
2159  * Devices connected under xHCI are not as simple.  The host controller
2160  * supports virtualization, so the hardware assigns device addresses and
2161  * the HCD must setup data structures before issuing a set address
2162  * command to the hardware.
2163  */
2164 static void choose_devnum(struct usb_device *udev)
2165 {
2166 	int		devnum;
2167 	struct usb_bus	*bus = udev->bus;
2168 
2169 	/* be safe when more hub events are proceed in parallel */
2170 	mutex_lock(&bus->devnum_next_mutex);
2171 	if (udev->wusb) {
2172 		devnum = udev->portnum + 1;
2173 		BUG_ON(test_bit(devnum, bus->devmap.devicemap));
2174 	} else {
2175 		/* Try to allocate the next devnum beginning at
2176 		 * bus->devnum_next. */
2177 		devnum = find_next_zero_bit(bus->devmap.devicemap, 128,
2178 					    bus->devnum_next);
2179 		if (devnum >= 128)
2180 			devnum = find_next_zero_bit(bus->devmap.devicemap,
2181 						    128, 1);
2182 		bus->devnum_next = (devnum >= 127 ? 1 : devnum + 1);
2183 	}
2184 	if (devnum < 128) {
2185 		set_bit(devnum, bus->devmap.devicemap);
2186 		udev->devnum = devnum;
2187 	}
2188 	mutex_unlock(&bus->devnum_next_mutex);
2189 }
2190 
2191 static void release_devnum(struct usb_device *udev)
2192 {
2193 	if (udev->devnum > 0) {
2194 		clear_bit(udev->devnum, udev->bus->devmap.devicemap);
2195 		udev->devnum = -1;
2196 	}
2197 }
2198 
2199 static void update_devnum(struct usb_device *udev, int devnum)
2200 {
2201 	/* The address for a WUSB device is managed by wusbcore. */
2202 	if (!udev->wusb)
2203 		udev->devnum = devnum;
2204 	if (!udev->devaddr)
2205 		udev->devaddr = (u8)devnum;
2206 }
2207 
2208 static void hub_free_dev(struct usb_device *udev)
2209 {
2210 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2211 
2212 	/* Root hubs aren't real devices, so don't free HCD resources */
2213 	if (hcd->driver->free_dev && udev->parent)
2214 		hcd->driver->free_dev(hcd, udev);
2215 }
2216 
2217 static void hub_disconnect_children(struct usb_device *udev)
2218 {
2219 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2220 	int i;
2221 
2222 	/* Free up all the children before we remove this device */
2223 	for (i = 0; i < udev->maxchild; i++) {
2224 		if (hub->ports[i]->child)
2225 			usb_disconnect(&hub->ports[i]->child);
2226 	}
2227 }
2228 
2229 /**
2230  * usb_disconnect - disconnect a device (usbcore-internal)
2231  * @pdev: pointer to device being disconnected
2232  *
2233  * Context: task context, might sleep
2234  *
2235  * Something got disconnected. Get rid of it and all of its children.
2236  *
2237  * If *pdev is a normal device then the parent hub must already be locked.
2238  * If *pdev is a root hub then the caller must hold the usb_bus_idr_lock,
2239  * which protects the set of root hubs as well as the list of buses.
2240  *
2241  * Only hub drivers (including virtual root hub drivers for host
2242  * controllers) should ever call this.
2243  *
2244  * This call is synchronous, and may not be used in an interrupt context.
2245  */
2246 void usb_disconnect(struct usb_device **pdev)
2247 {
2248 	struct usb_port *port_dev = NULL;
2249 	struct usb_device *udev = *pdev;
2250 	struct usb_hub *hub = NULL;
2251 	int port1 = 1;
2252 
2253 	/* mark the device as inactive, so any further urb submissions for
2254 	 * this device (and any of its children) will fail immediately.
2255 	 * this quiesces everything except pending urbs.
2256 	 */
2257 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2258 	dev_info(&udev->dev, "USB disconnect, device number %d\n",
2259 			udev->devnum);
2260 
2261 	/*
2262 	 * Ensure that the pm runtime code knows that the USB device
2263 	 * is in the process of being disconnected.
2264 	 */
2265 	pm_runtime_barrier(&udev->dev);
2266 
2267 	usb_lock_device(udev);
2268 
2269 	hub_disconnect_children(udev);
2270 
2271 	/* deallocate hcd/hardware state ... nuking all pending urbs and
2272 	 * cleaning up all state associated with the current configuration
2273 	 * so that the hardware is now fully quiesced.
2274 	 */
2275 	dev_dbg(&udev->dev, "unregistering device\n");
2276 	usb_disable_device(udev, 0);
2277 	usb_hcd_synchronize_unlinks(udev);
2278 
2279 	if (udev->parent) {
2280 		port1 = udev->portnum;
2281 		hub = usb_hub_to_struct_hub(udev->parent);
2282 		port_dev = hub->ports[port1 - 1];
2283 
2284 		sysfs_remove_link(&udev->dev.kobj, "port");
2285 		sysfs_remove_link(&port_dev->dev.kobj, "device");
2286 
2287 		/*
2288 		 * As usb_port_runtime_resume() de-references udev, make
2289 		 * sure no resumes occur during removal
2290 		 */
2291 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2292 			pm_runtime_get_sync(&port_dev->dev);
2293 	}
2294 
2295 	usb_remove_ep_devs(&udev->ep0);
2296 	usb_unlock_device(udev);
2297 
2298 	/* Unregister the device.  The device driver is responsible
2299 	 * for de-configuring the device and invoking the remove-device
2300 	 * notifier chain (used by usbfs and possibly others).
2301 	 */
2302 	device_del(&udev->dev);
2303 
2304 	/* Free the device number and delete the parent's children[]
2305 	 * (or root_hub) pointer.
2306 	 */
2307 	release_devnum(udev);
2308 
2309 	/* Avoid races with recursively_mark_NOTATTACHED() */
2310 	spin_lock_irq(&device_state_lock);
2311 	*pdev = NULL;
2312 	spin_unlock_irq(&device_state_lock);
2313 
2314 	if (port_dev && test_and_clear_bit(port1, hub->child_usage_bits))
2315 		pm_runtime_put(&port_dev->dev);
2316 
2317 	hub_free_dev(udev);
2318 
2319 	put_device(&udev->dev);
2320 }
2321 
2322 #ifdef CONFIG_USB_ANNOUNCE_NEW_DEVICES
2323 static void show_string(struct usb_device *udev, char *id, char *string)
2324 {
2325 	if (!string)
2326 		return;
2327 	dev_info(&udev->dev, "%s: %s\n", id, string);
2328 }
2329 
2330 static void announce_device(struct usb_device *udev)
2331 {
2332 	u16 bcdDevice = le16_to_cpu(udev->descriptor.bcdDevice);
2333 
2334 	dev_info(&udev->dev,
2335 		"New USB device found, idVendor=%04x, idProduct=%04x, bcdDevice=%2x.%02x\n",
2336 		le16_to_cpu(udev->descriptor.idVendor),
2337 		le16_to_cpu(udev->descriptor.idProduct),
2338 		bcdDevice >> 8, bcdDevice & 0xff);
2339 	dev_info(&udev->dev,
2340 		"New USB device strings: Mfr=%d, Product=%d, SerialNumber=%d\n",
2341 		udev->descriptor.iManufacturer,
2342 		udev->descriptor.iProduct,
2343 		udev->descriptor.iSerialNumber);
2344 	show_string(udev, "Product", udev->product);
2345 	show_string(udev, "Manufacturer", udev->manufacturer);
2346 	show_string(udev, "SerialNumber", udev->serial);
2347 }
2348 #else
2349 static inline void announce_device(struct usb_device *udev) { }
2350 #endif
2351 
2352 
2353 /**
2354  * usb_enumerate_device_otg - FIXME (usbcore-internal)
2355  * @udev: newly addressed device (in ADDRESS state)
2356  *
2357  * Finish enumeration for On-The-Go devices
2358  *
2359  * Return: 0 if successful. A negative error code otherwise.
2360  */
2361 static int usb_enumerate_device_otg(struct usb_device *udev)
2362 {
2363 	int err = 0;
2364 
2365 #ifdef	CONFIG_USB_OTG
2366 	/*
2367 	 * OTG-aware devices on OTG-capable root hubs may be able to use SRP,
2368 	 * to wake us after we've powered off VBUS; and HNP, switching roles
2369 	 * "host" to "peripheral".  The OTG descriptor helps figure this out.
2370 	 */
2371 	if (!udev->bus->is_b_host
2372 			&& udev->config
2373 			&& udev->parent == udev->bus->root_hub) {
2374 		struct usb_otg_descriptor	*desc = NULL;
2375 		struct usb_bus			*bus = udev->bus;
2376 		unsigned			port1 = udev->portnum;
2377 
2378 		/* descriptor may appear anywhere in config */
2379 		err = __usb_get_extra_descriptor(udev->rawdescriptors[0],
2380 				le16_to_cpu(udev->config[0].desc.wTotalLength),
2381 				USB_DT_OTG, (void **) &desc, sizeof(*desc));
2382 		if (err || !(desc->bmAttributes & USB_OTG_HNP))
2383 			return 0;
2384 
2385 		dev_info(&udev->dev, "Dual-Role OTG device on %sHNP port\n",
2386 					(port1 == bus->otg_port) ? "" : "non-");
2387 
2388 		/* enable HNP before suspend, it's simpler */
2389 		if (port1 == bus->otg_port) {
2390 			bus->b_hnp_enable = 1;
2391 			err = usb_control_msg(udev,
2392 				usb_sndctrlpipe(udev, 0),
2393 				USB_REQ_SET_FEATURE, 0,
2394 				USB_DEVICE_B_HNP_ENABLE,
2395 				0, NULL, 0,
2396 				USB_CTRL_SET_TIMEOUT);
2397 			if (err < 0) {
2398 				/*
2399 				 * OTG MESSAGE: report errors here,
2400 				 * customize to match your product.
2401 				 */
2402 				dev_err(&udev->dev, "can't set HNP mode: %d\n",
2403 									err);
2404 				bus->b_hnp_enable = 0;
2405 			}
2406 		} else if (desc->bLength == sizeof
2407 				(struct usb_otg_descriptor)) {
2408 			/* Set a_alt_hnp_support for legacy otg device */
2409 			err = usb_control_msg(udev,
2410 				usb_sndctrlpipe(udev, 0),
2411 				USB_REQ_SET_FEATURE, 0,
2412 				USB_DEVICE_A_ALT_HNP_SUPPORT,
2413 				0, NULL, 0,
2414 				USB_CTRL_SET_TIMEOUT);
2415 			if (err < 0)
2416 				dev_err(&udev->dev,
2417 					"set a_alt_hnp_support failed: %d\n",
2418 					err);
2419 		}
2420 	}
2421 #endif
2422 	return err;
2423 }
2424 
2425 
2426 /**
2427  * usb_enumerate_device - Read device configs/intfs/otg (usbcore-internal)
2428  * @udev: newly addressed device (in ADDRESS state)
2429  *
2430  * This is only called by usb_new_device() -- all comments that apply there
2431  * apply here wrt to environment.
2432  *
2433  * If the device is WUSB and not authorized, we don't attempt to read
2434  * the string descriptors, as they will be errored out by the device
2435  * until it has been authorized.
2436  *
2437  * Return: 0 if successful. A negative error code otherwise.
2438  */
2439 static int usb_enumerate_device(struct usb_device *udev)
2440 {
2441 	int err;
2442 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2443 
2444 	if (udev->config == NULL) {
2445 		err = usb_get_configuration(udev);
2446 		if (err < 0) {
2447 			if (err != -ENODEV)
2448 				dev_err(&udev->dev, "can't read configurations, error %d\n",
2449 						err);
2450 			return err;
2451 		}
2452 	}
2453 
2454 	/* read the standard strings and cache them if present */
2455 	udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
2456 	udev->manufacturer = usb_cache_string(udev,
2457 					      udev->descriptor.iManufacturer);
2458 	udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
2459 
2460 	err = usb_enumerate_device_otg(udev);
2461 	if (err < 0)
2462 		return err;
2463 
2464 	if (IS_ENABLED(CONFIG_USB_OTG_PRODUCTLIST) && hcd->tpl_support &&
2465 		!is_targeted(udev)) {
2466 		/* Maybe it can talk to us, though we can't talk to it.
2467 		 * (Includes HNP test device.)
2468 		 */
2469 		if (IS_ENABLED(CONFIG_USB_OTG) && (udev->bus->b_hnp_enable
2470 			|| udev->bus->is_b_host)) {
2471 			err = usb_port_suspend(udev, PMSG_AUTO_SUSPEND);
2472 			if (err < 0)
2473 				dev_dbg(&udev->dev, "HNP fail, %d\n", err);
2474 		}
2475 		return -ENOTSUPP;
2476 	}
2477 
2478 	usb_detect_interface_quirks(udev);
2479 
2480 	return 0;
2481 }
2482 
2483 static void set_usb_port_removable(struct usb_device *udev)
2484 {
2485 	struct usb_device *hdev = udev->parent;
2486 	struct usb_hub *hub;
2487 	u8 port = udev->portnum;
2488 	u16 wHubCharacteristics;
2489 	bool removable = true;
2490 
2491 	dev_set_removable(&udev->dev, DEVICE_REMOVABLE_UNKNOWN);
2492 
2493 	if (!hdev)
2494 		return;
2495 
2496 	hub = usb_hub_to_struct_hub(udev->parent);
2497 
2498 	/*
2499 	 * If the platform firmware has provided information about a port,
2500 	 * use that to determine whether it's removable.
2501 	 */
2502 	switch (hub->ports[udev->portnum - 1]->connect_type) {
2503 	case USB_PORT_CONNECT_TYPE_HOT_PLUG:
2504 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2505 		return;
2506 	case USB_PORT_CONNECT_TYPE_HARD_WIRED:
2507 	case USB_PORT_NOT_USED:
2508 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2509 		return;
2510 	default:
2511 		break;
2512 	}
2513 
2514 	/*
2515 	 * Otherwise, check whether the hub knows whether a port is removable
2516 	 * or not
2517 	 */
2518 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
2519 
2520 	if (!(wHubCharacteristics & HUB_CHAR_COMPOUND))
2521 		return;
2522 
2523 	if (hub_is_superspeed(hdev)) {
2524 		if (le16_to_cpu(hub->descriptor->u.ss.DeviceRemovable)
2525 				& (1 << port))
2526 			removable = false;
2527 	} else {
2528 		if (hub->descriptor->u.hs.DeviceRemovable[port / 8] & (1 << (port % 8)))
2529 			removable = false;
2530 	}
2531 
2532 	if (removable)
2533 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2534 	else
2535 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2536 
2537 }
2538 
2539 /**
2540  * usb_new_device - perform initial device setup (usbcore-internal)
2541  * @udev: newly addressed device (in ADDRESS state)
2542  *
2543  * This is called with devices which have been detected but not fully
2544  * enumerated.  The device descriptor is available, but not descriptors
2545  * for any device configuration.  The caller must have locked either
2546  * the parent hub (if udev is a normal device) or else the
2547  * usb_bus_idr_lock (if udev is a root hub).  The parent's pointer to
2548  * udev has already been installed, but udev is not yet visible through
2549  * sysfs or other filesystem code.
2550  *
2551  * This call is synchronous, and may not be used in an interrupt context.
2552  *
2553  * Only the hub driver or root-hub registrar should ever call this.
2554  *
2555  * Return: Whether the device is configured properly or not. Zero if the
2556  * interface was registered with the driver core; else a negative errno
2557  * value.
2558  *
2559  */
2560 int usb_new_device(struct usb_device *udev)
2561 {
2562 	int err;
2563 
2564 	if (udev->parent) {
2565 		/* Initialize non-root-hub device wakeup to disabled;
2566 		 * device (un)configuration controls wakeup capable
2567 		 * sysfs power/wakeup controls wakeup enabled/disabled
2568 		 */
2569 		device_init_wakeup(&udev->dev, 0);
2570 	}
2571 
2572 	/* Tell the runtime-PM framework the device is active */
2573 	pm_runtime_set_active(&udev->dev);
2574 	pm_runtime_get_noresume(&udev->dev);
2575 	pm_runtime_use_autosuspend(&udev->dev);
2576 	pm_runtime_enable(&udev->dev);
2577 
2578 	/* By default, forbid autosuspend for all devices.  It will be
2579 	 * allowed for hubs during binding.
2580 	 */
2581 	usb_disable_autosuspend(udev);
2582 
2583 	err = usb_enumerate_device(udev);	/* Read descriptors */
2584 	if (err < 0)
2585 		goto fail;
2586 	dev_dbg(&udev->dev, "udev %d, busnum %d, minor = %d\n",
2587 			udev->devnum, udev->bus->busnum,
2588 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2589 	/* export the usbdev device-node for libusb */
2590 	udev->dev.devt = MKDEV(USB_DEVICE_MAJOR,
2591 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2592 
2593 	/* Tell the world! */
2594 	announce_device(udev);
2595 
2596 	if (udev->serial)
2597 		add_device_randomness(udev->serial, strlen(udev->serial));
2598 	if (udev->product)
2599 		add_device_randomness(udev->product, strlen(udev->product));
2600 	if (udev->manufacturer)
2601 		add_device_randomness(udev->manufacturer,
2602 				      strlen(udev->manufacturer));
2603 
2604 	device_enable_async_suspend(&udev->dev);
2605 
2606 	/* check whether the hub or firmware marks this port as non-removable */
2607 	set_usb_port_removable(udev);
2608 
2609 	/* Register the device.  The device driver is responsible
2610 	 * for configuring the device and invoking the add-device
2611 	 * notifier chain (used by usbfs and possibly others).
2612 	 */
2613 	err = device_add(&udev->dev);
2614 	if (err) {
2615 		dev_err(&udev->dev, "can't device_add, error %d\n", err);
2616 		goto fail;
2617 	}
2618 
2619 	/* Create link files between child device and usb port device. */
2620 	if (udev->parent) {
2621 		struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
2622 		int port1 = udev->portnum;
2623 		struct usb_port	*port_dev = hub->ports[port1 - 1];
2624 
2625 		err = sysfs_create_link(&udev->dev.kobj,
2626 				&port_dev->dev.kobj, "port");
2627 		if (err)
2628 			goto fail;
2629 
2630 		err = sysfs_create_link(&port_dev->dev.kobj,
2631 				&udev->dev.kobj, "device");
2632 		if (err) {
2633 			sysfs_remove_link(&udev->dev.kobj, "port");
2634 			goto fail;
2635 		}
2636 
2637 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2638 			pm_runtime_get_sync(&port_dev->dev);
2639 	}
2640 
2641 	(void) usb_create_ep_devs(&udev->dev, &udev->ep0, udev);
2642 	usb_mark_last_busy(udev);
2643 	pm_runtime_put_sync_autosuspend(&udev->dev);
2644 	return err;
2645 
2646 fail:
2647 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2648 	pm_runtime_disable(&udev->dev);
2649 	pm_runtime_set_suspended(&udev->dev);
2650 	return err;
2651 }
2652 
2653 
2654 /**
2655  * usb_deauthorize_device - deauthorize a device (usbcore-internal)
2656  * @usb_dev: USB device
2657  *
2658  * Move the USB device to a very basic state where interfaces are disabled
2659  * and the device is in fact unconfigured and unusable.
2660  *
2661  * We share a lock (that we have) with device_del(), so we need to
2662  * defer its call.
2663  *
2664  * Return: 0.
2665  */
2666 int usb_deauthorize_device(struct usb_device *usb_dev)
2667 {
2668 	usb_lock_device(usb_dev);
2669 	if (usb_dev->authorized == 0)
2670 		goto out_unauthorized;
2671 
2672 	usb_dev->authorized = 0;
2673 	usb_set_configuration(usb_dev, -1);
2674 
2675 out_unauthorized:
2676 	usb_unlock_device(usb_dev);
2677 	return 0;
2678 }
2679 
2680 
2681 int usb_authorize_device(struct usb_device *usb_dev)
2682 {
2683 	int result = 0, c;
2684 
2685 	usb_lock_device(usb_dev);
2686 	if (usb_dev->authorized == 1)
2687 		goto out_authorized;
2688 
2689 	result = usb_autoresume_device(usb_dev);
2690 	if (result < 0) {
2691 		dev_err(&usb_dev->dev,
2692 			"can't autoresume for authorization: %d\n", result);
2693 		goto error_autoresume;
2694 	}
2695 
2696 	if (usb_dev->wusb) {
2697 		struct usb_device_descriptor *descr;
2698 
2699 		descr = usb_get_device_descriptor(usb_dev);
2700 		if (IS_ERR(descr)) {
2701 			result = PTR_ERR(descr);
2702 			dev_err(&usb_dev->dev, "can't re-read device descriptor for "
2703 				"authorization: %d\n", result);
2704 			goto error_device_descriptor;
2705 		}
2706 		usb_dev->descriptor = *descr;
2707 		kfree(descr);
2708 	}
2709 
2710 	usb_dev->authorized = 1;
2711 	/* Choose and set the configuration.  This registers the interfaces
2712 	 * with the driver core and lets interface drivers bind to them.
2713 	 */
2714 	c = usb_choose_configuration(usb_dev);
2715 	if (c >= 0) {
2716 		result = usb_set_configuration(usb_dev, c);
2717 		if (result) {
2718 			dev_err(&usb_dev->dev,
2719 				"can't set config #%d, error %d\n", c, result);
2720 			/* This need not be fatal.  The user can try to
2721 			 * set other configurations. */
2722 		}
2723 	}
2724 	dev_info(&usb_dev->dev, "authorized to connect\n");
2725 
2726 error_device_descriptor:
2727 	usb_autosuspend_device(usb_dev);
2728 error_autoresume:
2729 out_authorized:
2730 	usb_unlock_device(usb_dev);	/* complements locktree */
2731 	return result;
2732 }
2733 
2734 /**
2735  * get_port_ssp_rate - Match the extended port status to SSP rate
2736  * @hdev: The hub device
2737  * @ext_portstatus: extended port status
2738  *
2739  * Match the extended port status speed id to the SuperSpeed Plus sublink speed
2740  * capability attributes. Base on the number of connected lanes and speed,
2741  * return the corresponding enum usb_ssp_rate.
2742  */
2743 static enum usb_ssp_rate get_port_ssp_rate(struct usb_device *hdev,
2744 					   u32 ext_portstatus)
2745 {
2746 	struct usb_ssp_cap_descriptor *ssp_cap = hdev->bos->ssp_cap;
2747 	u32 attr;
2748 	u8 speed_id;
2749 	u8 ssac;
2750 	u8 lanes;
2751 	int i;
2752 
2753 	if (!ssp_cap)
2754 		goto out;
2755 
2756 	speed_id = ext_portstatus & USB_EXT_PORT_STAT_RX_SPEED_ID;
2757 	lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2758 
2759 	ssac = le32_to_cpu(ssp_cap->bmAttributes) &
2760 		USB_SSP_SUBLINK_SPEED_ATTRIBS;
2761 
2762 	for (i = 0; i <= ssac; i++) {
2763 		u8 ssid;
2764 
2765 		attr = le32_to_cpu(ssp_cap->bmSublinkSpeedAttr[i]);
2766 		ssid = FIELD_GET(USB_SSP_SUBLINK_SPEED_SSID, attr);
2767 		if (speed_id == ssid) {
2768 			u16 mantissa;
2769 			u8 lse;
2770 			u8 type;
2771 
2772 			/*
2773 			 * Note: currently asymmetric lane types are only
2774 			 * applicable for SSIC operate in SuperSpeed protocol
2775 			 */
2776 			type = FIELD_GET(USB_SSP_SUBLINK_SPEED_ST, attr);
2777 			if (type == USB_SSP_SUBLINK_SPEED_ST_ASYM_RX ||
2778 			    type == USB_SSP_SUBLINK_SPEED_ST_ASYM_TX)
2779 				goto out;
2780 
2781 			if (FIELD_GET(USB_SSP_SUBLINK_SPEED_LP, attr) !=
2782 			    USB_SSP_SUBLINK_SPEED_LP_SSP)
2783 				goto out;
2784 
2785 			lse = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSE, attr);
2786 			mantissa = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSM, attr);
2787 
2788 			/* Convert to Gbps */
2789 			for (; lse < USB_SSP_SUBLINK_SPEED_LSE_GBPS; lse++)
2790 				mantissa /= 1000;
2791 
2792 			if (mantissa >= 10 && lanes == 1)
2793 				return USB_SSP_GEN_2x1;
2794 
2795 			if (mantissa >= 10 && lanes == 2)
2796 				return USB_SSP_GEN_2x2;
2797 
2798 			if (mantissa >= 5 && lanes == 2)
2799 				return USB_SSP_GEN_1x2;
2800 
2801 			goto out;
2802 		}
2803 	}
2804 
2805 out:
2806 	return USB_SSP_GEN_UNKNOWN;
2807 }
2808 
2809 /* Returns 1 if @hub is a WUSB root hub, 0 otherwise */
2810 static unsigned hub_is_wusb(struct usb_hub *hub)
2811 {
2812 	struct usb_hcd *hcd;
2813 	if (hub->hdev->parent != NULL)  /* not a root hub? */
2814 		return 0;
2815 	hcd = bus_to_hcd(hub->hdev->bus);
2816 	return hcd->wireless;
2817 }
2818 
2819 
2820 #ifdef CONFIG_USB_FEW_INIT_RETRIES
2821 #define PORT_RESET_TRIES	2
2822 #define SET_ADDRESS_TRIES	1
2823 #define GET_DESCRIPTOR_TRIES	1
2824 #define GET_MAXPACKET0_TRIES	1
2825 #define PORT_INIT_TRIES		4
2826 
2827 #else
2828 #define PORT_RESET_TRIES	5
2829 #define SET_ADDRESS_TRIES	2
2830 #define GET_DESCRIPTOR_TRIES	2
2831 #define GET_MAXPACKET0_TRIES	3
2832 #define PORT_INIT_TRIES		4
2833 #endif	/* CONFIG_USB_FEW_INIT_RETRIES */
2834 
2835 #define DETECT_DISCONNECT_TRIES 5
2836 
2837 #define HUB_ROOT_RESET_TIME	60	/* times are in msec */
2838 #define HUB_SHORT_RESET_TIME	10
2839 #define HUB_BH_RESET_TIME	50
2840 #define HUB_LONG_RESET_TIME	200
2841 #define HUB_RESET_TIMEOUT	800
2842 
2843 static bool use_new_scheme(struct usb_device *udev, int retry,
2844 			   struct usb_port *port_dev)
2845 {
2846 	int old_scheme_first_port =
2847 		(port_dev->quirks & USB_PORT_QUIRK_OLD_SCHEME) ||
2848 		old_scheme_first;
2849 
2850 	/*
2851 	 * "New scheme" enumeration causes an extra state transition to be
2852 	 * exposed to an xhci host and causes USB3 devices to receive control
2853 	 * commands in the default state.  This has been seen to cause
2854 	 * enumeration failures, so disable this enumeration scheme for USB3
2855 	 * devices.
2856 	 */
2857 	if (udev->speed >= USB_SPEED_SUPER)
2858 		return false;
2859 
2860 	/*
2861 	 * If use_both_schemes is set, use the first scheme (whichever
2862 	 * it is) for the larger half of the retries, then use the other
2863 	 * scheme.  Otherwise, use the first scheme for all the retries.
2864 	 */
2865 	if (use_both_schemes && retry >= (PORT_INIT_TRIES + 1) / 2)
2866 		return old_scheme_first_port;	/* Second half */
2867 	return !old_scheme_first_port;		/* First half or all */
2868 }
2869 
2870 /* Is a USB 3.0 port in the Inactive or Compliance Mode state?
2871  * Port warm reset is required to recover
2872  */
2873 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
2874 		u16 portstatus)
2875 {
2876 	u16 link_state;
2877 
2878 	if (!hub_is_superspeed(hub->hdev))
2879 		return false;
2880 
2881 	if (test_bit(port1, hub->warm_reset_bits))
2882 		return true;
2883 
2884 	link_state = portstatus & USB_PORT_STAT_LINK_STATE;
2885 	return link_state == USB_SS_PORT_LS_SS_INACTIVE
2886 		|| link_state == USB_SS_PORT_LS_COMP_MOD;
2887 }
2888 
2889 static int hub_port_wait_reset(struct usb_hub *hub, int port1,
2890 			struct usb_device *udev, unsigned int delay, bool warm)
2891 {
2892 	int delay_time, ret;
2893 	u16 portstatus;
2894 	u16 portchange;
2895 	u32 ext_portstatus = 0;
2896 
2897 	for (delay_time = 0;
2898 			delay_time < HUB_RESET_TIMEOUT;
2899 			delay_time += delay) {
2900 		/* wait to give the device a chance to reset */
2901 		msleep(delay);
2902 
2903 		/* read and decode port status */
2904 		if (hub_is_superspeedplus(hub->hdev))
2905 			ret = hub_ext_port_status(hub, port1,
2906 						  HUB_EXT_PORT_STATUS,
2907 						  &portstatus, &portchange,
2908 						  &ext_portstatus);
2909 		else
2910 			ret = usb_hub_port_status(hub, port1, &portstatus,
2911 					      &portchange);
2912 		if (ret < 0)
2913 			return ret;
2914 
2915 		/*
2916 		 * The port state is unknown until the reset completes.
2917 		 *
2918 		 * On top of that, some chips may require additional time
2919 		 * to re-establish a connection after the reset is complete,
2920 		 * so also wait for the connection to be re-established.
2921 		 */
2922 		if (!(portstatus & USB_PORT_STAT_RESET) &&
2923 		    (portstatus & USB_PORT_STAT_CONNECTION))
2924 			break;
2925 
2926 		/* switch to the long delay after two short delay failures */
2927 		if (delay_time >= 2 * HUB_SHORT_RESET_TIME)
2928 			delay = HUB_LONG_RESET_TIME;
2929 
2930 		dev_dbg(&hub->ports[port1 - 1]->dev,
2931 				"not %sreset yet, waiting %dms\n",
2932 				warm ? "warm " : "", delay);
2933 	}
2934 
2935 	if ((portstatus & USB_PORT_STAT_RESET))
2936 		return -EBUSY;
2937 
2938 	if (hub_port_warm_reset_required(hub, port1, portstatus))
2939 		return -ENOTCONN;
2940 
2941 	/* Device went away? */
2942 	if (!(portstatus & USB_PORT_STAT_CONNECTION))
2943 		return -ENOTCONN;
2944 
2945 	/* Retry if connect change is set but status is still connected.
2946 	 * A USB 3.0 connection may bounce if multiple warm resets were issued,
2947 	 * but the device may have successfully re-connected. Ignore it.
2948 	 */
2949 	if (!hub_is_superspeed(hub->hdev) &&
2950 	    (portchange & USB_PORT_STAT_C_CONNECTION)) {
2951 		usb_clear_port_feature(hub->hdev, port1,
2952 				       USB_PORT_FEAT_C_CONNECTION);
2953 		return -EAGAIN;
2954 	}
2955 
2956 	if (!(portstatus & USB_PORT_STAT_ENABLE))
2957 		return -EBUSY;
2958 
2959 	if (!udev)
2960 		return 0;
2961 
2962 	if (hub_is_superspeedplus(hub->hdev)) {
2963 		/* extended portstatus Rx and Tx lane count are zero based */
2964 		udev->rx_lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2965 		udev->tx_lanes = USB_EXT_PORT_TX_LANES(ext_portstatus) + 1;
2966 		udev->ssp_rate = get_port_ssp_rate(hub->hdev, ext_portstatus);
2967 	} else {
2968 		udev->rx_lanes = 1;
2969 		udev->tx_lanes = 1;
2970 		udev->ssp_rate = USB_SSP_GEN_UNKNOWN;
2971 	}
2972 	if (hub_is_wusb(hub))
2973 		udev->speed = USB_SPEED_WIRELESS;
2974 	else if (udev->ssp_rate != USB_SSP_GEN_UNKNOWN)
2975 		udev->speed = USB_SPEED_SUPER_PLUS;
2976 	else if (hub_is_superspeed(hub->hdev))
2977 		udev->speed = USB_SPEED_SUPER;
2978 	else if (portstatus & USB_PORT_STAT_HIGH_SPEED)
2979 		udev->speed = USB_SPEED_HIGH;
2980 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
2981 		udev->speed = USB_SPEED_LOW;
2982 	else
2983 		udev->speed = USB_SPEED_FULL;
2984 	return 0;
2985 }
2986 
2987 /* Handle port reset and port warm(BH) reset (for USB3 protocol ports) */
2988 static int hub_port_reset(struct usb_hub *hub, int port1,
2989 			struct usb_device *udev, unsigned int delay, bool warm)
2990 {
2991 	int i, status;
2992 	u16 portchange, portstatus;
2993 	struct usb_port *port_dev = hub->ports[port1 - 1];
2994 	int reset_recovery_time;
2995 
2996 	if (!hub_is_superspeed(hub->hdev)) {
2997 		if (warm) {
2998 			dev_err(hub->intfdev, "only USB3 hub support "
2999 						"warm reset\n");
3000 			return -EINVAL;
3001 		}
3002 		/* Block EHCI CF initialization during the port reset.
3003 		 * Some companion controllers don't like it when they mix.
3004 		 */
3005 		down_read(&ehci_cf_port_reset_rwsem);
3006 	} else if (!warm) {
3007 		/*
3008 		 * If the caller hasn't explicitly requested a warm reset,
3009 		 * double check and see if one is needed.
3010 		 */
3011 		if (usb_hub_port_status(hub, port1, &portstatus,
3012 					&portchange) == 0)
3013 			if (hub_port_warm_reset_required(hub, port1,
3014 							portstatus))
3015 				warm = true;
3016 	}
3017 	clear_bit(port1, hub->warm_reset_bits);
3018 
3019 	/* Reset the port */
3020 	for (i = 0; i < PORT_RESET_TRIES; i++) {
3021 		status = set_port_feature(hub->hdev, port1, (warm ?
3022 					USB_PORT_FEAT_BH_PORT_RESET :
3023 					USB_PORT_FEAT_RESET));
3024 		if (status == -ENODEV) {
3025 			;	/* The hub is gone */
3026 		} else if (status) {
3027 			dev_err(&port_dev->dev,
3028 					"cannot %sreset (err = %d)\n",
3029 					warm ? "warm " : "", status);
3030 		} else {
3031 			status = hub_port_wait_reset(hub, port1, udev, delay,
3032 								warm);
3033 			if (status && status != -ENOTCONN && status != -ENODEV)
3034 				dev_dbg(hub->intfdev,
3035 						"port_wait_reset: err = %d\n",
3036 						status);
3037 		}
3038 
3039 		/*
3040 		 * Check for disconnect or reset, and bail out after several
3041 		 * reset attempts to avoid warm reset loop.
3042 		 */
3043 		if (status == 0 || status == -ENOTCONN || status == -ENODEV ||
3044 		    (status == -EBUSY && i == PORT_RESET_TRIES - 1)) {
3045 			usb_clear_port_feature(hub->hdev, port1,
3046 					USB_PORT_FEAT_C_RESET);
3047 
3048 			if (!hub_is_superspeed(hub->hdev))
3049 				goto done;
3050 
3051 			usb_clear_port_feature(hub->hdev, port1,
3052 					USB_PORT_FEAT_C_BH_PORT_RESET);
3053 			usb_clear_port_feature(hub->hdev, port1,
3054 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3055 
3056 			if (udev)
3057 				usb_clear_port_feature(hub->hdev, port1,
3058 					USB_PORT_FEAT_C_CONNECTION);
3059 
3060 			/*
3061 			 * If a USB 3.0 device migrates from reset to an error
3062 			 * state, re-issue the warm reset.
3063 			 */
3064 			if (usb_hub_port_status(hub, port1,
3065 					&portstatus, &portchange) < 0)
3066 				goto done;
3067 
3068 			if (!hub_port_warm_reset_required(hub, port1,
3069 					portstatus))
3070 				goto done;
3071 
3072 			/*
3073 			 * If the port is in SS.Inactive or Compliance Mode, the
3074 			 * hot or warm reset failed.  Try another warm reset.
3075 			 */
3076 			if (!warm) {
3077 				dev_dbg(&port_dev->dev,
3078 						"hot reset failed, warm reset\n");
3079 				warm = true;
3080 			}
3081 		}
3082 
3083 		dev_dbg(&port_dev->dev,
3084 				"not enabled, trying %sreset again...\n",
3085 				warm ? "warm " : "");
3086 		delay = HUB_LONG_RESET_TIME;
3087 	}
3088 
3089 	dev_err(&port_dev->dev, "Cannot enable. Maybe the USB cable is bad?\n");
3090 
3091 done:
3092 	if (status == 0) {
3093 		if (port_dev->quirks & USB_PORT_QUIRK_FAST_ENUM)
3094 			usleep_range(10000, 12000);
3095 		else {
3096 			/* TRSTRCY = 10 ms; plus some extra */
3097 			reset_recovery_time = 10 + 40;
3098 
3099 			/* Hub needs extra delay after resetting its port. */
3100 			if (hub->hdev->quirks & USB_QUIRK_HUB_SLOW_RESET)
3101 				reset_recovery_time += 100;
3102 
3103 			msleep(reset_recovery_time);
3104 		}
3105 
3106 		if (udev) {
3107 			struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3108 
3109 			update_devnum(udev, 0);
3110 			/* The xHC may think the device is already reset,
3111 			 * so ignore the status.
3112 			 */
3113 			if (hcd->driver->reset_device)
3114 				hcd->driver->reset_device(hcd, udev);
3115 
3116 			usb_set_device_state(udev, USB_STATE_DEFAULT);
3117 		}
3118 	} else {
3119 		if (udev)
3120 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
3121 	}
3122 
3123 	if (!hub_is_superspeed(hub->hdev))
3124 		up_read(&ehci_cf_port_reset_rwsem);
3125 
3126 	return status;
3127 }
3128 
3129 /*
3130  * hub_port_stop_enumerate - stop USB enumeration or ignore port events
3131  * @hub: target hub
3132  * @port1: port num of the port
3133  * @retries: port retries number of hub_port_init()
3134  *
3135  * Return:
3136  *    true: ignore port actions/events or give up connection attempts.
3137  *    false: keep original behavior.
3138  *
3139  * This function will be based on retries to check whether the port which is
3140  * marked with early_stop attribute would stop enumeration or ignore events.
3141  *
3142  * Note:
3143  * This function didn't change anything if early_stop is not set, and it will
3144  * prevent all connection attempts when early_stop is set and the attempts of
3145  * the port are more than 1.
3146  */
3147 static bool hub_port_stop_enumerate(struct usb_hub *hub, int port1, int retries)
3148 {
3149 	struct usb_port *port_dev = hub->ports[port1 - 1];
3150 
3151 	if (port_dev->early_stop) {
3152 		if (port_dev->ignore_event)
3153 			return true;
3154 
3155 		/*
3156 		 * We want unsuccessful attempts to fail quickly.
3157 		 * Since some devices may need one failure during
3158 		 * port initialization, we allow two tries but no
3159 		 * more.
3160 		 */
3161 		if (retries < 2)
3162 			return false;
3163 
3164 		port_dev->ignore_event = 1;
3165 	} else
3166 		port_dev->ignore_event = 0;
3167 
3168 	return port_dev->ignore_event;
3169 }
3170 
3171 /* Check if a port is power on */
3172 int usb_port_is_power_on(struct usb_hub *hub, unsigned int portstatus)
3173 {
3174 	int ret = 0;
3175 
3176 	if (hub_is_superspeed(hub->hdev)) {
3177 		if (portstatus & USB_SS_PORT_STAT_POWER)
3178 			ret = 1;
3179 	} else {
3180 		if (portstatus & USB_PORT_STAT_POWER)
3181 			ret = 1;
3182 	}
3183 
3184 	return ret;
3185 }
3186 
3187 static void usb_lock_port(struct usb_port *port_dev)
3188 		__acquires(&port_dev->status_lock)
3189 {
3190 	mutex_lock(&port_dev->status_lock);
3191 	__acquire(&port_dev->status_lock);
3192 }
3193 
3194 static void usb_unlock_port(struct usb_port *port_dev)
3195 		__releases(&port_dev->status_lock)
3196 {
3197 	mutex_unlock(&port_dev->status_lock);
3198 	__release(&port_dev->status_lock);
3199 }
3200 
3201 #ifdef	CONFIG_PM
3202 
3203 /* Check if a port is suspended(USB2.0 port) or in U3 state(USB3.0 port) */
3204 static int port_is_suspended(struct usb_hub *hub, unsigned portstatus)
3205 {
3206 	int ret = 0;
3207 
3208 	if (hub_is_superspeed(hub->hdev)) {
3209 		if ((portstatus & USB_PORT_STAT_LINK_STATE)
3210 				== USB_SS_PORT_LS_U3)
3211 			ret = 1;
3212 	} else {
3213 		if (portstatus & USB_PORT_STAT_SUSPEND)
3214 			ret = 1;
3215 	}
3216 
3217 	return ret;
3218 }
3219 
3220 /* Determine whether the device on a port is ready for a normal resume,
3221  * is ready for a reset-resume, or should be disconnected.
3222  */
3223 static int check_port_resume_type(struct usb_device *udev,
3224 		struct usb_hub *hub, int port1,
3225 		int status, u16 portchange, u16 portstatus)
3226 {
3227 	struct usb_port *port_dev = hub->ports[port1 - 1];
3228 	int retries = 3;
3229 
3230  retry:
3231 	/* Is a warm reset needed to recover the connection? */
3232 	if (status == 0 && udev->reset_resume
3233 		&& hub_port_warm_reset_required(hub, port1, portstatus)) {
3234 		/* pass */;
3235 	}
3236 	/* Is the device still present? */
3237 	else if (status || port_is_suspended(hub, portstatus) ||
3238 			!usb_port_is_power_on(hub, portstatus)) {
3239 		if (status >= 0)
3240 			status = -ENODEV;
3241 	} else if (!(portstatus & USB_PORT_STAT_CONNECTION)) {
3242 		if (retries--) {
3243 			usleep_range(200, 300);
3244 			status = usb_hub_port_status(hub, port1, &portstatus,
3245 							     &portchange);
3246 			goto retry;
3247 		}
3248 		status = -ENODEV;
3249 	}
3250 
3251 	/* Can't do a normal resume if the port isn't enabled,
3252 	 * so try a reset-resume instead.
3253 	 */
3254 	else if (!(portstatus & USB_PORT_STAT_ENABLE) && !udev->reset_resume) {
3255 		if (udev->persist_enabled)
3256 			udev->reset_resume = 1;
3257 		else
3258 			status = -ENODEV;
3259 	}
3260 
3261 	if (status) {
3262 		dev_dbg(&port_dev->dev, "status %04x.%04x after resume, %d\n",
3263 				portchange, portstatus, status);
3264 	} else if (udev->reset_resume) {
3265 
3266 		/* Late port handoff can set status-change bits */
3267 		if (portchange & USB_PORT_STAT_C_CONNECTION)
3268 			usb_clear_port_feature(hub->hdev, port1,
3269 					USB_PORT_FEAT_C_CONNECTION);
3270 		if (portchange & USB_PORT_STAT_C_ENABLE)
3271 			usb_clear_port_feature(hub->hdev, port1,
3272 					USB_PORT_FEAT_C_ENABLE);
3273 
3274 		/*
3275 		 * Whatever made this reset-resume necessary may have
3276 		 * turned on the port1 bit in hub->change_bits.  But after
3277 		 * a successful reset-resume we want the bit to be clear;
3278 		 * if it was on it would indicate that something happened
3279 		 * following the reset-resume.
3280 		 */
3281 		clear_bit(port1, hub->change_bits);
3282 	}
3283 
3284 	return status;
3285 }
3286 
3287 int usb_disable_ltm(struct usb_device *udev)
3288 {
3289 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3290 
3291 	/* Check if the roothub and device supports LTM. */
3292 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3293 			!usb_device_supports_ltm(udev))
3294 		return 0;
3295 
3296 	/* Clear Feature LTM Enable can only be sent if the device is
3297 	 * configured.
3298 	 */
3299 	if (!udev->actconfig)
3300 		return 0;
3301 
3302 	return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3303 			USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3304 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3305 			USB_CTRL_SET_TIMEOUT);
3306 }
3307 EXPORT_SYMBOL_GPL(usb_disable_ltm);
3308 
3309 void usb_enable_ltm(struct usb_device *udev)
3310 {
3311 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3312 
3313 	/* Check if the roothub and device supports LTM. */
3314 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3315 			!usb_device_supports_ltm(udev))
3316 		return;
3317 
3318 	/* Set Feature LTM Enable can only be sent if the device is
3319 	 * configured.
3320 	 */
3321 	if (!udev->actconfig)
3322 		return;
3323 
3324 	usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3325 			USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3326 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3327 			USB_CTRL_SET_TIMEOUT);
3328 }
3329 EXPORT_SYMBOL_GPL(usb_enable_ltm);
3330 
3331 /*
3332  * usb_enable_remote_wakeup - enable remote wakeup for a device
3333  * @udev: target device
3334  *
3335  * For USB-2 devices: Set the device's remote wakeup feature.
3336  *
3337  * For USB-3 devices: Assume there's only one function on the device and
3338  * enable remote wake for the first interface.  FIXME if the interface
3339  * association descriptor shows there's more than one function.
3340  */
3341 static int usb_enable_remote_wakeup(struct usb_device *udev)
3342 {
3343 	if (udev->speed < USB_SPEED_SUPER)
3344 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3345 				USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3346 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3347 				USB_CTRL_SET_TIMEOUT);
3348 	else
3349 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3350 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3351 				USB_INTRF_FUNC_SUSPEND,
3352 				USB_INTRF_FUNC_SUSPEND_RW |
3353 					USB_INTRF_FUNC_SUSPEND_LP,
3354 				NULL, 0, USB_CTRL_SET_TIMEOUT);
3355 }
3356 
3357 /*
3358  * usb_disable_remote_wakeup - disable remote wakeup for a device
3359  * @udev: target device
3360  *
3361  * For USB-2 devices: Clear the device's remote wakeup feature.
3362  *
3363  * For USB-3 devices: Assume there's only one function on the device and
3364  * disable remote wake for the first interface.  FIXME if the interface
3365  * association descriptor shows there's more than one function.
3366  */
3367 static int usb_disable_remote_wakeup(struct usb_device *udev)
3368 {
3369 	if (udev->speed < USB_SPEED_SUPER)
3370 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3371 				USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3372 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3373 				USB_CTRL_SET_TIMEOUT);
3374 	else
3375 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3376 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3377 				USB_INTRF_FUNC_SUSPEND,	0, NULL, 0,
3378 				USB_CTRL_SET_TIMEOUT);
3379 }
3380 
3381 /* Count of wakeup-enabled devices at or below udev */
3382 unsigned usb_wakeup_enabled_descendants(struct usb_device *udev)
3383 {
3384 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
3385 
3386 	return udev->do_remote_wakeup +
3387 			(hub ? hub->wakeup_enabled_descendants : 0);
3388 }
3389 EXPORT_SYMBOL_GPL(usb_wakeup_enabled_descendants);
3390 
3391 /*
3392  * usb_port_suspend - suspend a usb device's upstream port
3393  * @udev: device that's no longer in active use, not a root hub
3394  * Context: must be able to sleep; device not locked; pm locks held
3395  *
3396  * Suspends a USB device that isn't in active use, conserving power.
3397  * Devices may wake out of a suspend, if anything important happens,
3398  * using the remote wakeup mechanism.  They may also be taken out of
3399  * suspend by the host, using usb_port_resume().  It's also routine
3400  * to disconnect devices while they are suspended.
3401  *
3402  * This only affects the USB hardware for a device; its interfaces
3403  * (and, for hubs, child devices) must already have been suspended.
3404  *
3405  * Selective port suspend reduces power; most suspended devices draw
3406  * less than 500 uA.  It's also used in OTG, along with remote wakeup.
3407  * All devices below the suspended port are also suspended.
3408  *
3409  * Devices leave suspend state when the host wakes them up.  Some devices
3410  * also support "remote wakeup", where the device can activate the USB
3411  * tree above them to deliver data, such as a keypress or packet.  In
3412  * some cases, this wakes the USB host.
3413  *
3414  * Suspending OTG devices may trigger HNP, if that's been enabled
3415  * between a pair of dual-role devices.  That will change roles, such
3416  * as from A-Host to A-Peripheral or from B-Host back to B-Peripheral.
3417  *
3418  * Devices on USB hub ports have only one "suspend" state, corresponding
3419  * to ACPI D2, "may cause the device to lose some context".
3420  * State transitions include:
3421  *
3422  *   - suspend, resume ... when the VBUS power link stays live
3423  *   - suspend, disconnect ... VBUS lost
3424  *
3425  * Once VBUS drop breaks the circuit, the port it's using has to go through
3426  * normal re-enumeration procedures, starting with enabling VBUS power.
3427  * Other than re-initializing the hub (plug/unplug, except for root hubs),
3428  * Linux (2.6) currently has NO mechanisms to initiate that:  no hub_wq
3429  * timer, no SRP, no requests through sysfs.
3430  *
3431  * If Runtime PM isn't enabled or used, non-SuperSpeed devices may not get
3432  * suspended until their bus goes into global suspend (i.e., the root
3433  * hub is suspended).  Nevertheless, we change @udev->state to
3434  * USB_STATE_SUSPENDED as this is the device's "logical" state.  The actual
3435  * upstream port setting is stored in @udev->port_is_suspended.
3436  *
3437  * Returns 0 on success, else negative errno.
3438  */
3439 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
3440 {
3441 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3442 	struct usb_port *port_dev = hub->ports[udev->portnum - 1];
3443 	int		port1 = udev->portnum;
3444 	int		status;
3445 	bool		really_suspend = true;
3446 
3447 	usb_lock_port(port_dev);
3448 
3449 	/* enable remote wakeup when appropriate; this lets the device
3450 	 * wake up the upstream hub (including maybe the root hub).
3451 	 *
3452 	 * NOTE:  OTG devices may issue remote wakeup (or SRP) even when
3453 	 * we don't explicitly enable it here.
3454 	 */
3455 	if (udev->do_remote_wakeup) {
3456 		status = usb_enable_remote_wakeup(udev);
3457 		if (status) {
3458 			dev_dbg(&udev->dev, "won't remote wakeup, status %d\n",
3459 					status);
3460 			/* bail if autosuspend is requested */
3461 			if (PMSG_IS_AUTO(msg))
3462 				goto err_wakeup;
3463 		}
3464 	}
3465 
3466 	/* disable USB2 hardware LPM */
3467 	usb_disable_usb2_hardware_lpm(udev);
3468 
3469 	if (usb_disable_ltm(udev)) {
3470 		dev_err(&udev->dev, "Failed to disable LTM before suspend\n");
3471 		status = -ENOMEM;
3472 		if (PMSG_IS_AUTO(msg))
3473 			goto err_ltm;
3474 	}
3475 
3476 	/* see 7.1.7.6 */
3477 	if (hub_is_superspeed(hub->hdev))
3478 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U3);
3479 
3480 	/*
3481 	 * For system suspend, we do not need to enable the suspend feature
3482 	 * on individual USB-2 ports.  The devices will automatically go
3483 	 * into suspend a few ms after the root hub stops sending packets.
3484 	 * The USB 2.0 spec calls this "global suspend".
3485 	 *
3486 	 * However, many USB hubs have a bug: They don't relay wakeup requests
3487 	 * from a downstream port if the port's suspend feature isn't on.
3488 	 * Therefore we will turn on the suspend feature if udev or any of its
3489 	 * descendants is enabled for remote wakeup.
3490 	 */
3491 	else if (PMSG_IS_AUTO(msg) || usb_wakeup_enabled_descendants(udev) > 0)
3492 		status = set_port_feature(hub->hdev, port1,
3493 				USB_PORT_FEAT_SUSPEND);
3494 	else {
3495 		really_suspend = false;
3496 		status = 0;
3497 	}
3498 	if (status) {
3499 		/* Check if the port has been suspended for the timeout case
3500 		 * to prevent the suspended port from incorrect handling.
3501 		 */
3502 		if (status == -ETIMEDOUT) {
3503 			int ret;
3504 			u16 portstatus, portchange;
3505 
3506 			portstatus = portchange = 0;
3507 			ret = usb_hub_port_status(hub, port1, &portstatus,
3508 					&portchange);
3509 
3510 			dev_dbg(&port_dev->dev,
3511 				"suspend timeout, status %04x\n", portstatus);
3512 
3513 			if (ret == 0 && port_is_suspended(hub, portstatus)) {
3514 				status = 0;
3515 				goto suspend_done;
3516 			}
3517 		}
3518 
3519 		dev_dbg(&port_dev->dev, "can't suspend, status %d\n", status);
3520 
3521 		/* Try to enable USB3 LTM again */
3522 		usb_enable_ltm(udev);
3523  err_ltm:
3524 		/* Try to enable USB2 hardware LPM again */
3525 		usb_enable_usb2_hardware_lpm(udev);
3526 
3527 		if (udev->do_remote_wakeup)
3528 			(void) usb_disable_remote_wakeup(udev);
3529  err_wakeup:
3530 
3531 		/* System sleep transitions should never fail */
3532 		if (!PMSG_IS_AUTO(msg))
3533 			status = 0;
3534 	} else {
3535  suspend_done:
3536 		dev_dbg(&udev->dev, "usb %ssuspend, wakeup %d\n",
3537 				(PMSG_IS_AUTO(msg) ? "auto-" : ""),
3538 				udev->do_remote_wakeup);
3539 		if (really_suspend) {
3540 			udev->port_is_suspended = 1;
3541 
3542 			/* device has up to 10 msec to fully suspend */
3543 			msleep(10);
3544 		}
3545 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
3546 	}
3547 
3548 	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled
3549 			&& test_and_clear_bit(port1, hub->child_usage_bits))
3550 		pm_runtime_put_sync(&port_dev->dev);
3551 
3552 	usb_mark_last_busy(hub->hdev);
3553 
3554 	usb_unlock_port(port_dev);
3555 	return status;
3556 }
3557 
3558 /*
3559  * If the USB "suspend" state is in use (rather than "global suspend"),
3560  * many devices will be individually taken out of suspend state using
3561  * special "resume" signaling.  This routine kicks in shortly after
3562  * hardware resume signaling is finished, either because of selective
3563  * resume (by host) or remote wakeup (by device) ... now see what changed
3564  * in the tree that's rooted at this device.
3565  *
3566  * If @udev->reset_resume is set then the device is reset before the
3567  * status check is done.
3568  */
3569 static int finish_port_resume(struct usb_device *udev)
3570 {
3571 	int	status = 0;
3572 	u16	devstatus = 0;
3573 
3574 	/* caller owns the udev device lock */
3575 	dev_dbg(&udev->dev, "%s\n",
3576 		udev->reset_resume ? "finish reset-resume" : "finish resume");
3577 
3578 	/* usb ch9 identifies four variants of SUSPENDED, based on what
3579 	 * state the device resumes to.  Linux currently won't see the
3580 	 * first two on the host side; they'd be inside hub_port_init()
3581 	 * during many timeouts, but hub_wq can't suspend until later.
3582 	 */
3583 	usb_set_device_state(udev, udev->actconfig
3584 			? USB_STATE_CONFIGURED
3585 			: USB_STATE_ADDRESS);
3586 
3587 	/* 10.5.4.5 says not to reset a suspended port if the attached
3588 	 * device is enabled for remote wakeup.  Hence the reset
3589 	 * operation is carried out here, after the port has been
3590 	 * resumed.
3591 	 */
3592 	if (udev->reset_resume) {
3593 		/*
3594 		 * If the device morphs or switches modes when it is reset,
3595 		 * we don't want to perform a reset-resume.  We'll fail the
3596 		 * resume, which will cause a logical disconnect, and then
3597 		 * the device will be rediscovered.
3598 		 */
3599  retry_reset_resume:
3600 		if (udev->quirks & USB_QUIRK_RESET)
3601 			status = -ENODEV;
3602 		else
3603 			status = usb_reset_and_verify_device(udev);
3604 	}
3605 
3606 	/* 10.5.4.5 says be sure devices in the tree are still there.
3607 	 * For now let's assume the device didn't go crazy on resume,
3608 	 * and device drivers will know about any resume quirks.
3609 	 */
3610 	if (status == 0) {
3611 		devstatus = 0;
3612 		status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0, &devstatus);
3613 
3614 		/* If a normal resume failed, try doing a reset-resume */
3615 		if (status && !udev->reset_resume && udev->persist_enabled) {
3616 			dev_dbg(&udev->dev, "retry with reset-resume\n");
3617 			udev->reset_resume = 1;
3618 			goto retry_reset_resume;
3619 		}
3620 	}
3621 
3622 	if (status) {
3623 		dev_dbg(&udev->dev, "gone after usb resume? status %d\n",
3624 				status);
3625 	/*
3626 	 * There are a few quirky devices which violate the standard
3627 	 * by claiming to have remote wakeup enabled after a reset,
3628 	 * which crash if the feature is cleared, hence check for
3629 	 * udev->reset_resume
3630 	 */
3631 	} else if (udev->actconfig && !udev->reset_resume) {
3632 		if (udev->speed < USB_SPEED_SUPER) {
3633 			if (devstatus & (1 << USB_DEVICE_REMOTE_WAKEUP))
3634 				status = usb_disable_remote_wakeup(udev);
3635 		} else {
3636 			status = usb_get_std_status(udev, USB_RECIP_INTERFACE, 0,
3637 					&devstatus);
3638 			if (!status && devstatus & (USB_INTRF_STAT_FUNC_RW_CAP
3639 					| USB_INTRF_STAT_FUNC_RW))
3640 				status = usb_disable_remote_wakeup(udev);
3641 		}
3642 
3643 		if (status)
3644 			dev_dbg(&udev->dev,
3645 				"disable remote wakeup, status %d\n",
3646 				status);
3647 		status = 0;
3648 	}
3649 	return status;
3650 }
3651 
3652 /*
3653  * There are some SS USB devices which take longer time for link training.
3654  * XHCI specs 4.19.4 says that when Link training is successful, port
3655  * sets CCS bit to 1. So if SW reads port status before successful link
3656  * training, then it will not find device to be present.
3657  * USB Analyzer log with such buggy devices show that in some cases
3658  * device switch on the RX termination after long delay of host enabling
3659  * the VBUS. In few other cases it has been seen that device fails to
3660  * negotiate link training in first attempt. It has been
3661  * reported till now that few devices take as long as 2000 ms to train
3662  * the link after host enabling its VBUS and termination. Following
3663  * routine implements a 2000 ms timeout for link training. If in a case
3664  * link trains before timeout, loop will exit earlier.
3665  *
3666  * There are also some 2.0 hard drive based devices and 3.0 thumb
3667  * drives that, when plugged into a 2.0 only port, take a long
3668  * time to set CCS after VBUS enable.
3669  *
3670  * FIXME: If a device was connected before suspend, but was removed
3671  * while system was asleep, then the loop in the following routine will
3672  * only exit at timeout.
3673  *
3674  * This routine should only be called when persist is enabled.
3675  */
3676 static int wait_for_connected(struct usb_device *udev,
3677 		struct usb_hub *hub, int port1,
3678 		u16 *portchange, u16 *portstatus)
3679 {
3680 	int status = 0, delay_ms = 0;
3681 
3682 	while (delay_ms < 2000) {
3683 		if (status || *portstatus & USB_PORT_STAT_CONNECTION)
3684 			break;
3685 		if (!usb_port_is_power_on(hub, *portstatus)) {
3686 			status = -ENODEV;
3687 			break;
3688 		}
3689 		msleep(20);
3690 		delay_ms += 20;
3691 		status = usb_hub_port_status(hub, port1, portstatus, portchange);
3692 	}
3693 	dev_dbg(&udev->dev, "Waited %dms for CONNECT\n", delay_ms);
3694 	return status;
3695 }
3696 
3697 /*
3698  * usb_port_resume - re-activate a suspended usb device's upstream port
3699  * @udev: device to re-activate, not a root hub
3700  * Context: must be able to sleep; device not locked; pm locks held
3701  *
3702  * This will re-activate the suspended device, increasing power usage
3703  * while letting drivers communicate again with its endpoints.
3704  * USB resume explicitly guarantees that the power session between
3705  * the host and the device is the same as it was when the device
3706  * suspended.
3707  *
3708  * If @udev->reset_resume is set then this routine won't check that the
3709  * port is still enabled.  Furthermore, finish_port_resume() above will
3710  * reset @udev.  The end result is that a broken power session can be
3711  * recovered and @udev will appear to persist across a loss of VBUS power.
3712  *
3713  * For example, if a host controller doesn't maintain VBUS suspend current
3714  * during a system sleep or is reset when the system wakes up, all the USB
3715  * power sessions below it will be broken.  This is especially troublesome
3716  * for mass-storage devices containing mounted filesystems, since the
3717  * device will appear to have disconnected and all the memory mappings
3718  * to it will be lost.  Using the USB_PERSIST facility, the device can be
3719  * made to appear as if it had not disconnected.
3720  *
3721  * This facility can be dangerous.  Although usb_reset_and_verify_device() makes
3722  * every effort to insure that the same device is present after the
3723  * reset as before, it cannot provide a 100% guarantee.  Furthermore it's
3724  * quite possible for a device to remain unaltered but its media to be
3725  * changed.  If the user replaces a flash memory card while the system is
3726  * asleep, he will have only himself to blame when the filesystem on the
3727  * new card is corrupted and the system crashes.
3728  *
3729  * Returns 0 on success, else negative errno.
3730  */
3731 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
3732 {
3733 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3734 	struct usb_port *port_dev = hub->ports[udev->portnum  - 1];
3735 	int		port1 = udev->portnum;
3736 	int		status;
3737 	u16		portchange, portstatus;
3738 
3739 	if (!test_and_set_bit(port1, hub->child_usage_bits)) {
3740 		status = pm_runtime_resume_and_get(&port_dev->dev);
3741 		if (status < 0) {
3742 			dev_dbg(&udev->dev, "can't resume usb port, status %d\n",
3743 					status);
3744 			return status;
3745 		}
3746 	}
3747 
3748 	usb_lock_port(port_dev);
3749 
3750 	/* Skip the initial Clear-Suspend step for a remote wakeup */
3751 	status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3752 	if (status == 0 && !port_is_suspended(hub, portstatus)) {
3753 		if (portchange & USB_PORT_STAT_C_SUSPEND)
3754 			pm_wakeup_event(&udev->dev, 0);
3755 		goto SuspendCleared;
3756 	}
3757 
3758 	/* see 7.1.7.7; affects power usage, but not budgeting */
3759 	if (hub_is_superspeed(hub->hdev))
3760 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U0);
3761 	else
3762 		status = usb_clear_port_feature(hub->hdev,
3763 				port1, USB_PORT_FEAT_SUSPEND);
3764 	if (status) {
3765 		dev_dbg(&port_dev->dev, "can't resume, status %d\n", status);
3766 	} else {
3767 		/* drive resume for USB_RESUME_TIMEOUT msec */
3768 		dev_dbg(&udev->dev, "usb %sresume\n",
3769 				(PMSG_IS_AUTO(msg) ? "auto-" : ""));
3770 		msleep(USB_RESUME_TIMEOUT);
3771 
3772 		/* Virtual root hubs can trigger on GET_PORT_STATUS to
3773 		 * stop resume signaling.  Then finish the resume
3774 		 * sequence.
3775 		 */
3776 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3777 	}
3778 
3779  SuspendCleared:
3780 	if (status == 0) {
3781 		udev->port_is_suspended = 0;
3782 		if (hub_is_superspeed(hub->hdev)) {
3783 			if (portchange & USB_PORT_STAT_C_LINK_STATE)
3784 				usb_clear_port_feature(hub->hdev, port1,
3785 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3786 		} else {
3787 			if (portchange & USB_PORT_STAT_C_SUSPEND)
3788 				usb_clear_port_feature(hub->hdev, port1,
3789 						USB_PORT_FEAT_C_SUSPEND);
3790 		}
3791 
3792 		/* TRSMRCY = 10 msec */
3793 		msleep(10);
3794 	}
3795 
3796 	if (udev->persist_enabled)
3797 		status = wait_for_connected(udev, hub, port1, &portchange,
3798 				&portstatus);
3799 
3800 	status = check_port_resume_type(udev,
3801 			hub, port1, status, portchange, portstatus);
3802 	if (status == 0)
3803 		status = finish_port_resume(udev);
3804 	if (status < 0) {
3805 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
3806 		hub_port_logical_disconnect(hub, port1);
3807 	} else  {
3808 		/* Try to enable USB2 hardware LPM */
3809 		usb_enable_usb2_hardware_lpm(udev);
3810 
3811 		/* Try to enable USB3 LTM */
3812 		usb_enable_ltm(udev);
3813 	}
3814 
3815 	usb_unlock_port(port_dev);
3816 
3817 	return status;
3818 }
3819 
3820 int usb_remote_wakeup(struct usb_device *udev)
3821 {
3822 	int	status = 0;
3823 
3824 	usb_lock_device(udev);
3825 	if (udev->state == USB_STATE_SUSPENDED) {
3826 		dev_dbg(&udev->dev, "usb %sresume\n", "wakeup-");
3827 		status = usb_autoresume_device(udev);
3828 		if (status == 0) {
3829 			/* Let the drivers do their thing, then... */
3830 			usb_autosuspend_device(udev);
3831 		}
3832 	}
3833 	usb_unlock_device(udev);
3834 	return status;
3835 }
3836 
3837 /* Returns 1 if there was a remote wakeup and a connect status change. */
3838 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
3839 		u16 portstatus, u16 portchange)
3840 		__must_hold(&port_dev->status_lock)
3841 {
3842 	struct usb_port *port_dev = hub->ports[port - 1];
3843 	struct usb_device *hdev;
3844 	struct usb_device *udev;
3845 	int connect_change = 0;
3846 	u16 link_state;
3847 	int ret;
3848 
3849 	hdev = hub->hdev;
3850 	udev = port_dev->child;
3851 	if (!hub_is_superspeed(hdev)) {
3852 		if (!(portchange & USB_PORT_STAT_C_SUSPEND))
3853 			return 0;
3854 		usb_clear_port_feature(hdev, port, USB_PORT_FEAT_C_SUSPEND);
3855 	} else {
3856 		link_state = portstatus & USB_PORT_STAT_LINK_STATE;
3857 		if (!udev || udev->state != USB_STATE_SUSPENDED ||
3858 				(link_state != USB_SS_PORT_LS_U0 &&
3859 				 link_state != USB_SS_PORT_LS_U1 &&
3860 				 link_state != USB_SS_PORT_LS_U2))
3861 			return 0;
3862 	}
3863 
3864 	if (udev) {
3865 		/* TRSMRCY = 10 msec */
3866 		msleep(10);
3867 
3868 		usb_unlock_port(port_dev);
3869 		ret = usb_remote_wakeup(udev);
3870 		usb_lock_port(port_dev);
3871 		if (ret < 0)
3872 			connect_change = 1;
3873 	} else {
3874 		ret = -ENODEV;
3875 		hub_port_disable(hub, port, 1);
3876 	}
3877 	dev_dbg(&port_dev->dev, "resume, status %d\n", ret);
3878 	return connect_change;
3879 }
3880 
3881 static int check_ports_changed(struct usb_hub *hub)
3882 {
3883 	int port1;
3884 
3885 	for (port1 = 1; port1 <= hub->hdev->maxchild; ++port1) {
3886 		u16 portstatus, portchange;
3887 		int status;
3888 
3889 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3890 		if (!status && portchange)
3891 			return 1;
3892 	}
3893 	return 0;
3894 }
3895 
3896 static int hub_suspend(struct usb_interface *intf, pm_message_t msg)
3897 {
3898 	struct usb_hub		*hub = usb_get_intfdata(intf);
3899 	struct usb_device	*hdev = hub->hdev;
3900 	unsigned		port1;
3901 
3902 	/*
3903 	 * Warn if children aren't already suspended.
3904 	 * Also, add up the number of wakeup-enabled descendants.
3905 	 */
3906 	hub->wakeup_enabled_descendants = 0;
3907 	for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3908 		struct usb_port *port_dev = hub->ports[port1 - 1];
3909 		struct usb_device *udev = port_dev->child;
3910 
3911 		if (udev && udev->can_submit) {
3912 			dev_warn(&port_dev->dev, "device %s not suspended yet\n",
3913 					dev_name(&udev->dev));
3914 			if (PMSG_IS_AUTO(msg))
3915 				return -EBUSY;
3916 		}
3917 		if (udev)
3918 			hub->wakeup_enabled_descendants +=
3919 					usb_wakeup_enabled_descendants(udev);
3920 	}
3921 
3922 	if (hdev->do_remote_wakeup && hub->quirk_check_port_auto_suspend) {
3923 		/* check if there are changes pending on hub ports */
3924 		if (check_ports_changed(hub)) {
3925 			if (PMSG_IS_AUTO(msg))
3926 				return -EBUSY;
3927 			pm_wakeup_event(&hdev->dev, 2000);
3928 		}
3929 	}
3930 
3931 	if (hub_is_superspeed(hdev) && hdev->do_remote_wakeup) {
3932 		/* Enable hub to send remote wakeup for all ports. */
3933 		for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3934 			set_port_feature(hdev,
3935 					 port1 |
3936 					 USB_PORT_FEAT_REMOTE_WAKE_CONNECT |
3937 					 USB_PORT_FEAT_REMOTE_WAKE_DISCONNECT |
3938 					 USB_PORT_FEAT_REMOTE_WAKE_OVER_CURRENT,
3939 					 USB_PORT_FEAT_REMOTE_WAKE_MASK);
3940 		}
3941 	}
3942 
3943 	dev_dbg(&intf->dev, "%s\n", __func__);
3944 
3945 	/* stop hub_wq and related activity */
3946 	hub_quiesce(hub, HUB_SUSPEND);
3947 	return 0;
3948 }
3949 
3950 /* Report wakeup requests from the ports of a resuming root hub */
3951 static void report_wakeup_requests(struct usb_hub *hub)
3952 {
3953 	struct usb_device	*hdev = hub->hdev;
3954 	struct usb_device	*udev;
3955 	struct usb_hcd		*hcd;
3956 	unsigned long		resuming_ports;
3957 	int			i;
3958 
3959 	if (hdev->parent)
3960 		return;		/* Not a root hub */
3961 
3962 	hcd = bus_to_hcd(hdev->bus);
3963 	if (hcd->driver->get_resuming_ports) {
3964 
3965 		/*
3966 		 * The get_resuming_ports() method returns a bitmap (origin 0)
3967 		 * of ports which have started wakeup signaling but have not
3968 		 * yet finished resuming.  During system resume we will
3969 		 * resume all the enabled ports, regardless of any wakeup
3970 		 * signals, which means the wakeup requests would be lost.
3971 		 * To prevent this, report them to the PM core here.
3972 		 */
3973 		resuming_ports = hcd->driver->get_resuming_ports(hcd);
3974 		for (i = 0; i < hdev->maxchild; ++i) {
3975 			if (test_bit(i, &resuming_ports)) {
3976 				udev = hub->ports[i]->child;
3977 				if (udev)
3978 					pm_wakeup_event(&udev->dev, 0);
3979 			}
3980 		}
3981 	}
3982 }
3983 
3984 static int hub_resume(struct usb_interface *intf)
3985 {
3986 	struct usb_hub *hub = usb_get_intfdata(intf);
3987 
3988 	dev_dbg(&intf->dev, "%s\n", __func__);
3989 	hub_activate(hub, HUB_RESUME);
3990 
3991 	/*
3992 	 * This should be called only for system resume, not runtime resume.
3993 	 * We can't tell the difference here, so some wakeup requests will be
3994 	 * reported at the wrong time or more than once.  This shouldn't
3995 	 * matter much, so long as they do get reported.
3996 	 */
3997 	report_wakeup_requests(hub);
3998 	return 0;
3999 }
4000 
4001 static int hub_reset_resume(struct usb_interface *intf)
4002 {
4003 	struct usb_hub *hub = usb_get_intfdata(intf);
4004 
4005 	dev_dbg(&intf->dev, "%s\n", __func__);
4006 	hub_activate(hub, HUB_RESET_RESUME);
4007 	return 0;
4008 }
4009 
4010 /**
4011  * usb_root_hub_lost_power - called by HCD if the root hub lost Vbus power
4012  * @rhdev: struct usb_device for the root hub
4013  *
4014  * The USB host controller driver calls this function when its root hub
4015  * is resumed and Vbus power has been interrupted or the controller
4016  * has been reset.  The routine marks @rhdev as having lost power.
4017  * When the hub driver is resumed it will take notice and carry out
4018  * power-session recovery for all the "USB-PERSIST"-enabled child devices;
4019  * the others will be disconnected.
4020  */
4021 void usb_root_hub_lost_power(struct usb_device *rhdev)
4022 {
4023 	dev_notice(&rhdev->dev, "root hub lost power or was reset\n");
4024 	rhdev->reset_resume = 1;
4025 }
4026 EXPORT_SYMBOL_GPL(usb_root_hub_lost_power);
4027 
4028 static const char * const usb3_lpm_names[]  = {
4029 	"U0",
4030 	"U1",
4031 	"U2",
4032 	"U3",
4033 };
4034 
4035 /*
4036  * Send a Set SEL control transfer to the device, prior to enabling
4037  * device-initiated U1 or U2.  This lets the device know the exit latencies from
4038  * the time the device initiates a U1 or U2 exit, to the time it will receive a
4039  * packet from the host.
4040  *
4041  * This function will fail if the SEL or PEL values for udev are greater than
4042  * the maximum allowed values for the link state to be enabled.
4043  */
4044 static int usb_req_set_sel(struct usb_device *udev)
4045 {
4046 	struct usb_set_sel_req *sel_values;
4047 	unsigned long long u1_sel;
4048 	unsigned long long u1_pel;
4049 	unsigned long long u2_sel;
4050 	unsigned long long u2_pel;
4051 	int ret;
4052 
4053 	if (!udev->parent || udev->speed < USB_SPEED_SUPER || !udev->lpm_capable)
4054 		return 0;
4055 
4056 	/* Convert SEL and PEL stored in ns to us */
4057 	u1_sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4058 	u1_pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
4059 	u2_sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4060 	u2_pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
4061 
4062 	/*
4063 	 * Make sure that the calculated SEL and PEL values for the link
4064 	 * state we're enabling aren't bigger than the max SEL/PEL
4065 	 * value that will fit in the SET SEL control transfer.
4066 	 * Otherwise the device would get an incorrect idea of the exit
4067 	 * latency for the link state, and could start a device-initiated
4068 	 * U1/U2 when the exit latencies are too high.
4069 	 */
4070 	if (u1_sel > USB3_LPM_MAX_U1_SEL_PEL ||
4071 	    u1_pel > USB3_LPM_MAX_U1_SEL_PEL ||
4072 	    u2_sel > USB3_LPM_MAX_U2_SEL_PEL ||
4073 	    u2_pel > USB3_LPM_MAX_U2_SEL_PEL) {
4074 		dev_dbg(&udev->dev, "Device-initiated U1/U2 disabled due to long SEL or PEL\n");
4075 		return -EINVAL;
4076 	}
4077 
4078 	/*
4079 	 * usb_enable_lpm() can be called as part of a failed device reset,
4080 	 * which may be initiated by an error path of a mass storage driver.
4081 	 * Therefore, use GFP_NOIO.
4082 	 */
4083 	sel_values = kmalloc(sizeof *(sel_values), GFP_NOIO);
4084 	if (!sel_values)
4085 		return -ENOMEM;
4086 
4087 	sel_values->u1_sel = u1_sel;
4088 	sel_values->u1_pel = u1_pel;
4089 	sel_values->u2_sel = cpu_to_le16(u2_sel);
4090 	sel_values->u2_pel = cpu_to_le16(u2_pel);
4091 
4092 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4093 			USB_REQ_SET_SEL,
4094 			USB_RECIP_DEVICE,
4095 			0, 0,
4096 			sel_values, sizeof *(sel_values),
4097 			USB_CTRL_SET_TIMEOUT);
4098 	kfree(sel_values);
4099 
4100 	if (ret > 0)
4101 		udev->lpm_devinit_allow = 1;
4102 
4103 	return ret;
4104 }
4105 
4106 /*
4107  * Enable or disable device-initiated U1 or U2 transitions.
4108  */
4109 static int usb_set_device_initiated_lpm(struct usb_device *udev,
4110 		enum usb3_link_state state, bool enable)
4111 {
4112 	int ret;
4113 	int feature;
4114 
4115 	switch (state) {
4116 	case USB3_LPM_U1:
4117 		feature = USB_DEVICE_U1_ENABLE;
4118 		break;
4119 	case USB3_LPM_U2:
4120 		feature = USB_DEVICE_U2_ENABLE;
4121 		break;
4122 	default:
4123 		dev_warn(&udev->dev, "%s: Can't %s non-U1 or U2 state.\n",
4124 				__func__, enable ? "enable" : "disable");
4125 		return -EINVAL;
4126 	}
4127 
4128 	if (udev->state != USB_STATE_CONFIGURED) {
4129 		dev_dbg(&udev->dev, "%s: Can't %s %s state "
4130 				"for unconfigured device.\n",
4131 				__func__, enable ? "enable" : "disable",
4132 				usb3_lpm_names[state]);
4133 		return 0;
4134 	}
4135 
4136 	if (enable) {
4137 		/*
4138 		 * Now send the control transfer to enable device-initiated LPM
4139 		 * for either U1 or U2.
4140 		 */
4141 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4142 				USB_REQ_SET_FEATURE,
4143 				USB_RECIP_DEVICE,
4144 				feature,
4145 				0, NULL, 0,
4146 				USB_CTRL_SET_TIMEOUT);
4147 	} else {
4148 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4149 				USB_REQ_CLEAR_FEATURE,
4150 				USB_RECIP_DEVICE,
4151 				feature,
4152 				0, NULL, 0,
4153 				USB_CTRL_SET_TIMEOUT);
4154 	}
4155 	if (ret < 0) {
4156 		dev_warn(&udev->dev, "%s of device-initiated %s failed.\n",
4157 				enable ? "Enable" : "Disable",
4158 				usb3_lpm_names[state]);
4159 		return -EBUSY;
4160 	}
4161 	return 0;
4162 }
4163 
4164 static int usb_set_lpm_timeout(struct usb_device *udev,
4165 		enum usb3_link_state state, int timeout)
4166 {
4167 	int ret;
4168 	int feature;
4169 
4170 	switch (state) {
4171 	case USB3_LPM_U1:
4172 		feature = USB_PORT_FEAT_U1_TIMEOUT;
4173 		break;
4174 	case USB3_LPM_U2:
4175 		feature = USB_PORT_FEAT_U2_TIMEOUT;
4176 		break;
4177 	default:
4178 		dev_warn(&udev->dev, "%s: Can't set timeout for non-U1 or U2 state.\n",
4179 				__func__);
4180 		return -EINVAL;
4181 	}
4182 
4183 	if (state == USB3_LPM_U1 && timeout > USB3_LPM_U1_MAX_TIMEOUT &&
4184 			timeout != USB3_LPM_DEVICE_INITIATED) {
4185 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x, "
4186 				"which is a reserved value.\n",
4187 				usb3_lpm_names[state], timeout);
4188 		return -EINVAL;
4189 	}
4190 
4191 	ret = set_port_feature(udev->parent,
4192 			USB_PORT_LPM_TIMEOUT(timeout) | udev->portnum,
4193 			feature);
4194 	if (ret < 0) {
4195 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x,"
4196 				"error code %i\n", usb3_lpm_names[state],
4197 				timeout, ret);
4198 		return -EBUSY;
4199 	}
4200 	if (state == USB3_LPM_U1)
4201 		udev->u1_params.timeout = timeout;
4202 	else
4203 		udev->u2_params.timeout = timeout;
4204 	return 0;
4205 }
4206 
4207 /*
4208  * Don't allow device intiated U1/U2 if the system exit latency + one bus
4209  * interval is greater than the minimum service interval of any active
4210  * periodic endpoint. See USB 3.2 section 9.4.9
4211  */
4212 static bool usb_device_may_initiate_lpm(struct usb_device *udev,
4213 					enum usb3_link_state state)
4214 {
4215 	unsigned int sel;		/* us */
4216 	int i, j;
4217 
4218 	if (!udev->lpm_devinit_allow)
4219 		return false;
4220 
4221 	if (state == USB3_LPM_U1)
4222 		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4223 	else if (state == USB3_LPM_U2)
4224 		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4225 	else
4226 		return false;
4227 
4228 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
4229 		struct usb_interface *intf;
4230 		struct usb_endpoint_descriptor *desc;
4231 		unsigned int interval;
4232 
4233 		intf = udev->actconfig->interface[i];
4234 		if (!intf)
4235 			continue;
4236 
4237 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++) {
4238 			desc = &intf->cur_altsetting->endpoint[j].desc;
4239 
4240 			if (usb_endpoint_xfer_int(desc) ||
4241 			    usb_endpoint_xfer_isoc(desc)) {
4242 				interval = (1 << (desc->bInterval - 1)) * 125;
4243 				if (sel + 125 > interval)
4244 					return false;
4245 			}
4246 		}
4247 	}
4248 	return true;
4249 }
4250 
4251 /*
4252  * Enable the hub-initiated U1/U2 idle timeouts, and enable device-initiated
4253  * U1/U2 entry.
4254  *
4255  * We will attempt to enable U1 or U2, but there are no guarantees that the
4256  * control transfers to set the hub timeout or enable device-initiated U1/U2
4257  * will be successful.
4258  *
4259  * If the control transfer to enable device-initiated U1/U2 entry fails, then
4260  * hub-initiated U1/U2 will be disabled.
4261  *
4262  * If we cannot set the parent hub U1/U2 timeout, we attempt to let the xHCI
4263  * driver know about it.  If that call fails, it should be harmless, and just
4264  * take up more slightly more bus bandwidth for unnecessary U1/U2 exit latency.
4265  */
4266 static void usb_enable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4267 		enum usb3_link_state state)
4268 {
4269 	int timeout;
4270 	__u8 u1_mel = udev->bos->ss_cap->bU1devExitLat;
4271 	__le16 u2_mel = udev->bos->ss_cap->bU2DevExitLat;
4272 
4273 	/* If the device says it doesn't have *any* exit latency to come out of
4274 	 * U1 or U2, it's probably lying.  Assume it doesn't implement that link
4275 	 * state.
4276 	 */
4277 	if ((state == USB3_LPM_U1 && u1_mel == 0) ||
4278 			(state == USB3_LPM_U2 && u2_mel == 0))
4279 		return;
4280 
4281 	/* We allow the host controller to set the U1/U2 timeout internally
4282 	 * first, so that it can change its schedule to account for the
4283 	 * additional latency to send data to a device in a lower power
4284 	 * link state.
4285 	 */
4286 	timeout = hcd->driver->enable_usb3_lpm_timeout(hcd, udev, state);
4287 
4288 	/* xHCI host controller doesn't want to enable this LPM state. */
4289 	if (timeout == 0)
4290 		return;
4291 
4292 	if (timeout < 0) {
4293 		dev_warn(&udev->dev, "Could not enable %s link state, "
4294 				"xHCI error %i.\n", usb3_lpm_names[state],
4295 				timeout);
4296 		return;
4297 	}
4298 
4299 	if (usb_set_lpm_timeout(udev, state, timeout)) {
4300 		/* If we can't set the parent hub U1/U2 timeout,
4301 		 * device-initiated LPM won't be allowed either, so let the xHCI
4302 		 * host know that this link state won't be enabled.
4303 		 */
4304 		hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4305 		return;
4306 	}
4307 
4308 	/* Only a configured device will accept the Set Feature
4309 	 * U1/U2_ENABLE
4310 	 */
4311 	if (udev->actconfig &&
4312 	    usb_device_may_initiate_lpm(udev, state)) {
4313 		if (usb_set_device_initiated_lpm(udev, state, true)) {
4314 			/*
4315 			 * Request to enable device initiated U1/U2 failed,
4316 			 * better to turn off lpm in this case.
4317 			 */
4318 			usb_set_lpm_timeout(udev, state, 0);
4319 			hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4320 			return;
4321 		}
4322 	}
4323 
4324 	if (state == USB3_LPM_U1)
4325 		udev->usb3_lpm_u1_enabled = 1;
4326 	else if (state == USB3_LPM_U2)
4327 		udev->usb3_lpm_u2_enabled = 1;
4328 }
4329 /*
4330  * Disable the hub-initiated U1/U2 idle timeouts, and disable device-initiated
4331  * U1/U2 entry.
4332  *
4333  * If this function returns -EBUSY, the parent hub will still allow U1/U2 entry.
4334  * If zero is returned, the parent will not allow the link to go into U1/U2.
4335  *
4336  * If zero is returned, device-initiated U1/U2 entry may still be enabled, but
4337  * it won't have an effect on the bus link state because the parent hub will
4338  * still disallow device-initiated U1/U2 entry.
4339  *
4340  * If zero is returned, the xHCI host controller may still think U1/U2 entry is
4341  * possible.  The result will be slightly more bus bandwidth will be taken up
4342  * (to account for U1/U2 exit latency), but it should be harmless.
4343  */
4344 static int usb_disable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4345 		enum usb3_link_state state)
4346 {
4347 	switch (state) {
4348 	case USB3_LPM_U1:
4349 	case USB3_LPM_U2:
4350 		break;
4351 	default:
4352 		dev_warn(&udev->dev, "%s: Can't disable non-U1 or U2 state.\n",
4353 				__func__);
4354 		return -EINVAL;
4355 	}
4356 
4357 	if (usb_set_lpm_timeout(udev, state, 0))
4358 		return -EBUSY;
4359 
4360 	usb_set_device_initiated_lpm(udev, state, false);
4361 
4362 	if (hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state))
4363 		dev_warn(&udev->dev, "Could not disable xHCI %s timeout, "
4364 				"bus schedule bandwidth may be impacted.\n",
4365 				usb3_lpm_names[state]);
4366 
4367 	/* As soon as usb_set_lpm_timeout(0) return 0, hub initiated LPM
4368 	 * is disabled. Hub will disallows link to enter U1/U2 as well,
4369 	 * even device is initiating LPM. Hence LPM is disabled if hub LPM
4370 	 * timeout set to 0, no matter device-initiated LPM is disabled or
4371 	 * not.
4372 	 */
4373 	if (state == USB3_LPM_U1)
4374 		udev->usb3_lpm_u1_enabled = 0;
4375 	else if (state == USB3_LPM_U2)
4376 		udev->usb3_lpm_u2_enabled = 0;
4377 
4378 	return 0;
4379 }
4380 
4381 /*
4382  * Disable hub-initiated and device-initiated U1 and U2 entry.
4383  * Caller must own the bandwidth_mutex.
4384  *
4385  * This will call usb_enable_lpm() on failure, which will decrement
4386  * lpm_disable_count, and will re-enable LPM if lpm_disable_count reaches zero.
4387  */
4388 int usb_disable_lpm(struct usb_device *udev)
4389 {
4390 	struct usb_hcd *hcd;
4391 
4392 	if (!udev || !udev->parent ||
4393 			udev->speed < USB_SPEED_SUPER ||
4394 			!udev->lpm_capable ||
4395 			udev->state < USB_STATE_CONFIGURED)
4396 		return 0;
4397 
4398 	hcd = bus_to_hcd(udev->bus);
4399 	if (!hcd || !hcd->driver->disable_usb3_lpm_timeout)
4400 		return 0;
4401 
4402 	udev->lpm_disable_count++;
4403 	if ((udev->u1_params.timeout == 0 && udev->u2_params.timeout == 0))
4404 		return 0;
4405 
4406 	/* If LPM is enabled, attempt to disable it. */
4407 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U1))
4408 		goto enable_lpm;
4409 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U2))
4410 		goto enable_lpm;
4411 
4412 	return 0;
4413 
4414 enable_lpm:
4415 	usb_enable_lpm(udev);
4416 	return -EBUSY;
4417 }
4418 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4419 
4420 /* Grab the bandwidth_mutex before calling usb_disable_lpm() */
4421 int usb_unlocked_disable_lpm(struct usb_device *udev)
4422 {
4423 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4424 	int ret;
4425 
4426 	if (!hcd)
4427 		return -EINVAL;
4428 
4429 	mutex_lock(hcd->bandwidth_mutex);
4430 	ret = usb_disable_lpm(udev);
4431 	mutex_unlock(hcd->bandwidth_mutex);
4432 
4433 	return ret;
4434 }
4435 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4436 
4437 /*
4438  * Attempt to enable device-initiated and hub-initiated U1 and U2 entry.  The
4439  * xHCI host policy may prevent U1 or U2 from being enabled.
4440  *
4441  * Other callers may have disabled link PM, so U1 and U2 entry will be disabled
4442  * until the lpm_disable_count drops to zero.  Caller must own the
4443  * bandwidth_mutex.
4444  */
4445 void usb_enable_lpm(struct usb_device *udev)
4446 {
4447 	struct usb_hcd *hcd;
4448 	struct usb_hub *hub;
4449 	struct usb_port *port_dev;
4450 
4451 	if (!udev || !udev->parent ||
4452 			udev->speed < USB_SPEED_SUPER ||
4453 			!udev->lpm_capable ||
4454 			udev->state < USB_STATE_CONFIGURED)
4455 		return;
4456 
4457 	udev->lpm_disable_count--;
4458 	hcd = bus_to_hcd(udev->bus);
4459 	/* Double check that we can both enable and disable LPM.
4460 	 * Device must be configured to accept set feature U1/U2 timeout.
4461 	 */
4462 	if (!hcd || !hcd->driver->enable_usb3_lpm_timeout ||
4463 			!hcd->driver->disable_usb3_lpm_timeout)
4464 		return;
4465 
4466 	if (udev->lpm_disable_count > 0)
4467 		return;
4468 
4469 	hub = usb_hub_to_struct_hub(udev->parent);
4470 	if (!hub)
4471 		return;
4472 
4473 	port_dev = hub->ports[udev->portnum - 1];
4474 
4475 	if (port_dev->usb3_lpm_u1_permit)
4476 		usb_enable_link_state(hcd, udev, USB3_LPM_U1);
4477 
4478 	if (port_dev->usb3_lpm_u2_permit)
4479 		usb_enable_link_state(hcd, udev, USB3_LPM_U2);
4480 }
4481 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4482 
4483 /* Grab the bandwidth_mutex before calling usb_enable_lpm() */
4484 void usb_unlocked_enable_lpm(struct usb_device *udev)
4485 {
4486 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4487 
4488 	if (!hcd)
4489 		return;
4490 
4491 	mutex_lock(hcd->bandwidth_mutex);
4492 	usb_enable_lpm(udev);
4493 	mutex_unlock(hcd->bandwidth_mutex);
4494 }
4495 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4496 
4497 /* usb3 devices use U3 for disabled, make sure remote wakeup is disabled */
4498 static void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4499 					  struct usb_port *port_dev)
4500 {
4501 	struct usb_device *udev = port_dev->child;
4502 	int ret;
4503 
4504 	if (udev && udev->port_is_suspended && udev->do_remote_wakeup) {
4505 		ret = hub_set_port_link_state(hub, port_dev->portnum,
4506 					      USB_SS_PORT_LS_U0);
4507 		if (!ret) {
4508 			msleep(USB_RESUME_TIMEOUT);
4509 			ret = usb_disable_remote_wakeup(udev);
4510 		}
4511 		if (ret)
4512 			dev_warn(&udev->dev,
4513 				 "Port disable: can't disable remote wake\n");
4514 		udev->do_remote_wakeup = 0;
4515 	}
4516 }
4517 
4518 #else	/* CONFIG_PM */
4519 
4520 #define hub_suspend		NULL
4521 #define hub_resume		NULL
4522 #define hub_reset_resume	NULL
4523 
4524 static inline void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4525 						 struct usb_port *port_dev) { }
4526 
4527 int usb_disable_lpm(struct usb_device *udev)
4528 {
4529 	return 0;
4530 }
4531 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4532 
4533 void usb_enable_lpm(struct usb_device *udev) { }
4534 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4535 
4536 int usb_unlocked_disable_lpm(struct usb_device *udev)
4537 {
4538 	return 0;
4539 }
4540 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4541 
4542 void usb_unlocked_enable_lpm(struct usb_device *udev) { }
4543 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4544 
4545 int usb_disable_ltm(struct usb_device *udev)
4546 {
4547 	return 0;
4548 }
4549 EXPORT_SYMBOL_GPL(usb_disable_ltm);
4550 
4551 void usb_enable_ltm(struct usb_device *udev) { }
4552 EXPORT_SYMBOL_GPL(usb_enable_ltm);
4553 
4554 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
4555 		u16 portstatus, u16 portchange)
4556 {
4557 	return 0;
4558 }
4559 
4560 static int usb_req_set_sel(struct usb_device *udev)
4561 {
4562 	return 0;
4563 }
4564 
4565 #endif	/* CONFIG_PM */
4566 
4567 /*
4568  * USB-3 does not have a similar link state as USB-2 that will avoid negotiating
4569  * a connection with a plugged-in cable but will signal the host when the cable
4570  * is unplugged. Disable remote wake and set link state to U3 for USB-3 devices
4571  */
4572 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state)
4573 {
4574 	struct usb_port *port_dev = hub->ports[port1 - 1];
4575 	struct usb_device *hdev = hub->hdev;
4576 	int ret = 0;
4577 
4578 	if (!hub->error) {
4579 		if (hub_is_superspeed(hub->hdev)) {
4580 			hub_usb3_port_prepare_disable(hub, port_dev);
4581 			ret = hub_set_port_link_state(hub, port_dev->portnum,
4582 						      USB_SS_PORT_LS_U3);
4583 		} else {
4584 			ret = usb_clear_port_feature(hdev, port1,
4585 					USB_PORT_FEAT_ENABLE);
4586 		}
4587 	}
4588 	if (port_dev->child && set_state)
4589 		usb_set_device_state(port_dev->child, USB_STATE_NOTATTACHED);
4590 	if (ret && ret != -ENODEV)
4591 		dev_err(&port_dev->dev, "cannot disable (err = %d)\n", ret);
4592 	return ret;
4593 }
4594 
4595 /*
4596  * usb_port_disable - disable a usb device's upstream port
4597  * @udev: device to disable
4598  * Context: @udev locked, must be able to sleep.
4599  *
4600  * Disables a USB device that isn't in active use.
4601  */
4602 int usb_port_disable(struct usb_device *udev)
4603 {
4604 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4605 
4606 	return hub_port_disable(hub, udev->portnum, 0);
4607 }
4608 
4609 /* USB 2.0 spec, 7.1.7.3 / fig 7-29:
4610  *
4611  * Between connect detection and reset signaling there must be a delay
4612  * of 100ms at least for debounce and power-settling.  The corresponding
4613  * timer shall restart whenever the downstream port detects a disconnect.
4614  *
4615  * Apparently there are some bluetooth and irda-dongles and a number of
4616  * low-speed devices for which this debounce period may last over a second.
4617  * Not covered by the spec - but easy to deal with.
4618  *
4619  * This implementation uses a 1500ms total debounce timeout; if the
4620  * connection isn't stable by then it returns -ETIMEDOUT.  It checks
4621  * every 25ms for transient disconnects.  When the port status has been
4622  * unchanged for 100ms it returns the port status.
4623  */
4624 int hub_port_debounce(struct usb_hub *hub, int port1, bool must_be_connected)
4625 {
4626 	int ret;
4627 	u16 portchange, portstatus;
4628 	unsigned connection = 0xffff;
4629 	int total_time, stable_time = 0;
4630 	struct usb_port *port_dev = hub->ports[port1 - 1];
4631 
4632 	for (total_time = 0; ; total_time += HUB_DEBOUNCE_STEP) {
4633 		ret = usb_hub_port_status(hub, port1, &portstatus, &portchange);
4634 		if (ret < 0)
4635 			return ret;
4636 
4637 		if (!(portchange & USB_PORT_STAT_C_CONNECTION) &&
4638 		     (portstatus & USB_PORT_STAT_CONNECTION) == connection) {
4639 			if (!must_be_connected ||
4640 			     (connection == USB_PORT_STAT_CONNECTION))
4641 				stable_time += HUB_DEBOUNCE_STEP;
4642 			if (stable_time >= HUB_DEBOUNCE_STABLE)
4643 				break;
4644 		} else {
4645 			stable_time = 0;
4646 			connection = portstatus & USB_PORT_STAT_CONNECTION;
4647 		}
4648 
4649 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
4650 			usb_clear_port_feature(hub->hdev, port1,
4651 					USB_PORT_FEAT_C_CONNECTION);
4652 		}
4653 
4654 		if (total_time >= HUB_DEBOUNCE_TIMEOUT)
4655 			break;
4656 		msleep(HUB_DEBOUNCE_STEP);
4657 	}
4658 
4659 	dev_dbg(&port_dev->dev, "debounce total %dms stable %dms status 0x%x\n",
4660 			total_time, stable_time, portstatus);
4661 
4662 	if (stable_time < HUB_DEBOUNCE_STABLE)
4663 		return -ETIMEDOUT;
4664 	return portstatus;
4665 }
4666 
4667 void usb_ep0_reinit(struct usb_device *udev)
4668 {
4669 	usb_disable_endpoint(udev, 0 + USB_DIR_IN, true);
4670 	usb_disable_endpoint(udev, 0 + USB_DIR_OUT, true);
4671 	usb_enable_endpoint(udev, &udev->ep0, true);
4672 }
4673 EXPORT_SYMBOL_GPL(usb_ep0_reinit);
4674 
4675 #define usb_sndaddr0pipe()	(PIPE_CONTROL << 30)
4676 #define usb_rcvaddr0pipe()	((PIPE_CONTROL << 30) | USB_DIR_IN)
4677 
4678 static int hub_set_address(struct usb_device *udev, int devnum)
4679 {
4680 	int retval;
4681 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4682 
4683 	/*
4684 	 * The host controller will choose the device address,
4685 	 * instead of the core having chosen it earlier
4686 	 */
4687 	if (!hcd->driver->address_device && devnum <= 1)
4688 		return -EINVAL;
4689 	if (udev->state == USB_STATE_ADDRESS)
4690 		return 0;
4691 	if (udev->state != USB_STATE_DEFAULT)
4692 		return -EINVAL;
4693 	if (hcd->driver->address_device)
4694 		retval = hcd->driver->address_device(hcd, udev);
4695 	else
4696 		retval = usb_control_msg(udev, usb_sndaddr0pipe(),
4697 				USB_REQ_SET_ADDRESS, 0, devnum, 0,
4698 				NULL, 0, USB_CTRL_SET_TIMEOUT);
4699 	if (retval == 0) {
4700 		update_devnum(udev, devnum);
4701 		/* Device now using proper address. */
4702 		usb_set_device_state(udev, USB_STATE_ADDRESS);
4703 		usb_ep0_reinit(udev);
4704 	}
4705 	return retval;
4706 }
4707 
4708 /*
4709  * There are reports of USB 3.0 devices that say they support USB 2.0 Link PM
4710  * when they're plugged into a USB 2.0 port, but they don't work when LPM is
4711  * enabled.
4712  *
4713  * Only enable USB 2.0 Link PM if the port is internal (hardwired), or the
4714  * device says it supports the new USB 2.0 Link PM errata by setting the BESL
4715  * support bit in the BOS descriptor.
4716  */
4717 static void hub_set_initial_usb2_lpm_policy(struct usb_device *udev)
4718 {
4719 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4720 	int connect_type = USB_PORT_CONNECT_TYPE_UNKNOWN;
4721 
4722 	if (!udev->usb2_hw_lpm_capable || !udev->bos)
4723 		return;
4724 
4725 	if (hub)
4726 		connect_type = hub->ports[udev->portnum - 1]->connect_type;
4727 
4728 	if ((udev->bos->ext_cap->bmAttributes & cpu_to_le32(USB_BESL_SUPPORT)) ||
4729 			connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
4730 		udev->usb2_hw_lpm_allowed = 1;
4731 		usb_enable_usb2_hardware_lpm(udev);
4732 	}
4733 }
4734 
4735 static int hub_enable_device(struct usb_device *udev)
4736 {
4737 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4738 
4739 	if (!hcd->driver->enable_device)
4740 		return 0;
4741 	if (udev->state == USB_STATE_ADDRESS)
4742 		return 0;
4743 	if (udev->state != USB_STATE_DEFAULT)
4744 		return -EINVAL;
4745 
4746 	return hcd->driver->enable_device(hcd, udev);
4747 }
4748 
4749 /*
4750  * Get the bMaxPacketSize0 value during initialization by reading the
4751  * device's device descriptor.  Since we don't already know this value,
4752  * the transfer is unsafe and it ignores I/O errors, only testing for
4753  * reasonable received values.
4754  *
4755  * For "old scheme" initialization, size will be 8 so we read just the
4756  * start of the device descriptor, which should work okay regardless of
4757  * the actual bMaxPacketSize0 value.  For "new scheme" initialization,
4758  * size will be 64 (and buf will point to a sufficiently large buffer),
4759  * which might not be kosher according to the USB spec but it's what
4760  * Windows does and what many devices expect.
4761  *
4762  * Returns: bMaxPacketSize0 or a negative error code.
4763  */
4764 static int get_bMaxPacketSize0(struct usb_device *udev,
4765 		struct usb_device_descriptor *buf, int size, bool first_time)
4766 {
4767 	int i, rc;
4768 
4769 	/*
4770 	 * Retry on all errors; some devices are flakey.
4771 	 * 255 is for WUSB devices, we actually need to use
4772 	 * 512 (WUSB1.0[4.8.1]).
4773 	 */
4774 	for (i = 0; i < GET_MAXPACKET0_TRIES; ++i) {
4775 		/* Start with invalid values in case the transfer fails */
4776 		buf->bDescriptorType = buf->bMaxPacketSize0 = 0;
4777 		rc = usb_control_msg(udev, usb_rcvaddr0pipe(),
4778 				USB_REQ_GET_DESCRIPTOR, USB_DIR_IN,
4779 				USB_DT_DEVICE << 8, 0,
4780 				buf, size,
4781 				initial_descriptor_timeout);
4782 		switch (buf->bMaxPacketSize0) {
4783 		case 8: case 16: case 32: case 64: case 255:
4784 			if (buf->bDescriptorType == USB_DT_DEVICE) {
4785 				rc = buf->bMaxPacketSize0;
4786 				break;
4787 			}
4788 			fallthrough;
4789 		default:
4790 			if (rc >= 0)
4791 				rc = -EPROTO;
4792 			break;
4793 		}
4794 
4795 		/*
4796 		 * Some devices time out if they are powered on
4797 		 * when already connected. They need a second
4798 		 * reset, so return early. But only on the first
4799 		 * attempt, lest we get into a time-out/reset loop.
4800 		 */
4801 		if (rc > 0 || (rc == -ETIMEDOUT && first_time &&
4802 				udev->speed > USB_SPEED_FULL))
4803 			break;
4804 	}
4805 	return rc;
4806 }
4807 
4808 #define GET_DESCRIPTOR_BUFSIZE	64
4809 
4810 /* Reset device, (re)assign address, get device descriptor.
4811  * Device connection must be stable, no more debouncing needed.
4812  * Returns device in USB_STATE_ADDRESS, except on error.
4813  *
4814  * If this is called for an already-existing device (as part of
4815  * usb_reset_and_verify_device), the caller must own the device lock and
4816  * the port lock.  For a newly detected device that is not accessible
4817  * through any global pointers, it's not necessary to lock the device,
4818  * but it is still necessary to lock the port.
4819  *
4820  * For a newly detected device, @dev_descr must be NULL.  The device
4821  * descriptor retrieved from the device will then be stored in
4822  * @udev->descriptor.  For an already existing device, @dev_descr
4823  * must be non-NULL.  The device descriptor will be stored there,
4824  * not in @udev->descriptor, because descriptors for registered
4825  * devices are meant to be immutable.
4826  */
4827 static int
4828 hub_port_init(struct usb_hub *hub, struct usb_device *udev, int port1,
4829 		int retry_counter, struct usb_device_descriptor *dev_descr)
4830 {
4831 	struct usb_device	*hdev = hub->hdev;
4832 	struct usb_hcd		*hcd = bus_to_hcd(hdev->bus);
4833 	struct usb_port		*port_dev = hub->ports[port1 - 1];
4834 	int			retries, operations, retval, i;
4835 	unsigned		delay = HUB_SHORT_RESET_TIME;
4836 	enum usb_device_speed	oldspeed = udev->speed;
4837 	const char		*speed;
4838 	int			devnum = udev->devnum;
4839 	const char		*driver_name;
4840 	bool			do_new_scheme;
4841 	const bool		initial = !dev_descr;
4842 	int			maxp0;
4843 	struct usb_device_descriptor	*buf, *descr;
4844 
4845 	buf = kmalloc(GET_DESCRIPTOR_BUFSIZE, GFP_NOIO);
4846 	if (!buf)
4847 		return -ENOMEM;
4848 
4849 	/* root hub ports have a slightly longer reset period
4850 	 * (from USB 2.0 spec, section 7.1.7.5)
4851 	 */
4852 	if (!hdev->parent) {
4853 		delay = HUB_ROOT_RESET_TIME;
4854 		if (port1 == hdev->bus->otg_port)
4855 			hdev->bus->b_hnp_enable = 0;
4856 	}
4857 
4858 	/* Some low speed devices have problems with the quick delay, so */
4859 	/*  be a bit pessimistic with those devices. RHbug #23670 */
4860 	if (oldspeed == USB_SPEED_LOW)
4861 		delay = HUB_LONG_RESET_TIME;
4862 
4863 	/* Reset the device; full speed may morph to high speed */
4864 	/* FIXME a USB 2.0 device may morph into SuperSpeed on reset. */
4865 	retval = hub_port_reset(hub, port1, udev, delay, false);
4866 	if (retval < 0)		/* error or disconnect */
4867 		goto fail;
4868 	/* success, speed is known */
4869 
4870 	retval = -ENODEV;
4871 
4872 	/* Don't allow speed changes at reset, except usb 3.0 to faster */
4873 	if (oldspeed != USB_SPEED_UNKNOWN && oldspeed != udev->speed &&
4874 	    !(oldspeed == USB_SPEED_SUPER && udev->speed > oldspeed)) {
4875 		dev_dbg(&udev->dev, "device reset changed speed!\n");
4876 		goto fail;
4877 	}
4878 	oldspeed = udev->speed;
4879 
4880 	if (initial) {
4881 		/* USB 2.0 section 5.5.3 talks about ep0 maxpacket ...
4882 		 * it's fixed size except for full speed devices.
4883 		 * For Wireless USB devices, ep0 max packet is always 512 (tho
4884 		 * reported as 0xff in the device descriptor). WUSB1.0[4.8.1].
4885 		 */
4886 		switch (udev->speed) {
4887 		case USB_SPEED_SUPER_PLUS:
4888 		case USB_SPEED_SUPER:
4889 		case USB_SPEED_WIRELESS:	/* fixed at 512 */
4890 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(512);
4891 			break;
4892 		case USB_SPEED_HIGH:		/* fixed at 64 */
4893 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4894 			break;
4895 		case USB_SPEED_FULL:		/* 8, 16, 32, or 64 */
4896 			/* to determine the ep0 maxpacket size, try to read
4897 			 * the device descriptor to get bMaxPacketSize0 and
4898 			 * then correct our initial guess.
4899 			 */
4900 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4901 			break;
4902 		case USB_SPEED_LOW:		/* fixed at 8 */
4903 			udev->ep0.desc.wMaxPacketSize = cpu_to_le16(8);
4904 			break;
4905 		default:
4906 			goto fail;
4907 		}
4908 	}
4909 
4910 	if (udev->speed == USB_SPEED_WIRELESS)
4911 		speed = "variable speed Wireless";
4912 	else
4913 		speed = usb_speed_string(udev->speed);
4914 
4915 	/*
4916 	 * The controller driver may be NULL if the controller device
4917 	 * is the middle device between platform device and roothub.
4918 	 * This middle device may not need a device driver due to
4919 	 * all hardware control can be at platform device driver, this
4920 	 * platform device is usually a dual-role USB controller device.
4921 	 */
4922 	if (udev->bus->controller->driver)
4923 		driver_name = udev->bus->controller->driver->name;
4924 	else
4925 		driver_name = udev->bus->sysdev->driver->name;
4926 
4927 	if (udev->speed < USB_SPEED_SUPER)
4928 		dev_info(&udev->dev,
4929 				"%s %s USB device number %d using %s\n",
4930 				(initial ? "new" : "reset"), speed,
4931 				devnum, driver_name);
4932 
4933 	if (initial) {
4934 		/* Set up TT records, if needed  */
4935 		if (hdev->tt) {
4936 			udev->tt = hdev->tt;
4937 			udev->ttport = hdev->ttport;
4938 		} else if (udev->speed != USB_SPEED_HIGH
4939 				&& hdev->speed == USB_SPEED_HIGH) {
4940 			if (!hub->tt.hub) {
4941 				dev_err(&udev->dev, "parent hub has no TT\n");
4942 				retval = -EINVAL;
4943 				goto fail;
4944 			}
4945 			udev->tt = &hub->tt;
4946 			udev->ttport = port1;
4947 		}
4948 	}
4949 
4950 	/* Why interleave GET_DESCRIPTOR and SET_ADDRESS this way?
4951 	 * Because device hardware and firmware is sometimes buggy in
4952 	 * this area, and this is how Linux has done it for ages.
4953 	 * Change it cautiously.
4954 	 *
4955 	 * NOTE:  If use_new_scheme() is true we will start by issuing
4956 	 * a 64-byte GET_DESCRIPTOR request.  This is what Windows does,
4957 	 * so it may help with some non-standards-compliant devices.
4958 	 * Otherwise we start with SET_ADDRESS and then try to read the
4959 	 * first 8 bytes of the device descriptor to get the ep0 maxpacket
4960 	 * value.
4961 	 */
4962 	do_new_scheme = use_new_scheme(udev, retry_counter, port_dev);
4963 
4964 	for (retries = 0; retries < GET_DESCRIPTOR_TRIES; (++retries, msleep(100))) {
4965 		if (hub_port_stop_enumerate(hub, port1, retries)) {
4966 			retval = -ENODEV;
4967 			break;
4968 		}
4969 
4970 		if (do_new_scheme) {
4971 			retval = hub_enable_device(udev);
4972 			if (retval < 0) {
4973 				dev_err(&udev->dev,
4974 					"hub failed to enable device, error %d\n",
4975 					retval);
4976 				goto fail;
4977 			}
4978 
4979 			maxp0 = get_bMaxPacketSize0(udev, buf,
4980 					GET_DESCRIPTOR_BUFSIZE, retries == 0);
4981 			if (maxp0 > 0 && !initial &&
4982 					maxp0 != udev->descriptor.bMaxPacketSize0) {
4983 				dev_err(&udev->dev, "device reset changed ep0 maxpacket size!\n");
4984 				retval = -ENODEV;
4985 				goto fail;
4986 			}
4987 
4988 			retval = hub_port_reset(hub, port1, udev, delay, false);
4989 			if (retval < 0)		/* error or disconnect */
4990 				goto fail;
4991 			if (oldspeed != udev->speed) {
4992 				dev_dbg(&udev->dev,
4993 					"device reset changed speed!\n");
4994 				retval = -ENODEV;
4995 				goto fail;
4996 			}
4997 			if (maxp0 < 0) {
4998 				if (maxp0 != -ENODEV)
4999 					dev_err(&udev->dev, "device descriptor read/64, error %d\n",
5000 							maxp0);
5001 				retval = maxp0;
5002 				continue;
5003 			}
5004 		}
5005 
5006 		/*
5007 		 * If device is WUSB, we already assigned an
5008 		 * unauthorized address in the Connect Ack sequence;
5009 		 * authorization will assign the final address.
5010 		 */
5011 		if (udev->wusb == 0) {
5012 			for (operations = 0; operations < SET_ADDRESS_TRIES; ++operations) {
5013 				retval = hub_set_address(udev, devnum);
5014 				if (retval >= 0)
5015 					break;
5016 				msleep(200);
5017 			}
5018 			if (retval < 0) {
5019 				if (retval != -ENODEV)
5020 					dev_err(&udev->dev, "device not accepting address %d, error %d\n",
5021 							devnum, retval);
5022 				goto fail;
5023 			}
5024 			if (udev->speed >= USB_SPEED_SUPER) {
5025 				devnum = udev->devnum;
5026 				dev_info(&udev->dev,
5027 						"%s SuperSpeed%s%s USB device number %d using %s\n",
5028 						(udev->config) ? "reset" : "new",
5029 					 (udev->speed == USB_SPEED_SUPER_PLUS) ?
5030 							" Plus" : "",
5031 					 (udev->ssp_rate == USB_SSP_GEN_2x2) ?
5032 							" Gen 2x2" :
5033 					 (udev->ssp_rate == USB_SSP_GEN_2x1) ?
5034 							" Gen 2x1" :
5035 					 (udev->ssp_rate == USB_SSP_GEN_1x2) ?
5036 							" Gen 1x2" : "",
5037 					 devnum, driver_name);
5038 			}
5039 
5040 			/* cope with hardware quirkiness:
5041 			 *  - let SET_ADDRESS settle, some device hardware wants it
5042 			 *  - read ep0 maxpacket even for high and low speed,
5043 			 */
5044 			msleep(10);
5045 			if (do_new_scheme)
5046 				break;
5047 		}
5048 
5049 		/* !do_new_scheme || wusb */
5050 		maxp0 = get_bMaxPacketSize0(udev, buf, 8, retries == 0);
5051 		if (maxp0 < 0) {
5052 			retval = maxp0;
5053 			if (retval != -ENODEV)
5054 				dev_err(&udev->dev,
5055 					"device descriptor read/8, error %d\n",
5056 					retval);
5057 		} else {
5058 			u32 delay;
5059 
5060 			if (!initial && maxp0 != udev->descriptor.bMaxPacketSize0) {
5061 				dev_err(&udev->dev, "device reset changed ep0 maxpacket size!\n");
5062 				retval = -ENODEV;
5063 				goto fail;
5064 			}
5065 
5066 			delay = udev->parent->hub_delay;
5067 			udev->hub_delay = min_t(u32, delay,
5068 						USB_TP_TRANSMISSION_DELAY_MAX);
5069 			retval = usb_set_isoch_delay(udev);
5070 			if (retval) {
5071 				dev_dbg(&udev->dev,
5072 					"Failed set isoch delay, error %d\n",
5073 					retval);
5074 				retval = 0;
5075 			}
5076 			break;
5077 		}
5078 	}
5079 	if (retval)
5080 		goto fail;
5081 
5082 	if (maxp0 == 0xff || udev->speed >= USB_SPEED_SUPER)
5083 		i = 512;
5084 	else
5085 		i = maxp0;
5086 	if (usb_endpoint_maxp(&udev->ep0.desc) != i) {
5087 		if (udev->speed == USB_SPEED_LOW ||
5088 				!(i == 8 || i == 16 || i == 32 || i == 64)) {
5089 			dev_err(&udev->dev, "Invalid ep0 maxpacket: %d\n", i);
5090 			retval = -EMSGSIZE;
5091 			goto fail;
5092 		}
5093 		if (udev->speed == USB_SPEED_FULL)
5094 			dev_dbg(&udev->dev, "ep0 maxpacket = %d\n", i);
5095 		else
5096 			dev_warn(&udev->dev, "Using ep0 maxpacket: %d\n", i);
5097 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(i);
5098 		usb_ep0_reinit(udev);
5099 	}
5100 
5101 	descr = usb_get_device_descriptor(udev);
5102 	if (IS_ERR(descr)) {
5103 		retval = PTR_ERR(descr);
5104 		if (retval != -ENODEV)
5105 			dev_err(&udev->dev, "device descriptor read/all, error %d\n",
5106 					retval);
5107 		goto fail;
5108 	}
5109 	if (initial)
5110 		udev->descriptor = *descr;
5111 	else
5112 		*dev_descr = *descr;
5113 	kfree(descr);
5114 
5115 	/*
5116 	 * Some superspeed devices have finished the link training process
5117 	 * and attached to a superspeed hub port, but the device descriptor
5118 	 * got from those devices show they aren't superspeed devices. Warm
5119 	 * reset the port attached by the devices can fix them.
5120 	 */
5121 	if ((udev->speed >= USB_SPEED_SUPER) &&
5122 			(le16_to_cpu(udev->descriptor.bcdUSB) < 0x0300)) {
5123 		dev_err(&udev->dev, "got a wrong device descriptor, warm reset device\n");
5124 		hub_port_reset(hub, port1, udev, HUB_BH_RESET_TIME, true);
5125 		retval = -EINVAL;
5126 		goto fail;
5127 	}
5128 
5129 	usb_detect_quirks(udev);
5130 
5131 	if (udev->wusb == 0 && le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0201) {
5132 		retval = usb_get_bos_descriptor(udev);
5133 		if (!retval) {
5134 			udev->lpm_capable = usb_device_supports_lpm(udev);
5135 			udev->lpm_disable_count = 1;
5136 			usb_set_lpm_parameters(udev);
5137 			usb_req_set_sel(udev);
5138 		}
5139 	}
5140 
5141 	retval = 0;
5142 	/* notify HCD that we have a device connected and addressed */
5143 	if (hcd->driver->update_device)
5144 		hcd->driver->update_device(hcd, udev);
5145 	hub_set_initial_usb2_lpm_policy(udev);
5146 fail:
5147 	if (retval) {
5148 		hub_port_disable(hub, port1, 0);
5149 		update_devnum(udev, devnum);	/* for disconnect processing */
5150 	}
5151 	kfree(buf);
5152 	return retval;
5153 }
5154 
5155 static void
5156 check_highspeed(struct usb_hub *hub, struct usb_device *udev, int port1)
5157 {
5158 	struct usb_qualifier_descriptor	*qual;
5159 	int				status;
5160 
5161 	if (udev->quirks & USB_QUIRK_DEVICE_QUALIFIER)
5162 		return;
5163 
5164 	qual = kmalloc(sizeof *qual, GFP_KERNEL);
5165 	if (qual == NULL)
5166 		return;
5167 
5168 	status = usb_get_descriptor(udev, USB_DT_DEVICE_QUALIFIER, 0,
5169 			qual, sizeof *qual);
5170 	if (status == sizeof *qual) {
5171 		dev_info(&udev->dev, "not running at top speed; "
5172 			"connect to a high speed hub\n");
5173 		/* hub LEDs are probably harder to miss than syslog */
5174 		if (hub->has_indicators) {
5175 			hub->indicator[port1-1] = INDICATOR_GREEN_BLINK;
5176 			queue_delayed_work(system_power_efficient_wq,
5177 					&hub->leds, 0);
5178 		}
5179 	}
5180 	kfree(qual);
5181 }
5182 
5183 static unsigned
5184 hub_power_remaining(struct usb_hub *hub)
5185 {
5186 	struct usb_device *hdev = hub->hdev;
5187 	int remaining;
5188 	int port1;
5189 
5190 	if (!hub->limited_power)
5191 		return 0;
5192 
5193 	remaining = hdev->bus_mA - hub->descriptor->bHubContrCurrent;
5194 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
5195 		struct usb_port *port_dev = hub->ports[port1 - 1];
5196 		struct usb_device *udev = port_dev->child;
5197 		unsigned unit_load;
5198 		int delta;
5199 
5200 		if (!udev)
5201 			continue;
5202 		if (hub_is_superspeed(udev))
5203 			unit_load = 150;
5204 		else
5205 			unit_load = 100;
5206 
5207 		/*
5208 		 * Unconfigured devices may not use more than one unit load,
5209 		 * or 8mA for OTG ports
5210 		 */
5211 		if (udev->actconfig)
5212 			delta = usb_get_max_power(udev, udev->actconfig);
5213 		else if (port1 != udev->bus->otg_port || hdev->parent)
5214 			delta = unit_load;
5215 		else
5216 			delta = 8;
5217 		if (delta > hub->mA_per_port)
5218 			dev_warn(&port_dev->dev, "%dmA is over %umA budget!\n",
5219 					delta, hub->mA_per_port);
5220 		remaining -= delta;
5221 	}
5222 	if (remaining < 0) {
5223 		dev_warn(hub->intfdev, "%dmA over power budget!\n",
5224 			-remaining);
5225 		remaining = 0;
5226 	}
5227 	return remaining;
5228 }
5229 
5230 
5231 static int descriptors_changed(struct usb_device *udev,
5232 		struct usb_device_descriptor *new_device_descriptor,
5233 		struct usb_host_bos *old_bos)
5234 {
5235 	int		changed = 0;
5236 	unsigned	index;
5237 	unsigned	serial_len = 0;
5238 	unsigned	len;
5239 	unsigned	old_length;
5240 	int		length;
5241 	char		*buf;
5242 
5243 	if (memcmp(&udev->descriptor, new_device_descriptor,
5244 			sizeof(*new_device_descriptor)) != 0)
5245 		return 1;
5246 
5247 	if ((old_bos && !udev->bos) || (!old_bos && udev->bos))
5248 		return 1;
5249 	if (udev->bos) {
5250 		len = le16_to_cpu(udev->bos->desc->wTotalLength);
5251 		if (len != le16_to_cpu(old_bos->desc->wTotalLength))
5252 			return 1;
5253 		if (memcmp(udev->bos->desc, old_bos->desc, len))
5254 			return 1;
5255 	}
5256 
5257 	/* Since the idVendor, idProduct, and bcdDevice values in the
5258 	 * device descriptor haven't changed, we will assume the
5259 	 * Manufacturer and Product strings haven't changed either.
5260 	 * But the SerialNumber string could be different (e.g., a
5261 	 * different flash card of the same brand).
5262 	 */
5263 	if (udev->serial)
5264 		serial_len = strlen(udev->serial) + 1;
5265 
5266 	len = serial_len;
5267 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5268 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5269 		len = max(len, old_length);
5270 	}
5271 
5272 	buf = kmalloc(len, GFP_NOIO);
5273 	if (!buf)
5274 		/* assume the worst */
5275 		return 1;
5276 
5277 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5278 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5279 		length = usb_get_descriptor(udev, USB_DT_CONFIG, index, buf,
5280 				old_length);
5281 		if (length != old_length) {
5282 			dev_dbg(&udev->dev, "config index %d, error %d\n",
5283 					index, length);
5284 			changed = 1;
5285 			break;
5286 		}
5287 		if (memcmp(buf, udev->rawdescriptors[index], old_length)
5288 				!= 0) {
5289 			dev_dbg(&udev->dev, "config index %d changed (#%d)\n",
5290 				index,
5291 				((struct usb_config_descriptor *) buf)->
5292 					bConfigurationValue);
5293 			changed = 1;
5294 			break;
5295 		}
5296 	}
5297 
5298 	if (!changed && serial_len) {
5299 		length = usb_string(udev, udev->descriptor.iSerialNumber,
5300 				buf, serial_len);
5301 		if (length + 1 != serial_len) {
5302 			dev_dbg(&udev->dev, "serial string error %d\n",
5303 					length);
5304 			changed = 1;
5305 		} else if (memcmp(buf, udev->serial, length) != 0) {
5306 			dev_dbg(&udev->dev, "serial string changed\n");
5307 			changed = 1;
5308 		}
5309 	}
5310 
5311 	kfree(buf);
5312 	return changed;
5313 }
5314 
5315 static void hub_port_connect(struct usb_hub *hub, int port1, u16 portstatus,
5316 		u16 portchange)
5317 {
5318 	int status = -ENODEV;
5319 	int i;
5320 	unsigned unit_load;
5321 	struct usb_device *hdev = hub->hdev;
5322 	struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
5323 	struct usb_port *port_dev = hub->ports[port1 - 1];
5324 	struct usb_device *udev = port_dev->child;
5325 	static int unreliable_port = -1;
5326 	bool retry_locked;
5327 
5328 	/* Disconnect any existing devices under this port */
5329 	if (udev) {
5330 		if (hcd->usb_phy && !hdev->parent)
5331 			usb_phy_notify_disconnect(hcd->usb_phy, udev->speed);
5332 		usb_disconnect(&port_dev->child);
5333 	}
5334 
5335 	/* We can forget about a "removed" device when there's a physical
5336 	 * disconnect or the connect status changes.
5337 	 */
5338 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5339 			(portchange & USB_PORT_STAT_C_CONNECTION))
5340 		clear_bit(port1, hub->removed_bits);
5341 
5342 	if (portchange & (USB_PORT_STAT_C_CONNECTION |
5343 				USB_PORT_STAT_C_ENABLE)) {
5344 		status = hub_port_debounce_be_stable(hub, port1);
5345 		if (status < 0) {
5346 			if (status != -ENODEV &&
5347 				port1 != unreliable_port &&
5348 				printk_ratelimit())
5349 				dev_err(&port_dev->dev, "connect-debounce failed\n");
5350 			portstatus &= ~USB_PORT_STAT_CONNECTION;
5351 			unreliable_port = port1;
5352 		} else {
5353 			portstatus = status;
5354 		}
5355 	}
5356 
5357 	/* Return now if debouncing failed or nothing is connected or
5358 	 * the device was "removed".
5359 	 */
5360 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5361 			test_bit(port1, hub->removed_bits)) {
5362 
5363 		/*
5364 		 * maybe switch power back on (e.g. root hub was reset)
5365 		 * but only if the port isn't owned by someone else.
5366 		 */
5367 		if (hub_is_port_power_switchable(hub)
5368 				&& !usb_port_is_power_on(hub, portstatus)
5369 				&& !port_dev->port_owner)
5370 			set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
5371 
5372 		if (portstatus & USB_PORT_STAT_ENABLE)
5373 			goto done;
5374 		return;
5375 	}
5376 	if (hub_is_superspeed(hub->hdev))
5377 		unit_load = 150;
5378 	else
5379 		unit_load = 100;
5380 
5381 	status = 0;
5382 
5383 	for (i = 0; i < PORT_INIT_TRIES; i++) {
5384 		if (hub_port_stop_enumerate(hub, port1, i)) {
5385 			status = -ENODEV;
5386 			break;
5387 		}
5388 
5389 		usb_lock_port(port_dev);
5390 		mutex_lock(hcd->address0_mutex);
5391 		retry_locked = true;
5392 		/* reallocate for each attempt, since references
5393 		 * to the previous one can escape in various ways
5394 		 */
5395 		udev = usb_alloc_dev(hdev, hdev->bus, port1);
5396 		if (!udev) {
5397 			dev_err(&port_dev->dev,
5398 					"couldn't allocate usb_device\n");
5399 			mutex_unlock(hcd->address0_mutex);
5400 			usb_unlock_port(port_dev);
5401 			goto done;
5402 		}
5403 
5404 		usb_set_device_state(udev, USB_STATE_POWERED);
5405 		udev->bus_mA = hub->mA_per_port;
5406 		udev->level = hdev->level + 1;
5407 		udev->wusb = hub_is_wusb(hub);
5408 
5409 		/* Devices connected to SuperSpeed hubs are USB 3.0 or later */
5410 		if (hub_is_superspeed(hub->hdev))
5411 			udev->speed = USB_SPEED_SUPER;
5412 		else
5413 			udev->speed = USB_SPEED_UNKNOWN;
5414 
5415 		choose_devnum(udev);
5416 		if (udev->devnum <= 0) {
5417 			status = -ENOTCONN;	/* Don't retry */
5418 			goto loop;
5419 		}
5420 
5421 		/* reset (non-USB 3.0 devices) and get descriptor */
5422 		status = hub_port_init(hub, udev, port1, i, NULL);
5423 		if (status < 0)
5424 			goto loop;
5425 
5426 		mutex_unlock(hcd->address0_mutex);
5427 		usb_unlock_port(port_dev);
5428 		retry_locked = false;
5429 
5430 		if (udev->quirks & USB_QUIRK_DELAY_INIT)
5431 			msleep(2000);
5432 
5433 		/* consecutive bus-powered hubs aren't reliable; they can
5434 		 * violate the voltage drop budget.  if the new child has
5435 		 * a "powered" LED, users should notice we didn't enable it
5436 		 * (without reading syslog), even without per-port LEDs
5437 		 * on the parent.
5438 		 */
5439 		if (udev->descriptor.bDeviceClass == USB_CLASS_HUB
5440 				&& udev->bus_mA <= unit_load) {
5441 			u16	devstat;
5442 
5443 			status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0,
5444 					&devstat);
5445 			if (status) {
5446 				dev_dbg(&udev->dev, "get status %d ?\n", status);
5447 				goto loop_disable;
5448 			}
5449 			if ((devstat & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
5450 				dev_err(&udev->dev,
5451 					"can't connect bus-powered hub "
5452 					"to this port\n");
5453 				if (hub->has_indicators) {
5454 					hub->indicator[port1-1] =
5455 						INDICATOR_AMBER_BLINK;
5456 					queue_delayed_work(
5457 						system_power_efficient_wq,
5458 						&hub->leds, 0);
5459 				}
5460 				status = -ENOTCONN;	/* Don't retry */
5461 				goto loop_disable;
5462 			}
5463 		}
5464 
5465 		/* check for devices running slower than they could */
5466 		if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0200
5467 				&& udev->speed == USB_SPEED_FULL
5468 				&& highspeed_hubs != 0)
5469 			check_highspeed(hub, udev, port1);
5470 
5471 		/* Store the parent's children[] pointer.  At this point
5472 		 * udev becomes globally accessible, although presumably
5473 		 * no one will look at it until hdev is unlocked.
5474 		 */
5475 		status = 0;
5476 
5477 		mutex_lock(&usb_port_peer_mutex);
5478 
5479 		/* We mustn't add new devices if the parent hub has
5480 		 * been disconnected; we would race with the
5481 		 * recursively_mark_NOTATTACHED() routine.
5482 		 */
5483 		spin_lock_irq(&device_state_lock);
5484 		if (hdev->state == USB_STATE_NOTATTACHED)
5485 			status = -ENOTCONN;
5486 		else
5487 			port_dev->child = udev;
5488 		spin_unlock_irq(&device_state_lock);
5489 		mutex_unlock(&usb_port_peer_mutex);
5490 
5491 		/* Run it through the hoops (find a driver, etc) */
5492 		if (!status) {
5493 			status = usb_new_device(udev);
5494 			if (status) {
5495 				mutex_lock(&usb_port_peer_mutex);
5496 				spin_lock_irq(&device_state_lock);
5497 				port_dev->child = NULL;
5498 				spin_unlock_irq(&device_state_lock);
5499 				mutex_unlock(&usb_port_peer_mutex);
5500 			} else {
5501 				if (hcd->usb_phy && !hdev->parent)
5502 					usb_phy_notify_connect(hcd->usb_phy,
5503 							udev->speed);
5504 			}
5505 		}
5506 
5507 		if (status)
5508 			goto loop_disable;
5509 
5510 		status = hub_power_remaining(hub);
5511 		if (status)
5512 			dev_dbg(hub->intfdev, "%dmA power budget left\n", status);
5513 
5514 		return;
5515 
5516 loop_disable:
5517 		hub_port_disable(hub, port1, 1);
5518 loop:
5519 		usb_ep0_reinit(udev);
5520 		release_devnum(udev);
5521 		hub_free_dev(udev);
5522 		if (retry_locked) {
5523 			mutex_unlock(hcd->address0_mutex);
5524 			usb_unlock_port(port_dev);
5525 		}
5526 		usb_put_dev(udev);
5527 		if ((status == -ENOTCONN) || (status == -ENOTSUPP))
5528 			break;
5529 
5530 		/* When halfway through our retry count, power-cycle the port */
5531 		if (i == (PORT_INIT_TRIES - 1) / 2) {
5532 			dev_info(&port_dev->dev, "attempt power cycle\n");
5533 			usb_hub_set_port_power(hdev, hub, port1, false);
5534 			msleep(2 * hub_power_on_good_delay(hub));
5535 			usb_hub_set_port_power(hdev, hub, port1, true);
5536 			msleep(hub_power_on_good_delay(hub));
5537 		}
5538 	}
5539 	if (hub->hdev->parent ||
5540 			!hcd->driver->port_handed_over ||
5541 			!(hcd->driver->port_handed_over)(hcd, port1)) {
5542 		if (status != -ENOTCONN && status != -ENODEV)
5543 			dev_err(&port_dev->dev,
5544 					"unable to enumerate USB device\n");
5545 	}
5546 
5547 done:
5548 	hub_port_disable(hub, port1, 1);
5549 	if (hcd->driver->relinquish_port && !hub->hdev->parent) {
5550 		if (status != -ENOTCONN && status != -ENODEV)
5551 			hcd->driver->relinquish_port(hcd, port1);
5552 	}
5553 }
5554 
5555 /* Handle physical or logical connection change events.
5556  * This routine is called when:
5557  *	a port connection-change occurs;
5558  *	a port enable-change occurs (often caused by EMI);
5559  *	usb_reset_and_verify_device() encounters changed descriptors (as from
5560  *		a firmware download)
5561  * caller already locked the hub
5562  */
5563 static void hub_port_connect_change(struct usb_hub *hub, int port1,
5564 					u16 portstatus, u16 portchange)
5565 		__must_hold(&port_dev->status_lock)
5566 {
5567 	struct usb_port *port_dev = hub->ports[port1 - 1];
5568 	struct usb_device *udev = port_dev->child;
5569 	struct usb_device_descriptor *descr;
5570 	int status = -ENODEV;
5571 
5572 	dev_dbg(&port_dev->dev, "status %04x, change %04x, %s\n", portstatus,
5573 			portchange, portspeed(hub, portstatus));
5574 
5575 	if (hub->has_indicators) {
5576 		set_port_led(hub, port1, HUB_LED_AUTO);
5577 		hub->indicator[port1-1] = INDICATOR_AUTO;
5578 	}
5579 
5580 #ifdef	CONFIG_USB_OTG
5581 	/* during HNP, don't repeat the debounce */
5582 	if (hub->hdev->bus->is_b_host)
5583 		portchange &= ~(USB_PORT_STAT_C_CONNECTION |
5584 				USB_PORT_STAT_C_ENABLE);
5585 #endif
5586 
5587 	/* Try to resuscitate an existing device */
5588 	if ((portstatus & USB_PORT_STAT_CONNECTION) && udev &&
5589 			udev->state != USB_STATE_NOTATTACHED) {
5590 		if (portstatus & USB_PORT_STAT_ENABLE) {
5591 			/*
5592 			 * USB-3 connections are initialized automatically by
5593 			 * the hostcontroller hardware. Therefore check for
5594 			 * changed device descriptors before resuscitating the
5595 			 * device.
5596 			 */
5597 			descr = usb_get_device_descriptor(udev);
5598 			if (IS_ERR(descr)) {
5599 				dev_dbg(&udev->dev,
5600 						"can't read device descriptor %ld\n",
5601 						PTR_ERR(descr));
5602 			} else {
5603 				if (descriptors_changed(udev, descr,
5604 						udev->bos)) {
5605 					dev_dbg(&udev->dev,
5606 							"device descriptor has changed\n");
5607 				} else {
5608 					status = 0; /* Nothing to do */
5609 				}
5610 				kfree(descr);
5611 			}
5612 #ifdef CONFIG_PM
5613 		} else if (udev->state == USB_STATE_SUSPENDED &&
5614 				udev->persist_enabled) {
5615 			/* For a suspended device, treat this as a
5616 			 * remote wakeup event.
5617 			 */
5618 			usb_unlock_port(port_dev);
5619 			status = usb_remote_wakeup(udev);
5620 			usb_lock_port(port_dev);
5621 #endif
5622 		} else {
5623 			/* Don't resuscitate */;
5624 		}
5625 	}
5626 	clear_bit(port1, hub->change_bits);
5627 
5628 	/* successfully revalidated the connection */
5629 	if (status == 0)
5630 		return;
5631 
5632 	usb_unlock_port(port_dev);
5633 	hub_port_connect(hub, port1, portstatus, portchange);
5634 	usb_lock_port(port_dev);
5635 }
5636 
5637 /* Handle notifying userspace about hub over-current events */
5638 static void port_over_current_notify(struct usb_port *port_dev)
5639 {
5640 	char *envp[3] = { NULL, NULL, NULL };
5641 	struct device *hub_dev;
5642 	char *port_dev_path;
5643 
5644 	sysfs_notify(&port_dev->dev.kobj, NULL, "over_current_count");
5645 
5646 	hub_dev = port_dev->dev.parent;
5647 
5648 	if (!hub_dev)
5649 		return;
5650 
5651 	port_dev_path = kobject_get_path(&port_dev->dev.kobj, GFP_KERNEL);
5652 	if (!port_dev_path)
5653 		return;
5654 
5655 	envp[0] = kasprintf(GFP_KERNEL, "OVER_CURRENT_PORT=%s", port_dev_path);
5656 	if (!envp[0])
5657 		goto exit;
5658 
5659 	envp[1] = kasprintf(GFP_KERNEL, "OVER_CURRENT_COUNT=%u",
5660 			port_dev->over_current_count);
5661 	if (!envp[1])
5662 		goto exit;
5663 
5664 	kobject_uevent_env(&hub_dev->kobj, KOBJ_CHANGE, envp);
5665 
5666 exit:
5667 	kfree(envp[1]);
5668 	kfree(envp[0]);
5669 	kfree(port_dev_path);
5670 }
5671 
5672 static void port_event(struct usb_hub *hub, int port1)
5673 		__must_hold(&port_dev->status_lock)
5674 {
5675 	int connect_change;
5676 	struct usb_port *port_dev = hub->ports[port1 - 1];
5677 	struct usb_device *udev = port_dev->child;
5678 	struct usb_device *hdev = hub->hdev;
5679 	u16 portstatus, portchange;
5680 	int i = 0;
5681 
5682 	connect_change = test_bit(port1, hub->change_bits);
5683 	clear_bit(port1, hub->event_bits);
5684 	clear_bit(port1, hub->wakeup_bits);
5685 
5686 	if (usb_hub_port_status(hub, port1, &portstatus, &portchange) < 0)
5687 		return;
5688 
5689 	if (portchange & USB_PORT_STAT_C_CONNECTION) {
5690 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_CONNECTION);
5691 		connect_change = 1;
5692 	}
5693 
5694 	if (portchange & USB_PORT_STAT_C_ENABLE) {
5695 		if (!connect_change)
5696 			dev_dbg(&port_dev->dev, "enable change, status %08x\n",
5697 					portstatus);
5698 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_ENABLE);
5699 
5700 		/*
5701 		 * EM interference sometimes causes badly shielded USB devices
5702 		 * to be shutdown by the hub, this hack enables them again.
5703 		 * Works at least with mouse driver.
5704 		 */
5705 		if (!(portstatus & USB_PORT_STAT_ENABLE)
5706 		    && !connect_change && udev) {
5707 			dev_err(&port_dev->dev, "disabled by hub (EMI?), re-enabling...\n");
5708 			connect_change = 1;
5709 		}
5710 	}
5711 
5712 	if (portchange & USB_PORT_STAT_C_OVERCURRENT) {
5713 		u16 status = 0, unused;
5714 		port_dev->over_current_count++;
5715 		port_over_current_notify(port_dev);
5716 
5717 		dev_dbg(&port_dev->dev, "over-current change #%u\n",
5718 			port_dev->over_current_count);
5719 		usb_clear_port_feature(hdev, port1,
5720 				USB_PORT_FEAT_C_OVER_CURRENT);
5721 		msleep(100);	/* Cool down */
5722 		hub_power_on(hub, true);
5723 		usb_hub_port_status(hub, port1, &status, &unused);
5724 		if (status & USB_PORT_STAT_OVERCURRENT)
5725 			dev_err(&port_dev->dev, "over-current condition\n");
5726 	}
5727 
5728 	if (portchange & USB_PORT_STAT_C_RESET) {
5729 		dev_dbg(&port_dev->dev, "reset change\n");
5730 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_RESET);
5731 	}
5732 	if ((portchange & USB_PORT_STAT_C_BH_RESET)
5733 	    && hub_is_superspeed(hdev)) {
5734 		dev_dbg(&port_dev->dev, "warm reset change\n");
5735 		usb_clear_port_feature(hdev, port1,
5736 				USB_PORT_FEAT_C_BH_PORT_RESET);
5737 	}
5738 	if (portchange & USB_PORT_STAT_C_LINK_STATE) {
5739 		dev_dbg(&port_dev->dev, "link state change\n");
5740 		usb_clear_port_feature(hdev, port1,
5741 				USB_PORT_FEAT_C_PORT_LINK_STATE);
5742 	}
5743 	if (portchange & USB_PORT_STAT_C_CONFIG_ERROR) {
5744 		dev_warn(&port_dev->dev, "config error\n");
5745 		usb_clear_port_feature(hdev, port1,
5746 				USB_PORT_FEAT_C_PORT_CONFIG_ERROR);
5747 	}
5748 
5749 	/* skip port actions that require the port to be powered on */
5750 	if (!pm_runtime_active(&port_dev->dev))
5751 		return;
5752 
5753 	/* skip port actions if ignore_event and early_stop are true */
5754 	if (port_dev->ignore_event && port_dev->early_stop)
5755 		return;
5756 
5757 	if (hub_handle_remote_wakeup(hub, port1, portstatus, portchange))
5758 		connect_change = 1;
5759 
5760 	/*
5761 	 * Avoid trying to recover a USB3 SS.Inactive port with a warm reset if
5762 	 * the device was disconnected. A 12ms disconnect detect timer in
5763 	 * SS.Inactive state transitions the port to RxDetect automatically.
5764 	 * SS.Inactive link error state is common during device disconnect.
5765 	 */
5766 	while (hub_port_warm_reset_required(hub, port1, portstatus)) {
5767 		if ((i++ < DETECT_DISCONNECT_TRIES) && udev) {
5768 			u16 unused;
5769 
5770 			msleep(20);
5771 			usb_hub_port_status(hub, port1, &portstatus, &unused);
5772 			dev_dbg(&port_dev->dev, "Wait for inactive link disconnect detect\n");
5773 			continue;
5774 		} else if (!udev || !(portstatus & USB_PORT_STAT_CONNECTION)
5775 				|| udev->state == USB_STATE_NOTATTACHED) {
5776 			dev_dbg(&port_dev->dev, "do warm reset, port only\n");
5777 			if (hub_port_reset(hub, port1, NULL,
5778 					HUB_BH_RESET_TIME, true) < 0)
5779 				hub_port_disable(hub, port1, 1);
5780 		} else {
5781 			dev_dbg(&port_dev->dev, "do warm reset, full device\n");
5782 			usb_unlock_port(port_dev);
5783 			usb_lock_device(udev);
5784 			usb_reset_device(udev);
5785 			usb_unlock_device(udev);
5786 			usb_lock_port(port_dev);
5787 			connect_change = 0;
5788 		}
5789 		break;
5790 	}
5791 
5792 	if (connect_change)
5793 		hub_port_connect_change(hub, port1, portstatus, portchange);
5794 }
5795 
5796 static void hub_event(struct work_struct *work)
5797 {
5798 	struct usb_device *hdev;
5799 	struct usb_interface *intf;
5800 	struct usb_hub *hub;
5801 	struct device *hub_dev;
5802 	u16 hubstatus;
5803 	u16 hubchange;
5804 	int i, ret;
5805 
5806 	hub = container_of(work, struct usb_hub, events);
5807 	hdev = hub->hdev;
5808 	hub_dev = hub->intfdev;
5809 	intf = to_usb_interface(hub_dev);
5810 
5811 	kcov_remote_start_usb((u64)hdev->bus->busnum);
5812 
5813 	dev_dbg(hub_dev, "state %d ports %d chg %04x evt %04x\n",
5814 			hdev->state, hdev->maxchild,
5815 			/* NOTE: expects max 15 ports... */
5816 			(u16) hub->change_bits[0],
5817 			(u16) hub->event_bits[0]);
5818 
5819 	/* Lock the device, then check to see if we were
5820 	 * disconnected while waiting for the lock to succeed. */
5821 	usb_lock_device(hdev);
5822 	if (unlikely(hub->disconnected))
5823 		goto out_hdev_lock;
5824 
5825 	/* If the hub has died, clean up after it */
5826 	if (hdev->state == USB_STATE_NOTATTACHED) {
5827 		hub->error = -ENODEV;
5828 		hub_quiesce(hub, HUB_DISCONNECT);
5829 		goto out_hdev_lock;
5830 	}
5831 
5832 	/* Autoresume */
5833 	ret = usb_autopm_get_interface(intf);
5834 	if (ret) {
5835 		dev_dbg(hub_dev, "Can't autoresume: %d\n", ret);
5836 		goto out_hdev_lock;
5837 	}
5838 
5839 	/* If this is an inactive hub, do nothing */
5840 	if (hub->quiescing)
5841 		goto out_autopm;
5842 
5843 	if (hub->error) {
5844 		dev_dbg(hub_dev, "resetting for error %d\n", hub->error);
5845 
5846 		ret = usb_reset_device(hdev);
5847 		if (ret) {
5848 			dev_dbg(hub_dev, "error resetting hub: %d\n", ret);
5849 			goto out_autopm;
5850 		}
5851 
5852 		hub->nerrors = 0;
5853 		hub->error = 0;
5854 	}
5855 
5856 	/* deal with port status changes */
5857 	for (i = 1; i <= hdev->maxchild; i++) {
5858 		struct usb_port *port_dev = hub->ports[i - 1];
5859 
5860 		if (test_bit(i, hub->event_bits)
5861 				|| test_bit(i, hub->change_bits)
5862 				|| test_bit(i, hub->wakeup_bits)) {
5863 			/*
5864 			 * The get_noresume and barrier ensure that if
5865 			 * the port was in the process of resuming, we
5866 			 * flush that work and keep the port active for
5867 			 * the duration of the port_event().  However,
5868 			 * if the port is runtime pm suspended
5869 			 * (powered-off), we leave it in that state, run
5870 			 * an abbreviated port_event(), and move on.
5871 			 */
5872 			pm_runtime_get_noresume(&port_dev->dev);
5873 			pm_runtime_barrier(&port_dev->dev);
5874 			usb_lock_port(port_dev);
5875 			port_event(hub, i);
5876 			usb_unlock_port(port_dev);
5877 			pm_runtime_put_sync(&port_dev->dev);
5878 		}
5879 	}
5880 
5881 	/* deal with hub status changes */
5882 	if (test_and_clear_bit(0, hub->event_bits) == 0)
5883 		;	/* do nothing */
5884 	else if (hub_hub_status(hub, &hubstatus, &hubchange) < 0)
5885 		dev_err(hub_dev, "get_hub_status failed\n");
5886 	else {
5887 		if (hubchange & HUB_CHANGE_LOCAL_POWER) {
5888 			dev_dbg(hub_dev, "power change\n");
5889 			clear_hub_feature(hdev, C_HUB_LOCAL_POWER);
5890 			if (hubstatus & HUB_STATUS_LOCAL_POWER)
5891 				/* FIXME: Is this always true? */
5892 				hub->limited_power = 1;
5893 			else
5894 				hub->limited_power = 0;
5895 		}
5896 		if (hubchange & HUB_CHANGE_OVERCURRENT) {
5897 			u16 status = 0;
5898 			u16 unused;
5899 
5900 			dev_dbg(hub_dev, "over-current change\n");
5901 			clear_hub_feature(hdev, C_HUB_OVER_CURRENT);
5902 			msleep(500);	/* Cool down */
5903 			hub_power_on(hub, true);
5904 			hub_hub_status(hub, &status, &unused);
5905 			if (status & HUB_STATUS_OVERCURRENT)
5906 				dev_err(hub_dev, "over-current condition\n");
5907 		}
5908 	}
5909 
5910 out_autopm:
5911 	/* Balance the usb_autopm_get_interface() above */
5912 	usb_autopm_put_interface_no_suspend(intf);
5913 out_hdev_lock:
5914 	usb_unlock_device(hdev);
5915 
5916 	/* Balance the stuff in kick_hub_wq() and allow autosuspend */
5917 	usb_autopm_put_interface(intf);
5918 	kref_put(&hub->kref, hub_release);
5919 
5920 	kcov_remote_stop();
5921 }
5922 
5923 static const struct usb_device_id hub_id_table[] = {
5924     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5925                    | USB_DEVICE_ID_MATCH_PRODUCT
5926                    | USB_DEVICE_ID_MATCH_INT_CLASS,
5927       .idVendor = USB_VENDOR_SMSC,
5928       .idProduct = USB_PRODUCT_USB5534B,
5929       .bInterfaceClass = USB_CLASS_HUB,
5930       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5931     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5932                    | USB_DEVICE_ID_MATCH_PRODUCT,
5933       .idVendor = USB_VENDOR_CYPRESS,
5934       .idProduct = USB_PRODUCT_CY7C65632,
5935       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5936     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5937 			| USB_DEVICE_ID_MATCH_INT_CLASS,
5938       .idVendor = USB_VENDOR_GENESYS_LOGIC,
5939       .bInterfaceClass = USB_CLASS_HUB,
5940       .driver_info = HUB_QUIRK_CHECK_PORT_AUTOSUSPEND},
5941     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5942 			| USB_DEVICE_ID_MATCH_PRODUCT,
5943       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5944       .idProduct = USB_PRODUCT_TUSB8041_USB2,
5945       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5946     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5947 			| USB_DEVICE_ID_MATCH_PRODUCT,
5948       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5949       .idProduct = USB_PRODUCT_TUSB8041_USB3,
5950       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5951     { .match_flags = USB_DEVICE_ID_MATCH_DEV_CLASS,
5952       .bDeviceClass = USB_CLASS_HUB},
5953     { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
5954       .bInterfaceClass = USB_CLASS_HUB},
5955     { }						/* Terminating entry */
5956 };
5957 
5958 MODULE_DEVICE_TABLE(usb, hub_id_table);
5959 
5960 static struct usb_driver hub_driver = {
5961 	.name =		"hub",
5962 	.probe =	hub_probe,
5963 	.disconnect =	hub_disconnect,
5964 	.suspend =	hub_suspend,
5965 	.resume =	hub_resume,
5966 	.reset_resume =	hub_reset_resume,
5967 	.pre_reset =	hub_pre_reset,
5968 	.post_reset =	hub_post_reset,
5969 	.unlocked_ioctl = hub_ioctl,
5970 	.id_table =	hub_id_table,
5971 	.supports_autosuspend =	1,
5972 };
5973 
5974 int usb_hub_init(void)
5975 {
5976 	if (usb_register(&hub_driver) < 0) {
5977 		printk(KERN_ERR "%s: can't register hub driver\n",
5978 			usbcore_name);
5979 		return -1;
5980 	}
5981 
5982 	/*
5983 	 * The workqueue needs to be freezable to avoid interfering with
5984 	 * USB-PERSIST port handover. Otherwise it might see that a full-speed
5985 	 * device was gone before the EHCI controller had handed its port
5986 	 * over to the companion full-speed controller.
5987 	 */
5988 	hub_wq = alloc_workqueue("usb_hub_wq", WQ_FREEZABLE, 0);
5989 	if (hub_wq)
5990 		return 0;
5991 
5992 	/* Fall through if kernel_thread failed */
5993 	usb_deregister(&hub_driver);
5994 	pr_err("%s: can't allocate workqueue for usb hub\n", usbcore_name);
5995 
5996 	return -1;
5997 }
5998 
5999 void usb_hub_cleanup(void)
6000 {
6001 	destroy_workqueue(hub_wq);
6002 
6003 	/*
6004 	 * Hub resources are freed for us by usb_deregister. It calls
6005 	 * usb_driver_purge on every device which in turn calls that
6006 	 * devices disconnect function if it is using this driver.
6007 	 * The hub_disconnect function takes care of releasing the
6008 	 * individual hub resources. -greg
6009 	 */
6010 	usb_deregister(&hub_driver);
6011 } /* usb_hub_cleanup() */
6012 
6013 /**
6014  * usb_reset_and_verify_device - perform a USB port reset to reinitialize a device
6015  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
6016  *
6017  * WARNING - don't use this routine to reset a composite device
6018  * (one with multiple interfaces owned by separate drivers)!
6019  * Use usb_reset_device() instead.
6020  *
6021  * Do a port reset, reassign the device's address, and establish its
6022  * former operating configuration.  If the reset fails, or the device's
6023  * descriptors change from their values before the reset, or the original
6024  * configuration and altsettings cannot be restored, a flag will be set
6025  * telling hub_wq to pretend the device has been disconnected and then
6026  * re-connected.  All drivers will be unbound, and the device will be
6027  * re-enumerated and probed all over again.
6028  *
6029  * Return: 0 if the reset succeeded, -ENODEV if the device has been
6030  * flagged for logical disconnection, or some other negative error code
6031  * if the reset wasn't even attempted.
6032  *
6033  * Note:
6034  * The caller must own the device lock and the port lock, the latter is
6035  * taken by usb_reset_device().  For example, it's safe to use
6036  * usb_reset_device() from a driver probe() routine after downloading
6037  * new firmware.  For calls that might not occur during probe(), drivers
6038  * should lock the device using usb_lock_device_for_reset().
6039  *
6040  * Locking exception: This routine may also be called from within an
6041  * autoresume handler.  Such usage won't conflict with other tasks
6042  * holding the device lock because these tasks should always call
6043  * usb_autopm_resume_device(), thereby preventing any unwanted
6044  * autoresume.  The autoresume handler is expected to have already
6045  * acquired the port lock before calling this routine.
6046  */
6047 static int usb_reset_and_verify_device(struct usb_device *udev)
6048 {
6049 	struct usb_device		*parent_hdev = udev->parent;
6050 	struct usb_hub			*parent_hub;
6051 	struct usb_hcd			*hcd = bus_to_hcd(udev->bus);
6052 	struct usb_device_descriptor	descriptor;
6053 	struct usb_host_bos		*bos;
6054 	int				i, j, ret = 0;
6055 	int				port1 = udev->portnum;
6056 
6057 	if (udev->state == USB_STATE_NOTATTACHED ||
6058 			udev->state == USB_STATE_SUSPENDED) {
6059 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
6060 				udev->state);
6061 		return -EINVAL;
6062 	}
6063 
6064 	if (!parent_hdev)
6065 		return -EISDIR;
6066 
6067 	parent_hub = usb_hub_to_struct_hub(parent_hdev);
6068 
6069 	/* Disable USB2 hardware LPM.
6070 	 * It will be re-enabled by the enumeration process.
6071 	 */
6072 	usb_disable_usb2_hardware_lpm(udev);
6073 
6074 	bos = udev->bos;
6075 	udev->bos = NULL;
6076 
6077 	mutex_lock(hcd->address0_mutex);
6078 
6079 	for (i = 0; i < PORT_INIT_TRIES; ++i) {
6080 		if (hub_port_stop_enumerate(parent_hub, port1, i)) {
6081 			ret = -ENODEV;
6082 			break;
6083 		}
6084 
6085 		/* ep0 maxpacket size may change; let the HCD know about it.
6086 		 * Other endpoints will be handled by re-enumeration. */
6087 		usb_ep0_reinit(udev);
6088 		ret = hub_port_init(parent_hub, udev, port1, i, &descriptor);
6089 		if (ret >= 0 || ret == -ENOTCONN || ret == -ENODEV)
6090 			break;
6091 	}
6092 	mutex_unlock(hcd->address0_mutex);
6093 
6094 	if (ret < 0)
6095 		goto re_enumerate;
6096 
6097 	/* Device might have changed firmware (DFU or similar) */
6098 	if (descriptors_changed(udev, &descriptor, bos)) {
6099 		dev_info(&udev->dev, "device firmware changed\n");
6100 		goto re_enumerate;
6101 	}
6102 
6103 	/* Restore the device's previous configuration */
6104 	if (!udev->actconfig)
6105 		goto done;
6106 
6107 	mutex_lock(hcd->bandwidth_mutex);
6108 	ret = usb_hcd_alloc_bandwidth(udev, udev->actconfig, NULL, NULL);
6109 	if (ret < 0) {
6110 		dev_warn(&udev->dev,
6111 				"Busted HC?  Not enough HCD resources for "
6112 				"old configuration.\n");
6113 		mutex_unlock(hcd->bandwidth_mutex);
6114 		goto re_enumerate;
6115 	}
6116 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
6117 			USB_REQ_SET_CONFIGURATION, 0,
6118 			udev->actconfig->desc.bConfigurationValue, 0,
6119 			NULL, 0, USB_CTRL_SET_TIMEOUT);
6120 	if (ret < 0) {
6121 		dev_err(&udev->dev,
6122 			"can't restore configuration #%d (error=%d)\n",
6123 			udev->actconfig->desc.bConfigurationValue, ret);
6124 		mutex_unlock(hcd->bandwidth_mutex);
6125 		goto re_enumerate;
6126 	}
6127 	mutex_unlock(hcd->bandwidth_mutex);
6128 	usb_set_device_state(udev, USB_STATE_CONFIGURED);
6129 
6130 	/* Put interfaces back into the same altsettings as before.
6131 	 * Don't bother to send the Set-Interface request for interfaces
6132 	 * that were already in altsetting 0; besides being unnecessary,
6133 	 * many devices can't handle it.  Instead just reset the host-side
6134 	 * endpoint state.
6135 	 */
6136 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
6137 		struct usb_host_config *config = udev->actconfig;
6138 		struct usb_interface *intf = config->interface[i];
6139 		struct usb_interface_descriptor *desc;
6140 
6141 		desc = &intf->cur_altsetting->desc;
6142 		if (desc->bAlternateSetting == 0) {
6143 			usb_disable_interface(udev, intf, true);
6144 			usb_enable_interface(udev, intf, true);
6145 			ret = 0;
6146 		} else {
6147 			/* Let the bandwidth allocation function know that this
6148 			 * device has been reset, and it will have to use
6149 			 * alternate setting 0 as the current alternate setting.
6150 			 */
6151 			intf->resetting_device = 1;
6152 			ret = usb_set_interface(udev, desc->bInterfaceNumber,
6153 					desc->bAlternateSetting);
6154 			intf->resetting_device = 0;
6155 		}
6156 		if (ret < 0) {
6157 			dev_err(&udev->dev, "failed to restore interface %d "
6158 				"altsetting %d (error=%d)\n",
6159 				desc->bInterfaceNumber,
6160 				desc->bAlternateSetting,
6161 				ret);
6162 			goto re_enumerate;
6163 		}
6164 		/* Resetting also frees any allocated streams */
6165 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++)
6166 			intf->cur_altsetting->endpoint[j].streams = 0;
6167 	}
6168 
6169 done:
6170 	/* Now that the alt settings are re-installed, enable LTM and LPM. */
6171 	usb_enable_usb2_hardware_lpm(udev);
6172 	usb_unlocked_enable_lpm(udev);
6173 	usb_enable_ltm(udev);
6174 	usb_release_bos_descriptor(udev);
6175 	udev->bos = bos;
6176 	return 0;
6177 
6178 re_enumerate:
6179 	usb_release_bos_descriptor(udev);
6180 	udev->bos = bos;
6181 	hub_port_logical_disconnect(parent_hub, port1);
6182 	return -ENODEV;
6183 }
6184 
6185 /**
6186  * usb_reset_device - warn interface drivers and perform a USB port reset
6187  * @udev: device to reset (not in NOTATTACHED state)
6188  *
6189  * Warns all drivers bound to registered interfaces (using their pre_reset
6190  * method), performs the port reset, and then lets the drivers know that
6191  * the reset is over (using their post_reset method).
6192  *
6193  * Return: The same as for usb_reset_and_verify_device().
6194  * However, if a reset is already in progress (for instance, if a
6195  * driver doesn't have pre_reset() or post_reset() callbacks, and while
6196  * being unbound or re-bound during the ongoing reset its disconnect()
6197  * or probe() routine tries to perform a second, nested reset), the
6198  * routine returns -EINPROGRESS.
6199  *
6200  * Note:
6201  * The caller must own the device lock.  For example, it's safe to use
6202  * this from a driver probe() routine after downloading new firmware.
6203  * For calls that might not occur during probe(), drivers should lock
6204  * the device using usb_lock_device_for_reset().
6205  *
6206  * If an interface is currently being probed or disconnected, we assume
6207  * its driver knows how to handle resets.  For all other interfaces,
6208  * if the driver doesn't have pre_reset and post_reset methods then
6209  * we attempt to unbind it and rebind afterward.
6210  */
6211 int usb_reset_device(struct usb_device *udev)
6212 {
6213 	int ret;
6214 	int i;
6215 	unsigned int noio_flag;
6216 	struct usb_port *port_dev;
6217 	struct usb_host_config *config = udev->actconfig;
6218 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
6219 
6220 	if (udev->state == USB_STATE_NOTATTACHED) {
6221 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
6222 				udev->state);
6223 		return -EINVAL;
6224 	}
6225 
6226 	if (!udev->parent) {
6227 		/* this requires hcd-specific logic; see ohci_restart() */
6228 		dev_dbg(&udev->dev, "%s for root hub!\n", __func__);
6229 		return -EISDIR;
6230 	}
6231 
6232 	if (udev->reset_in_progress)
6233 		return -EINPROGRESS;
6234 	udev->reset_in_progress = 1;
6235 
6236 	port_dev = hub->ports[udev->portnum - 1];
6237 
6238 	/*
6239 	 * Don't allocate memory with GFP_KERNEL in current
6240 	 * context to avoid possible deadlock if usb mass
6241 	 * storage interface or usbnet interface(iSCSI case)
6242 	 * is included in current configuration. The easist
6243 	 * approach is to do it for every device reset,
6244 	 * because the device 'memalloc_noio' flag may have
6245 	 * not been set before reseting the usb device.
6246 	 */
6247 	noio_flag = memalloc_noio_save();
6248 
6249 	/* Prevent autosuspend during the reset */
6250 	usb_autoresume_device(udev);
6251 
6252 	if (config) {
6253 		for (i = 0; i < config->desc.bNumInterfaces; ++i) {
6254 			struct usb_interface *cintf = config->interface[i];
6255 			struct usb_driver *drv;
6256 			int unbind = 0;
6257 
6258 			if (cintf->dev.driver) {
6259 				drv = to_usb_driver(cintf->dev.driver);
6260 				if (drv->pre_reset && drv->post_reset)
6261 					unbind = (drv->pre_reset)(cintf);
6262 				else if (cintf->condition ==
6263 						USB_INTERFACE_BOUND)
6264 					unbind = 1;
6265 				if (unbind)
6266 					usb_forced_unbind_intf(cintf);
6267 			}
6268 		}
6269 	}
6270 
6271 	usb_lock_port(port_dev);
6272 	ret = usb_reset_and_verify_device(udev);
6273 	usb_unlock_port(port_dev);
6274 
6275 	if (config) {
6276 		for (i = config->desc.bNumInterfaces - 1; i >= 0; --i) {
6277 			struct usb_interface *cintf = config->interface[i];
6278 			struct usb_driver *drv;
6279 			int rebind = cintf->needs_binding;
6280 
6281 			if (!rebind && cintf->dev.driver) {
6282 				drv = to_usb_driver(cintf->dev.driver);
6283 				if (drv->post_reset)
6284 					rebind = (drv->post_reset)(cintf);
6285 				else if (cintf->condition ==
6286 						USB_INTERFACE_BOUND)
6287 					rebind = 1;
6288 				if (rebind)
6289 					cintf->needs_binding = 1;
6290 			}
6291 		}
6292 
6293 		/* If the reset failed, hub_wq will unbind drivers later */
6294 		if (ret == 0)
6295 			usb_unbind_and_rebind_marked_interfaces(udev);
6296 	}
6297 
6298 	usb_autosuspend_device(udev);
6299 	memalloc_noio_restore(noio_flag);
6300 	udev->reset_in_progress = 0;
6301 	return ret;
6302 }
6303 EXPORT_SYMBOL_GPL(usb_reset_device);
6304 
6305 
6306 /**
6307  * usb_queue_reset_device - Reset a USB device from an atomic context
6308  * @iface: USB interface belonging to the device to reset
6309  *
6310  * This function can be used to reset a USB device from an atomic
6311  * context, where usb_reset_device() won't work (as it blocks).
6312  *
6313  * Doing a reset via this method is functionally equivalent to calling
6314  * usb_reset_device(), except for the fact that it is delayed to a
6315  * workqueue. This means that any drivers bound to other interfaces
6316  * might be unbound, as well as users from usbfs in user space.
6317  *
6318  * Corner cases:
6319  *
6320  * - Scheduling two resets at the same time from two different drivers
6321  *   attached to two different interfaces of the same device is
6322  *   possible; depending on how the driver attached to each interface
6323  *   handles ->pre_reset(), the second reset might happen or not.
6324  *
6325  * - If the reset is delayed so long that the interface is unbound from
6326  *   its driver, the reset will be skipped.
6327  *
6328  * - This function can be called during .probe().  It can also be called
6329  *   during .disconnect(), but doing so is pointless because the reset
6330  *   will not occur.  If you really want to reset the device during
6331  *   .disconnect(), call usb_reset_device() directly -- but watch out
6332  *   for nested unbinding issues!
6333  */
6334 void usb_queue_reset_device(struct usb_interface *iface)
6335 {
6336 	if (schedule_work(&iface->reset_ws))
6337 		usb_get_intf(iface);
6338 }
6339 EXPORT_SYMBOL_GPL(usb_queue_reset_device);
6340 
6341 /**
6342  * usb_hub_find_child - Get the pointer of child device
6343  * attached to the port which is specified by @port1.
6344  * @hdev: USB device belonging to the usb hub
6345  * @port1: port num to indicate which port the child device
6346  *	is attached to.
6347  *
6348  * USB drivers call this function to get hub's child device
6349  * pointer.
6350  *
6351  * Return: %NULL if input param is invalid and
6352  * child's usb_device pointer if non-NULL.
6353  */
6354 struct usb_device *usb_hub_find_child(struct usb_device *hdev,
6355 		int port1)
6356 {
6357 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6358 
6359 	if (port1 < 1 || port1 > hdev->maxchild)
6360 		return NULL;
6361 	return hub->ports[port1 - 1]->child;
6362 }
6363 EXPORT_SYMBOL_GPL(usb_hub_find_child);
6364 
6365 void usb_hub_adjust_deviceremovable(struct usb_device *hdev,
6366 		struct usb_hub_descriptor *desc)
6367 {
6368 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6369 	enum usb_port_connect_type connect_type;
6370 	int i;
6371 
6372 	if (!hub)
6373 		return;
6374 
6375 	if (!hub_is_superspeed(hdev)) {
6376 		for (i = 1; i <= hdev->maxchild; i++) {
6377 			struct usb_port *port_dev = hub->ports[i - 1];
6378 
6379 			connect_type = port_dev->connect_type;
6380 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6381 				u8 mask = 1 << (i%8);
6382 
6383 				if (!(desc->u.hs.DeviceRemovable[i/8] & mask)) {
6384 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6385 					desc->u.hs.DeviceRemovable[i/8]	|= mask;
6386 				}
6387 			}
6388 		}
6389 	} else {
6390 		u16 port_removable = le16_to_cpu(desc->u.ss.DeviceRemovable);
6391 
6392 		for (i = 1; i <= hdev->maxchild; i++) {
6393 			struct usb_port *port_dev = hub->ports[i - 1];
6394 
6395 			connect_type = port_dev->connect_type;
6396 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6397 				u16 mask = 1 << i;
6398 
6399 				if (!(port_removable & mask)) {
6400 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6401 					port_removable |= mask;
6402 				}
6403 			}
6404 		}
6405 
6406 		desc->u.ss.DeviceRemovable = cpu_to_le16(port_removable);
6407 	}
6408 }
6409 
6410 #ifdef CONFIG_ACPI
6411 /**
6412  * usb_get_hub_port_acpi_handle - Get the usb port's acpi handle
6413  * @hdev: USB device belonging to the usb hub
6414  * @port1: port num of the port
6415  *
6416  * Return: Port's acpi handle if successful, %NULL if params are
6417  * invalid.
6418  */
6419 acpi_handle usb_get_hub_port_acpi_handle(struct usb_device *hdev,
6420 	int port1)
6421 {
6422 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6423 
6424 	if (!hub)
6425 		return NULL;
6426 
6427 	return ACPI_HANDLE(&hub->ports[port1 - 1]->dev);
6428 }
6429 #endif
6430