xref: /openbmc/linux/drivers/usb/core/hub.c (revision ac3cb6de)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * USB hub driver.
4  *
5  * (C) Copyright 1999 Linus Torvalds
6  * (C) Copyright 1999 Johannes Erdfelt
7  * (C) Copyright 1999 Gregory P. Smith
8  * (C) Copyright 2001 Brad Hards (bhards@bigpond.net.au)
9  *
10  * Released under the GPLv2 only.
11  */
12 
13 #include <linux/kernel.h>
14 #include <linux/errno.h>
15 #include <linux/module.h>
16 #include <linux/moduleparam.h>
17 #include <linux/completion.h>
18 #include <linux/sched/mm.h>
19 #include <linux/list.h>
20 #include <linux/slab.h>
21 #include <linux/kcov.h>
22 #include <linux/ioctl.h>
23 #include <linux/usb.h>
24 #include <linux/usbdevice_fs.h>
25 #include <linux/usb/hcd.h>
26 #include <linux/usb/onboard_hub.h>
27 #include <linux/usb/otg.h>
28 #include <linux/usb/quirks.h>
29 #include <linux/workqueue.h>
30 #include <linux/mutex.h>
31 #include <linux/random.h>
32 #include <linux/pm_qos.h>
33 #include <linux/kobject.h>
34 
35 #include <linux/bitfield.h>
36 #include <linux/uaccess.h>
37 #include <asm/byteorder.h>
38 
39 #include "hub.h"
40 #include "otg_productlist.h"
41 
42 #define USB_VENDOR_GENESYS_LOGIC		0x05e3
43 #define USB_VENDOR_SMSC				0x0424
44 #define USB_PRODUCT_USB5534B			0x5534
45 #define USB_VENDOR_CYPRESS			0x04b4
46 #define USB_PRODUCT_CY7C65632			0x6570
47 #define USB_VENDOR_TEXAS_INSTRUMENTS		0x0451
48 #define USB_PRODUCT_TUSB8041_USB3		0x8140
49 #define USB_PRODUCT_TUSB8041_USB2		0x8142
50 #define HUB_QUIRK_CHECK_PORT_AUTOSUSPEND	0x01
51 #define HUB_QUIRK_DISABLE_AUTOSUSPEND		0x02
52 
53 #define USB_TP_TRANSMISSION_DELAY	40	/* ns */
54 #define USB_TP_TRANSMISSION_DELAY_MAX	65535	/* ns */
55 #define USB_PING_RESPONSE_TIME		400	/* ns */
56 
57 /* Protect struct usb_device->state and ->children members
58  * Note: Both are also protected by ->dev.sem, except that ->state can
59  * change to USB_STATE_NOTATTACHED even when the semaphore isn't held. */
60 static DEFINE_SPINLOCK(device_state_lock);
61 
62 /* workqueue to process hub events */
63 static struct workqueue_struct *hub_wq;
64 static void hub_event(struct work_struct *work);
65 
66 /* synchronize hub-port add/remove and peering operations */
67 DEFINE_MUTEX(usb_port_peer_mutex);
68 
69 /* cycle leds on hubs that aren't blinking for attention */
70 static bool blinkenlights;
71 module_param(blinkenlights, bool, S_IRUGO);
72 MODULE_PARM_DESC(blinkenlights, "true to cycle leds on hubs");
73 
74 /*
75  * Device SATA8000 FW1.0 from DATAST0R Technology Corp requires about
76  * 10 seconds to send reply for the initial 64-byte descriptor request.
77  */
78 /* define initial 64-byte descriptor request timeout in milliseconds */
79 static int initial_descriptor_timeout = USB_CTRL_GET_TIMEOUT;
80 module_param(initial_descriptor_timeout, int, S_IRUGO|S_IWUSR);
81 MODULE_PARM_DESC(initial_descriptor_timeout,
82 		"initial 64-byte descriptor request timeout in milliseconds "
83 		"(default 5000 - 5.0 seconds)");
84 
85 /*
86  * As of 2.6.10 we introduce a new USB device initialization scheme which
87  * closely resembles the way Windows works.  Hopefully it will be compatible
88  * with a wider range of devices than the old scheme.  However some previously
89  * working devices may start giving rise to "device not accepting address"
90  * errors; if that happens the user can try the old scheme by adjusting the
91  * following module parameters.
92  *
93  * For maximum flexibility there are two boolean parameters to control the
94  * hub driver's behavior.  On the first initialization attempt, if the
95  * "old_scheme_first" parameter is set then the old scheme will be used,
96  * otherwise the new scheme is used.  If that fails and "use_both_schemes"
97  * is set, then the driver will make another attempt, using the other scheme.
98  */
99 static bool old_scheme_first;
100 module_param(old_scheme_first, bool, S_IRUGO | S_IWUSR);
101 MODULE_PARM_DESC(old_scheme_first,
102 		 "start with the old device initialization scheme");
103 
104 static bool use_both_schemes = true;
105 module_param(use_both_schemes, bool, S_IRUGO | S_IWUSR);
106 MODULE_PARM_DESC(use_both_schemes,
107 		"try the other device initialization scheme if the "
108 		"first one fails");
109 
110 /* Mutual exclusion for EHCI CF initialization.  This interferes with
111  * port reset on some companion controllers.
112  */
113 DECLARE_RWSEM(ehci_cf_port_reset_rwsem);
114 EXPORT_SYMBOL_GPL(ehci_cf_port_reset_rwsem);
115 
116 #define HUB_DEBOUNCE_TIMEOUT	2000
117 #define HUB_DEBOUNCE_STEP	  25
118 #define HUB_DEBOUNCE_STABLE	 100
119 
120 static void hub_release(struct kref *kref);
121 static int usb_reset_and_verify_device(struct usb_device *udev);
122 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state);
123 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
124 		u16 portstatus);
125 
126 static inline char *portspeed(struct usb_hub *hub, int portstatus)
127 {
128 	if (hub_is_superspeedplus(hub->hdev))
129 		return "10.0 Gb/s";
130 	if (hub_is_superspeed(hub->hdev))
131 		return "5.0 Gb/s";
132 	if (portstatus & USB_PORT_STAT_HIGH_SPEED)
133 		return "480 Mb/s";
134 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
135 		return "1.5 Mb/s";
136 	else
137 		return "12 Mb/s";
138 }
139 
140 /* Note that hdev or one of its children must be locked! */
141 struct usb_hub *usb_hub_to_struct_hub(struct usb_device *hdev)
142 {
143 	if (!hdev || !hdev->actconfig || !hdev->maxchild)
144 		return NULL;
145 	return usb_get_intfdata(hdev->actconfig->interface[0]);
146 }
147 
148 int usb_device_supports_lpm(struct usb_device *udev)
149 {
150 	/* Some devices have trouble with LPM */
151 	if (udev->quirks & USB_QUIRK_NO_LPM)
152 		return 0;
153 
154 	/* USB 2.1 (and greater) devices indicate LPM support through
155 	 * their USB 2.0 Extended Capabilities BOS descriptor.
156 	 */
157 	if (udev->speed == USB_SPEED_HIGH || udev->speed == USB_SPEED_FULL) {
158 		if (udev->bos->ext_cap &&
159 			(USB_LPM_SUPPORT &
160 			 le32_to_cpu(udev->bos->ext_cap->bmAttributes)))
161 			return 1;
162 		return 0;
163 	}
164 
165 	/*
166 	 * According to the USB 3.0 spec, all USB 3.0 devices must support LPM.
167 	 * However, there are some that don't, and they set the U1/U2 exit
168 	 * latencies to zero.
169 	 */
170 	if (!udev->bos->ss_cap) {
171 		dev_info(&udev->dev, "No LPM exit latency info found, disabling LPM.\n");
172 		return 0;
173 	}
174 
175 	if (udev->bos->ss_cap->bU1devExitLat == 0 &&
176 			udev->bos->ss_cap->bU2DevExitLat == 0) {
177 		if (udev->parent)
178 			dev_info(&udev->dev, "LPM exit latency is zeroed, disabling LPM.\n");
179 		else
180 			dev_info(&udev->dev, "We don't know the algorithms for LPM for this host, disabling LPM.\n");
181 		return 0;
182 	}
183 
184 	if (!udev->parent || udev->parent->lpm_capable)
185 		return 1;
186 	return 0;
187 }
188 
189 /*
190  * Set the Maximum Exit Latency (MEL) for the host to wakup up the path from
191  * U1/U2, send a PING to the device and receive a PING_RESPONSE.
192  * See USB 3.1 section C.1.5.2
193  */
194 static void usb_set_lpm_mel(struct usb_device *udev,
195 		struct usb3_lpm_parameters *udev_lpm_params,
196 		unsigned int udev_exit_latency,
197 		struct usb_hub *hub,
198 		struct usb3_lpm_parameters *hub_lpm_params,
199 		unsigned int hub_exit_latency)
200 {
201 	unsigned int total_mel;
202 
203 	/*
204 	 * tMEL1. time to transition path from host to device into U0.
205 	 * MEL for parent already contains the delay up to parent, so only add
206 	 * the exit latency for the last link (pick the slower exit latency),
207 	 * and the hub header decode latency. See USB 3.1 section C 2.2.1
208 	 * Store MEL in nanoseconds
209 	 */
210 	total_mel = hub_lpm_params->mel +
211 		max(udev_exit_latency, hub_exit_latency) * 1000 +
212 		hub->descriptor->u.ss.bHubHdrDecLat * 100;
213 
214 	/*
215 	 * tMEL2. Time to submit PING packet. Sum of tTPTransmissionDelay for
216 	 * each link + wHubDelay for each hub. Add only for last link.
217 	 * tMEL4, the time for PING_RESPONSE to traverse upstream is similar.
218 	 * Multiply by 2 to include it as well.
219 	 */
220 	total_mel += (__le16_to_cpu(hub->descriptor->u.ss.wHubDelay) +
221 		      USB_TP_TRANSMISSION_DELAY) * 2;
222 
223 	/*
224 	 * tMEL3, tPingResponse. Time taken by device to generate PING_RESPONSE
225 	 * after receiving PING. Also add 2100ns as stated in USB 3.1 C 1.5.2.4
226 	 * to cover the delay if the PING_RESPONSE is queued behind a Max Packet
227 	 * Size DP.
228 	 * Note these delays should be added only once for the entire path, so
229 	 * add them to the MEL of the device connected to the roothub.
230 	 */
231 	if (!hub->hdev->parent)
232 		total_mel += USB_PING_RESPONSE_TIME + 2100;
233 
234 	udev_lpm_params->mel = total_mel;
235 }
236 
237 /*
238  * Set the maximum Device to Host Exit Latency (PEL) for the device to initiate
239  * a transition from either U1 or U2.
240  */
241 static void usb_set_lpm_pel(struct usb_device *udev,
242 		struct usb3_lpm_parameters *udev_lpm_params,
243 		unsigned int udev_exit_latency,
244 		struct usb_hub *hub,
245 		struct usb3_lpm_parameters *hub_lpm_params,
246 		unsigned int hub_exit_latency,
247 		unsigned int port_to_port_exit_latency)
248 {
249 	unsigned int first_link_pel;
250 	unsigned int hub_pel;
251 
252 	/*
253 	 * First, the device sends an LFPS to transition the link between the
254 	 * device and the parent hub into U0.  The exit latency is the bigger of
255 	 * the device exit latency or the hub exit latency.
256 	 */
257 	if (udev_exit_latency > hub_exit_latency)
258 		first_link_pel = udev_exit_latency * 1000;
259 	else
260 		first_link_pel = hub_exit_latency * 1000;
261 
262 	/*
263 	 * When the hub starts to receive the LFPS, there is a slight delay for
264 	 * it to figure out that one of the ports is sending an LFPS.  Then it
265 	 * will forward the LFPS to its upstream link.  The exit latency is the
266 	 * delay, plus the PEL that we calculated for this hub.
267 	 */
268 	hub_pel = port_to_port_exit_latency * 1000 + hub_lpm_params->pel;
269 
270 	/*
271 	 * According to figure C-7 in the USB 3.0 spec, the PEL for this device
272 	 * is the greater of the two exit latencies.
273 	 */
274 	if (first_link_pel > hub_pel)
275 		udev_lpm_params->pel = first_link_pel;
276 	else
277 		udev_lpm_params->pel = hub_pel;
278 }
279 
280 /*
281  * Set the System Exit Latency (SEL) to indicate the total worst-case time from
282  * when a device initiates a transition to U0, until when it will receive the
283  * first packet from the host controller.
284  *
285  * Section C.1.5.1 describes the four components to this:
286  *  - t1: device PEL
287  *  - t2: time for the ERDY to make it from the device to the host.
288  *  - t3: a host-specific delay to process the ERDY.
289  *  - t4: time for the packet to make it from the host to the device.
290  *
291  * t3 is specific to both the xHCI host and the platform the host is integrated
292  * into.  The Intel HW folks have said it's negligible, FIXME if a different
293  * vendor says otherwise.
294  */
295 static void usb_set_lpm_sel(struct usb_device *udev,
296 		struct usb3_lpm_parameters *udev_lpm_params)
297 {
298 	struct usb_device *parent;
299 	unsigned int num_hubs;
300 	unsigned int total_sel;
301 
302 	/* t1 = device PEL */
303 	total_sel = udev_lpm_params->pel;
304 	/* How many external hubs are in between the device & the root port. */
305 	for (parent = udev->parent, num_hubs = 0; parent->parent;
306 			parent = parent->parent)
307 		num_hubs++;
308 	/* t2 = 2.1us + 250ns * (num_hubs - 1) */
309 	if (num_hubs > 0)
310 		total_sel += 2100 + 250 * (num_hubs - 1);
311 
312 	/* t4 = 250ns * num_hubs */
313 	total_sel += 250 * num_hubs;
314 
315 	udev_lpm_params->sel = total_sel;
316 }
317 
318 static void usb_set_lpm_parameters(struct usb_device *udev)
319 {
320 	struct usb_hub *hub;
321 	unsigned int port_to_port_delay;
322 	unsigned int udev_u1_del;
323 	unsigned int udev_u2_del;
324 	unsigned int hub_u1_del;
325 	unsigned int hub_u2_del;
326 
327 	if (!udev->lpm_capable || udev->speed < USB_SPEED_SUPER)
328 		return;
329 
330 	hub = usb_hub_to_struct_hub(udev->parent);
331 	/* It doesn't take time to transition the roothub into U0, since it
332 	 * doesn't have an upstream link.
333 	 */
334 	if (!hub)
335 		return;
336 
337 	udev_u1_del = udev->bos->ss_cap->bU1devExitLat;
338 	udev_u2_del = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat);
339 	hub_u1_del = udev->parent->bos->ss_cap->bU1devExitLat;
340 	hub_u2_del = le16_to_cpu(udev->parent->bos->ss_cap->bU2DevExitLat);
341 
342 	usb_set_lpm_mel(udev, &udev->u1_params, udev_u1_del,
343 			hub, &udev->parent->u1_params, hub_u1_del);
344 
345 	usb_set_lpm_mel(udev, &udev->u2_params, udev_u2_del,
346 			hub, &udev->parent->u2_params, hub_u2_del);
347 
348 	/*
349 	 * Appendix C, section C.2.2.2, says that there is a slight delay from
350 	 * when the parent hub notices the downstream port is trying to
351 	 * transition to U0 to when the hub initiates a U0 transition on its
352 	 * upstream port.  The section says the delays are tPort2PortU1EL and
353 	 * tPort2PortU2EL, but it doesn't define what they are.
354 	 *
355 	 * The hub chapter, sections 10.4.2.4 and 10.4.2.5 seem to be talking
356 	 * about the same delays.  Use the maximum delay calculations from those
357 	 * sections.  For U1, it's tHubPort2PortExitLat, which is 1us max.  For
358 	 * U2, it's tHubPort2PortExitLat + U2DevExitLat - U1DevExitLat.  I
359 	 * assume the device exit latencies they are talking about are the hub
360 	 * exit latencies.
361 	 *
362 	 * What do we do if the U2 exit latency is less than the U1 exit
363 	 * latency?  It's possible, although not likely...
364 	 */
365 	port_to_port_delay = 1;
366 
367 	usb_set_lpm_pel(udev, &udev->u1_params, udev_u1_del,
368 			hub, &udev->parent->u1_params, hub_u1_del,
369 			port_to_port_delay);
370 
371 	if (hub_u2_del > hub_u1_del)
372 		port_to_port_delay = 1 + hub_u2_del - hub_u1_del;
373 	else
374 		port_to_port_delay = 1 + hub_u1_del;
375 
376 	usb_set_lpm_pel(udev, &udev->u2_params, udev_u2_del,
377 			hub, &udev->parent->u2_params, hub_u2_del,
378 			port_to_port_delay);
379 
380 	/* Now that we've got PEL, calculate SEL. */
381 	usb_set_lpm_sel(udev, &udev->u1_params);
382 	usb_set_lpm_sel(udev, &udev->u2_params);
383 }
384 
385 /* USB 2.0 spec Section 11.24.4.5 */
386 static int get_hub_descriptor(struct usb_device *hdev,
387 		struct usb_hub_descriptor *desc)
388 {
389 	int i, ret, size;
390 	unsigned dtype;
391 
392 	if (hub_is_superspeed(hdev)) {
393 		dtype = USB_DT_SS_HUB;
394 		size = USB_DT_SS_HUB_SIZE;
395 	} else {
396 		dtype = USB_DT_HUB;
397 		size = sizeof(struct usb_hub_descriptor);
398 	}
399 
400 	for (i = 0; i < 3; i++) {
401 		ret = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
402 			USB_REQ_GET_DESCRIPTOR, USB_DIR_IN | USB_RT_HUB,
403 			dtype << 8, 0, desc, size,
404 			USB_CTRL_GET_TIMEOUT);
405 		if (hub_is_superspeed(hdev)) {
406 			if (ret == size)
407 				return ret;
408 		} else if (ret >= USB_DT_HUB_NONVAR_SIZE + 2) {
409 			/* Make sure we have the DeviceRemovable field. */
410 			size = USB_DT_HUB_NONVAR_SIZE + desc->bNbrPorts / 8 + 1;
411 			if (ret < size)
412 				return -EMSGSIZE;
413 			return ret;
414 		}
415 	}
416 	return -EINVAL;
417 }
418 
419 /*
420  * USB 2.0 spec Section 11.24.2.1
421  */
422 static int clear_hub_feature(struct usb_device *hdev, int feature)
423 {
424 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
425 		USB_REQ_CLEAR_FEATURE, USB_RT_HUB, feature, 0, NULL, 0, 1000);
426 }
427 
428 /*
429  * USB 2.0 spec Section 11.24.2.2
430  */
431 int usb_clear_port_feature(struct usb_device *hdev, int port1, int feature)
432 {
433 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
434 		USB_REQ_CLEAR_FEATURE, USB_RT_PORT, feature, port1,
435 		NULL, 0, 1000);
436 }
437 
438 /*
439  * USB 2.0 spec Section 11.24.2.13
440  */
441 static int set_port_feature(struct usb_device *hdev, int port1, int feature)
442 {
443 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
444 		USB_REQ_SET_FEATURE, USB_RT_PORT, feature, port1,
445 		NULL, 0, 1000);
446 }
447 
448 static char *to_led_name(int selector)
449 {
450 	switch (selector) {
451 	case HUB_LED_AMBER:
452 		return "amber";
453 	case HUB_LED_GREEN:
454 		return "green";
455 	case HUB_LED_OFF:
456 		return "off";
457 	case HUB_LED_AUTO:
458 		return "auto";
459 	default:
460 		return "??";
461 	}
462 }
463 
464 /*
465  * USB 2.0 spec Section 11.24.2.7.1.10 and table 11-7
466  * for info about using port indicators
467  */
468 static void set_port_led(struct usb_hub *hub, int port1, int selector)
469 {
470 	struct usb_port *port_dev = hub->ports[port1 - 1];
471 	int status;
472 
473 	status = set_port_feature(hub->hdev, (selector << 8) | port1,
474 			USB_PORT_FEAT_INDICATOR);
475 	dev_dbg(&port_dev->dev, "indicator %s status %d\n",
476 		to_led_name(selector), status);
477 }
478 
479 #define	LED_CYCLE_PERIOD	((2*HZ)/3)
480 
481 static void led_work(struct work_struct *work)
482 {
483 	struct usb_hub		*hub =
484 		container_of(work, struct usb_hub, leds.work);
485 	struct usb_device	*hdev = hub->hdev;
486 	unsigned		i;
487 	unsigned		changed = 0;
488 	int			cursor = -1;
489 
490 	if (hdev->state != USB_STATE_CONFIGURED || hub->quiescing)
491 		return;
492 
493 	for (i = 0; i < hdev->maxchild; i++) {
494 		unsigned	selector, mode;
495 
496 		/* 30%-50% duty cycle */
497 
498 		switch (hub->indicator[i]) {
499 		/* cycle marker */
500 		case INDICATOR_CYCLE:
501 			cursor = i;
502 			selector = HUB_LED_AUTO;
503 			mode = INDICATOR_AUTO;
504 			break;
505 		/* blinking green = sw attention */
506 		case INDICATOR_GREEN_BLINK:
507 			selector = HUB_LED_GREEN;
508 			mode = INDICATOR_GREEN_BLINK_OFF;
509 			break;
510 		case INDICATOR_GREEN_BLINK_OFF:
511 			selector = HUB_LED_OFF;
512 			mode = INDICATOR_GREEN_BLINK;
513 			break;
514 		/* blinking amber = hw attention */
515 		case INDICATOR_AMBER_BLINK:
516 			selector = HUB_LED_AMBER;
517 			mode = INDICATOR_AMBER_BLINK_OFF;
518 			break;
519 		case INDICATOR_AMBER_BLINK_OFF:
520 			selector = HUB_LED_OFF;
521 			mode = INDICATOR_AMBER_BLINK;
522 			break;
523 		/* blink green/amber = reserved */
524 		case INDICATOR_ALT_BLINK:
525 			selector = HUB_LED_GREEN;
526 			mode = INDICATOR_ALT_BLINK_OFF;
527 			break;
528 		case INDICATOR_ALT_BLINK_OFF:
529 			selector = HUB_LED_AMBER;
530 			mode = INDICATOR_ALT_BLINK;
531 			break;
532 		default:
533 			continue;
534 		}
535 		if (selector != HUB_LED_AUTO)
536 			changed = 1;
537 		set_port_led(hub, i + 1, selector);
538 		hub->indicator[i] = mode;
539 	}
540 	if (!changed && blinkenlights) {
541 		cursor++;
542 		cursor %= hdev->maxchild;
543 		set_port_led(hub, cursor + 1, HUB_LED_GREEN);
544 		hub->indicator[cursor] = INDICATOR_CYCLE;
545 		changed++;
546 	}
547 	if (changed)
548 		queue_delayed_work(system_power_efficient_wq,
549 				&hub->leds, LED_CYCLE_PERIOD);
550 }
551 
552 /* use a short timeout for hub/port status fetches */
553 #define	USB_STS_TIMEOUT		1000
554 #define	USB_STS_RETRIES		5
555 
556 /*
557  * USB 2.0 spec Section 11.24.2.6
558  */
559 static int get_hub_status(struct usb_device *hdev,
560 		struct usb_hub_status *data)
561 {
562 	int i, status = -ETIMEDOUT;
563 
564 	for (i = 0; i < USB_STS_RETRIES &&
565 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
566 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
567 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_HUB, 0, 0,
568 			data, sizeof(*data), USB_STS_TIMEOUT);
569 	}
570 	return status;
571 }
572 
573 /*
574  * USB 2.0 spec Section 11.24.2.7
575  * USB 3.1 takes into use the wValue and wLength fields, spec Section 10.16.2.6
576  */
577 static int get_port_status(struct usb_device *hdev, int port1,
578 			   void *data, u16 value, u16 length)
579 {
580 	int i, status = -ETIMEDOUT;
581 
582 	for (i = 0; i < USB_STS_RETRIES &&
583 			(status == -ETIMEDOUT || status == -EPIPE); i++) {
584 		status = usb_control_msg(hdev, usb_rcvctrlpipe(hdev, 0),
585 			USB_REQ_GET_STATUS, USB_DIR_IN | USB_RT_PORT, value,
586 			port1, data, length, USB_STS_TIMEOUT);
587 	}
588 	return status;
589 }
590 
591 static int hub_ext_port_status(struct usb_hub *hub, int port1, int type,
592 			       u16 *status, u16 *change, u32 *ext_status)
593 {
594 	int ret;
595 	int len = 4;
596 
597 	if (type != HUB_PORT_STATUS)
598 		len = 8;
599 
600 	mutex_lock(&hub->status_mutex);
601 	ret = get_port_status(hub->hdev, port1, &hub->status->port, type, len);
602 	if (ret < len) {
603 		if (ret != -ENODEV)
604 			dev_err(hub->intfdev,
605 				"%s failed (err = %d)\n", __func__, ret);
606 		if (ret >= 0)
607 			ret = -EIO;
608 	} else {
609 		*status = le16_to_cpu(hub->status->port.wPortStatus);
610 		*change = le16_to_cpu(hub->status->port.wPortChange);
611 		if (type != HUB_PORT_STATUS && ext_status)
612 			*ext_status = le32_to_cpu(
613 				hub->status->port.dwExtPortStatus);
614 		ret = 0;
615 	}
616 	mutex_unlock(&hub->status_mutex);
617 	return ret;
618 }
619 
620 int usb_hub_port_status(struct usb_hub *hub, int port1,
621 		u16 *status, u16 *change)
622 {
623 	return hub_ext_port_status(hub, port1, HUB_PORT_STATUS,
624 				   status, change, NULL);
625 }
626 
627 static void hub_resubmit_irq_urb(struct usb_hub *hub)
628 {
629 	unsigned long flags;
630 	int status;
631 
632 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
633 
634 	if (hub->quiescing) {
635 		spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
636 		return;
637 	}
638 
639 	status = usb_submit_urb(hub->urb, GFP_ATOMIC);
640 	if (status && status != -ENODEV && status != -EPERM &&
641 	    status != -ESHUTDOWN) {
642 		dev_err(hub->intfdev, "resubmit --> %d\n", status);
643 		mod_timer(&hub->irq_urb_retry, jiffies + HZ);
644 	}
645 
646 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
647 }
648 
649 static void hub_retry_irq_urb(struct timer_list *t)
650 {
651 	struct usb_hub *hub = from_timer(hub, t, irq_urb_retry);
652 
653 	hub_resubmit_irq_urb(hub);
654 }
655 
656 
657 static void kick_hub_wq(struct usb_hub *hub)
658 {
659 	struct usb_interface *intf;
660 
661 	if (hub->disconnected || work_pending(&hub->events))
662 		return;
663 
664 	/*
665 	 * Suppress autosuspend until the event is proceed.
666 	 *
667 	 * Be careful and make sure that the symmetric operation is
668 	 * always called. We are here only when there is no pending
669 	 * work for this hub. Therefore put the interface either when
670 	 * the new work is called or when it is canceled.
671 	 */
672 	intf = to_usb_interface(hub->intfdev);
673 	usb_autopm_get_interface_no_resume(intf);
674 	kref_get(&hub->kref);
675 
676 	if (queue_work(hub_wq, &hub->events))
677 		return;
678 
679 	/* the work has already been scheduled */
680 	usb_autopm_put_interface_async(intf);
681 	kref_put(&hub->kref, hub_release);
682 }
683 
684 void usb_kick_hub_wq(struct usb_device *hdev)
685 {
686 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
687 
688 	if (hub)
689 		kick_hub_wq(hub);
690 }
691 
692 /*
693  * Let the USB core know that a USB 3.0 device has sent a Function Wake Device
694  * Notification, which indicates it had initiated remote wakeup.
695  *
696  * USB 3.0 hubs do not report the port link state change from U3 to U0 when the
697  * device initiates resume, so the USB core will not receive notice of the
698  * resume through the normal hub interrupt URB.
699  */
700 void usb_wakeup_notification(struct usb_device *hdev,
701 		unsigned int portnum)
702 {
703 	struct usb_hub *hub;
704 	struct usb_port *port_dev;
705 
706 	if (!hdev)
707 		return;
708 
709 	hub = usb_hub_to_struct_hub(hdev);
710 	if (hub) {
711 		port_dev = hub->ports[portnum - 1];
712 		if (port_dev && port_dev->child)
713 			pm_wakeup_event(&port_dev->child->dev, 0);
714 
715 		set_bit(portnum, hub->wakeup_bits);
716 		kick_hub_wq(hub);
717 	}
718 }
719 EXPORT_SYMBOL_GPL(usb_wakeup_notification);
720 
721 /* completion function, fires on port status changes and various faults */
722 static void hub_irq(struct urb *urb)
723 {
724 	struct usb_hub *hub = urb->context;
725 	int status = urb->status;
726 	unsigned i;
727 	unsigned long bits;
728 
729 	switch (status) {
730 	case -ENOENT:		/* synchronous unlink */
731 	case -ECONNRESET:	/* async unlink */
732 	case -ESHUTDOWN:	/* hardware going away */
733 		return;
734 
735 	default:		/* presumably an error */
736 		/* Cause a hub reset after 10 consecutive errors */
737 		dev_dbg(hub->intfdev, "transfer --> %d\n", status);
738 		if ((++hub->nerrors < 10) || hub->error)
739 			goto resubmit;
740 		hub->error = status;
741 		fallthrough;
742 
743 	/* let hub_wq handle things */
744 	case 0:			/* we got data:  port status changed */
745 		bits = 0;
746 		for (i = 0; i < urb->actual_length; ++i)
747 			bits |= ((unsigned long) ((*hub->buffer)[i]))
748 					<< (i*8);
749 		hub->event_bits[0] = bits;
750 		break;
751 	}
752 
753 	hub->nerrors = 0;
754 
755 	/* Something happened, let hub_wq figure it out */
756 	kick_hub_wq(hub);
757 
758 resubmit:
759 	hub_resubmit_irq_urb(hub);
760 }
761 
762 /* USB 2.0 spec Section 11.24.2.3 */
763 static inline int
764 hub_clear_tt_buffer(struct usb_device *hdev, u16 devinfo, u16 tt)
765 {
766 	/* Need to clear both directions for control ep */
767 	if (((devinfo >> 11) & USB_ENDPOINT_XFERTYPE_MASK) ==
768 			USB_ENDPOINT_XFER_CONTROL) {
769 		int status = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
770 				HUB_CLEAR_TT_BUFFER, USB_RT_PORT,
771 				devinfo ^ 0x8000, tt, NULL, 0, 1000);
772 		if (status)
773 			return status;
774 	}
775 	return usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
776 			       HUB_CLEAR_TT_BUFFER, USB_RT_PORT, devinfo,
777 			       tt, NULL, 0, 1000);
778 }
779 
780 /*
781  * enumeration blocks hub_wq for a long time. we use keventd instead, since
782  * long blocking there is the exception, not the rule.  accordingly, HCDs
783  * talking to TTs must queue control transfers (not just bulk and iso), so
784  * both can talk to the same hub concurrently.
785  */
786 static void hub_tt_work(struct work_struct *work)
787 {
788 	struct usb_hub		*hub =
789 		container_of(work, struct usb_hub, tt.clear_work);
790 	unsigned long		flags;
791 
792 	spin_lock_irqsave(&hub->tt.lock, flags);
793 	while (!list_empty(&hub->tt.clear_list)) {
794 		struct list_head	*next;
795 		struct usb_tt_clear	*clear;
796 		struct usb_device	*hdev = hub->hdev;
797 		const struct hc_driver	*drv;
798 		int			status;
799 
800 		next = hub->tt.clear_list.next;
801 		clear = list_entry(next, struct usb_tt_clear, clear_list);
802 		list_del(&clear->clear_list);
803 
804 		/* drop lock so HCD can concurrently report other TT errors */
805 		spin_unlock_irqrestore(&hub->tt.lock, flags);
806 		status = hub_clear_tt_buffer(hdev, clear->devinfo, clear->tt);
807 		if (status && status != -ENODEV)
808 			dev_err(&hdev->dev,
809 				"clear tt %d (%04x) error %d\n",
810 				clear->tt, clear->devinfo, status);
811 
812 		/* Tell the HCD, even if the operation failed */
813 		drv = clear->hcd->driver;
814 		if (drv->clear_tt_buffer_complete)
815 			(drv->clear_tt_buffer_complete)(clear->hcd, clear->ep);
816 
817 		kfree(clear);
818 		spin_lock_irqsave(&hub->tt.lock, flags);
819 	}
820 	spin_unlock_irqrestore(&hub->tt.lock, flags);
821 }
822 
823 /**
824  * usb_hub_set_port_power - control hub port's power state
825  * @hdev: USB device belonging to the usb hub
826  * @hub: target hub
827  * @port1: port index
828  * @set: expected status
829  *
830  * call this function to control port's power via setting or
831  * clearing the port's PORT_POWER feature.
832  *
833  * Return: 0 if successful. A negative error code otherwise.
834  */
835 int usb_hub_set_port_power(struct usb_device *hdev, struct usb_hub *hub,
836 			   int port1, bool set)
837 {
838 	int ret;
839 
840 	if (set)
841 		ret = set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
842 	else
843 		ret = usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
844 
845 	if (ret)
846 		return ret;
847 
848 	if (set)
849 		set_bit(port1, hub->power_bits);
850 	else
851 		clear_bit(port1, hub->power_bits);
852 	return 0;
853 }
854 
855 /**
856  * usb_hub_clear_tt_buffer - clear control/bulk TT state in high speed hub
857  * @urb: an URB associated with the failed or incomplete split transaction
858  *
859  * High speed HCDs use this to tell the hub driver that some split control or
860  * bulk transaction failed in a way that requires clearing internal state of
861  * a transaction translator.  This is normally detected (and reported) from
862  * interrupt context.
863  *
864  * It may not be possible for that hub to handle additional full (or low)
865  * speed transactions until that state is fully cleared out.
866  *
867  * Return: 0 if successful. A negative error code otherwise.
868  */
869 int usb_hub_clear_tt_buffer(struct urb *urb)
870 {
871 	struct usb_device	*udev = urb->dev;
872 	int			pipe = urb->pipe;
873 	struct usb_tt		*tt = udev->tt;
874 	unsigned long		flags;
875 	struct usb_tt_clear	*clear;
876 
877 	/* we've got to cope with an arbitrary number of pending TT clears,
878 	 * since each TT has "at least two" buffers that can need it (and
879 	 * there can be many TTs per hub).  even if they're uncommon.
880 	 */
881 	clear = kmalloc(sizeof *clear, GFP_ATOMIC);
882 	if (clear == NULL) {
883 		dev_err(&udev->dev, "can't save CLEAR_TT_BUFFER state\n");
884 		/* FIXME recover somehow ... RESET_TT? */
885 		return -ENOMEM;
886 	}
887 
888 	/* info that CLEAR_TT_BUFFER needs */
889 	clear->tt = tt->multi ? udev->ttport : 1;
890 	clear->devinfo = usb_pipeendpoint (pipe);
891 	clear->devinfo |= ((u16)udev->devaddr) << 4;
892 	clear->devinfo |= usb_pipecontrol(pipe)
893 			? (USB_ENDPOINT_XFER_CONTROL << 11)
894 			: (USB_ENDPOINT_XFER_BULK << 11);
895 	if (usb_pipein(pipe))
896 		clear->devinfo |= 1 << 15;
897 
898 	/* info for completion callback */
899 	clear->hcd = bus_to_hcd(udev->bus);
900 	clear->ep = urb->ep;
901 
902 	/* tell keventd to clear state for this TT */
903 	spin_lock_irqsave(&tt->lock, flags);
904 	list_add_tail(&clear->clear_list, &tt->clear_list);
905 	schedule_work(&tt->clear_work);
906 	spin_unlock_irqrestore(&tt->lock, flags);
907 	return 0;
908 }
909 EXPORT_SYMBOL_GPL(usb_hub_clear_tt_buffer);
910 
911 static void hub_power_on(struct usb_hub *hub, bool do_delay)
912 {
913 	int port1;
914 
915 	/* Enable power on each port.  Some hubs have reserved values
916 	 * of LPSM (> 2) in their descriptors, even though they are
917 	 * USB 2.0 hubs.  Some hubs do not implement port-power switching
918 	 * but only emulate it.  In all cases, the ports won't work
919 	 * unless we send these messages to the hub.
920 	 */
921 	if (hub_is_port_power_switchable(hub))
922 		dev_dbg(hub->intfdev, "enabling power on all ports\n");
923 	else
924 		dev_dbg(hub->intfdev, "trying to enable port power on "
925 				"non-switchable hub\n");
926 	for (port1 = 1; port1 <= hub->hdev->maxchild; port1++)
927 		if (test_bit(port1, hub->power_bits))
928 			set_port_feature(hub->hdev, port1, USB_PORT_FEAT_POWER);
929 		else
930 			usb_clear_port_feature(hub->hdev, port1,
931 						USB_PORT_FEAT_POWER);
932 	if (do_delay)
933 		msleep(hub_power_on_good_delay(hub));
934 }
935 
936 static int hub_hub_status(struct usb_hub *hub,
937 		u16 *status, u16 *change)
938 {
939 	int ret;
940 
941 	mutex_lock(&hub->status_mutex);
942 	ret = get_hub_status(hub->hdev, &hub->status->hub);
943 	if (ret < 0) {
944 		if (ret != -ENODEV)
945 			dev_err(hub->intfdev,
946 				"%s failed (err = %d)\n", __func__, ret);
947 	} else {
948 		*status = le16_to_cpu(hub->status->hub.wHubStatus);
949 		*change = le16_to_cpu(hub->status->hub.wHubChange);
950 		ret = 0;
951 	}
952 	mutex_unlock(&hub->status_mutex);
953 	return ret;
954 }
955 
956 static int hub_set_port_link_state(struct usb_hub *hub, int port1,
957 			unsigned int link_status)
958 {
959 	return set_port_feature(hub->hdev,
960 			port1 | (link_status << 3),
961 			USB_PORT_FEAT_LINK_STATE);
962 }
963 
964 /*
965  * Disable a port and mark a logical connect-change event, so that some
966  * time later hub_wq will disconnect() any existing usb_device on the port
967  * and will re-enumerate if there actually is a device attached.
968  */
969 static void hub_port_logical_disconnect(struct usb_hub *hub, int port1)
970 {
971 	dev_dbg(&hub->ports[port1 - 1]->dev, "logical disconnect\n");
972 	hub_port_disable(hub, port1, 1);
973 
974 	/* FIXME let caller ask to power down the port:
975 	 *  - some devices won't enumerate without a VBUS power cycle
976 	 *  - SRP saves power that way
977 	 *  - ... new call, TBD ...
978 	 * That's easy if this hub can switch power per-port, and
979 	 * hub_wq reactivates the port later (timer, SRP, etc).
980 	 * Powerdown must be optional, because of reset/DFU.
981 	 */
982 
983 	set_bit(port1, hub->change_bits);
984 	kick_hub_wq(hub);
985 }
986 
987 /**
988  * usb_remove_device - disable a device's port on its parent hub
989  * @udev: device to be disabled and removed
990  * Context: @udev locked, must be able to sleep.
991  *
992  * After @udev's port has been disabled, hub_wq is notified and it will
993  * see that the device has been disconnected.  When the device is
994  * physically unplugged and something is plugged in, the events will
995  * be received and processed normally.
996  *
997  * Return: 0 if successful. A negative error code otherwise.
998  */
999 int usb_remove_device(struct usb_device *udev)
1000 {
1001 	struct usb_hub *hub;
1002 	struct usb_interface *intf;
1003 	int ret;
1004 
1005 	if (!udev->parent)	/* Can't remove a root hub */
1006 		return -EINVAL;
1007 	hub = usb_hub_to_struct_hub(udev->parent);
1008 	intf = to_usb_interface(hub->intfdev);
1009 
1010 	ret = usb_autopm_get_interface(intf);
1011 	if (ret < 0)
1012 		return ret;
1013 
1014 	set_bit(udev->portnum, hub->removed_bits);
1015 	hub_port_logical_disconnect(hub, udev->portnum);
1016 	usb_autopm_put_interface(intf);
1017 	return 0;
1018 }
1019 
1020 enum hub_activation_type {
1021 	HUB_INIT, HUB_INIT2, HUB_INIT3,		/* INITs must come first */
1022 	HUB_POST_RESET, HUB_RESUME, HUB_RESET_RESUME,
1023 };
1024 
1025 static void hub_init_func2(struct work_struct *ws);
1026 static void hub_init_func3(struct work_struct *ws);
1027 
1028 static void hub_activate(struct usb_hub *hub, enum hub_activation_type type)
1029 {
1030 	struct usb_device *hdev = hub->hdev;
1031 	struct usb_hcd *hcd;
1032 	int ret;
1033 	int port1;
1034 	int status;
1035 	bool need_debounce_delay = false;
1036 	unsigned delay;
1037 
1038 	/* Continue a partial initialization */
1039 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1040 		device_lock(&hdev->dev);
1041 
1042 		/* Was the hub disconnected while we were waiting? */
1043 		if (hub->disconnected)
1044 			goto disconnected;
1045 		if (type == HUB_INIT2)
1046 			goto init2;
1047 		goto init3;
1048 	}
1049 	kref_get(&hub->kref);
1050 
1051 	/* The superspeed hub except for root hub has to use Hub Depth
1052 	 * value as an offset into the route string to locate the bits
1053 	 * it uses to determine the downstream port number. So hub driver
1054 	 * should send a set hub depth request to superspeed hub after
1055 	 * the superspeed hub is set configuration in initialization or
1056 	 * reset procedure.
1057 	 *
1058 	 * After a resume, port power should still be on.
1059 	 * For any other type of activation, turn it on.
1060 	 */
1061 	if (type != HUB_RESUME) {
1062 		if (hdev->parent && hub_is_superspeed(hdev)) {
1063 			ret = usb_control_msg(hdev, usb_sndctrlpipe(hdev, 0),
1064 					HUB_SET_DEPTH, USB_RT_HUB,
1065 					hdev->level - 1, 0, NULL, 0,
1066 					USB_CTRL_SET_TIMEOUT);
1067 			if (ret < 0)
1068 				dev_err(hub->intfdev,
1069 						"set hub depth failed\n");
1070 		}
1071 
1072 		/* Speed up system boot by using a delayed_work for the
1073 		 * hub's initial power-up delays.  This is pretty awkward
1074 		 * and the implementation looks like a home-brewed sort of
1075 		 * setjmp/longjmp, but it saves at least 100 ms for each
1076 		 * root hub (assuming usbcore is compiled into the kernel
1077 		 * rather than as a module).  It adds up.
1078 		 *
1079 		 * This can't be done for HUB_RESUME or HUB_RESET_RESUME
1080 		 * because for those activation types the ports have to be
1081 		 * operational when we return.  In theory this could be done
1082 		 * for HUB_POST_RESET, but it's easier not to.
1083 		 */
1084 		if (type == HUB_INIT) {
1085 			delay = hub_power_on_good_delay(hub);
1086 
1087 			hub_power_on(hub, false);
1088 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func2);
1089 			queue_delayed_work(system_power_efficient_wq,
1090 					&hub->init_work,
1091 					msecs_to_jiffies(delay));
1092 
1093 			/* Suppress autosuspend until init is done */
1094 			usb_autopm_get_interface_no_resume(
1095 					to_usb_interface(hub->intfdev));
1096 			return;		/* Continues at init2: below */
1097 		} else if (type == HUB_RESET_RESUME) {
1098 			/* The internal host controller state for the hub device
1099 			 * may be gone after a host power loss on system resume.
1100 			 * Update the device's info so the HW knows it's a hub.
1101 			 */
1102 			hcd = bus_to_hcd(hdev->bus);
1103 			if (hcd->driver->update_hub_device) {
1104 				ret = hcd->driver->update_hub_device(hcd, hdev,
1105 						&hub->tt, GFP_NOIO);
1106 				if (ret < 0) {
1107 					dev_err(hub->intfdev,
1108 						"Host not accepting hub info update\n");
1109 					dev_err(hub->intfdev,
1110 						"LS/FS devices and hubs may not work under this hub\n");
1111 				}
1112 			}
1113 			hub_power_on(hub, true);
1114 		} else {
1115 			hub_power_on(hub, true);
1116 		}
1117 	/* Give some time on remote wakeup to let links to transit to U0 */
1118 	} else if (hub_is_superspeed(hub->hdev))
1119 		msleep(20);
1120 
1121  init2:
1122 
1123 	/*
1124 	 * Check each port and set hub->change_bits to let hub_wq know
1125 	 * which ports need attention.
1126 	 */
1127 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
1128 		struct usb_port *port_dev = hub->ports[port1 - 1];
1129 		struct usb_device *udev = port_dev->child;
1130 		u16 portstatus, portchange;
1131 
1132 		portstatus = portchange = 0;
1133 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
1134 		if (status)
1135 			goto abort;
1136 
1137 		if (udev || (portstatus & USB_PORT_STAT_CONNECTION))
1138 			dev_dbg(&port_dev->dev, "status %04x change %04x\n",
1139 					portstatus, portchange);
1140 
1141 		/*
1142 		 * After anything other than HUB_RESUME (i.e., initialization
1143 		 * or any sort of reset), every port should be disabled.
1144 		 * Unconnected ports should likewise be disabled (paranoia),
1145 		 * and so should ports for which we have no usb_device.
1146 		 */
1147 		if ((portstatus & USB_PORT_STAT_ENABLE) && (
1148 				type != HUB_RESUME ||
1149 				!(portstatus & USB_PORT_STAT_CONNECTION) ||
1150 				!udev ||
1151 				udev->state == USB_STATE_NOTATTACHED)) {
1152 			/*
1153 			 * USB3 protocol ports will automatically transition
1154 			 * to Enabled state when detect an USB3.0 device attach.
1155 			 * Do not disable USB3 protocol ports, just pretend
1156 			 * power was lost
1157 			 */
1158 			portstatus &= ~USB_PORT_STAT_ENABLE;
1159 			if (!hub_is_superspeed(hdev))
1160 				usb_clear_port_feature(hdev, port1,
1161 						   USB_PORT_FEAT_ENABLE);
1162 		}
1163 
1164 		/* Make sure a warm-reset request is handled by port_event */
1165 		if (type == HUB_RESUME &&
1166 		    hub_port_warm_reset_required(hub, port1, portstatus))
1167 			set_bit(port1, hub->event_bits);
1168 
1169 		/*
1170 		 * Add debounce if USB3 link is in polling/link training state.
1171 		 * Link will automatically transition to Enabled state after
1172 		 * link training completes.
1173 		 */
1174 		if (hub_is_superspeed(hdev) &&
1175 		    ((portstatus & USB_PORT_STAT_LINK_STATE) ==
1176 						USB_SS_PORT_LS_POLLING))
1177 			need_debounce_delay = true;
1178 
1179 		/* Clear status-change flags; we'll debounce later */
1180 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
1181 			need_debounce_delay = true;
1182 			usb_clear_port_feature(hub->hdev, port1,
1183 					USB_PORT_FEAT_C_CONNECTION);
1184 		}
1185 		if (portchange & USB_PORT_STAT_C_ENABLE) {
1186 			need_debounce_delay = true;
1187 			usb_clear_port_feature(hub->hdev, port1,
1188 					USB_PORT_FEAT_C_ENABLE);
1189 		}
1190 		if (portchange & USB_PORT_STAT_C_RESET) {
1191 			need_debounce_delay = true;
1192 			usb_clear_port_feature(hub->hdev, port1,
1193 					USB_PORT_FEAT_C_RESET);
1194 		}
1195 		if ((portchange & USB_PORT_STAT_C_BH_RESET) &&
1196 				hub_is_superspeed(hub->hdev)) {
1197 			need_debounce_delay = true;
1198 			usb_clear_port_feature(hub->hdev, port1,
1199 					USB_PORT_FEAT_C_BH_PORT_RESET);
1200 		}
1201 		/* We can forget about a "removed" device when there's a
1202 		 * physical disconnect or the connect status changes.
1203 		 */
1204 		if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
1205 				(portchange & USB_PORT_STAT_C_CONNECTION))
1206 			clear_bit(port1, hub->removed_bits);
1207 
1208 		if (!udev || udev->state == USB_STATE_NOTATTACHED) {
1209 			/* Tell hub_wq to disconnect the device or
1210 			 * check for a new connection or over current condition.
1211 			 * Based on USB2.0 Spec Section 11.12.5,
1212 			 * C_PORT_OVER_CURRENT could be set while
1213 			 * PORT_OVER_CURRENT is not. So check for any of them.
1214 			 */
1215 			if (udev || (portstatus & USB_PORT_STAT_CONNECTION) ||
1216 			    (portchange & USB_PORT_STAT_C_CONNECTION) ||
1217 			    (portstatus & USB_PORT_STAT_OVERCURRENT) ||
1218 			    (portchange & USB_PORT_STAT_C_OVERCURRENT))
1219 				set_bit(port1, hub->change_bits);
1220 
1221 		} else if (portstatus & USB_PORT_STAT_ENABLE) {
1222 			bool port_resumed = (portstatus &
1223 					USB_PORT_STAT_LINK_STATE) ==
1224 				USB_SS_PORT_LS_U0;
1225 			/* The power session apparently survived the resume.
1226 			 * If there was an overcurrent or suspend change
1227 			 * (i.e., remote wakeup request), have hub_wq
1228 			 * take care of it.  Look at the port link state
1229 			 * for USB 3.0 hubs, since they don't have a suspend
1230 			 * change bit, and they don't set the port link change
1231 			 * bit on device-initiated resume.
1232 			 */
1233 			if (portchange || (hub_is_superspeed(hub->hdev) &&
1234 						port_resumed))
1235 				set_bit(port1, hub->event_bits);
1236 
1237 		} else if (udev->persist_enabled) {
1238 #ifdef CONFIG_PM
1239 			udev->reset_resume = 1;
1240 #endif
1241 			/* Don't set the change_bits when the device
1242 			 * was powered off.
1243 			 */
1244 			if (test_bit(port1, hub->power_bits))
1245 				set_bit(port1, hub->change_bits);
1246 
1247 		} else {
1248 			/* The power session is gone; tell hub_wq */
1249 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
1250 			set_bit(port1, hub->change_bits);
1251 		}
1252 	}
1253 
1254 	/* If no port-status-change flags were set, we don't need any
1255 	 * debouncing.  If flags were set we can try to debounce the
1256 	 * ports all at once right now, instead of letting hub_wq do them
1257 	 * one at a time later on.
1258 	 *
1259 	 * If any port-status changes do occur during this delay, hub_wq
1260 	 * will see them later and handle them normally.
1261 	 */
1262 	if (need_debounce_delay) {
1263 		delay = HUB_DEBOUNCE_STABLE;
1264 
1265 		/* Don't do a long sleep inside a workqueue routine */
1266 		if (type == HUB_INIT2) {
1267 			INIT_DELAYED_WORK(&hub->init_work, hub_init_func3);
1268 			queue_delayed_work(system_power_efficient_wq,
1269 					&hub->init_work,
1270 					msecs_to_jiffies(delay));
1271 			device_unlock(&hdev->dev);
1272 			return;		/* Continues at init3: below */
1273 		} else {
1274 			msleep(delay);
1275 		}
1276 	}
1277  init3:
1278 	hub->quiescing = 0;
1279 
1280 	status = usb_submit_urb(hub->urb, GFP_NOIO);
1281 	if (status < 0)
1282 		dev_err(hub->intfdev, "activate --> %d\n", status);
1283 	if (hub->has_indicators && blinkenlights)
1284 		queue_delayed_work(system_power_efficient_wq,
1285 				&hub->leds, LED_CYCLE_PERIOD);
1286 
1287 	/* Scan all ports that need attention */
1288 	kick_hub_wq(hub);
1289  abort:
1290 	if (type == HUB_INIT2 || type == HUB_INIT3) {
1291 		/* Allow autosuspend if it was suppressed */
1292  disconnected:
1293 		usb_autopm_put_interface_async(to_usb_interface(hub->intfdev));
1294 		device_unlock(&hdev->dev);
1295 	}
1296 
1297 	kref_put(&hub->kref, hub_release);
1298 }
1299 
1300 /* Implement the continuations for the delays above */
1301 static void hub_init_func2(struct work_struct *ws)
1302 {
1303 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1304 
1305 	hub_activate(hub, HUB_INIT2);
1306 }
1307 
1308 static void hub_init_func3(struct work_struct *ws)
1309 {
1310 	struct usb_hub *hub = container_of(ws, struct usb_hub, init_work.work);
1311 
1312 	hub_activate(hub, HUB_INIT3);
1313 }
1314 
1315 enum hub_quiescing_type {
1316 	HUB_DISCONNECT, HUB_PRE_RESET, HUB_SUSPEND
1317 };
1318 
1319 static void hub_quiesce(struct usb_hub *hub, enum hub_quiescing_type type)
1320 {
1321 	struct usb_device *hdev = hub->hdev;
1322 	unsigned long flags;
1323 	int i;
1324 
1325 	/* hub_wq and related activity won't re-trigger */
1326 	spin_lock_irqsave(&hub->irq_urb_lock, flags);
1327 	hub->quiescing = 1;
1328 	spin_unlock_irqrestore(&hub->irq_urb_lock, flags);
1329 
1330 	if (type != HUB_SUSPEND) {
1331 		/* Disconnect all the children */
1332 		for (i = 0; i < hdev->maxchild; ++i) {
1333 			if (hub->ports[i]->child)
1334 				usb_disconnect(&hub->ports[i]->child);
1335 		}
1336 	}
1337 
1338 	/* Stop hub_wq and related activity */
1339 	del_timer_sync(&hub->irq_urb_retry);
1340 	usb_kill_urb(hub->urb);
1341 	if (hub->has_indicators)
1342 		cancel_delayed_work_sync(&hub->leds);
1343 	if (hub->tt.hub)
1344 		flush_work(&hub->tt.clear_work);
1345 }
1346 
1347 static void hub_pm_barrier_for_all_ports(struct usb_hub *hub)
1348 {
1349 	int i;
1350 
1351 	for (i = 0; i < hub->hdev->maxchild; ++i)
1352 		pm_runtime_barrier(&hub->ports[i]->dev);
1353 }
1354 
1355 /* caller has locked the hub device */
1356 static int hub_pre_reset(struct usb_interface *intf)
1357 {
1358 	struct usb_hub *hub = usb_get_intfdata(intf);
1359 
1360 	hub_quiesce(hub, HUB_PRE_RESET);
1361 	hub->in_reset = 1;
1362 	hub_pm_barrier_for_all_ports(hub);
1363 	return 0;
1364 }
1365 
1366 /* caller has locked the hub device */
1367 static int hub_post_reset(struct usb_interface *intf)
1368 {
1369 	struct usb_hub *hub = usb_get_intfdata(intf);
1370 
1371 	hub->in_reset = 0;
1372 	hub_pm_barrier_for_all_ports(hub);
1373 	hub_activate(hub, HUB_POST_RESET);
1374 	return 0;
1375 }
1376 
1377 static int hub_configure(struct usb_hub *hub,
1378 	struct usb_endpoint_descriptor *endpoint)
1379 {
1380 	struct usb_hcd *hcd;
1381 	struct usb_device *hdev = hub->hdev;
1382 	struct device *hub_dev = hub->intfdev;
1383 	u16 hubstatus, hubchange;
1384 	u16 wHubCharacteristics;
1385 	unsigned int pipe;
1386 	int maxp, ret, i;
1387 	char *message = "out of memory";
1388 	unsigned unit_load;
1389 	unsigned full_load;
1390 	unsigned maxchild;
1391 
1392 	hub->buffer = kmalloc(sizeof(*hub->buffer), GFP_KERNEL);
1393 	if (!hub->buffer) {
1394 		ret = -ENOMEM;
1395 		goto fail;
1396 	}
1397 
1398 	hub->status = kmalloc(sizeof(*hub->status), GFP_KERNEL);
1399 	if (!hub->status) {
1400 		ret = -ENOMEM;
1401 		goto fail;
1402 	}
1403 	mutex_init(&hub->status_mutex);
1404 
1405 	hub->descriptor = kzalloc(sizeof(*hub->descriptor), GFP_KERNEL);
1406 	if (!hub->descriptor) {
1407 		ret = -ENOMEM;
1408 		goto fail;
1409 	}
1410 
1411 	/* Request the entire hub descriptor.
1412 	 * hub->descriptor can handle USB_MAXCHILDREN ports,
1413 	 * but a (non-SS) hub can/will return fewer bytes here.
1414 	 */
1415 	ret = get_hub_descriptor(hdev, hub->descriptor);
1416 	if (ret < 0) {
1417 		message = "can't read hub descriptor";
1418 		goto fail;
1419 	}
1420 
1421 	maxchild = USB_MAXCHILDREN;
1422 	if (hub_is_superspeed(hdev))
1423 		maxchild = min_t(unsigned, maxchild, USB_SS_MAXPORTS);
1424 
1425 	if (hub->descriptor->bNbrPorts > maxchild) {
1426 		message = "hub has too many ports!";
1427 		ret = -ENODEV;
1428 		goto fail;
1429 	} else if (hub->descriptor->bNbrPorts == 0) {
1430 		message = "hub doesn't have any ports!";
1431 		ret = -ENODEV;
1432 		goto fail;
1433 	}
1434 
1435 	/*
1436 	 * Accumulate wHubDelay + 40ns for every hub in the tree of devices.
1437 	 * The resulting value will be used for SetIsochDelay() request.
1438 	 */
1439 	if (hub_is_superspeed(hdev) || hub_is_superspeedplus(hdev)) {
1440 		u32 delay = __le16_to_cpu(hub->descriptor->u.ss.wHubDelay);
1441 
1442 		if (hdev->parent)
1443 			delay += hdev->parent->hub_delay;
1444 
1445 		delay += USB_TP_TRANSMISSION_DELAY;
1446 		hdev->hub_delay = min_t(u32, delay, USB_TP_TRANSMISSION_DELAY_MAX);
1447 	}
1448 
1449 	maxchild = hub->descriptor->bNbrPorts;
1450 	dev_info(hub_dev, "%d port%s detected\n", maxchild,
1451 			(maxchild == 1) ? "" : "s");
1452 
1453 	hub->ports = kcalloc(maxchild, sizeof(struct usb_port *), GFP_KERNEL);
1454 	if (!hub->ports) {
1455 		ret = -ENOMEM;
1456 		goto fail;
1457 	}
1458 
1459 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
1460 	if (hub_is_superspeed(hdev)) {
1461 		unit_load = 150;
1462 		full_load = 900;
1463 	} else {
1464 		unit_load = 100;
1465 		full_load = 500;
1466 	}
1467 
1468 	/* FIXME for USB 3.0, skip for now */
1469 	if ((wHubCharacteristics & HUB_CHAR_COMPOUND) &&
1470 			!(hub_is_superspeed(hdev))) {
1471 		char	portstr[USB_MAXCHILDREN + 1];
1472 
1473 		for (i = 0; i < maxchild; i++)
1474 			portstr[i] = hub->descriptor->u.hs.DeviceRemovable
1475 				    [((i + 1) / 8)] & (1 << ((i + 1) % 8))
1476 				? 'F' : 'R';
1477 		portstr[maxchild] = 0;
1478 		dev_dbg(hub_dev, "compound device; port removable status: %s\n", portstr);
1479 	} else
1480 		dev_dbg(hub_dev, "standalone hub\n");
1481 
1482 	switch (wHubCharacteristics & HUB_CHAR_LPSM) {
1483 	case HUB_CHAR_COMMON_LPSM:
1484 		dev_dbg(hub_dev, "ganged power switching\n");
1485 		break;
1486 	case HUB_CHAR_INDV_PORT_LPSM:
1487 		dev_dbg(hub_dev, "individual port power switching\n");
1488 		break;
1489 	case HUB_CHAR_NO_LPSM:
1490 	case HUB_CHAR_LPSM:
1491 		dev_dbg(hub_dev, "no power switching (usb 1.0)\n");
1492 		break;
1493 	}
1494 
1495 	switch (wHubCharacteristics & HUB_CHAR_OCPM) {
1496 	case HUB_CHAR_COMMON_OCPM:
1497 		dev_dbg(hub_dev, "global over-current protection\n");
1498 		break;
1499 	case HUB_CHAR_INDV_PORT_OCPM:
1500 		dev_dbg(hub_dev, "individual port over-current protection\n");
1501 		break;
1502 	case HUB_CHAR_NO_OCPM:
1503 	case HUB_CHAR_OCPM:
1504 		dev_dbg(hub_dev, "no over-current protection\n");
1505 		break;
1506 	}
1507 
1508 	spin_lock_init(&hub->tt.lock);
1509 	INIT_LIST_HEAD(&hub->tt.clear_list);
1510 	INIT_WORK(&hub->tt.clear_work, hub_tt_work);
1511 	switch (hdev->descriptor.bDeviceProtocol) {
1512 	case USB_HUB_PR_FS:
1513 		break;
1514 	case USB_HUB_PR_HS_SINGLE_TT:
1515 		dev_dbg(hub_dev, "Single TT\n");
1516 		hub->tt.hub = hdev;
1517 		break;
1518 	case USB_HUB_PR_HS_MULTI_TT:
1519 		ret = usb_set_interface(hdev, 0, 1);
1520 		if (ret == 0) {
1521 			dev_dbg(hub_dev, "TT per port\n");
1522 			hub->tt.multi = 1;
1523 		} else
1524 			dev_err(hub_dev, "Using single TT (err %d)\n",
1525 				ret);
1526 		hub->tt.hub = hdev;
1527 		break;
1528 	case USB_HUB_PR_SS:
1529 		/* USB 3.0 hubs don't have a TT */
1530 		break;
1531 	default:
1532 		dev_dbg(hub_dev, "Unrecognized hub protocol %d\n",
1533 			hdev->descriptor.bDeviceProtocol);
1534 		break;
1535 	}
1536 
1537 	/* Note 8 FS bit times == (8 bits / 12000000 bps) ~= 666ns */
1538 	switch (wHubCharacteristics & HUB_CHAR_TTTT) {
1539 	case HUB_TTTT_8_BITS:
1540 		if (hdev->descriptor.bDeviceProtocol != 0) {
1541 			hub->tt.think_time = 666;
1542 			dev_dbg(hub_dev, "TT requires at most %d "
1543 					"FS bit times (%d ns)\n",
1544 				8, hub->tt.think_time);
1545 		}
1546 		break;
1547 	case HUB_TTTT_16_BITS:
1548 		hub->tt.think_time = 666 * 2;
1549 		dev_dbg(hub_dev, "TT requires at most %d "
1550 				"FS bit times (%d ns)\n",
1551 			16, hub->tt.think_time);
1552 		break;
1553 	case HUB_TTTT_24_BITS:
1554 		hub->tt.think_time = 666 * 3;
1555 		dev_dbg(hub_dev, "TT requires at most %d "
1556 				"FS bit times (%d ns)\n",
1557 			24, hub->tt.think_time);
1558 		break;
1559 	case HUB_TTTT_32_BITS:
1560 		hub->tt.think_time = 666 * 4;
1561 		dev_dbg(hub_dev, "TT requires at most %d "
1562 				"FS bit times (%d ns)\n",
1563 			32, hub->tt.think_time);
1564 		break;
1565 	}
1566 
1567 	/* probe() zeroes hub->indicator[] */
1568 	if (wHubCharacteristics & HUB_CHAR_PORTIND) {
1569 		hub->has_indicators = 1;
1570 		dev_dbg(hub_dev, "Port indicators are supported\n");
1571 	}
1572 
1573 	dev_dbg(hub_dev, "power on to power good time: %dms\n",
1574 		hub->descriptor->bPwrOn2PwrGood * 2);
1575 
1576 	/* power budgeting mostly matters with bus-powered hubs,
1577 	 * and battery-powered root hubs (may provide just 8 mA).
1578 	 */
1579 	ret = usb_get_std_status(hdev, USB_RECIP_DEVICE, 0, &hubstatus);
1580 	if (ret) {
1581 		message = "can't get hub status";
1582 		goto fail;
1583 	}
1584 	hcd = bus_to_hcd(hdev->bus);
1585 	if (hdev == hdev->bus->root_hub) {
1586 		if (hcd->power_budget > 0)
1587 			hdev->bus_mA = hcd->power_budget;
1588 		else
1589 			hdev->bus_mA = full_load * maxchild;
1590 		if (hdev->bus_mA >= full_load)
1591 			hub->mA_per_port = full_load;
1592 		else {
1593 			hub->mA_per_port = hdev->bus_mA;
1594 			hub->limited_power = 1;
1595 		}
1596 	} else if ((hubstatus & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
1597 		int remaining = hdev->bus_mA -
1598 			hub->descriptor->bHubContrCurrent;
1599 
1600 		dev_dbg(hub_dev, "hub controller current requirement: %dmA\n",
1601 			hub->descriptor->bHubContrCurrent);
1602 		hub->limited_power = 1;
1603 
1604 		if (remaining < maxchild * unit_load)
1605 			dev_warn(hub_dev,
1606 					"insufficient power available "
1607 					"to use all downstream ports\n");
1608 		hub->mA_per_port = unit_load;	/* 7.2.1 */
1609 
1610 	} else {	/* Self-powered external hub */
1611 		/* FIXME: What about battery-powered external hubs that
1612 		 * provide less current per port? */
1613 		hub->mA_per_port = full_load;
1614 	}
1615 	if (hub->mA_per_port < full_load)
1616 		dev_dbg(hub_dev, "%umA bus power budget for each child\n",
1617 				hub->mA_per_port);
1618 
1619 	ret = hub_hub_status(hub, &hubstatus, &hubchange);
1620 	if (ret < 0) {
1621 		message = "can't get hub status";
1622 		goto fail;
1623 	}
1624 
1625 	/* local power status reports aren't always correct */
1626 	if (hdev->actconfig->desc.bmAttributes & USB_CONFIG_ATT_SELFPOWER)
1627 		dev_dbg(hub_dev, "local power source is %s\n",
1628 			(hubstatus & HUB_STATUS_LOCAL_POWER)
1629 			? "lost (inactive)" : "good");
1630 
1631 	if ((wHubCharacteristics & HUB_CHAR_OCPM) == 0)
1632 		dev_dbg(hub_dev, "%sover-current condition exists\n",
1633 			(hubstatus & HUB_STATUS_OVERCURRENT) ? "" : "no ");
1634 
1635 	/* set up the interrupt endpoint
1636 	 * We use the EP's maxpacket size instead of (PORTS+1+7)/8
1637 	 * bytes as USB2.0[11.12.3] says because some hubs are known
1638 	 * to send more data (and thus cause overflow). For root hubs,
1639 	 * maxpktsize is defined in hcd.c's fake endpoint descriptors
1640 	 * to be big enough for at least USB_MAXCHILDREN ports. */
1641 	pipe = usb_rcvintpipe(hdev, endpoint->bEndpointAddress);
1642 	maxp = usb_maxpacket(hdev, pipe);
1643 
1644 	if (maxp > sizeof(*hub->buffer))
1645 		maxp = sizeof(*hub->buffer);
1646 
1647 	hub->urb = usb_alloc_urb(0, GFP_KERNEL);
1648 	if (!hub->urb) {
1649 		ret = -ENOMEM;
1650 		goto fail;
1651 	}
1652 
1653 	usb_fill_int_urb(hub->urb, hdev, pipe, *hub->buffer, maxp, hub_irq,
1654 		hub, endpoint->bInterval);
1655 
1656 	/* maybe cycle the hub leds */
1657 	if (hub->has_indicators && blinkenlights)
1658 		hub->indicator[0] = INDICATOR_CYCLE;
1659 
1660 	mutex_lock(&usb_port_peer_mutex);
1661 	for (i = 0; i < maxchild; i++) {
1662 		ret = usb_hub_create_port_device(hub, i + 1);
1663 		if (ret < 0) {
1664 			dev_err(hub->intfdev,
1665 				"couldn't create port%d device.\n", i + 1);
1666 			break;
1667 		}
1668 	}
1669 	hdev->maxchild = i;
1670 	for (i = 0; i < hdev->maxchild; i++) {
1671 		struct usb_port *port_dev = hub->ports[i];
1672 
1673 		pm_runtime_put(&port_dev->dev);
1674 	}
1675 
1676 	mutex_unlock(&usb_port_peer_mutex);
1677 	if (ret < 0)
1678 		goto fail;
1679 
1680 	/* Update the HCD's internal representation of this hub before hub_wq
1681 	 * starts getting port status changes for devices under the hub.
1682 	 */
1683 	if (hcd->driver->update_hub_device) {
1684 		ret = hcd->driver->update_hub_device(hcd, hdev,
1685 				&hub->tt, GFP_KERNEL);
1686 		if (ret < 0) {
1687 			message = "can't update HCD hub info";
1688 			goto fail;
1689 		}
1690 	}
1691 
1692 	usb_hub_adjust_deviceremovable(hdev, hub->descriptor);
1693 
1694 	hub_activate(hub, HUB_INIT);
1695 	return 0;
1696 
1697 fail:
1698 	dev_err(hub_dev, "config failed, %s (err %d)\n",
1699 			message, ret);
1700 	/* hub_disconnect() frees urb and descriptor */
1701 	return ret;
1702 }
1703 
1704 static void hub_release(struct kref *kref)
1705 {
1706 	struct usb_hub *hub = container_of(kref, struct usb_hub, kref);
1707 
1708 	usb_put_dev(hub->hdev);
1709 	usb_put_intf(to_usb_interface(hub->intfdev));
1710 	kfree(hub);
1711 }
1712 
1713 static unsigned highspeed_hubs;
1714 
1715 static void hub_disconnect(struct usb_interface *intf)
1716 {
1717 	struct usb_hub *hub = usb_get_intfdata(intf);
1718 	struct usb_device *hdev = interface_to_usbdev(intf);
1719 	int port1;
1720 
1721 	/*
1722 	 * Stop adding new hub events. We do not want to block here and thus
1723 	 * will not try to remove any pending work item.
1724 	 */
1725 	hub->disconnected = 1;
1726 
1727 	/* Disconnect all children and quiesce the hub */
1728 	hub->error = 0;
1729 	hub_quiesce(hub, HUB_DISCONNECT);
1730 
1731 	mutex_lock(&usb_port_peer_mutex);
1732 
1733 	/* Avoid races with recursively_mark_NOTATTACHED() */
1734 	spin_lock_irq(&device_state_lock);
1735 	port1 = hdev->maxchild;
1736 	hdev->maxchild = 0;
1737 	usb_set_intfdata(intf, NULL);
1738 	spin_unlock_irq(&device_state_lock);
1739 
1740 	for (; port1 > 0; --port1)
1741 		usb_hub_remove_port_device(hub, port1);
1742 
1743 	mutex_unlock(&usb_port_peer_mutex);
1744 
1745 	if (hub->hdev->speed == USB_SPEED_HIGH)
1746 		highspeed_hubs--;
1747 
1748 	usb_free_urb(hub->urb);
1749 	kfree(hub->ports);
1750 	kfree(hub->descriptor);
1751 	kfree(hub->status);
1752 	kfree(hub->buffer);
1753 
1754 	pm_suspend_ignore_children(&intf->dev, false);
1755 
1756 	if (hub->quirk_disable_autosuspend)
1757 		usb_autopm_put_interface(intf);
1758 
1759 	onboard_hub_destroy_pdevs(&hub->onboard_hub_devs);
1760 
1761 	kref_put(&hub->kref, hub_release);
1762 }
1763 
1764 static bool hub_descriptor_is_sane(struct usb_host_interface *desc)
1765 {
1766 	/* Some hubs have a subclass of 1, which AFAICT according to the */
1767 	/*  specs is not defined, but it works */
1768 	if (desc->desc.bInterfaceSubClass != 0 &&
1769 	    desc->desc.bInterfaceSubClass != 1)
1770 		return false;
1771 
1772 	/* Multiple endpoints? What kind of mutant ninja-hub is this? */
1773 	if (desc->desc.bNumEndpoints != 1)
1774 		return false;
1775 
1776 	/* If the first endpoint is not interrupt IN, we'd better punt! */
1777 	if (!usb_endpoint_is_int_in(&desc->endpoint[0].desc))
1778 		return false;
1779 
1780         return true;
1781 }
1782 
1783 static int hub_probe(struct usb_interface *intf, const struct usb_device_id *id)
1784 {
1785 	struct usb_host_interface *desc;
1786 	struct usb_device *hdev;
1787 	struct usb_hub *hub;
1788 
1789 	desc = intf->cur_altsetting;
1790 	hdev = interface_to_usbdev(intf);
1791 
1792 	/*
1793 	 * Set default autosuspend delay as 0 to speedup bus suspend,
1794 	 * based on the below considerations:
1795 	 *
1796 	 * - Unlike other drivers, the hub driver does not rely on the
1797 	 *   autosuspend delay to provide enough time to handle a wakeup
1798 	 *   event, and the submitted status URB is just to check future
1799 	 *   change on hub downstream ports, so it is safe to do it.
1800 	 *
1801 	 * - The patch might cause one or more auto supend/resume for
1802 	 *   below very rare devices when they are plugged into hub
1803 	 *   first time:
1804 	 *
1805 	 *   	devices having trouble initializing, and disconnect
1806 	 *   	themselves from the bus and then reconnect a second
1807 	 *   	or so later
1808 	 *
1809 	 *   	devices just for downloading firmware, and disconnects
1810 	 *   	themselves after completing it
1811 	 *
1812 	 *   For these quite rare devices, their drivers may change the
1813 	 *   autosuspend delay of their parent hub in the probe() to one
1814 	 *   appropriate value to avoid the subtle problem if someone
1815 	 *   does care it.
1816 	 *
1817 	 * - The patch may cause one or more auto suspend/resume on
1818 	 *   hub during running 'lsusb', but it is probably too
1819 	 *   infrequent to worry about.
1820 	 *
1821 	 * - Change autosuspend delay of hub can avoid unnecessary auto
1822 	 *   suspend timer for hub, also may decrease power consumption
1823 	 *   of USB bus.
1824 	 *
1825 	 * - If user has indicated to prevent autosuspend by passing
1826 	 *   usbcore.autosuspend = -1 then keep autosuspend disabled.
1827 	 */
1828 #ifdef CONFIG_PM
1829 	if (hdev->dev.power.autosuspend_delay >= 0)
1830 		pm_runtime_set_autosuspend_delay(&hdev->dev, 0);
1831 #endif
1832 
1833 	/*
1834 	 * Hubs have proper suspend/resume support, except for root hubs
1835 	 * where the controller driver doesn't have bus_suspend and
1836 	 * bus_resume methods.
1837 	 */
1838 	if (hdev->parent) {		/* normal device */
1839 		usb_enable_autosuspend(hdev);
1840 	} else {			/* root hub */
1841 		const struct hc_driver *drv = bus_to_hcd(hdev->bus)->driver;
1842 
1843 		if (drv->bus_suspend && drv->bus_resume)
1844 			usb_enable_autosuspend(hdev);
1845 	}
1846 
1847 	if (hdev->level == MAX_TOPO_LEVEL) {
1848 		dev_err(&intf->dev,
1849 			"Unsupported bus topology: hub nested too deep\n");
1850 		return -E2BIG;
1851 	}
1852 
1853 #ifdef	CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB
1854 	if (hdev->parent) {
1855 		dev_warn(&intf->dev, "ignoring external hub\n");
1856 		return -ENODEV;
1857 	}
1858 #endif
1859 
1860 	if (!hub_descriptor_is_sane(desc)) {
1861 		dev_err(&intf->dev, "bad descriptor, ignoring hub\n");
1862 		return -EIO;
1863 	}
1864 
1865 	/* We found a hub */
1866 	dev_info(&intf->dev, "USB hub found\n");
1867 
1868 	hub = kzalloc(sizeof(*hub), GFP_KERNEL);
1869 	if (!hub)
1870 		return -ENOMEM;
1871 
1872 	kref_init(&hub->kref);
1873 	hub->intfdev = &intf->dev;
1874 	hub->hdev = hdev;
1875 	INIT_DELAYED_WORK(&hub->leds, led_work);
1876 	INIT_DELAYED_WORK(&hub->init_work, NULL);
1877 	INIT_WORK(&hub->events, hub_event);
1878 	INIT_LIST_HEAD(&hub->onboard_hub_devs);
1879 	spin_lock_init(&hub->irq_urb_lock);
1880 	timer_setup(&hub->irq_urb_retry, hub_retry_irq_urb, 0);
1881 	usb_get_intf(intf);
1882 	usb_get_dev(hdev);
1883 
1884 	usb_set_intfdata(intf, hub);
1885 	intf->needs_remote_wakeup = 1;
1886 	pm_suspend_ignore_children(&intf->dev, true);
1887 
1888 	if (hdev->speed == USB_SPEED_HIGH)
1889 		highspeed_hubs++;
1890 
1891 	if (id->driver_info & HUB_QUIRK_CHECK_PORT_AUTOSUSPEND)
1892 		hub->quirk_check_port_auto_suspend = 1;
1893 
1894 	if (id->driver_info & HUB_QUIRK_DISABLE_AUTOSUSPEND) {
1895 		hub->quirk_disable_autosuspend = 1;
1896 		usb_autopm_get_interface_no_resume(intf);
1897 	}
1898 
1899 	if (hub_configure(hub, &desc->endpoint[0].desc) >= 0) {
1900 		onboard_hub_create_pdevs(hdev, &hub->onboard_hub_devs);
1901 
1902 		return 0;
1903 	}
1904 
1905 	hub_disconnect(intf);
1906 	return -ENODEV;
1907 }
1908 
1909 static int
1910 hub_ioctl(struct usb_interface *intf, unsigned int code, void *user_data)
1911 {
1912 	struct usb_device *hdev = interface_to_usbdev(intf);
1913 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1914 
1915 	/* assert ifno == 0 (part of hub spec) */
1916 	switch (code) {
1917 	case USBDEVFS_HUB_PORTINFO: {
1918 		struct usbdevfs_hub_portinfo *info = user_data;
1919 		int i;
1920 
1921 		spin_lock_irq(&device_state_lock);
1922 		if (hdev->devnum <= 0)
1923 			info->nports = 0;
1924 		else {
1925 			info->nports = hdev->maxchild;
1926 			for (i = 0; i < info->nports; i++) {
1927 				if (hub->ports[i]->child == NULL)
1928 					info->port[i] = 0;
1929 				else
1930 					info->port[i] =
1931 						hub->ports[i]->child->devnum;
1932 			}
1933 		}
1934 		spin_unlock_irq(&device_state_lock);
1935 
1936 		return info->nports + 1;
1937 		}
1938 
1939 	default:
1940 		return -ENOSYS;
1941 	}
1942 }
1943 
1944 /*
1945  * Allow user programs to claim ports on a hub.  When a device is attached
1946  * to one of these "claimed" ports, the program will "own" the device.
1947  */
1948 static int find_port_owner(struct usb_device *hdev, unsigned port1,
1949 		struct usb_dev_state ***ppowner)
1950 {
1951 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
1952 
1953 	if (hdev->state == USB_STATE_NOTATTACHED)
1954 		return -ENODEV;
1955 	if (port1 == 0 || port1 > hdev->maxchild)
1956 		return -EINVAL;
1957 
1958 	/* Devices not managed by the hub driver
1959 	 * will always have maxchild equal to 0.
1960 	 */
1961 	*ppowner = &(hub->ports[port1 - 1]->port_owner);
1962 	return 0;
1963 }
1964 
1965 /* In the following three functions, the caller must hold hdev's lock */
1966 int usb_hub_claim_port(struct usb_device *hdev, unsigned port1,
1967 		       struct usb_dev_state *owner)
1968 {
1969 	int rc;
1970 	struct usb_dev_state **powner;
1971 
1972 	rc = find_port_owner(hdev, port1, &powner);
1973 	if (rc)
1974 		return rc;
1975 	if (*powner)
1976 		return -EBUSY;
1977 	*powner = owner;
1978 	return rc;
1979 }
1980 EXPORT_SYMBOL_GPL(usb_hub_claim_port);
1981 
1982 int usb_hub_release_port(struct usb_device *hdev, unsigned port1,
1983 			 struct usb_dev_state *owner)
1984 {
1985 	int rc;
1986 	struct usb_dev_state **powner;
1987 
1988 	rc = find_port_owner(hdev, port1, &powner);
1989 	if (rc)
1990 		return rc;
1991 	if (*powner != owner)
1992 		return -ENOENT;
1993 	*powner = NULL;
1994 	return rc;
1995 }
1996 EXPORT_SYMBOL_GPL(usb_hub_release_port);
1997 
1998 void usb_hub_release_all_ports(struct usb_device *hdev, struct usb_dev_state *owner)
1999 {
2000 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
2001 	int n;
2002 
2003 	for (n = 0; n < hdev->maxchild; n++) {
2004 		if (hub->ports[n]->port_owner == owner)
2005 			hub->ports[n]->port_owner = NULL;
2006 	}
2007 
2008 }
2009 
2010 /* The caller must hold udev's lock */
2011 bool usb_device_is_owned(struct usb_device *udev)
2012 {
2013 	struct usb_hub *hub;
2014 
2015 	if (udev->state == USB_STATE_NOTATTACHED || !udev->parent)
2016 		return false;
2017 	hub = usb_hub_to_struct_hub(udev->parent);
2018 	return !!hub->ports[udev->portnum - 1]->port_owner;
2019 }
2020 
2021 static void update_port_device_state(struct usb_device *udev)
2022 {
2023 	struct usb_hub *hub;
2024 	struct usb_port *port_dev;
2025 
2026 	if (udev->parent) {
2027 		hub = usb_hub_to_struct_hub(udev->parent);
2028 		port_dev = hub->ports[udev->portnum - 1];
2029 		WRITE_ONCE(port_dev->state, udev->state);
2030 		sysfs_notify_dirent(port_dev->state_kn);
2031 	}
2032 }
2033 
2034 static void recursively_mark_NOTATTACHED(struct usb_device *udev)
2035 {
2036 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2037 	int i;
2038 
2039 	for (i = 0; i < udev->maxchild; ++i) {
2040 		if (hub->ports[i]->child)
2041 			recursively_mark_NOTATTACHED(hub->ports[i]->child);
2042 	}
2043 	if (udev->state == USB_STATE_SUSPENDED)
2044 		udev->active_duration -= jiffies;
2045 	udev->state = USB_STATE_NOTATTACHED;
2046 	update_port_device_state(udev);
2047 }
2048 
2049 /**
2050  * usb_set_device_state - change a device's current state (usbcore, hcds)
2051  * @udev: pointer to device whose state should be changed
2052  * @new_state: new state value to be stored
2053  *
2054  * udev->state is _not_ fully protected by the device lock.  Although
2055  * most transitions are made only while holding the lock, the state can
2056  * can change to USB_STATE_NOTATTACHED at almost any time.  This
2057  * is so that devices can be marked as disconnected as soon as possible,
2058  * without having to wait for any semaphores to be released.  As a result,
2059  * all changes to any device's state must be protected by the
2060  * device_state_lock spinlock.
2061  *
2062  * Once a device has been added to the device tree, all changes to its state
2063  * should be made using this routine.  The state should _not_ be set directly.
2064  *
2065  * If udev->state is already USB_STATE_NOTATTACHED then no change is made.
2066  * Otherwise udev->state is set to new_state, and if new_state is
2067  * USB_STATE_NOTATTACHED then all of udev's descendants' states are also set
2068  * to USB_STATE_NOTATTACHED.
2069  */
2070 void usb_set_device_state(struct usb_device *udev,
2071 		enum usb_device_state new_state)
2072 {
2073 	unsigned long flags;
2074 	int wakeup = -1;
2075 
2076 	spin_lock_irqsave(&device_state_lock, flags);
2077 	if (udev->state == USB_STATE_NOTATTACHED)
2078 		;	/* do nothing */
2079 	else if (new_state != USB_STATE_NOTATTACHED) {
2080 
2081 		/* root hub wakeup capabilities are managed out-of-band
2082 		 * and may involve silicon errata ... ignore them here.
2083 		 */
2084 		if (udev->parent) {
2085 			if (udev->state == USB_STATE_SUSPENDED
2086 					|| new_state == USB_STATE_SUSPENDED)
2087 				;	/* No change to wakeup settings */
2088 			else if (new_state == USB_STATE_CONFIGURED)
2089 				wakeup = (udev->quirks &
2090 					USB_QUIRK_IGNORE_REMOTE_WAKEUP) ? 0 :
2091 					udev->actconfig->desc.bmAttributes &
2092 					USB_CONFIG_ATT_WAKEUP;
2093 			else
2094 				wakeup = 0;
2095 		}
2096 		if (udev->state == USB_STATE_SUSPENDED &&
2097 			new_state != USB_STATE_SUSPENDED)
2098 			udev->active_duration -= jiffies;
2099 		else if (new_state == USB_STATE_SUSPENDED &&
2100 				udev->state != USB_STATE_SUSPENDED)
2101 			udev->active_duration += jiffies;
2102 		udev->state = new_state;
2103 		update_port_device_state(udev);
2104 	} else
2105 		recursively_mark_NOTATTACHED(udev);
2106 	spin_unlock_irqrestore(&device_state_lock, flags);
2107 	if (wakeup >= 0)
2108 		device_set_wakeup_capable(&udev->dev, wakeup);
2109 }
2110 EXPORT_SYMBOL_GPL(usb_set_device_state);
2111 
2112 /*
2113  * Choose a device number.
2114  *
2115  * Device numbers are used as filenames in usbfs.  On USB-1.1 and
2116  * USB-2.0 buses they are also used as device addresses, however on
2117  * USB-3.0 buses the address is assigned by the controller hardware
2118  * and it usually is not the same as the device number.
2119  *
2120  * WUSB devices are simple: they have no hubs behind, so the mapping
2121  * device <-> virtual port number becomes 1:1. Why? to simplify the
2122  * life of the device connection logic in
2123  * drivers/usb/wusbcore/devconnect.c. When we do the initial secret
2124  * handshake we need to assign a temporary address in the unauthorized
2125  * space. For simplicity we use the first virtual port number found to
2126  * be free [drivers/usb/wusbcore/devconnect.c:wusbhc_devconnect_ack()]
2127  * and that becomes it's address [X < 128] or its unauthorized address
2128  * [X | 0x80].
2129  *
2130  * We add 1 as an offset to the one-based USB-stack port number
2131  * (zero-based wusb virtual port index) for two reasons: (a) dev addr
2132  * 0 is reserved by USB for default address; (b) Linux's USB stack
2133  * uses always #1 for the root hub of the controller. So USB stack's
2134  * port #1, which is wusb virtual-port #0 has address #2.
2135  *
2136  * Devices connected under xHCI are not as simple.  The host controller
2137  * supports virtualization, so the hardware assigns device addresses and
2138  * the HCD must setup data structures before issuing a set address
2139  * command to the hardware.
2140  */
2141 static void choose_devnum(struct usb_device *udev)
2142 {
2143 	int		devnum;
2144 	struct usb_bus	*bus = udev->bus;
2145 
2146 	/* be safe when more hub events are proceed in parallel */
2147 	mutex_lock(&bus->devnum_next_mutex);
2148 	if (udev->wusb) {
2149 		devnum = udev->portnum + 1;
2150 		BUG_ON(test_bit(devnum, bus->devmap.devicemap));
2151 	} else {
2152 		/* Try to allocate the next devnum beginning at
2153 		 * bus->devnum_next. */
2154 		devnum = find_next_zero_bit(bus->devmap.devicemap, 128,
2155 					    bus->devnum_next);
2156 		if (devnum >= 128)
2157 			devnum = find_next_zero_bit(bus->devmap.devicemap,
2158 						    128, 1);
2159 		bus->devnum_next = (devnum >= 127 ? 1 : devnum + 1);
2160 	}
2161 	if (devnum < 128) {
2162 		set_bit(devnum, bus->devmap.devicemap);
2163 		udev->devnum = devnum;
2164 	}
2165 	mutex_unlock(&bus->devnum_next_mutex);
2166 }
2167 
2168 static void release_devnum(struct usb_device *udev)
2169 {
2170 	if (udev->devnum > 0) {
2171 		clear_bit(udev->devnum, udev->bus->devmap.devicemap);
2172 		udev->devnum = -1;
2173 	}
2174 }
2175 
2176 static void update_devnum(struct usb_device *udev, int devnum)
2177 {
2178 	/* The address for a WUSB device is managed by wusbcore. */
2179 	if (!udev->wusb)
2180 		udev->devnum = devnum;
2181 	if (!udev->devaddr)
2182 		udev->devaddr = (u8)devnum;
2183 }
2184 
2185 static void hub_free_dev(struct usb_device *udev)
2186 {
2187 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2188 
2189 	/* Root hubs aren't real devices, so don't free HCD resources */
2190 	if (hcd->driver->free_dev && udev->parent)
2191 		hcd->driver->free_dev(hcd, udev);
2192 }
2193 
2194 static void hub_disconnect_children(struct usb_device *udev)
2195 {
2196 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
2197 	int i;
2198 
2199 	/* Free up all the children before we remove this device */
2200 	for (i = 0; i < udev->maxchild; i++) {
2201 		if (hub->ports[i]->child)
2202 			usb_disconnect(&hub->ports[i]->child);
2203 	}
2204 }
2205 
2206 /**
2207  * usb_disconnect - disconnect a device (usbcore-internal)
2208  * @pdev: pointer to device being disconnected
2209  *
2210  * Context: task context, might sleep
2211  *
2212  * Something got disconnected. Get rid of it and all of its children.
2213  *
2214  * If *pdev is a normal device then the parent hub must already be locked.
2215  * If *pdev is a root hub then the caller must hold the usb_bus_idr_lock,
2216  * which protects the set of root hubs as well as the list of buses.
2217  *
2218  * Only hub drivers (including virtual root hub drivers for host
2219  * controllers) should ever call this.
2220  *
2221  * This call is synchronous, and may not be used in an interrupt context.
2222  */
2223 void usb_disconnect(struct usb_device **pdev)
2224 {
2225 	struct usb_port *port_dev = NULL;
2226 	struct usb_device *udev = *pdev;
2227 	struct usb_hub *hub = NULL;
2228 	int port1 = 1;
2229 
2230 	/* mark the device as inactive, so any further urb submissions for
2231 	 * this device (and any of its children) will fail immediately.
2232 	 * this quiesces everything except pending urbs.
2233 	 */
2234 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2235 	dev_info(&udev->dev, "USB disconnect, device number %d\n",
2236 			udev->devnum);
2237 
2238 	/*
2239 	 * Ensure that the pm runtime code knows that the USB device
2240 	 * is in the process of being disconnected.
2241 	 */
2242 	pm_runtime_barrier(&udev->dev);
2243 
2244 	usb_lock_device(udev);
2245 
2246 	hub_disconnect_children(udev);
2247 
2248 	/* deallocate hcd/hardware state ... nuking all pending urbs and
2249 	 * cleaning up all state associated with the current configuration
2250 	 * so that the hardware is now fully quiesced.
2251 	 */
2252 	dev_dbg(&udev->dev, "unregistering device\n");
2253 	usb_disable_device(udev, 0);
2254 	usb_hcd_synchronize_unlinks(udev);
2255 
2256 	if (udev->parent) {
2257 		port1 = udev->portnum;
2258 		hub = usb_hub_to_struct_hub(udev->parent);
2259 		port_dev = hub->ports[port1 - 1];
2260 
2261 		sysfs_remove_link(&udev->dev.kobj, "port");
2262 		sysfs_remove_link(&port_dev->dev.kobj, "device");
2263 
2264 		/*
2265 		 * As usb_port_runtime_resume() de-references udev, make
2266 		 * sure no resumes occur during removal
2267 		 */
2268 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2269 			pm_runtime_get_sync(&port_dev->dev);
2270 	}
2271 
2272 	usb_remove_ep_devs(&udev->ep0);
2273 	usb_unlock_device(udev);
2274 
2275 	/* Unregister the device.  The device driver is responsible
2276 	 * for de-configuring the device and invoking the remove-device
2277 	 * notifier chain (used by usbfs and possibly others).
2278 	 */
2279 	device_del(&udev->dev);
2280 
2281 	/* Free the device number and delete the parent's children[]
2282 	 * (or root_hub) pointer.
2283 	 */
2284 	release_devnum(udev);
2285 
2286 	/* Avoid races with recursively_mark_NOTATTACHED() */
2287 	spin_lock_irq(&device_state_lock);
2288 	*pdev = NULL;
2289 	spin_unlock_irq(&device_state_lock);
2290 
2291 	if (port_dev && test_and_clear_bit(port1, hub->child_usage_bits))
2292 		pm_runtime_put(&port_dev->dev);
2293 
2294 	hub_free_dev(udev);
2295 
2296 	put_device(&udev->dev);
2297 }
2298 
2299 #ifdef CONFIG_USB_ANNOUNCE_NEW_DEVICES
2300 static void show_string(struct usb_device *udev, char *id, char *string)
2301 {
2302 	if (!string)
2303 		return;
2304 	dev_info(&udev->dev, "%s: %s\n", id, string);
2305 }
2306 
2307 static void announce_device(struct usb_device *udev)
2308 {
2309 	u16 bcdDevice = le16_to_cpu(udev->descriptor.bcdDevice);
2310 
2311 	dev_info(&udev->dev,
2312 		"New USB device found, idVendor=%04x, idProduct=%04x, bcdDevice=%2x.%02x\n",
2313 		le16_to_cpu(udev->descriptor.idVendor),
2314 		le16_to_cpu(udev->descriptor.idProduct),
2315 		bcdDevice >> 8, bcdDevice & 0xff);
2316 	dev_info(&udev->dev,
2317 		"New USB device strings: Mfr=%d, Product=%d, SerialNumber=%d\n",
2318 		udev->descriptor.iManufacturer,
2319 		udev->descriptor.iProduct,
2320 		udev->descriptor.iSerialNumber);
2321 	show_string(udev, "Product", udev->product);
2322 	show_string(udev, "Manufacturer", udev->manufacturer);
2323 	show_string(udev, "SerialNumber", udev->serial);
2324 }
2325 #else
2326 static inline void announce_device(struct usb_device *udev) { }
2327 #endif
2328 
2329 
2330 /**
2331  * usb_enumerate_device_otg - FIXME (usbcore-internal)
2332  * @udev: newly addressed device (in ADDRESS state)
2333  *
2334  * Finish enumeration for On-The-Go devices
2335  *
2336  * Return: 0 if successful. A negative error code otherwise.
2337  */
2338 static int usb_enumerate_device_otg(struct usb_device *udev)
2339 {
2340 	int err = 0;
2341 
2342 #ifdef	CONFIG_USB_OTG
2343 	/*
2344 	 * OTG-aware devices on OTG-capable root hubs may be able to use SRP,
2345 	 * to wake us after we've powered off VBUS; and HNP, switching roles
2346 	 * "host" to "peripheral".  The OTG descriptor helps figure this out.
2347 	 */
2348 	if (!udev->bus->is_b_host
2349 			&& udev->config
2350 			&& udev->parent == udev->bus->root_hub) {
2351 		struct usb_otg_descriptor	*desc = NULL;
2352 		struct usb_bus			*bus = udev->bus;
2353 		unsigned			port1 = udev->portnum;
2354 
2355 		/* descriptor may appear anywhere in config */
2356 		err = __usb_get_extra_descriptor(udev->rawdescriptors[0],
2357 				le16_to_cpu(udev->config[0].desc.wTotalLength),
2358 				USB_DT_OTG, (void **) &desc, sizeof(*desc));
2359 		if (err || !(desc->bmAttributes & USB_OTG_HNP))
2360 			return 0;
2361 
2362 		dev_info(&udev->dev, "Dual-Role OTG device on %sHNP port\n",
2363 					(port1 == bus->otg_port) ? "" : "non-");
2364 
2365 		/* enable HNP before suspend, it's simpler */
2366 		if (port1 == bus->otg_port) {
2367 			bus->b_hnp_enable = 1;
2368 			err = usb_control_msg(udev,
2369 				usb_sndctrlpipe(udev, 0),
2370 				USB_REQ_SET_FEATURE, 0,
2371 				USB_DEVICE_B_HNP_ENABLE,
2372 				0, NULL, 0,
2373 				USB_CTRL_SET_TIMEOUT);
2374 			if (err < 0) {
2375 				/*
2376 				 * OTG MESSAGE: report errors here,
2377 				 * customize to match your product.
2378 				 */
2379 				dev_err(&udev->dev, "can't set HNP mode: %d\n",
2380 									err);
2381 				bus->b_hnp_enable = 0;
2382 			}
2383 		} else if (desc->bLength == sizeof
2384 				(struct usb_otg_descriptor)) {
2385 			/* Set a_alt_hnp_support for legacy otg device */
2386 			err = usb_control_msg(udev,
2387 				usb_sndctrlpipe(udev, 0),
2388 				USB_REQ_SET_FEATURE, 0,
2389 				USB_DEVICE_A_ALT_HNP_SUPPORT,
2390 				0, NULL, 0,
2391 				USB_CTRL_SET_TIMEOUT);
2392 			if (err < 0)
2393 				dev_err(&udev->dev,
2394 					"set a_alt_hnp_support failed: %d\n",
2395 					err);
2396 		}
2397 	}
2398 #endif
2399 	return err;
2400 }
2401 
2402 
2403 /**
2404  * usb_enumerate_device - Read device configs/intfs/otg (usbcore-internal)
2405  * @udev: newly addressed device (in ADDRESS state)
2406  *
2407  * This is only called by usb_new_device() -- all comments that apply there
2408  * apply here wrt to environment.
2409  *
2410  * If the device is WUSB and not authorized, we don't attempt to read
2411  * the string descriptors, as they will be errored out by the device
2412  * until it has been authorized.
2413  *
2414  * Return: 0 if successful. A negative error code otherwise.
2415  */
2416 static int usb_enumerate_device(struct usb_device *udev)
2417 {
2418 	int err;
2419 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
2420 
2421 	if (udev->config == NULL) {
2422 		err = usb_get_configuration(udev);
2423 		if (err < 0) {
2424 			if (err != -ENODEV)
2425 				dev_err(&udev->dev, "can't read configurations, error %d\n",
2426 						err);
2427 			return err;
2428 		}
2429 	}
2430 
2431 	/* read the standard strings and cache them if present */
2432 	udev->product = usb_cache_string(udev, udev->descriptor.iProduct);
2433 	udev->manufacturer = usb_cache_string(udev,
2434 					      udev->descriptor.iManufacturer);
2435 	udev->serial = usb_cache_string(udev, udev->descriptor.iSerialNumber);
2436 
2437 	err = usb_enumerate_device_otg(udev);
2438 	if (err < 0)
2439 		return err;
2440 
2441 	if (IS_ENABLED(CONFIG_USB_OTG_PRODUCTLIST) && hcd->tpl_support &&
2442 		!is_targeted(udev)) {
2443 		/* Maybe it can talk to us, though we can't talk to it.
2444 		 * (Includes HNP test device.)
2445 		 */
2446 		if (IS_ENABLED(CONFIG_USB_OTG) && (udev->bus->b_hnp_enable
2447 			|| udev->bus->is_b_host)) {
2448 			err = usb_port_suspend(udev, PMSG_AUTO_SUSPEND);
2449 			if (err < 0)
2450 				dev_dbg(&udev->dev, "HNP fail, %d\n", err);
2451 		}
2452 		return -ENOTSUPP;
2453 	}
2454 
2455 	usb_detect_interface_quirks(udev);
2456 
2457 	return 0;
2458 }
2459 
2460 static void set_usb_port_removable(struct usb_device *udev)
2461 {
2462 	struct usb_device *hdev = udev->parent;
2463 	struct usb_hub *hub;
2464 	u8 port = udev->portnum;
2465 	u16 wHubCharacteristics;
2466 	bool removable = true;
2467 
2468 	dev_set_removable(&udev->dev, DEVICE_REMOVABLE_UNKNOWN);
2469 
2470 	if (!hdev)
2471 		return;
2472 
2473 	hub = usb_hub_to_struct_hub(udev->parent);
2474 
2475 	/*
2476 	 * If the platform firmware has provided information about a port,
2477 	 * use that to determine whether it's removable.
2478 	 */
2479 	switch (hub->ports[udev->portnum - 1]->connect_type) {
2480 	case USB_PORT_CONNECT_TYPE_HOT_PLUG:
2481 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2482 		return;
2483 	case USB_PORT_CONNECT_TYPE_HARD_WIRED:
2484 	case USB_PORT_NOT_USED:
2485 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2486 		return;
2487 	default:
2488 		break;
2489 	}
2490 
2491 	/*
2492 	 * Otherwise, check whether the hub knows whether a port is removable
2493 	 * or not
2494 	 */
2495 	wHubCharacteristics = le16_to_cpu(hub->descriptor->wHubCharacteristics);
2496 
2497 	if (!(wHubCharacteristics & HUB_CHAR_COMPOUND))
2498 		return;
2499 
2500 	if (hub_is_superspeed(hdev)) {
2501 		if (le16_to_cpu(hub->descriptor->u.ss.DeviceRemovable)
2502 				& (1 << port))
2503 			removable = false;
2504 	} else {
2505 		if (hub->descriptor->u.hs.DeviceRemovable[port / 8] & (1 << (port % 8)))
2506 			removable = false;
2507 	}
2508 
2509 	if (removable)
2510 		dev_set_removable(&udev->dev, DEVICE_REMOVABLE);
2511 	else
2512 		dev_set_removable(&udev->dev, DEVICE_FIXED);
2513 
2514 }
2515 
2516 /**
2517  * usb_new_device - perform initial device setup (usbcore-internal)
2518  * @udev: newly addressed device (in ADDRESS state)
2519  *
2520  * This is called with devices which have been detected but not fully
2521  * enumerated.  The device descriptor is available, but not descriptors
2522  * for any device configuration.  The caller must have locked either
2523  * the parent hub (if udev is a normal device) or else the
2524  * usb_bus_idr_lock (if udev is a root hub).  The parent's pointer to
2525  * udev has already been installed, but udev is not yet visible through
2526  * sysfs or other filesystem code.
2527  *
2528  * This call is synchronous, and may not be used in an interrupt context.
2529  *
2530  * Only the hub driver or root-hub registrar should ever call this.
2531  *
2532  * Return: Whether the device is configured properly or not. Zero if the
2533  * interface was registered with the driver core; else a negative errno
2534  * value.
2535  *
2536  */
2537 int usb_new_device(struct usb_device *udev)
2538 {
2539 	int err;
2540 
2541 	if (udev->parent) {
2542 		/* Initialize non-root-hub device wakeup to disabled;
2543 		 * device (un)configuration controls wakeup capable
2544 		 * sysfs power/wakeup controls wakeup enabled/disabled
2545 		 */
2546 		device_init_wakeup(&udev->dev, 0);
2547 	}
2548 
2549 	/* Tell the runtime-PM framework the device is active */
2550 	pm_runtime_set_active(&udev->dev);
2551 	pm_runtime_get_noresume(&udev->dev);
2552 	pm_runtime_use_autosuspend(&udev->dev);
2553 	pm_runtime_enable(&udev->dev);
2554 
2555 	/* By default, forbid autosuspend for all devices.  It will be
2556 	 * allowed for hubs during binding.
2557 	 */
2558 	usb_disable_autosuspend(udev);
2559 
2560 	err = usb_enumerate_device(udev);	/* Read descriptors */
2561 	if (err < 0)
2562 		goto fail;
2563 	dev_dbg(&udev->dev, "udev %d, busnum %d, minor = %d\n",
2564 			udev->devnum, udev->bus->busnum,
2565 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2566 	/* export the usbdev device-node for libusb */
2567 	udev->dev.devt = MKDEV(USB_DEVICE_MAJOR,
2568 			(((udev->bus->busnum-1) * 128) + (udev->devnum-1)));
2569 
2570 	/* Tell the world! */
2571 	announce_device(udev);
2572 
2573 	if (udev->serial)
2574 		add_device_randomness(udev->serial, strlen(udev->serial));
2575 	if (udev->product)
2576 		add_device_randomness(udev->product, strlen(udev->product));
2577 	if (udev->manufacturer)
2578 		add_device_randomness(udev->manufacturer,
2579 				      strlen(udev->manufacturer));
2580 
2581 	device_enable_async_suspend(&udev->dev);
2582 
2583 	/* check whether the hub or firmware marks this port as non-removable */
2584 	set_usb_port_removable(udev);
2585 
2586 	/* Register the device.  The device driver is responsible
2587 	 * for configuring the device and invoking the add-device
2588 	 * notifier chain (used by usbfs and possibly others).
2589 	 */
2590 	err = device_add(&udev->dev);
2591 	if (err) {
2592 		dev_err(&udev->dev, "can't device_add, error %d\n", err);
2593 		goto fail;
2594 	}
2595 
2596 	/* Create link files between child device and usb port device. */
2597 	if (udev->parent) {
2598 		struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
2599 		int port1 = udev->portnum;
2600 		struct usb_port	*port_dev = hub->ports[port1 - 1];
2601 
2602 		err = sysfs_create_link(&udev->dev.kobj,
2603 				&port_dev->dev.kobj, "port");
2604 		if (err)
2605 			goto fail;
2606 
2607 		err = sysfs_create_link(&port_dev->dev.kobj,
2608 				&udev->dev.kobj, "device");
2609 		if (err) {
2610 			sysfs_remove_link(&udev->dev.kobj, "port");
2611 			goto fail;
2612 		}
2613 
2614 		if (!test_and_set_bit(port1, hub->child_usage_bits))
2615 			pm_runtime_get_sync(&port_dev->dev);
2616 	}
2617 
2618 	(void) usb_create_ep_devs(&udev->dev, &udev->ep0, udev);
2619 	usb_mark_last_busy(udev);
2620 	pm_runtime_put_sync_autosuspend(&udev->dev);
2621 	return err;
2622 
2623 fail:
2624 	usb_set_device_state(udev, USB_STATE_NOTATTACHED);
2625 	pm_runtime_disable(&udev->dev);
2626 	pm_runtime_set_suspended(&udev->dev);
2627 	return err;
2628 }
2629 
2630 
2631 /**
2632  * usb_deauthorize_device - deauthorize a device (usbcore-internal)
2633  * @usb_dev: USB device
2634  *
2635  * Move the USB device to a very basic state where interfaces are disabled
2636  * and the device is in fact unconfigured and unusable.
2637  *
2638  * We share a lock (that we have) with device_del(), so we need to
2639  * defer its call.
2640  *
2641  * Return: 0.
2642  */
2643 int usb_deauthorize_device(struct usb_device *usb_dev)
2644 {
2645 	usb_lock_device(usb_dev);
2646 	if (usb_dev->authorized == 0)
2647 		goto out_unauthorized;
2648 
2649 	usb_dev->authorized = 0;
2650 	usb_set_configuration(usb_dev, -1);
2651 
2652 out_unauthorized:
2653 	usb_unlock_device(usb_dev);
2654 	return 0;
2655 }
2656 
2657 
2658 int usb_authorize_device(struct usb_device *usb_dev)
2659 {
2660 	int result = 0, c;
2661 
2662 	usb_lock_device(usb_dev);
2663 	if (usb_dev->authorized == 1)
2664 		goto out_authorized;
2665 
2666 	result = usb_autoresume_device(usb_dev);
2667 	if (result < 0) {
2668 		dev_err(&usb_dev->dev,
2669 			"can't autoresume for authorization: %d\n", result);
2670 		goto error_autoresume;
2671 	}
2672 
2673 	if (usb_dev->wusb) {
2674 		result = usb_get_device_descriptor(usb_dev, sizeof(usb_dev->descriptor));
2675 		if (result < 0) {
2676 			dev_err(&usb_dev->dev, "can't re-read device descriptor for "
2677 				"authorization: %d\n", result);
2678 			goto error_device_descriptor;
2679 		}
2680 	}
2681 
2682 	usb_dev->authorized = 1;
2683 	/* Choose and set the configuration.  This registers the interfaces
2684 	 * with the driver core and lets interface drivers bind to them.
2685 	 */
2686 	c = usb_choose_configuration(usb_dev);
2687 	if (c >= 0) {
2688 		result = usb_set_configuration(usb_dev, c);
2689 		if (result) {
2690 			dev_err(&usb_dev->dev,
2691 				"can't set config #%d, error %d\n", c, result);
2692 			/* This need not be fatal.  The user can try to
2693 			 * set other configurations. */
2694 		}
2695 	}
2696 	dev_info(&usb_dev->dev, "authorized to connect\n");
2697 
2698 error_device_descriptor:
2699 	usb_autosuspend_device(usb_dev);
2700 error_autoresume:
2701 out_authorized:
2702 	usb_unlock_device(usb_dev);	/* complements locktree */
2703 	return result;
2704 }
2705 
2706 /**
2707  * get_port_ssp_rate - Match the extended port status to SSP rate
2708  * @hdev: The hub device
2709  * @ext_portstatus: extended port status
2710  *
2711  * Match the extended port status speed id to the SuperSpeed Plus sublink speed
2712  * capability attributes. Base on the number of connected lanes and speed,
2713  * return the corresponding enum usb_ssp_rate.
2714  */
2715 static enum usb_ssp_rate get_port_ssp_rate(struct usb_device *hdev,
2716 					   u32 ext_portstatus)
2717 {
2718 	struct usb_ssp_cap_descriptor *ssp_cap = hdev->bos->ssp_cap;
2719 	u32 attr;
2720 	u8 speed_id;
2721 	u8 ssac;
2722 	u8 lanes;
2723 	int i;
2724 
2725 	if (!ssp_cap)
2726 		goto out;
2727 
2728 	speed_id = ext_portstatus & USB_EXT_PORT_STAT_RX_SPEED_ID;
2729 	lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2730 
2731 	ssac = le32_to_cpu(ssp_cap->bmAttributes) &
2732 		USB_SSP_SUBLINK_SPEED_ATTRIBS;
2733 
2734 	for (i = 0; i <= ssac; i++) {
2735 		u8 ssid;
2736 
2737 		attr = le32_to_cpu(ssp_cap->bmSublinkSpeedAttr[i]);
2738 		ssid = FIELD_GET(USB_SSP_SUBLINK_SPEED_SSID, attr);
2739 		if (speed_id == ssid) {
2740 			u16 mantissa;
2741 			u8 lse;
2742 			u8 type;
2743 
2744 			/*
2745 			 * Note: currently asymmetric lane types are only
2746 			 * applicable for SSIC operate in SuperSpeed protocol
2747 			 */
2748 			type = FIELD_GET(USB_SSP_SUBLINK_SPEED_ST, attr);
2749 			if (type == USB_SSP_SUBLINK_SPEED_ST_ASYM_RX ||
2750 			    type == USB_SSP_SUBLINK_SPEED_ST_ASYM_TX)
2751 				goto out;
2752 
2753 			if (FIELD_GET(USB_SSP_SUBLINK_SPEED_LP, attr) !=
2754 			    USB_SSP_SUBLINK_SPEED_LP_SSP)
2755 				goto out;
2756 
2757 			lse = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSE, attr);
2758 			mantissa = FIELD_GET(USB_SSP_SUBLINK_SPEED_LSM, attr);
2759 
2760 			/* Convert to Gbps */
2761 			for (; lse < USB_SSP_SUBLINK_SPEED_LSE_GBPS; lse++)
2762 				mantissa /= 1000;
2763 
2764 			if (mantissa >= 10 && lanes == 1)
2765 				return USB_SSP_GEN_2x1;
2766 
2767 			if (mantissa >= 10 && lanes == 2)
2768 				return USB_SSP_GEN_2x2;
2769 
2770 			if (mantissa >= 5 && lanes == 2)
2771 				return USB_SSP_GEN_1x2;
2772 
2773 			goto out;
2774 		}
2775 	}
2776 
2777 out:
2778 	return USB_SSP_GEN_UNKNOWN;
2779 }
2780 
2781 /* Returns 1 if @hub is a WUSB root hub, 0 otherwise */
2782 static unsigned hub_is_wusb(struct usb_hub *hub)
2783 {
2784 	struct usb_hcd *hcd;
2785 	if (hub->hdev->parent != NULL)  /* not a root hub? */
2786 		return 0;
2787 	hcd = bus_to_hcd(hub->hdev->bus);
2788 	return hcd->wireless;
2789 }
2790 
2791 
2792 #ifdef CONFIG_USB_FEW_INIT_RETRIES
2793 #define PORT_RESET_TRIES	2
2794 #define SET_ADDRESS_TRIES	1
2795 #define GET_DESCRIPTOR_TRIES	1
2796 #define GET_MAXPACKET0_TRIES	1
2797 #define PORT_INIT_TRIES		4
2798 
2799 #else
2800 #define PORT_RESET_TRIES	5
2801 #define SET_ADDRESS_TRIES	2
2802 #define GET_DESCRIPTOR_TRIES	2
2803 #define GET_MAXPACKET0_TRIES	3
2804 #define PORT_INIT_TRIES		4
2805 #endif	/* CONFIG_USB_FEW_INIT_RETRIES */
2806 
2807 #define DETECT_DISCONNECT_TRIES 5
2808 
2809 #define HUB_ROOT_RESET_TIME	60	/* times are in msec */
2810 #define HUB_SHORT_RESET_TIME	10
2811 #define HUB_BH_RESET_TIME	50
2812 #define HUB_LONG_RESET_TIME	200
2813 #define HUB_RESET_TIMEOUT	800
2814 
2815 static bool use_new_scheme(struct usb_device *udev, int retry,
2816 			   struct usb_port *port_dev)
2817 {
2818 	int old_scheme_first_port =
2819 		(port_dev->quirks & USB_PORT_QUIRK_OLD_SCHEME) ||
2820 		old_scheme_first;
2821 
2822 	/*
2823 	 * "New scheme" enumeration causes an extra state transition to be
2824 	 * exposed to an xhci host and causes USB3 devices to receive control
2825 	 * commands in the default state.  This has been seen to cause
2826 	 * enumeration failures, so disable this enumeration scheme for USB3
2827 	 * devices.
2828 	 */
2829 	if (udev->speed >= USB_SPEED_SUPER)
2830 		return false;
2831 
2832 	/*
2833 	 * If use_both_schemes is set, use the first scheme (whichever
2834 	 * it is) for the larger half of the retries, then use the other
2835 	 * scheme.  Otherwise, use the first scheme for all the retries.
2836 	 */
2837 	if (use_both_schemes && retry >= (PORT_INIT_TRIES + 1) / 2)
2838 		return old_scheme_first_port;	/* Second half */
2839 	return !old_scheme_first_port;		/* First half or all */
2840 }
2841 
2842 /* Is a USB 3.0 port in the Inactive or Compliance Mode state?
2843  * Port warm reset is required to recover
2844  */
2845 static bool hub_port_warm_reset_required(struct usb_hub *hub, int port1,
2846 		u16 portstatus)
2847 {
2848 	u16 link_state;
2849 
2850 	if (!hub_is_superspeed(hub->hdev))
2851 		return false;
2852 
2853 	if (test_bit(port1, hub->warm_reset_bits))
2854 		return true;
2855 
2856 	link_state = portstatus & USB_PORT_STAT_LINK_STATE;
2857 	return link_state == USB_SS_PORT_LS_SS_INACTIVE
2858 		|| link_state == USB_SS_PORT_LS_COMP_MOD;
2859 }
2860 
2861 static int hub_port_wait_reset(struct usb_hub *hub, int port1,
2862 			struct usb_device *udev, unsigned int delay, bool warm)
2863 {
2864 	int delay_time, ret;
2865 	u16 portstatus;
2866 	u16 portchange;
2867 	u32 ext_portstatus = 0;
2868 
2869 	for (delay_time = 0;
2870 			delay_time < HUB_RESET_TIMEOUT;
2871 			delay_time += delay) {
2872 		/* wait to give the device a chance to reset */
2873 		msleep(delay);
2874 
2875 		/* read and decode port status */
2876 		if (hub_is_superspeedplus(hub->hdev))
2877 			ret = hub_ext_port_status(hub, port1,
2878 						  HUB_EXT_PORT_STATUS,
2879 						  &portstatus, &portchange,
2880 						  &ext_portstatus);
2881 		else
2882 			ret = usb_hub_port_status(hub, port1, &portstatus,
2883 					      &portchange);
2884 		if (ret < 0)
2885 			return ret;
2886 
2887 		/*
2888 		 * The port state is unknown until the reset completes.
2889 		 *
2890 		 * On top of that, some chips may require additional time
2891 		 * to re-establish a connection after the reset is complete,
2892 		 * so also wait for the connection to be re-established.
2893 		 */
2894 		if (!(portstatus & USB_PORT_STAT_RESET) &&
2895 		    (portstatus & USB_PORT_STAT_CONNECTION))
2896 			break;
2897 
2898 		/* switch to the long delay after two short delay failures */
2899 		if (delay_time >= 2 * HUB_SHORT_RESET_TIME)
2900 			delay = HUB_LONG_RESET_TIME;
2901 
2902 		dev_dbg(&hub->ports[port1 - 1]->dev,
2903 				"not %sreset yet, waiting %dms\n",
2904 				warm ? "warm " : "", delay);
2905 	}
2906 
2907 	if ((portstatus & USB_PORT_STAT_RESET))
2908 		return -EBUSY;
2909 
2910 	if (hub_port_warm_reset_required(hub, port1, portstatus))
2911 		return -ENOTCONN;
2912 
2913 	/* Device went away? */
2914 	if (!(portstatus & USB_PORT_STAT_CONNECTION))
2915 		return -ENOTCONN;
2916 
2917 	/* Retry if connect change is set but status is still connected.
2918 	 * A USB 3.0 connection may bounce if multiple warm resets were issued,
2919 	 * but the device may have successfully re-connected. Ignore it.
2920 	 */
2921 	if (!hub_is_superspeed(hub->hdev) &&
2922 	    (portchange & USB_PORT_STAT_C_CONNECTION)) {
2923 		usb_clear_port_feature(hub->hdev, port1,
2924 				       USB_PORT_FEAT_C_CONNECTION);
2925 		return -EAGAIN;
2926 	}
2927 
2928 	if (!(portstatus & USB_PORT_STAT_ENABLE))
2929 		return -EBUSY;
2930 
2931 	if (!udev)
2932 		return 0;
2933 
2934 	if (hub_is_superspeedplus(hub->hdev)) {
2935 		/* extended portstatus Rx and Tx lane count are zero based */
2936 		udev->rx_lanes = USB_EXT_PORT_RX_LANES(ext_portstatus) + 1;
2937 		udev->tx_lanes = USB_EXT_PORT_TX_LANES(ext_portstatus) + 1;
2938 		udev->ssp_rate = get_port_ssp_rate(hub->hdev, ext_portstatus);
2939 	} else {
2940 		udev->rx_lanes = 1;
2941 		udev->tx_lanes = 1;
2942 		udev->ssp_rate = USB_SSP_GEN_UNKNOWN;
2943 	}
2944 	if (hub_is_wusb(hub))
2945 		udev->speed = USB_SPEED_WIRELESS;
2946 	else if (udev->ssp_rate != USB_SSP_GEN_UNKNOWN)
2947 		udev->speed = USB_SPEED_SUPER_PLUS;
2948 	else if (hub_is_superspeed(hub->hdev))
2949 		udev->speed = USB_SPEED_SUPER;
2950 	else if (portstatus & USB_PORT_STAT_HIGH_SPEED)
2951 		udev->speed = USB_SPEED_HIGH;
2952 	else if (portstatus & USB_PORT_STAT_LOW_SPEED)
2953 		udev->speed = USB_SPEED_LOW;
2954 	else
2955 		udev->speed = USB_SPEED_FULL;
2956 	return 0;
2957 }
2958 
2959 /* Handle port reset and port warm(BH) reset (for USB3 protocol ports) */
2960 static int hub_port_reset(struct usb_hub *hub, int port1,
2961 			struct usb_device *udev, unsigned int delay, bool warm)
2962 {
2963 	int i, status;
2964 	u16 portchange, portstatus;
2965 	struct usb_port *port_dev = hub->ports[port1 - 1];
2966 	int reset_recovery_time;
2967 
2968 	if (!hub_is_superspeed(hub->hdev)) {
2969 		if (warm) {
2970 			dev_err(hub->intfdev, "only USB3 hub support "
2971 						"warm reset\n");
2972 			return -EINVAL;
2973 		}
2974 		/* Block EHCI CF initialization during the port reset.
2975 		 * Some companion controllers don't like it when they mix.
2976 		 */
2977 		down_read(&ehci_cf_port_reset_rwsem);
2978 	} else if (!warm) {
2979 		/*
2980 		 * If the caller hasn't explicitly requested a warm reset,
2981 		 * double check and see if one is needed.
2982 		 */
2983 		if (usb_hub_port_status(hub, port1, &portstatus,
2984 					&portchange) == 0)
2985 			if (hub_port_warm_reset_required(hub, port1,
2986 							portstatus))
2987 				warm = true;
2988 	}
2989 	clear_bit(port1, hub->warm_reset_bits);
2990 
2991 	/* Reset the port */
2992 	for (i = 0; i < PORT_RESET_TRIES; i++) {
2993 		status = set_port_feature(hub->hdev, port1, (warm ?
2994 					USB_PORT_FEAT_BH_PORT_RESET :
2995 					USB_PORT_FEAT_RESET));
2996 		if (status == -ENODEV) {
2997 			;	/* The hub is gone */
2998 		} else if (status) {
2999 			dev_err(&port_dev->dev,
3000 					"cannot %sreset (err = %d)\n",
3001 					warm ? "warm " : "", status);
3002 		} else {
3003 			status = hub_port_wait_reset(hub, port1, udev, delay,
3004 								warm);
3005 			if (status && status != -ENOTCONN && status != -ENODEV)
3006 				dev_dbg(hub->intfdev,
3007 						"port_wait_reset: err = %d\n",
3008 						status);
3009 		}
3010 
3011 		/*
3012 		 * Check for disconnect or reset, and bail out after several
3013 		 * reset attempts to avoid warm reset loop.
3014 		 */
3015 		if (status == 0 || status == -ENOTCONN || status == -ENODEV ||
3016 		    (status == -EBUSY && i == PORT_RESET_TRIES - 1)) {
3017 			usb_clear_port_feature(hub->hdev, port1,
3018 					USB_PORT_FEAT_C_RESET);
3019 
3020 			if (!hub_is_superspeed(hub->hdev))
3021 				goto done;
3022 
3023 			usb_clear_port_feature(hub->hdev, port1,
3024 					USB_PORT_FEAT_C_BH_PORT_RESET);
3025 			usb_clear_port_feature(hub->hdev, port1,
3026 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3027 
3028 			if (udev)
3029 				usb_clear_port_feature(hub->hdev, port1,
3030 					USB_PORT_FEAT_C_CONNECTION);
3031 
3032 			/*
3033 			 * If a USB 3.0 device migrates from reset to an error
3034 			 * state, re-issue the warm reset.
3035 			 */
3036 			if (usb_hub_port_status(hub, port1,
3037 					&portstatus, &portchange) < 0)
3038 				goto done;
3039 
3040 			if (!hub_port_warm_reset_required(hub, port1,
3041 					portstatus))
3042 				goto done;
3043 
3044 			/*
3045 			 * If the port is in SS.Inactive or Compliance Mode, the
3046 			 * hot or warm reset failed.  Try another warm reset.
3047 			 */
3048 			if (!warm) {
3049 				dev_dbg(&port_dev->dev,
3050 						"hot reset failed, warm reset\n");
3051 				warm = true;
3052 			}
3053 		}
3054 
3055 		dev_dbg(&port_dev->dev,
3056 				"not enabled, trying %sreset again...\n",
3057 				warm ? "warm " : "");
3058 		delay = HUB_LONG_RESET_TIME;
3059 	}
3060 
3061 	dev_err(&port_dev->dev, "Cannot enable. Maybe the USB cable is bad?\n");
3062 
3063 done:
3064 	if (status == 0) {
3065 		if (port_dev->quirks & USB_PORT_QUIRK_FAST_ENUM)
3066 			usleep_range(10000, 12000);
3067 		else {
3068 			/* TRSTRCY = 10 ms; plus some extra */
3069 			reset_recovery_time = 10 + 40;
3070 
3071 			/* Hub needs extra delay after resetting its port. */
3072 			if (hub->hdev->quirks & USB_QUIRK_HUB_SLOW_RESET)
3073 				reset_recovery_time += 100;
3074 
3075 			msleep(reset_recovery_time);
3076 		}
3077 
3078 		if (udev) {
3079 			struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3080 
3081 			update_devnum(udev, 0);
3082 			/* The xHC may think the device is already reset,
3083 			 * so ignore the status.
3084 			 */
3085 			if (hcd->driver->reset_device)
3086 				hcd->driver->reset_device(hcd, udev);
3087 
3088 			usb_set_device_state(udev, USB_STATE_DEFAULT);
3089 		}
3090 	} else {
3091 		if (udev)
3092 			usb_set_device_state(udev, USB_STATE_NOTATTACHED);
3093 	}
3094 
3095 	if (!hub_is_superspeed(hub->hdev))
3096 		up_read(&ehci_cf_port_reset_rwsem);
3097 
3098 	return status;
3099 }
3100 
3101 /*
3102  * hub_port_stop_enumerate - stop USB enumeration or ignore port events
3103  * @hub: target hub
3104  * @port1: port num of the port
3105  * @retries: port retries number of hub_port_init()
3106  *
3107  * Return:
3108  *    true: ignore port actions/events or give up connection attempts.
3109  *    false: keep original behavior.
3110  *
3111  * This function will be based on retries to check whether the port which is
3112  * marked with early_stop attribute would stop enumeration or ignore events.
3113  *
3114  * Note:
3115  * This function didn't change anything if early_stop is not set, and it will
3116  * prevent all connection attempts when early_stop is set and the attempts of
3117  * the port are more than 1.
3118  */
3119 static bool hub_port_stop_enumerate(struct usb_hub *hub, int port1, int retries)
3120 {
3121 	struct usb_port *port_dev = hub->ports[port1 - 1];
3122 
3123 	if (port_dev->early_stop) {
3124 		if (port_dev->ignore_event)
3125 			return true;
3126 
3127 		/*
3128 		 * We want unsuccessful attempts to fail quickly.
3129 		 * Since some devices may need one failure during
3130 		 * port initialization, we allow two tries but no
3131 		 * more.
3132 		 */
3133 		if (retries < 2)
3134 			return false;
3135 
3136 		port_dev->ignore_event = 1;
3137 	} else
3138 		port_dev->ignore_event = 0;
3139 
3140 	return port_dev->ignore_event;
3141 }
3142 
3143 /* Check if a port is power on */
3144 int usb_port_is_power_on(struct usb_hub *hub, unsigned int portstatus)
3145 {
3146 	int ret = 0;
3147 
3148 	if (hub_is_superspeed(hub->hdev)) {
3149 		if (portstatus & USB_SS_PORT_STAT_POWER)
3150 			ret = 1;
3151 	} else {
3152 		if (portstatus & USB_PORT_STAT_POWER)
3153 			ret = 1;
3154 	}
3155 
3156 	return ret;
3157 }
3158 
3159 static void usb_lock_port(struct usb_port *port_dev)
3160 		__acquires(&port_dev->status_lock)
3161 {
3162 	mutex_lock(&port_dev->status_lock);
3163 	__acquire(&port_dev->status_lock);
3164 }
3165 
3166 static void usb_unlock_port(struct usb_port *port_dev)
3167 		__releases(&port_dev->status_lock)
3168 {
3169 	mutex_unlock(&port_dev->status_lock);
3170 	__release(&port_dev->status_lock);
3171 }
3172 
3173 #ifdef	CONFIG_PM
3174 
3175 /* Check if a port is suspended(USB2.0 port) or in U3 state(USB3.0 port) */
3176 static int port_is_suspended(struct usb_hub *hub, unsigned portstatus)
3177 {
3178 	int ret = 0;
3179 
3180 	if (hub_is_superspeed(hub->hdev)) {
3181 		if ((portstatus & USB_PORT_STAT_LINK_STATE)
3182 				== USB_SS_PORT_LS_U3)
3183 			ret = 1;
3184 	} else {
3185 		if (portstatus & USB_PORT_STAT_SUSPEND)
3186 			ret = 1;
3187 	}
3188 
3189 	return ret;
3190 }
3191 
3192 /* Determine whether the device on a port is ready for a normal resume,
3193  * is ready for a reset-resume, or should be disconnected.
3194  */
3195 static int check_port_resume_type(struct usb_device *udev,
3196 		struct usb_hub *hub, int port1,
3197 		int status, u16 portchange, u16 portstatus)
3198 {
3199 	struct usb_port *port_dev = hub->ports[port1 - 1];
3200 	int retries = 3;
3201 
3202  retry:
3203 	/* Is a warm reset needed to recover the connection? */
3204 	if (status == 0 && udev->reset_resume
3205 		&& hub_port_warm_reset_required(hub, port1, portstatus)) {
3206 		/* pass */;
3207 	}
3208 	/* Is the device still present? */
3209 	else if (status || port_is_suspended(hub, portstatus) ||
3210 			!usb_port_is_power_on(hub, portstatus)) {
3211 		if (status >= 0)
3212 			status = -ENODEV;
3213 	} else if (!(portstatus & USB_PORT_STAT_CONNECTION)) {
3214 		if (retries--) {
3215 			usleep_range(200, 300);
3216 			status = usb_hub_port_status(hub, port1, &portstatus,
3217 							     &portchange);
3218 			goto retry;
3219 		}
3220 		status = -ENODEV;
3221 	}
3222 
3223 	/* Can't do a normal resume if the port isn't enabled,
3224 	 * so try a reset-resume instead.
3225 	 */
3226 	else if (!(portstatus & USB_PORT_STAT_ENABLE) && !udev->reset_resume) {
3227 		if (udev->persist_enabled)
3228 			udev->reset_resume = 1;
3229 		else
3230 			status = -ENODEV;
3231 	}
3232 
3233 	if (status) {
3234 		dev_dbg(&port_dev->dev, "status %04x.%04x after resume, %d\n",
3235 				portchange, portstatus, status);
3236 	} else if (udev->reset_resume) {
3237 
3238 		/* Late port handoff can set status-change bits */
3239 		if (portchange & USB_PORT_STAT_C_CONNECTION)
3240 			usb_clear_port_feature(hub->hdev, port1,
3241 					USB_PORT_FEAT_C_CONNECTION);
3242 		if (portchange & USB_PORT_STAT_C_ENABLE)
3243 			usb_clear_port_feature(hub->hdev, port1,
3244 					USB_PORT_FEAT_C_ENABLE);
3245 
3246 		/*
3247 		 * Whatever made this reset-resume necessary may have
3248 		 * turned on the port1 bit in hub->change_bits.  But after
3249 		 * a successful reset-resume we want the bit to be clear;
3250 		 * if it was on it would indicate that something happened
3251 		 * following the reset-resume.
3252 		 */
3253 		clear_bit(port1, hub->change_bits);
3254 	}
3255 
3256 	return status;
3257 }
3258 
3259 int usb_disable_ltm(struct usb_device *udev)
3260 {
3261 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3262 
3263 	/* Check if the roothub and device supports LTM. */
3264 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3265 			!usb_device_supports_ltm(udev))
3266 		return 0;
3267 
3268 	/* Clear Feature LTM Enable can only be sent if the device is
3269 	 * configured.
3270 	 */
3271 	if (!udev->actconfig)
3272 		return 0;
3273 
3274 	return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3275 			USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3276 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3277 			USB_CTRL_SET_TIMEOUT);
3278 }
3279 EXPORT_SYMBOL_GPL(usb_disable_ltm);
3280 
3281 void usb_enable_ltm(struct usb_device *udev)
3282 {
3283 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
3284 
3285 	/* Check if the roothub and device supports LTM. */
3286 	if (!usb_device_supports_ltm(hcd->self.root_hub) ||
3287 			!usb_device_supports_ltm(udev))
3288 		return;
3289 
3290 	/* Set Feature LTM Enable can only be sent if the device is
3291 	 * configured.
3292 	 */
3293 	if (!udev->actconfig)
3294 		return;
3295 
3296 	usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3297 			USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3298 			USB_DEVICE_LTM_ENABLE, 0, NULL, 0,
3299 			USB_CTRL_SET_TIMEOUT);
3300 }
3301 EXPORT_SYMBOL_GPL(usb_enable_ltm);
3302 
3303 /*
3304  * usb_enable_remote_wakeup - enable remote wakeup for a device
3305  * @udev: target device
3306  *
3307  * For USB-2 devices: Set the device's remote wakeup feature.
3308  *
3309  * For USB-3 devices: Assume there's only one function on the device and
3310  * enable remote wake for the first interface.  FIXME if the interface
3311  * association descriptor shows there's more than one function.
3312  */
3313 static int usb_enable_remote_wakeup(struct usb_device *udev)
3314 {
3315 	if (udev->speed < USB_SPEED_SUPER)
3316 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3317 				USB_REQ_SET_FEATURE, USB_RECIP_DEVICE,
3318 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3319 				USB_CTRL_SET_TIMEOUT);
3320 	else
3321 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3322 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3323 				USB_INTRF_FUNC_SUSPEND,
3324 				USB_INTRF_FUNC_SUSPEND_RW |
3325 					USB_INTRF_FUNC_SUSPEND_LP,
3326 				NULL, 0, USB_CTRL_SET_TIMEOUT);
3327 }
3328 
3329 /*
3330  * usb_disable_remote_wakeup - disable remote wakeup for a device
3331  * @udev: target device
3332  *
3333  * For USB-2 devices: Clear the device's remote wakeup feature.
3334  *
3335  * For USB-3 devices: Assume there's only one function on the device and
3336  * disable remote wake for the first interface.  FIXME if the interface
3337  * association descriptor shows there's more than one function.
3338  */
3339 static int usb_disable_remote_wakeup(struct usb_device *udev)
3340 {
3341 	if (udev->speed < USB_SPEED_SUPER)
3342 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3343 				USB_REQ_CLEAR_FEATURE, USB_RECIP_DEVICE,
3344 				USB_DEVICE_REMOTE_WAKEUP, 0, NULL, 0,
3345 				USB_CTRL_SET_TIMEOUT);
3346 	else
3347 		return usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
3348 				USB_REQ_SET_FEATURE, USB_RECIP_INTERFACE,
3349 				USB_INTRF_FUNC_SUSPEND,	0, NULL, 0,
3350 				USB_CTRL_SET_TIMEOUT);
3351 }
3352 
3353 /* Count of wakeup-enabled devices at or below udev */
3354 unsigned usb_wakeup_enabled_descendants(struct usb_device *udev)
3355 {
3356 	struct usb_hub *hub = usb_hub_to_struct_hub(udev);
3357 
3358 	return udev->do_remote_wakeup +
3359 			(hub ? hub->wakeup_enabled_descendants : 0);
3360 }
3361 EXPORT_SYMBOL_GPL(usb_wakeup_enabled_descendants);
3362 
3363 /*
3364  * usb_port_suspend - suspend a usb device's upstream port
3365  * @udev: device that's no longer in active use, not a root hub
3366  * Context: must be able to sleep; device not locked; pm locks held
3367  *
3368  * Suspends a USB device that isn't in active use, conserving power.
3369  * Devices may wake out of a suspend, if anything important happens,
3370  * using the remote wakeup mechanism.  They may also be taken out of
3371  * suspend by the host, using usb_port_resume().  It's also routine
3372  * to disconnect devices while they are suspended.
3373  *
3374  * This only affects the USB hardware for a device; its interfaces
3375  * (and, for hubs, child devices) must already have been suspended.
3376  *
3377  * Selective port suspend reduces power; most suspended devices draw
3378  * less than 500 uA.  It's also used in OTG, along with remote wakeup.
3379  * All devices below the suspended port are also suspended.
3380  *
3381  * Devices leave suspend state when the host wakes them up.  Some devices
3382  * also support "remote wakeup", where the device can activate the USB
3383  * tree above them to deliver data, such as a keypress or packet.  In
3384  * some cases, this wakes the USB host.
3385  *
3386  * Suspending OTG devices may trigger HNP, if that's been enabled
3387  * between a pair of dual-role devices.  That will change roles, such
3388  * as from A-Host to A-Peripheral or from B-Host back to B-Peripheral.
3389  *
3390  * Devices on USB hub ports have only one "suspend" state, corresponding
3391  * to ACPI D2, "may cause the device to lose some context".
3392  * State transitions include:
3393  *
3394  *   - suspend, resume ... when the VBUS power link stays live
3395  *   - suspend, disconnect ... VBUS lost
3396  *
3397  * Once VBUS drop breaks the circuit, the port it's using has to go through
3398  * normal re-enumeration procedures, starting with enabling VBUS power.
3399  * Other than re-initializing the hub (plug/unplug, except for root hubs),
3400  * Linux (2.6) currently has NO mechanisms to initiate that:  no hub_wq
3401  * timer, no SRP, no requests through sysfs.
3402  *
3403  * If Runtime PM isn't enabled or used, non-SuperSpeed devices may not get
3404  * suspended until their bus goes into global suspend (i.e., the root
3405  * hub is suspended).  Nevertheless, we change @udev->state to
3406  * USB_STATE_SUSPENDED as this is the device's "logical" state.  The actual
3407  * upstream port setting is stored in @udev->port_is_suspended.
3408  *
3409  * Returns 0 on success, else negative errno.
3410  */
3411 int usb_port_suspend(struct usb_device *udev, pm_message_t msg)
3412 {
3413 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3414 	struct usb_port *port_dev = hub->ports[udev->portnum - 1];
3415 	int		port1 = udev->portnum;
3416 	int		status;
3417 	bool		really_suspend = true;
3418 
3419 	usb_lock_port(port_dev);
3420 
3421 	/* enable remote wakeup when appropriate; this lets the device
3422 	 * wake up the upstream hub (including maybe the root hub).
3423 	 *
3424 	 * NOTE:  OTG devices may issue remote wakeup (or SRP) even when
3425 	 * we don't explicitly enable it here.
3426 	 */
3427 	if (udev->do_remote_wakeup) {
3428 		status = usb_enable_remote_wakeup(udev);
3429 		if (status) {
3430 			dev_dbg(&udev->dev, "won't remote wakeup, status %d\n",
3431 					status);
3432 			/* bail if autosuspend is requested */
3433 			if (PMSG_IS_AUTO(msg))
3434 				goto err_wakeup;
3435 		}
3436 	}
3437 
3438 	/* disable USB2 hardware LPM */
3439 	usb_disable_usb2_hardware_lpm(udev);
3440 
3441 	if (usb_disable_ltm(udev)) {
3442 		dev_err(&udev->dev, "Failed to disable LTM before suspend\n");
3443 		status = -ENOMEM;
3444 		if (PMSG_IS_AUTO(msg))
3445 			goto err_ltm;
3446 	}
3447 
3448 	/* see 7.1.7.6 */
3449 	if (hub_is_superspeed(hub->hdev))
3450 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U3);
3451 
3452 	/*
3453 	 * For system suspend, we do not need to enable the suspend feature
3454 	 * on individual USB-2 ports.  The devices will automatically go
3455 	 * into suspend a few ms after the root hub stops sending packets.
3456 	 * The USB 2.0 spec calls this "global suspend".
3457 	 *
3458 	 * However, many USB hubs have a bug: They don't relay wakeup requests
3459 	 * from a downstream port if the port's suspend feature isn't on.
3460 	 * Therefore we will turn on the suspend feature if udev or any of its
3461 	 * descendants is enabled for remote wakeup.
3462 	 */
3463 	else if (PMSG_IS_AUTO(msg) || usb_wakeup_enabled_descendants(udev) > 0)
3464 		status = set_port_feature(hub->hdev, port1,
3465 				USB_PORT_FEAT_SUSPEND);
3466 	else {
3467 		really_suspend = false;
3468 		status = 0;
3469 	}
3470 	if (status) {
3471 		/* Check if the port has been suspended for the timeout case
3472 		 * to prevent the suspended port from incorrect handling.
3473 		 */
3474 		if (status == -ETIMEDOUT) {
3475 			int ret;
3476 			u16 portstatus, portchange;
3477 
3478 			portstatus = portchange = 0;
3479 			ret = usb_hub_port_status(hub, port1, &portstatus,
3480 					&portchange);
3481 
3482 			dev_dbg(&port_dev->dev,
3483 				"suspend timeout, status %04x\n", portstatus);
3484 
3485 			if (ret == 0 && port_is_suspended(hub, portstatus)) {
3486 				status = 0;
3487 				goto suspend_done;
3488 			}
3489 		}
3490 
3491 		dev_dbg(&port_dev->dev, "can't suspend, status %d\n", status);
3492 
3493 		/* Try to enable USB3 LTM again */
3494 		usb_enable_ltm(udev);
3495  err_ltm:
3496 		/* Try to enable USB2 hardware LPM again */
3497 		usb_enable_usb2_hardware_lpm(udev);
3498 
3499 		if (udev->do_remote_wakeup)
3500 			(void) usb_disable_remote_wakeup(udev);
3501  err_wakeup:
3502 
3503 		/* System sleep transitions should never fail */
3504 		if (!PMSG_IS_AUTO(msg))
3505 			status = 0;
3506 	} else {
3507  suspend_done:
3508 		dev_dbg(&udev->dev, "usb %ssuspend, wakeup %d\n",
3509 				(PMSG_IS_AUTO(msg) ? "auto-" : ""),
3510 				udev->do_remote_wakeup);
3511 		if (really_suspend) {
3512 			udev->port_is_suspended = 1;
3513 
3514 			/* device has up to 10 msec to fully suspend */
3515 			msleep(10);
3516 		}
3517 		usb_set_device_state(udev, USB_STATE_SUSPENDED);
3518 	}
3519 
3520 	if (status == 0 && !udev->do_remote_wakeup && udev->persist_enabled
3521 			&& test_and_clear_bit(port1, hub->child_usage_bits))
3522 		pm_runtime_put_sync(&port_dev->dev);
3523 
3524 	usb_mark_last_busy(hub->hdev);
3525 
3526 	usb_unlock_port(port_dev);
3527 	return status;
3528 }
3529 
3530 /*
3531  * If the USB "suspend" state is in use (rather than "global suspend"),
3532  * many devices will be individually taken out of suspend state using
3533  * special "resume" signaling.  This routine kicks in shortly after
3534  * hardware resume signaling is finished, either because of selective
3535  * resume (by host) or remote wakeup (by device) ... now see what changed
3536  * in the tree that's rooted at this device.
3537  *
3538  * If @udev->reset_resume is set then the device is reset before the
3539  * status check is done.
3540  */
3541 static int finish_port_resume(struct usb_device *udev)
3542 {
3543 	int	status = 0;
3544 	u16	devstatus = 0;
3545 
3546 	/* caller owns the udev device lock */
3547 	dev_dbg(&udev->dev, "%s\n",
3548 		udev->reset_resume ? "finish reset-resume" : "finish resume");
3549 
3550 	/* usb ch9 identifies four variants of SUSPENDED, based on what
3551 	 * state the device resumes to.  Linux currently won't see the
3552 	 * first two on the host side; they'd be inside hub_port_init()
3553 	 * during many timeouts, but hub_wq can't suspend until later.
3554 	 */
3555 	usb_set_device_state(udev, udev->actconfig
3556 			? USB_STATE_CONFIGURED
3557 			: USB_STATE_ADDRESS);
3558 
3559 	/* 10.5.4.5 says not to reset a suspended port if the attached
3560 	 * device is enabled for remote wakeup.  Hence the reset
3561 	 * operation is carried out here, after the port has been
3562 	 * resumed.
3563 	 */
3564 	if (udev->reset_resume) {
3565 		/*
3566 		 * If the device morphs or switches modes when it is reset,
3567 		 * we don't want to perform a reset-resume.  We'll fail the
3568 		 * resume, which will cause a logical disconnect, and then
3569 		 * the device will be rediscovered.
3570 		 */
3571  retry_reset_resume:
3572 		if (udev->quirks & USB_QUIRK_RESET)
3573 			status = -ENODEV;
3574 		else
3575 			status = usb_reset_and_verify_device(udev);
3576 	}
3577 
3578 	/* 10.5.4.5 says be sure devices in the tree are still there.
3579 	 * For now let's assume the device didn't go crazy on resume,
3580 	 * and device drivers will know about any resume quirks.
3581 	 */
3582 	if (status == 0) {
3583 		devstatus = 0;
3584 		status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0, &devstatus);
3585 
3586 		/* If a normal resume failed, try doing a reset-resume */
3587 		if (status && !udev->reset_resume && udev->persist_enabled) {
3588 			dev_dbg(&udev->dev, "retry with reset-resume\n");
3589 			udev->reset_resume = 1;
3590 			goto retry_reset_resume;
3591 		}
3592 	}
3593 
3594 	if (status) {
3595 		dev_dbg(&udev->dev, "gone after usb resume? status %d\n",
3596 				status);
3597 	/*
3598 	 * There are a few quirky devices which violate the standard
3599 	 * by claiming to have remote wakeup enabled after a reset,
3600 	 * which crash if the feature is cleared, hence check for
3601 	 * udev->reset_resume
3602 	 */
3603 	} else if (udev->actconfig && !udev->reset_resume) {
3604 		if (udev->speed < USB_SPEED_SUPER) {
3605 			if (devstatus & (1 << USB_DEVICE_REMOTE_WAKEUP))
3606 				status = usb_disable_remote_wakeup(udev);
3607 		} else {
3608 			status = usb_get_std_status(udev, USB_RECIP_INTERFACE, 0,
3609 					&devstatus);
3610 			if (!status && devstatus & (USB_INTRF_STAT_FUNC_RW_CAP
3611 					| USB_INTRF_STAT_FUNC_RW))
3612 				status = usb_disable_remote_wakeup(udev);
3613 		}
3614 
3615 		if (status)
3616 			dev_dbg(&udev->dev,
3617 				"disable remote wakeup, status %d\n",
3618 				status);
3619 		status = 0;
3620 	}
3621 	return status;
3622 }
3623 
3624 /*
3625  * There are some SS USB devices which take longer time for link training.
3626  * XHCI specs 4.19.4 says that when Link training is successful, port
3627  * sets CCS bit to 1. So if SW reads port status before successful link
3628  * training, then it will not find device to be present.
3629  * USB Analyzer log with such buggy devices show that in some cases
3630  * device switch on the RX termination after long delay of host enabling
3631  * the VBUS. In few other cases it has been seen that device fails to
3632  * negotiate link training in first attempt. It has been
3633  * reported till now that few devices take as long as 2000 ms to train
3634  * the link after host enabling its VBUS and termination. Following
3635  * routine implements a 2000 ms timeout for link training. If in a case
3636  * link trains before timeout, loop will exit earlier.
3637  *
3638  * There are also some 2.0 hard drive based devices and 3.0 thumb
3639  * drives that, when plugged into a 2.0 only port, take a long
3640  * time to set CCS after VBUS enable.
3641  *
3642  * FIXME: If a device was connected before suspend, but was removed
3643  * while system was asleep, then the loop in the following routine will
3644  * only exit at timeout.
3645  *
3646  * This routine should only be called when persist is enabled.
3647  */
3648 static int wait_for_connected(struct usb_device *udev,
3649 		struct usb_hub *hub, int port1,
3650 		u16 *portchange, u16 *portstatus)
3651 {
3652 	int status = 0, delay_ms = 0;
3653 
3654 	while (delay_ms < 2000) {
3655 		if (status || *portstatus & USB_PORT_STAT_CONNECTION)
3656 			break;
3657 		if (!usb_port_is_power_on(hub, *portstatus)) {
3658 			status = -ENODEV;
3659 			break;
3660 		}
3661 		msleep(20);
3662 		delay_ms += 20;
3663 		status = usb_hub_port_status(hub, port1, portstatus, portchange);
3664 	}
3665 	dev_dbg(&udev->dev, "Waited %dms for CONNECT\n", delay_ms);
3666 	return status;
3667 }
3668 
3669 /*
3670  * usb_port_resume - re-activate a suspended usb device's upstream port
3671  * @udev: device to re-activate, not a root hub
3672  * Context: must be able to sleep; device not locked; pm locks held
3673  *
3674  * This will re-activate the suspended device, increasing power usage
3675  * while letting drivers communicate again with its endpoints.
3676  * USB resume explicitly guarantees that the power session between
3677  * the host and the device is the same as it was when the device
3678  * suspended.
3679  *
3680  * If @udev->reset_resume is set then this routine won't check that the
3681  * port is still enabled.  Furthermore, finish_port_resume() above will
3682  * reset @udev.  The end result is that a broken power session can be
3683  * recovered and @udev will appear to persist across a loss of VBUS power.
3684  *
3685  * For example, if a host controller doesn't maintain VBUS suspend current
3686  * during a system sleep or is reset when the system wakes up, all the USB
3687  * power sessions below it will be broken.  This is especially troublesome
3688  * for mass-storage devices containing mounted filesystems, since the
3689  * device will appear to have disconnected and all the memory mappings
3690  * to it will be lost.  Using the USB_PERSIST facility, the device can be
3691  * made to appear as if it had not disconnected.
3692  *
3693  * This facility can be dangerous.  Although usb_reset_and_verify_device() makes
3694  * every effort to insure that the same device is present after the
3695  * reset as before, it cannot provide a 100% guarantee.  Furthermore it's
3696  * quite possible for a device to remain unaltered but its media to be
3697  * changed.  If the user replaces a flash memory card while the system is
3698  * asleep, he will have only himself to blame when the filesystem on the
3699  * new card is corrupted and the system crashes.
3700  *
3701  * Returns 0 on success, else negative errno.
3702  */
3703 int usb_port_resume(struct usb_device *udev, pm_message_t msg)
3704 {
3705 	struct usb_hub	*hub = usb_hub_to_struct_hub(udev->parent);
3706 	struct usb_port *port_dev = hub->ports[udev->portnum  - 1];
3707 	int		port1 = udev->portnum;
3708 	int		status;
3709 	u16		portchange, portstatus;
3710 
3711 	if (!test_and_set_bit(port1, hub->child_usage_bits)) {
3712 		status = pm_runtime_resume_and_get(&port_dev->dev);
3713 		if (status < 0) {
3714 			dev_dbg(&udev->dev, "can't resume usb port, status %d\n",
3715 					status);
3716 			return status;
3717 		}
3718 	}
3719 
3720 	usb_lock_port(port_dev);
3721 
3722 	/* Skip the initial Clear-Suspend step for a remote wakeup */
3723 	status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3724 	if (status == 0 && !port_is_suspended(hub, portstatus)) {
3725 		if (portchange & USB_PORT_STAT_C_SUSPEND)
3726 			pm_wakeup_event(&udev->dev, 0);
3727 		goto SuspendCleared;
3728 	}
3729 
3730 	/* see 7.1.7.7; affects power usage, but not budgeting */
3731 	if (hub_is_superspeed(hub->hdev))
3732 		status = hub_set_port_link_state(hub, port1, USB_SS_PORT_LS_U0);
3733 	else
3734 		status = usb_clear_port_feature(hub->hdev,
3735 				port1, USB_PORT_FEAT_SUSPEND);
3736 	if (status) {
3737 		dev_dbg(&port_dev->dev, "can't resume, status %d\n", status);
3738 	} else {
3739 		/* drive resume for USB_RESUME_TIMEOUT msec */
3740 		dev_dbg(&udev->dev, "usb %sresume\n",
3741 				(PMSG_IS_AUTO(msg) ? "auto-" : ""));
3742 		msleep(USB_RESUME_TIMEOUT);
3743 
3744 		/* Virtual root hubs can trigger on GET_PORT_STATUS to
3745 		 * stop resume signaling.  Then finish the resume
3746 		 * sequence.
3747 		 */
3748 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3749 	}
3750 
3751  SuspendCleared:
3752 	if (status == 0) {
3753 		udev->port_is_suspended = 0;
3754 		if (hub_is_superspeed(hub->hdev)) {
3755 			if (portchange & USB_PORT_STAT_C_LINK_STATE)
3756 				usb_clear_port_feature(hub->hdev, port1,
3757 					USB_PORT_FEAT_C_PORT_LINK_STATE);
3758 		} else {
3759 			if (portchange & USB_PORT_STAT_C_SUSPEND)
3760 				usb_clear_port_feature(hub->hdev, port1,
3761 						USB_PORT_FEAT_C_SUSPEND);
3762 		}
3763 
3764 		/* TRSMRCY = 10 msec */
3765 		msleep(10);
3766 	}
3767 
3768 	if (udev->persist_enabled)
3769 		status = wait_for_connected(udev, hub, port1, &portchange,
3770 				&portstatus);
3771 
3772 	status = check_port_resume_type(udev,
3773 			hub, port1, status, portchange, portstatus);
3774 	if (status == 0)
3775 		status = finish_port_resume(udev);
3776 	if (status < 0) {
3777 		dev_dbg(&udev->dev, "can't resume, status %d\n", status);
3778 		hub_port_logical_disconnect(hub, port1);
3779 	} else  {
3780 		/* Try to enable USB2 hardware LPM */
3781 		usb_enable_usb2_hardware_lpm(udev);
3782 
3783 		/* Try to enable USB3 LTM */
3784 		usb_enable_ltm(udev);
3785 	}
3786 
3787 	usb_unlock_port(port_dev);
3788 
3789 	return status;
3790 }
3791 
3792 int usb_remote_wakeup(struct usb_device *udev)
3793 {
3794 	int	status = 0;
3795 
3796 	usb_lock_device(udev);
3797 	if (udev->state == USB_STATE_SUSPENDED) {
3798 		dev_dbg(&udev->dev, "usb %sresume\n", "wakeup-");
3799 		status = usb_autoresume_device(udev);
3800 		if (status == 0) {
3801 			/* Let the drivers do their thing, then... */
3802 			usb_autosuspend_device(udev);
3803 		}
3804 	}
3805 	usb_unlock_device(udev);
3806 	return status;
3807 }
3808 
3809 /* Returns 1 if there was a remote wakeup and a connect status change. */
3810 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
3811 		u16 portstatus, u16 portchange)
3812 		__must_hold(&port_dev->status_lock)
3813 {
3814 	struct usb_port *port_dev = hub->ports[port - 1];
3815 	struct usb_device *hdev;
3816 	struct usb_device *udev;
3817 	int connect_change = 0;
3818 	u16 link_state;
3819 	int ret;
3820 
3821 	hdev = hub->hdev;
3822 	udev = port_dev->child;
3823 	if (!hub_is_superspeed(hdev)) {
3824 		if (!(portchange & USB_PORT_STAT_C_SUSPEND))
3825 			return 0;
3826 		usb_clear_port_feature(hdev, port, USB_PORT_FEAT_C_SUSPEND);
3827 	} else {
3828 		link_state = portstatus & USB_PORT_STAT_LINK_STATE;
3829 		if (!udev || udev->state != USB_STATE_SUSPENDED ||
3830 				(link_state != USB_SS_PORT_LS_U0 &&
3831 				 link_state != USB_SS_PORT_LS_U1 &&
3832 				 link_state != USB_SS_PORT_LS_U2))
3833 			return 0;
3834 	}
3835 
3836 	if (udev) {
3837 		/* TRSMRCY = 10 msec */
3838 		msleep(10);
3839 
3840 		usb_unlock_port(port_dev);
3841 		ret = usb_remote_wakeup(udev);
3842 		usb_lock_port(port_dev);
3843 		if (ret < 0)
3844 			connect_change = 1;
3845 	} else {
3846 		ret = -ENODEV;
3847 		hub_port_disable(hub, port, 1);
3848 	}
3849 	dev_dbg(&port_dev->dev, "resume, status %d\n", ret);
3850 	return connect_change;
3851 }
3852 
3853 static int check_ports_changed(struct usb_hub *hub)
3854 {
3855 	int port1;
3856 
3857 	for (port1 = 1; port1 <= hub->hdev->maxchild; ++port1) {
3858 		u16 portstatus, portchange;
3859 		int status;
3860 
3861 		status = usb_hub_port_status(hub, port1, &portstatus, &portchange);
3862 		if (!status && portchange)
3863 			return 1;
3864 	}
3865 	return 0;
3866 }
3867 
3868 static int hub_suspend(struct usb_interface *intf, pm_message_t msg)
3869 {
3870 	struct usb_hub		*hub = usb_get_intfdata(intf);
3871 	struct usb_device	*hdev = hub->hdev;
3872 	unsigned		port1;
3873 
3874 	/*
3875 	 * Warn if children aren't already suspended.
3876 	 * Also, add up the number of wakeup-enabled descendants.
3877 	 */
3878 	hub->wakeup_enabled_descendants = 0;
3879 	for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3880 		struct usb_port *port_dev = hub->ports[port1 - 1];
3881 		struct usb_device *udev = port_dev->child;
3882 
3883 		if (udev && udev->can_submit) {
3884 			dev_warn(&port_dev->dev, "device %s not suspended yet\n",
3885 					dev_name(&udev->dev));
3886 			if (PMSG_IS_AUTO(msg))
3887 				return -EBUSY;
3888 		}
3889 		if (udev)
3890 			hub->wakeup_enabled_descendants +=
3891 					usb_wakeup_enabled_descendants(udev);
3892 	}
3893 
3894 	if (hdev->do_remote_wakeup && hub->quirk_check_port_auto_suspend) {
3895 		/* check if there are changes pending on hub ports */
3896 		if (check_ports_changed(hub)) {
3897 			if (PMSG_IS_AUTO(msg))
3898 				return -EBUSY;
3899 			pm_wakeup_event(&hdev->dev, 2000);
3900 		}
3901 	}
3902 
3903 	if (hub_is_superspeed(hdev) && hdev->do_remote_wakeup) {
3904 		/* Enable hub to send remote wakeup for all ports. */
3905 		for (port1 = 1; port1 <= hdev->maxchild; port1++) {
3906 			set_port_feature(hdev,
3907 					 port1 |
3908 					 USB_PORT_FEAT_REMOTE_WAKE_CONNECT |
3909 					 USB_PORT_FEAT_REMOTE_WAKE_DISCONNECT |
3910 					 USB_PORT_FEAT_REMOTE_WAKE_OVER_CURRENT,
3911 					 USB_PORT_FEAT_REMOTE_WAKE_MASK);
3912 		}
3913 	}
3914 
3915 	dev_dbg(&intf->dev, "%s\n", __func__);
3916 
3917 	/* stop hub_wq and related activity */
3918 	hub_quiesce(hub, HUB_SUSPEND);
3919 	return 0;
3920 }
3921 
3922 /* Report wakeup requests from the ports of a resuming root hub */
3923 static void report_wakeup_requests(struct usb_hub *hub)
3924 {
3925 	struct usb_device	*hdev = hub->hdev;
3926 	struct usb_device	*udev;
3927 	struct usb_hcd		*hcd;
3928 	unsigned long		resuming_ports;
3929 	int			i;
3930 
3931 	if (hdev->parent)
3932 		return;		/* Not a root hub */
3933 
3934 	hcd = bus_to_hcd(hdev->bus);
3935 	if (hcd->driver->get_resuming_ports) {
3936 
3937 		/*
3938 		 * The get_resuming_ports() method returns a bitmap (origin 0)
3939 		 * of ports which have started wakeup signaling but have not
3940 		 * yet finished resuming.  During system resume we will
3941 		 * resume all the enabled ports, regardless of any wakeup
3942 		 * signals, which means the wakeup requests would be lost.
3943 		 * To prevent this, report them to the PM core here.
3944 		 */
3945 		resuming_ports = hcd->driver->get_resuming_ports(hcd);
3946 		for (i = 0; i < hdev->maxchild; ++i) {
3947 			if (test_bit(i, &resuming_ports)) {
3948 				udev = hub->ports[i]->child;
3949 				if (udev)
3950 					pm_wakeup_event(&udev->dev, 0);
3951 			}
3952 		}
3953 	}
3954 }
3955 
3956 static int hub_resume(struct usb_interface *intf)
3957 {
3958 	struct usb_hub *hub = usb_get_intfdata(intf);
3959 
3960 	dev_dbg(&intf->dev, "%s\n", __func__);
3961 	hub_activate(hub, HUB_RESUME);
3962 
3963 	/*
3964 	 * This should be called only for system resume, not runtime resume.
3965 	 * We can't tell the difference here, so some wakeup requests will be
3966 	 * reported at the wrong time or more than once.  This shouldn't
3967 	 * matter much, so long as they do get reported.
3968 	 */
3969 	report_wakeup_requests(hub);
3970 	return 0;
3971 }
3972 
3973 static int hub_reset_resume(struct usb_interface *intf)
3974 {
3975 	struct usb_hub *hub = usb_get_intfdata(intf);
3976 
3977 	dev_dbg(&intf->dev, "%s\n", __func__);
3978 	hub_activate(hub, HUB_RESET_RESUME);
3979 	return 0;
3980 }
3981 
3982 /**
3983  * usb_root_hub_lost_power - called by HCD if the root hub lost Vbus power
3984  * @rhdev: struct usb_device for the root hub
3985  *
3986  * The USB host controller driver calls this function when its root hub
3987  * is resumed and Vbus power has been interrupted or the controller
3988  * has been reset.  The routine marks @rhdev as having lost power.
3989  * When the hub driver is resumed it will take notice and carry out
3990  * power-session recovery for all the "USB-PERSIST"-enabled child devices;
3991  * the others will be disconnected.
3992  */
3993 void usb_root_hub_lost_power(struct usb_device *rhdev)
3994 {
3995 	dev_notice(&rhdev->dev, "root hub lost power or was reset\n");
3996 	rhdev->reset_resume = 1;
3997 }
3998 EXPORT_SYMBOL_GPL(usb_root_hub_lost_power);
3999 
4000 static const char * const usb3_lpm_names[]  = {
4001 	"U0",
4002 	"U1",
4003 	"U2",
4004 	"U3",
4005 };
4006 
4007 /*
4008  * Send a Set SEL control transfer to the device, prior to enabling
4009  * device-initiated U1 or U2.  This lets the device know the exit latencies from
4010  * the time the device initiates a U1 or U2 exit, to the time it will receive a
4011  * packet from the host.
4012  *
4013  * This function will fail if the SEL or PEL values for udev are greater than
4014  * the maximum allowed values for the link state to be enabled.
4015  */
4016 static int usb_req_set_sel(struct usb_device *udev)
4017 {
4018 	struct usb_set_sel_req *sel_values;
4019 	unsigned long long u1_sel;
4020 	unsigned long long u1_pel;
4021 	unsigned long long u2_sel;
4022 	unsigned long long u2_pel;
4023 	int ret;
4024 
4025 	if (!udev->parent || udev->speed < USB_SPEED_SUPER || !udev->lpm_capable)
4026 		return 0;
4027 
4028 	/* Convert SEL and PEL stored in ns to us */
4029 	u1_sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4030 	u1_pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
4031 	u2_sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4032 	u2_pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
4033 
4034 	/*
4035 	 * Make sure that the calculated SEL and PEL values for the link
4036 	 * state we're enabling aren't bigger than the max SEL/PEL
4037 	 * value that will fit in the SET SEL control transfer.
4038 	 * Otherwise the device would get an incorrect idea of the exit
4039 	 * latency for the link state, and could start a device-initiated
4040 	 * U1/U2 when the exit latencies are too high.
4041 	 */
4042 	if (u1_sel > USB3_LPM_MAX_U1_SEL_PEL ||
4043 	    u1_pel > USB3_LPM_MAX_U1_SEL_PEL ||
4044 	    u2_sel > USB3_LPM_MAX_U2_SEL_PEL ||
4045 	    u2_pel > USB3_LPM_MAX_U2_SEL_PEL) {
4046 		dev_dbg(&udev->dev, "Device-initiated U1/U2 disabled due to long SEL or PEL\n");
4047 		return -EINVAL;
4048 	}
4049 
4050 	/*
4051 	 * usb_enable_lpm() can be called as part of a failed device reset,
4052 	 * which may be initiated by an error path of a mass storage driver.
4053 	 * Therefore, use GFP_NOIO.
4054 	 */
4055 	sel_values = kmalloc(sizeof *(sel_values), GFP_NOIO);
4056 	if (!sel_values)
4057 		return -ENOMEM;
4058 
4059 	sel_values->u1_sel = u1_sel;
4060 	sel_values->u1_pel = u1_pel;
4061 	sel_values->u2_sel = cpu_to_le16(u2_sel);
4062 	sel_values->u2_pel = cpu_to_le16(u2_pel);
4063 
4064 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4065 			USB_REQ_SET_SEL,
4066 			USB_RECIP_DEVICE,
4067 			0, 0,
4068 			sel_values, sizeof *(sel_values),
4069 			USB_CTRL_SET_TIMEOUT);
4070 	kfree(sel_values);
4071 
4072 	if (ret > 0)
4073 		udev->lpm_devinit_allow = 1;
4074 
4075 	return ret;
4076 }
4077 
4078 /*
4079  * Enable or disable device-initiated U1 or U2 transitions.
4080  */
4081 static int usb_set_device_initiated_lpm(struct usb_device *udev,
4082 		enum usb3_link_state state, bool enable)
4083 {
4084 	int ret;
4085 	int feature;
4086 
4087 	switch (state) {
4088 	case USB3_LPM_U1:
4089 		feature = USB_DEVICE_U1_ENABLE;
4090 		break;
4091 	case USB3_LPM_U2:
4092 		feature = USB_DEVICE_U2_ENABLE;
4093 		break;
4094 	default:
4095 		dev_warn(&udev->dev, "%s: Can't %s non-U1 or U2 state.\n",
4096 				__func__, enable ? "enable" : "disable");
4097 		return -EINVAL;
4098 	}
4099 
4100 	if (udev->state != USB_STATE_CONFIGURED) {
4101 		dev_dbg(&udev->dev, "%s: Can't %s %s state "
4102 				"for unconfigured device.\n",
4103 				__func__, enable ? "enable" : "disable",
4104 				usb3_lpm_names[state]);
4105 		return 0;
4106 	}
4107 
4108 	if (enable) {
4109 		/*
4110 		 * Now send the control transfer to enable device-initiated LPM
4111 		 * for either U1 or U2.
4112 		 */
4113 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4114 				USB_REQ_SET_FEATURE,
4115 				USB_RECIP_DEVICE,
4116 				feature,
4117 				0, NULL, 0,
4118 				USB_CTRL_SET_TIMEOUT);
4119 	} else {
4120 		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
4121 				USB_REQ_CLEAR_FEATURE,
4122 				USB_RECIP_DEVICE,
4123 				feature,
4124 				0, NULL, 0,
4125 				USB_CTRL_SET_TIMEOUT);
4126 	}
4127 	if (ret < 0) {
4128 		dev_warn(&udev->dev, "%s of device-initiated %s failed.\n",
4129 				enable ? "Enable" : "Disable",
4130 				usb3_lpm_names[state]);
4131 		return -EBUSY;
4132 	}
4133 	return 0;
4134 }
4135 
4136 static int usb_set_lpm_timeout(struct usb_device *udev,
4137 		enum usb3_link_state state, int timeout)
4138 {
4139 	int ret;
4140 	int feature;
4141 
4142 	switch (state) {
4143 	case USB3_LPM_U1:
4144 		feature = USB_PORT_FEAT_U1_TIMEOUT;
4145 		break;
4146 	case USB3_LPM_U2:
4147 		feature = USB_PORT_FEAT_U2_TIMEOUT;
4148 		break;
4149 	default:
4150 		dev_warn(&udev->dev, "%s: Can't set timeout for non-U1 or U2 state.\n",
4151 				__func__);
4152 		return -EINVAL;
4153 	}
4154 
4155 	if (state == USB3_LPM_U1 && timeout > USB3_LPM_U1_MAX_TIMEOUT &&
4156 			timeout != USB3_LPM_DEVICE_INITIATED) {
4157 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x, "
4158 				"which is a reserved value.\n",
4159 				usb3_lpm_names[state], timeout);
4160 		return -EINVAL;
4161 	}
4162 
4163 	ret = set_port_feature(udev->parent,
4164 			USB_PORT_LPM_TIMEOUT(timeout) | udev->portnum,
4165 			feature);
4166 	if (ret < 0) {
4167 		dev_warn(&udev->dev, "Failed to set %s timeout to 0x%x,"
4168 				"error code %i\n", usb3_lpm_names[state],
4169 				timeout, ret);
4170 		return -EBUSY;
4171 	}
4172 	if (state == USB3_LPM_U1)
4173 		udev->u1_params.timeout = timeout;
4174 	else
4175 		udev->u2_params.timeout = timeout;
4176 	return 0;
4177 }
4178 
4179 /*
4180  * Don't allow device intiated U1/U2 if the system exit latency + one bus
4181  * interval is greater than the minimum service interval of any active
4182  * periodic endpoint. See USB 3.2 section 9.4.9
4183  */
4184 static bool usb_device_may_initiate_lpm(struct usb_device *udev,
4185 					enum usb3_link_state state)
4186 {
4187 	unsigned int sel;		/* us */
4188 	int i, j;
4189 
4190 	if (!udev->lpm_devinit_allow)
4191 		return false;
4192 
4193 	if (state == USB3_LPM_U1)
4194 		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4195 	else if (state == USB3_LPM_U2)
4196 		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4197 	else
4198 		return false;
4199 
4200 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
4201 		struct usb_interface *intf;
4202 		struct usb_endpoint_descriptor *desc;
4203 		unsigned int interval;
4204 
4205 		intf = udev->actconfig->interface[i];
4206 		if (!intf)
4207 			continue;
4208 
4209 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++) {
4210 			desc = &intf->cur_altsetting->endpoint[j].desc;
4211 
4212 			if (usb_endpoint_xfer_int(desc) ||
4213 			    usb_endpoint_xfer_isoc(desc)) {
4214 				interval = (1 << (desc->bInterval - 1)) * 125;
4215 				if (sel + 125 > interval)
4216 					return false;
4217 			}
4218 		}
4219 	}
4220 	return true;
4221 }
4222 
4223 /*
4224  * Enable the hub-initiated U1/U2 idle timeouts, and enable device-initiated
4225  * U1/U2 entry.
4226  *
4227  * We will attempt to enable U1 or U2, but there are no guarantees that the
4228  * control transfers to set the hub timeout or enable device-initiated U1/U2
4229  * will be successful.
4230  *
4231  * If the control transfer to enable device-initiated U1/U2 entry fails, then
4232  * hub-initiated U1/U2 will be disabled.
4233  *
4234  * If we cannot set the parent hub U1/U2 timeout, we attempt to let the xHCI
4235  * driver know about it.  If that call fails, it should be harmless, and just
4236  * take up more slightly more bus bandwidth for unnecessary U1/U2 exit latency.
4237  */
4238 static void usb_enable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4239 		enum usb3_link_state state)
4240 {
4241 	int timeout;
4242 	__u8 u1_mel = udev->bos->ss_cap->bU1devExitLat;
4243 	__le16 u2_mel = udev->bos->ss_cap->bU2DevExitLat;
4244 
4245 	/* If the device says it doesn't have *any* exit latency to come out of
4246 	 * U1 or U2, it's probably lying.  Assume it doesn't implement that link
4247 	 * state.
4248 	 */
4249 	if ((state == USB3_LPM_U1 && u1_mel == 0) ||
4250 			(state == USB3_LPM_U2 && u2_mel == 0))
4251 		return;
4252 
4253 	/* We allow the host controller to set the U1/U2 timeout internally
4254 	 * first, so that it can change its schedule to account for the
4255 	 * additional latency to send data to a device in a lower power
4256 	 * link state.
4257 	 */
4258 	timeout = hcd->driver->enable_usb3_lpm_timeout(hcd, udev, state);
4259 
4260 	/* xHCI host controller doesn't want to enable this LPM state. */
4261 	if (timeout == 0)
4262 		return;
4263 
4264 	if (timeout < 0) {
4265 		dev_warn(&udev->dev, "Could not enable %s link state, "
4266 				"xHCI error %i.\n", usb3_lpm_names[state],
4267 				timeout);
4268 		return;
4269 	}
4270 
4271 	if (usb_set_lpm_timeout(udev, state, timeout)) {
4272 		/* If we can't set the parent hub U1/U2 timeout,
4273 		 * device-initiated LPM won't be allowed either, so let the xHCI
4274 		 * host know that this link state won't be enabled.
4275 		 */
4276 		hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4277 		return;
4278 	}
4279 
4280 	/* Only a configured device will accept the Set Feature
4281 	 * U1/U2_ENABLE
4282 	 */
4283 	if (udev->actconfig &&
4284 	    usb_device_may_initiate_lpm(udev, state)) {
4285 		if (usb_set_device_initiated_lpm(udev, state, true)) {
4286 			/*
4287 			 * Request to enable device initiated U1/U2 failed,
4288 			 * better to turn off lpm in this case.
4289 			 */
4290 			usb_set_lpm_timeout(udev, state, 0);
4291 			hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state);
4292 			return;
4293 		}
4294 	}
4295 
4296 	if (state == USB3_LPM_U1)
4297 		udev->usb3_lpm_u1_enabled = 1;
4298 	else if (state == USB3_LPM_U2)
4299 		udev->usb3_lpm_u2_enabled = 1;
4300 }
4301 /*
4302  * Disable the hub-initiated U1/U2 idle timeouts, and disable device-initiated
4303  * U1/U2 entry.
4304  *
4305  * If this function returns -EBUSY, the parent hub will still allow U1/U2 entry.
4306  * If zero is returned, the parent will not allow the link to go into U1/U2.
4307  *
4308  * If zero is returned, device-initiated U1/U2 entry may still be enabled, but
4309  * it won't have an effect on the bus link state because the parent hub will
4310  * still disallow device-initiated U1/U2 entry.
4311  *
4312  * If zero is returned, the xHCI host controller may still think U1/U2 entry is
4313  * possible.  The result will be slightly more bus bandwidth will be taken up
4314  * (to account for U1/U2 exit latency), but it should be harmless.
4315  */
4316 static int usb_disable_link_state(struct usb_hcd *hcd, struct usb_device *udev,
4317 		enum usb3_link_state state)
4318 {
4319 	switch (state) {
4320 	case USB3_LPM_U1:
4321 	case USB3_LPM_U2:
4322 		break;
4323 	default:
4324 		dev_warn(&udev->dev, "%s: Can't disable non-U1 or U2 state.\n",
4325 				__func__);
4326 		return -EINVAL;
4327 	}
4328 
4329 	if (usb_set_lpm_timeout(udev, state, 0))
4330 		return -EBUSY;
4331 
4332 	usb_set_device_initiated_lpm(udev, state, false);
4333 
4334 	if (hcd->driver->disable_usb3_lpm_timeout(hcd, udev, state))
4335 		dev_warn(&udev->dev, "Could not disable xHCI %s timeout, "
4336 				"bus schedule bandwidth may be impacted.\n",
4337 				usb3_lpm_names[state]);
4338 
4339 	/* As soon as usb_set_lpm_timeout(0) return 0, hub initiated LPM
4340 	 * is disabled. Hub will disallows link to enter U1/U2 as well,
4341 	 * even device is initiating LPM. Hence LPM is disabled if hub LPM
4342 	 * timeout set to 0, no matter device-initiated LPM is disabled or
4343 	 * not.
4344 	 */
4345 	if (state == USB3_LPM_U1)
4346 		udev->usb3_lpm_u1_enabled = 0;
4347 	else if (state == USB3_LPM_U2)
4348 		udev->usb3_lpm_u2_enabled = 0;
4349 
4350 	return 0;
4351 }
4352 
4353 /*
4354  * Disable hub-initiated and device-initiated U1 and U2 entry.
4355  * Caller must own the bandwidth_mutex.
4356  *
4357  * This will call usb_enable_lpm() on failure, which will decrement
4358  * lpm_disable_count, and will re-enable LPM if lpm_disable_count reaches zero.
4359  */
4360 int usb_disable_lpm(struct usb_device *udev)
4361 {
4362 	struct usb_hcd *hcd;
4363 
4364 	if (!udev || !udev->parent ||
4365 			udev->speed < USB_SPEED_SUPER ||
4366 			!udev->lpm_capable ||
4367 			udev->state < USB_STATE_CONFIGURED)
4368 		return 0;
4369 
4370 	hcd = bus_to_hcd(udev->bus);
4371 	if (!hcd || !hcd->driver->disable_usb3_lpm_timeout)
4372 		return 0;
4373 
4374 	udev->lpm_disable_count++;
4375 	if ((udev->u1_params.timeout == 0 && udev->u2_params.timeout == 0))
4376 		return 0;
4377 
4378 	/* If LPM is enabled, attempt to disable it. */
4379 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U1))
4380 		goto enable_lpm;
4381 	if (usb_disable_link_state(hcd, udev, USB3_LPM_U2))
4382 		goto enable_lpm;
4383 
4384 	return 0;
4385 
4386 enable_lpm:
4387 	usb_enable_lpm(udev);
4388 	return -EBUSY;
4389 }
4390 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4391 
4392 /* Grab the bandwidth_mutex before calling usb_disable_lpm() */
4393 int usb_unlocked_disable_lpm(struct usb_device *udev)
4394 {
4395 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4396 	int ret;
4397 
4398 	if (!hcd)
4399 		return -EINVAL;
4400 
4401 	mutex_lock(hcd->bandwidth_mutex);
4402 	ret = usb_disable_lpm(udev);
4403 	mutex_unlock(hcd->bandwidth_mutex);
4404 
4405 	return ret;
4406 }
4407 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4408 
4409 /*
4410  * Attempt to enable device-initiated and hub-initiated U1 and U2 entry.  The
4411  * xHCI host policy may prevent U1 or U2 from being enabled.
4412  *
4413  * Other callers may have disabled link PM, so U1 and U2 entry will be disabled
4414  * until the lpm_disable_count drops to zero.  Caller must own the
4415  * bandwidth_mutex.
4416  */
4417 void usb_enable_lpm(struct usb_device *udev)
4418 {
4419 	struct usb_hcd *hcd;
4420 	struct usb_hub *hub;
4421 	struct usb_port *port_dev;
4422 
4423 	if (!udev || !udev->parent ||
4424 			udev->speed < USB_SPEED_SUPER ||
4425 			!udev->lpm_capable ||
4426 			udev->state < USB_STATE_CONFIGURED)
4427 		return;
4428 
4429 	udev->lpm_disable_count--;
4430 	hcd = bus_to_hcd(udev->bus);
4431 	/* Double check that we can both enable and disable LPM.
4432 	 * Device must be configured to accept set feature U1/U2 timeout.
4433 	 */
4434 	if (!hcd || !hcd->driver->enable_usb3_lpm_timeout ||
4435 			!hcd->driver->disable_usb3_lpm_timeout)
4436 		return;
4437 
4438 	if (udev->lpm_disable_count > 0)
4439 		return;
4440 
4441 	hub = usb_hub_to_struct_hub(udev->parent);
4442 	if (!hub)
4443 		return;
4444 
4445 	port_dev = hub->ports[udev->portnum - 1];
4446 
4447 	if (port_dev->usb3_lpm_u1_permit)
4448 		usb_enable_link_state(hcd, udev, USB3_LPM_U1);
4449 
4450 	if (port_dev->usb3_lpm_u2_permit)
4451 		usb_enable_link_state(hcd, udev, USB3_LPM_U2);
4452 }
4453 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4454 
4455 /* Grab the bandwidth_mutex before calling usb_enable_lpm() */
4456 void usb_unlocked_enable_lpm(struct usb_device *udev)
4457 {
4458 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4459 
4460 	if (!hcd)
4461 		return;
4462 
4463 	mutex_lock(hcd->bandwidth_mutex);
4464 	usb_enable_lpm(udev);
4465 	mutex_unlock(hcd->bandwidth_mutex);
4466 }
4467 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4468 
4469 /* usb3 devices use U3 for disabled, make sure remote wakeup is disabled */
4470 static void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4471 					  struct usb_port *port_dev)
4472 {
4473 	struct usb_device *udev = port_dev->child;
4474 	int ret;
4475 
4476 	if (udev && udev->port_is_suspended && udev->do_remote_wakeup) {
4477 		ret = hub_set_port_link_state(hub, port_dev->portnum,
4478 					      USB_SS_PORT_LS_U0);
4479 		if (!ret) {
4480 			msleep(USB_RESUME_TIMEOUT);
4481 			ret = usb_disable_remote_wakeup(udev);
4482 		}
4483 		if (ret)
4484 			dev_warn(&udev->dev,
4485 				 "Port disable: can't disable remote wake\n");
4486 		udev->do_remote_wakeup = 0;
4487 	}
4488 }
4489 
4490 #else	/* CONFIG_PM */
4491 
4492 #define hub_suspend		NULL
4493 #define hub_resume		NULL
4494 #define hub_reset_resume	NULL
4495 
4496 static inline void hub_usb3_port_prepare_disable(struct usb_hub *hub,
4497 						 struct usb_port *port_dev) { }
4498 
4499 int usb_disable_lpm(struct usb_device *udev)
4500 {
4501 	return 0;
4502 }
4503 EXPORT_SYMBOL_GPL(usb_disable_lpm);
4504 
4505 void usb_enable_lpm(struct usb_device *udev) { }
4506 EXPORT_SYMBOL_GPL(usb_enable_lpm);
4507 
4508 int usb_unlocked_disable_lpm(struct usb_device *udev)
4509 {
4510 	return 0;
4511 }
4512 EXPORT_SYMBOL_GPL(usb_unlocked_disable_lpm);
4513 
4514 void usb_unlocked_enable_lpm(struct usb_device *udev) { }
4515 EXPORT_SYMBOL_GPL(usb_unlocked_enable_lpm);
4516 
4517 int usb_disable_ltm(struct usb_device *udev)
4518 {
4519 	return 0;
4520 }
4521 EXPORT_SYMBOL_GPL(usb_disable_ltm);
4522 
4523 void usb_enable_ltm(struct usb_device *udev) { }
4524 EXPORT_SYMBOL_GPL(usb_enable_ltm);
4525 
4526 static int hub_handle_remote_wakeup(struct usb_hub *hub, unsigned int port,
4527 		u16 portstatus, u16 portchange)
4528 {
4529 	return 0;
4530 }
4531 
4532 static int usb_req_set_sel(struct usb_device *udev)
4533 {
4534 	return 0;
4535 }
4536 
4537 #endif	/* CONFIG_PM */
4538 
4539 /*
4540  * USB-3 does not have a similar link state as USB-2 that will avoid negotiating
4541  * a connection with a plugged-in cable but will signal the host when the cable
4542  * is unplugged. Disable remote wake and set link state to U3 for USB-3 devices
4543  */
4544 static int hub_port_disable(struct usb_hub *hub, int port1, int set_state)
4545 {
4546 	struct usb_port *port_dev = hub->ports[port1 - 1];
4547 	struct usb_device *hdev = hub->hdev;
4548 	int ret = 0;
4549 
4550 	if (!hub->error) {
4551 		if (hub_is_superspeed(hub->hdev)) {
4552 			hub_usb3_port_prepare_disable(hub, port_dev);
4553 			ret = hub_set_port_link_state(hub, port_dev->portnum,
4554 						      USB_SS_PORT_LS_U3);
4555 		} else {
4556 			ret = usb_clear_port_feature(hdev, port1,
4557 					USB_PORT_FEAT_ENABLE);
4558 		}
4559 	}
4560 	if (port_dev->child && set_state)
4561 		usb_set_device_state(port_dev->child, USB_STATE_NOTATTACHED);
4562 	if (ret && ret != -ENODEV)
4563 		dev_err(&port_dev->dev, "cannot disable (err = %d)\n", ret);
4564 	return ret;
4565 }
4566 
4567 /*
4568  * usb_port_disable - disable a usb device's upstream port
4569  * @udev: device to disable
4570  * Context: @udev locked, must be able to sleep.
4571  *
4572  * Disables a USB device that isn't in active use.
4573  */
4574 int usb_port_disable(struct usb_device *udev)
4575 {
4576 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4577 
4578 	return hub_port_disable(hub, udev->portnum, 0);
4579 }
4580 
4581 /* USB 2.0 spec, 7.1.7.3 / fig 7-29:
4582  *
4583  * Between connect detection and reset signaling there must be a delay
4584  * of 100ms at least for debounce and power-settling.  The corresponding
4585  * timer shall restart whenever the downstream port detects a disconnect.
4586  *
4587  * Apparently there are some bluetooth and irda-dongles and a number of
4588  * low-speed devices for which this debounce period may last over a second.
4589  * Not covered by the spec - but easy to deal with.
4590  *
4591  * This implementation uses a 1500ms total debounce timeout; if the
4592  * connection isn't stable by then it returns -ETIMEDOUT.  It checks
4593  * every 25ms for transient disconnects.  When the port status has been
4594  * unchanged for 100ms it returns the port status.
4595  */
4596 int hub_port_debounce(struct usb_hub *hub, int port1, bool must_be_connected)
4597 {
4598 	int ret;
4599 	u16 portchange, portstatus;
4600 	unsigned connection = 0xffff;
4601 	int total_time, stable_time = 0;
4602 	struct usb_port *port_dev = hub->ports[port1 - 1];
4603 
4604 	for (total_time = 0; ; total_time += HUB_DEBOUNCE_STEP) {
4605 		ret = usb_hub_port_status(hub, port1, &portstatus, &portchange);
4606 		if (ret < 0)
4607 			return ret;
4608 
4609 		if (!(portchange & USB_PORT_STAT_C_CONNECTION) &&
4610 		     (portstatus & USB_PORT_STAT_CONNECTION) == connection) {
4611 			if (!must_be_connected ||
4612 			     (connection == USB_PORT_STAT_CONNECTION))
4613 				stable_time += HUB_DEBOUNCE_STEP;
4614 			if (stable_time >= HUB_DEBOUNCE_STABLE)
4615 				break;
4616 		} else {
4617 			stable_time = 0;
4618 			connection = portstatus & USB_PORT_STAT_CONNECTION;
4619 		}
4620 
4621 		if (portchange & USB_PORT_STAT_C_CONNECTION) {
4622 			usb_clear_port_feature(hub->hdev, port1,
4623 					USB_PORT_FEAT_C_CONNECTION);
4624 		}
4625 
4626 		if (total_time >= HUB_DEBOUNCE_TIMEOUT)
4627 			break;
4628 		msleep(HUB_DEBOUNCE_STEP);
4629 	}
4630 
4631 	dev_dbg(&port_dev->dev, "debounce total %dms stable %dms status 0x%x\n",
4632 			total_time, stable_time, portstatus);
4633 
4634 	if (stable_time < HUB_DEBOUNCE_STABLE)
4635 		return -ETIMEDOUT;
4636 	return portstatus;
4637 }
4638 
4639 void usb_ep0_reinit(struct usb_device *udev)
4640 {
4641 	usb_disable_endpoint(udev, 0 + USB_DIR_IN, true);
4642 	usb_disable_endpoint(udev, 0 + USB_DIR_OUT, true);
4643 	usb_enable_endpoint(udev, &udev->ep0, true);
4644 }
4645 EXPORT_SYMBOL_GPL(usb_ep0_reinit);
4646 
4647 #define usb_sndaddr0pipe()	(PIPE_CONTROL << 30)
4648 #define usb_rcvaddr0pipe()	((PIPE_CONTROL << 30) | USB_DIR_IN)
4649 
4650 static int hub_set_address(struct usb_device *udev, int devnum)
4651 {
4652 	int retval;
4653 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4654 
4655 	/*
4656 	 * The host controller will choose the device address,
4657 	 * instead of the core having chosen it earlier
4658 	 */
4659 	if (!hcd->driver->address_device && devnum <= 1)
4660 		return -EINVAL;
4661 	if (udev->state == USB_STATE_ADDRESS)
4662 		return 0;
4663 	if (udev->state != USB_STATE_DEFAULT)
4664 		return -EINVAL;
4665 	if (hcd->driver->address_device)
4666 		retval = hcd->driver->address_device(hcd, udev);
4667 	else
4668 		retval = usb_control_msg(udev, usb_sndaddr0pipe(),
4669 				USB_REQ_SET_ADDRESS, 0, devnum, 0,
4670 				NULL, 0, USB_CTRL_SET_TIMEOUT);
4671 	if (retval == 0) {
4672 		update_devnum(udev, devnum);
4673 		/* Device now using proper address. */
4674 		usb_set_device_state(udev, USB_STATE_ADDRESS);
4675 		usb_ep0_reinit(udev);
4676 	}
4677 	return retval;
4678 }
4679 
4680 /*
4681  * There are reports of USB 3.0 devices that say they support USB 2.0 Link PM
4682  * when they're plugged into a USB 2.0 port, but they don't work when LPM is
4683  * enabled.
4684  *
4685  * Only enable USB 2.0 Link PM if the port is internal (hardwired), or the
4686  * device says it supports the new USB 2.0 Link PM errata by setting the BESL
4687  * support bit in the BOS descriptor.
4688  */
4689 static void hub_set_initial_usb2_lpm_policy(struct usb_device *udev)
4690 {
4691 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
4692 	int connect_type = USB_PORT_CONNECT_TYPE_UNKNOWN;
4693 
4694 	if (!udev->usb2_hw_lpm_capable || !udev->bos)
4695 		return;
4696 
4697 	if (hub)
4698 		connect_type = hub->ports[udev->portnum - 1]->connect_type;
4699 
4700 	if ((udev->bos->ext_cap->bmAttributes & cpu_to_le32(USB_BESL_SUPPORT)) ||
4701 			connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
4702 		udev->usb2_hw_lpm_allowed = 1;
4703 		usb_enable_usb2_hardware_lpm(udev);
4704 	}
4705 }
4706 
4707 static int hub_enable_device(struct usb_device *udev)
4708 {
4709 	struct usb_hcd *hcd = bus_to_hcd(udev->bus);
4710 
4711 	if (!hcd->driver->enable_device)
4712 		return 0;
4713 	if (udev->state == USB_STATE_ADDRESS)
4714 		return 0;
4715 	if (udev->state != USB_STATE_DEFAULT)
4716 		return -EINVAL;
4717 
4718 	return hcd->driver->enable_device(hcd, udev);
4719 }
4720 
4721 /* Reset device, (re)assign address, get device descriptor.
4722  * Device connection must be stable, no more debouncing needed.
4723  * Returns device in USB_STATE_ADDRESS, except on error.
4724  *
4725  * If this is called for an already-existing device (as part of
4726  * usb_reset_and_verify_device), the caller must own the device lock and
4727  * the port lock.  For a newly detected device that is not accessible
4728  * through any global pointers, it's not necessary to lock the device,
4729  * but it is still necessary to lock the port.
4730  */
4731 static int
4732 hub_port_init(struct usb_hub *hub, struct usb_device *udev, int port1,
4733 		int retry_counter)
4734 {
4735 	struct usb_device	*hdev = hub->hdev;
4736 	struct usb_hcd		*hcd = bus_to_hcd(hdev->bus);
4737 	struct usb_port		*port_dev = hub->ports[port1 - 1];
4738 	int			retries, operations, retval, i;
4739 	unsigned		delay = HUB_SHORT_RESET_TIME;
4740 	enum usb_device_speed	oldspeed = udev->speed;
4741 	const char		*speed;
4742 	int			devnum = udev->devnum;
4743 	const char		*driver_name;
4744 	bool			do_new_scheme;
4745 
4746 	/* root hub ports have a slightly longer reset period
4747 	 * (from USB 2.0 spec, section 7.1.7.5)
4748 	 */
4749 	if (!hdev->parent) {
4750 		delay = HUB_ROOT_RESET_TIME;
4751 		if (port1 == hdev->bus->otg_port)
4752 			hdev->bus->b_hnp_enable = 0;
4753 	}
4754 
4755 	/* Some low speed devices have problems with the quick delay, so */
4756 	/*  be a bit pessimistic with those devices. RHbug #23670 */
4757 	if (oldspeed == USB_SPEED_LOW)
4758 		delay = HUB_LONG_RESET_TIME;
4759 
4760 	/* Reset the device; full speed may morph to high speed */
4761 	/* FIXME a USB 2.0 device may morph into SuperSpeed on reset. */
4762 	retval = hub_port_reset(hub, port1, udev, delay, false);
4763 	if (retval < 0)		/* error or disconnect */
4764 		goto fail;
4765 	/* success, speed is known */
4766 
4767 	retval = -ENODEV;
4768 
4769 	/* Don't allow speed changes at reset, except usb 3.0 to faster */
4770 	if (oldspeed != USB_SPEED_UNKNOWN && oldspeed != udev->speed &&
4771 	    !(oldspeed == USB_SPEED_SUPER && udev->speed > oldspeed)) {
4772 		dev_dbg(&udev->dev, "device reset changed speed!\n");
4773 		goto fail;
4774 	}
4775 	oldspeed = udev->speed;
4776 
4777 	/* USB 2.0 section 5.5.3 talks about ep0 maxpacket ...
4778 	 * it's fixed size except for full speed devices.
4779 	 * For Wireless USB devices, ep0 max packet is always 512 (tho
4780 	 * reported as 0xff in the device descriptor). WUSB1.0[4.8.1].
4781 	 */
4782 	switch (udev->speed) {
4783 	case USB_SPEED_SUPER_PLUS:
4784 	case USB_SPEED_SUPER:
4785 	case USB_SPEED_WIRELESS:	/* fixed at 512 */
4786 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(512);
4787 		break;
4788 	case USB_SPEED_HIGH:		/* fixed at 64 */
4789 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4790 		break;
4791 	case USB_SPEED_FULL:		/* 8, 16, 32, or 64 */
4792 		/* to determine the ep0 maxpacket size, try to read
4793 		 * the device descriptor to get bMaxPacketSize0 and
4794 		 * then correct our initial guess.
4795 		 */
4796 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(64);
4797 		break;
4798 	case USB_SPEED_LOW:		/* fixed at 8 */
4799 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(8);
4800 		break;
4801 	default:
4802 		goto fail;
4803 	}
4804 
4805 	if (udev->speed == USB_SPEED_WIRELESS)
4806 		speed = "variable speed Wireless";
4807 	else
4808 		speed = usb_speed_string(udev->speed);
4809 
4810 	/*
4811 	 * The controller driver may be NULL if the controller device
4812 	 * is the middle device between platform device and roothub.
4813 	 * This middle device may not need a device driver due to
4814 	 * all hardware control can be at platform device driver, this
4815 	 * platform device is usually a dual-role USB controller device.
4816 	 */
4817 	if (udev->bus->controller->driver)
4818 		driver_name = udev->bus->controller->driver->name;
4819 	else
4820 		driver_name = udev->bus->sysdev->driver->name;
4821 
4822 	if (udev->speed < USB_SPEED_SUPER)
4823 		dev_info(&udev->dev,
4824 				"%s %s USB device number %d using %s\n",
4825 				(udev->config) ? "reset" : "new", speed,
4826 				devnum, driver_name);
4827 
4828 	/* Set up TT records, if needed  */
4829 	if (hdev->tt) {
4830 		udev->tt = hdev->tt;
4831 		udev->ttport = hdev->ttport;
4832 	} else if (udev->speed != USB_SPEED_HIGH
4833 			&& hdev->speed == USB_SPEED_HIGH) {
4834 		if (!hub->tt.hub) {
4835 			dev_err(&udev->dev, "parent hub has no TT\n");
4836 			retval = -EINVAL;
4837 			goto fail;
4838 		}
4839 		udev->tt = &hub->tt;
4840 		udev->ttport = port1;
4841 	}
4842 
4843 	/* Why interleave GET_DESCRIPTOR and SET_ADDRESS this way?
4844 	 * Because device hardware and firmware is sometimes buggy in
4845 	 * this area, and this is how Linux has done it for ages.
4846 	 * Change it cautiously.
4847 	 *
4848 	 * NOTE:  If use_new_scheme() is true we will start by issuing
4849 	 * a 64-byte GET_DESCRIPTOR request.  This is what Windows does,
4850 	 * so it may help with some non-standards-compliant devices.
4851 	 * Otherwise we start with SET_ADDRESS and then try to read the
4852 	 * first 8 bytes of the device descriptor to get the ep0 maxpacket
4853 	 * value.
4854 	 */
4855 	do_new_scheme = use_new_scheme(udev, retry_counter, port_dev);
4856 
4857 	for (retries = 0; retries < GET_DESCRIPTOR_TRIES; (++retries, msleep(100))) {
4858 		if (hub_port_stop_enumerate(hub, port1, retries)) {
4859 			retval = -ENODEV;
4860 			break;
4861 		}
4862 
4863 		if (do_new_scheme) {
4864 			struct usb_device_descriptor *buf;
4865 			int r = 0;
4866 
4867 			retval = hub_enable_device(udev);
4868 			if (retval < 0) {
4869 				dev_err(&udev->dev,
4870 					"hub failed to enable device, error %d\n",
4871 					retval);
4872 				goto fail;
4873 			}
4874 
4875 #define GET_DESCRIPTOR_BUFSIZE	64
4876 			buf = kmalloc(GET_DESCRIPTOR_BUFSIZE, GFP_NOIO);
4877 			if (!buf) {
4878 				retval = -ENOMEM;
4879 				continue;
4880 			}
4881 
4882 			/* Retry on all errors; some devices are flakey.
4883 			 * 255 is for WUSB devices, we actually need to use
4884 			 * 512 (WUSB1.0[4.8.1]).
4885 			 */
4886 			for (operations = 0; operations < GET_MAXPACKET0_TRIES;
4887 					++operations) {
4888 				buf->bMaxPacketSize0 = 0;
4889 				r = usb_control_msg(udev, usb_rcvaddr0pipe(),
4890 					USB_REQ_GET_DESCRIPTOR, USB_DIR_IN,
4891 					USB_DT_DEVICE << 8, 0,
4892 					buf, GET_DESCRIPTOR_BUFSIZE,
4893 					initial_descriptor_timeout);
4894 				switch (buf->bMaxPacketSize0) {
4895 				case 8: case 16: case 32: case 64: case 255:
4896 					if (buf->bDescriptorType ==
4897 							USB_DT_DEVICE) {
4898 						r = 0;
4899 						break;
4900 					}
4901 					fallthrough;
4902 				default:
4903 					if (r == 0)
4904 						r = -EPROTO;
4905 					break;
4906 				}
4907 				/*
4908 				 * Some devices time out if they are powered on
4909 				 * when already connected. They need a second
4910 				 * reset. But only on the first attempt,
4911 				 * lest we get into a time out/reset loop
4912 				 */
4913 				if (r == 0 || (r == -ETIMEDOUT &&
4914 						retries == 0 &&
4915 						udev->speed > USB_SPEED_FULL))
4916 					break;
4917 			}
4918 			udev->descriptor.bMaxPacketSize0 =
4919 					buf->bMaxPacketSize0;
4920 			kfree(buf);
4921 
4922 			retval = hub_port_reset(hub, port1, udev, delay, false);
4923 			if (retval < 0)		/* error or disconnect */
4924 				goto fail;
4925 			if (oldspeed != udev->speed) {
4926 				dev_dbg(&udev->dev,
4927 					"device reset changed speed!\n");
4928 				retval = -ENODEV;
4929 				goto fail;
4930 			}
4931 			if (r) {
4932 				if (r != -ENODEV)
4933 					dev_err(&udev->dev, "device descriptor read/64, error %d\n",
4934 							r);
4935 				retval = -EMSGSIZE;
4936 				continue;
4937 			}
4938 #undef GET_DESCRIPTOR_BUFSIZE
4939 		}
4940 
4941 		/*
4942 		 * If device is WUSB, we already assigned an
4943 		 * unauthorized address in the Connect Ack sequence;
4944 		 * authorization will assign the final address.
4945 		 */
4946 		if (udev->wusb == 0) {
4947 			for (operations = 0; operations < SET_ADDRESS_TRIES; ++operations) {
4948 				retval = hub_set_address(udev, devnum);
4949 				if (retval >= 0)
4950 					break;
4951 				msleep(200);
4952 			}
4953 			if (retval < 0) {
4954 				if (retval != -ENODEV)
4955 					dev_err(&udev->dev, "device not accepting address %d, error %d\n",
4956 							devnum, retval);
4957 				goto fail;
4958 			}
4959 			if (udev->speed >= USB_SPEED_SUPER) {
4960 				devnum = udev->devnum;
4961 				dev_info(&udev->dev,
4962 						"%s SuperSpeed%s%s USB device number %d using %s\n",
4963 						(udev->config) ? "reset" : "new",
4964 					 (udev->speed == USB_SPEED_SUPER_PLUS) ?
4965 							" Plus" : "",
4966 					 (udev->ssp_rate == USB_SSP_GEN_2x2) ?
4967 							" Gen 2x2" :
4968 					 (udev->ssp_rate == USB_SSP_GEN_2x1) ?
4969 							" Gen 2x1" :
4970 					 (udev->ssp_rate == USB_SSP_GEN_1x2) ?
4971 							" Gen 1x2" : "",
4972 					 devnum, driver_name);
4973 			}
4974 
4975 			/* cope with hardware quirkiness:
4976 			 *  - let SET_ADDRESS settle, some device hardware wants it
4977 			 *  - read ep0 maxpacket even for high and low speed,
4978 			 */
4979 			msleep(10);
4980 			if (do_new_scheme)
4981 				break;
4982 		}
4983 
4984 		retval = usb_get_device_descriptor(udev, 8);
4985 		if (retval < 8) {
4986 			if (retval != -ENODEV)
4987 				dev_err(&udev->dev,
4988 					"device descriptor read/8, error %d\n",
4989 					retval);
4990 			if (retval >= 0)
4991 				retval = -EMSGSIZE;
4992 		} else {
4993 			u32 delay;
4994 
4995 			retval = 0;
4996 
4997 			delay = udev->parent->hub_delay;
4998 			udev->hub_delay = min_t(u32, delay,
4999 						USB_TP_TRANSMISSION_DELAY_MAX);
5000 			retval = usb_set_isoch_delay(udev);
5001 			if (retval) {
5002 				dev_dbg(&udev->dev,
5003 					"Failed set isoch delay, error %d\n",
5004 					retval);
5005 				retval = 0;
5006 			}
5007 			break;
5008 		}
5009 	}
5010 	if (retval)
5011 		goto fail;
5012 
5013 	/*
5014 	 * Some superspeed devices have finished the link training process
5015 	 * and attached to a superspeed hub port, but the device descriptor
5016 	 * got from those devices show they aren't superspeed devices. Warm
5017 	 * reset the port attached by the devices can fix them.
5018 	 */
5019 	if ((udev->speed >= USB_SPEED_SUPER) &&
5020 			(le16_to_cpu(udev->descriptor.bcdUSB) < 0x0300)) {
5021 		dev_err(&udev->dev, "got a wrong device descriptor, "
5022 				"warm reset device\n");
5023 		hub_port_reset(hub, port1, udev,
5024 				HUB_BH_RESET_TIME, true);
5025 		retval = -EINVAL;
5026 		goto fail;
5027 	}
5028 
5029 	if (udev->descriptor.bMaxPacketSize0 == 0xff ||
5030 			udev->speed >= USB_SPEED_SUPER)
5031 		i = 512;
5032 	else
5033 		i = udev->descriptor.bMaxPacketSize0;
5034 	if (usb_endpoint_maxp(&udev->ep0.desc) != i) {
5035 		if (udev->speed == USB_SPEED_LOW ||
5036 				!(i == 8 || i == 16 || i == 32 || i == 64)) {
5037 			dev_err(&udev->dev, "Invalid ep0 maxpacket: %d\n", i);
5038 			retval = -EMSGSIZE;
5039 			goto fail;
5040 		}
5041 		if (udev->speed == USB_SPEED_FULL)
5042 			dev_dbg(&udev->dev, "ep0 maxpacket = %d\n", i);
5043 		else
5044 			dev_warn(&udev->dev, "Using ep0 maxpacket: %d\n", i);
5045 		udev->ep0.desc.wMaxPacketSize = cpu_to_le16(i);
5046 		usb_ep0_reinit(udev);
5047 	}
5048 
5049 	retval = usb_get_device_descriptor(udev, USB_DT_DEVICE_SIZE);
5050 	if (retval < (signed)sizeof(udev->descriptor)) {
5051 		if (retval != -ENODEV)
5052 			dev_err(&udev->dev, "device descriptor read/all, error %d\n",
5053 					retval);
5054 		if (retval >= 0)
5055 			retval = -ENOMSG;
5056 		goto fail;
5057 	}
5058 
5059 	usb_detect_quirks(udev);
5060 
5061 	if (udev->wusb == 0 && le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0201) {
5062 		retval = usb_get_bos_descriptor(udev);
5063 		if (!retval) {
5064 			udev->lpm_capable = usb_device_supports_lpm(udev);
5065 			udev->lpm_disable_count = 1;
5066 			usb_set_lpm_parameters(udev);
5067 			usb_req_set_sel(udev);
5068 		}
5069 	}
5070 
5071 	retval = 0;
5072 	/* notify HCD that we have a device connected and addressed */
5073 	if (hcd->driver->update_device)
5074 		hcd->driver->update_device(hcd, udev);
5075 	hub_set_initial_usb2_lpm_policy(udev);
5076 fail:
5077 	if (retval) {
5078 		hub_port_disable(hub, port1, 0);
5079 		update_devnum(udev, devnum);	/* for disconnect processing */
5080 	}
5081 	return retval;
5082 }
5083 
5084 static void
5085 check_highspeed(struct usb_hub *hub, struct usb_device *udev, int port1)
5086 {
5087 	struct usb_qualifier_descriptor	*qual;
5088 	int				status;
5089 
5090 	if (udev->quirks & USB_QUIRK_DEVICE_QUALIFIER)
5091 		return;
5092 
5093 	qual = kmalloc(sizeof *qual, GFP_KERNEL);
5094 	if (qual == NULL)
5095 		return;
5096 
5097 	status = usb_get_descriptor(udev, USB_DT_DEVICE_QUALIFIER, 0,
5098 			qual, sizeof *qual);
5099 	if (status == sizeof *qual) {
5100 		dev_info(&udev->dev, "not running at top speed; "
5101 			"connect to a high speed hub\n");
5102 		/* hub LEDs are probably harder to miss than syslog */
5103 		if (hub->has_indicators) {
5104 			hub->indicator[port1-1] = INDICATOR_GREEN_BLINK;
5105 			queue_delayed_work(system_power_efficient_wq,
5106 					&hub->leds, 0);
5107 		}
5108 	}
5109 	kfree(qual);
5110 }
5111 
5112 static unsigned
5113 hub_power_remaining(struct usb_hub *hub)
5114 {
5115 	struct usb_device *hdev = hub->hdev;
5116 	int remaining;
5117 	int port1;
5118 
5119 	if (!hub->limited_power)
5120 		return 0;
5121 
5122 	remaining = hdev->bus_mA - hub->descriptor->bHubContrCurrent;
5123 	for (port1 = 1; port1 <= hdev->maxchild; ++port1) {
5124 		struct usb_port *port_dev = hub->ports[port1 - 1];
5125 		struct usb_device *udev = port_dev->child;
5126 		unsigned unit_load;
5127 		int delta;
5128 
5129 		if (!udev)
5130 			continue;
5131 		if (hub_is_superspeed(udev))
5132 			unit_load = 150;
5133 		else
5134 			unit_load = 100;
5135 
5136 		/*
5137 		 * Unconfigured devices may not use more than one unit load,
5138 		 * or 8mA for OTG ports
5139 		 */
5140 		if (udev->actconfig)
5141 			delta = usb_get_max_power(udev, udev->actconfig);
5142 		else if (port1 != udev->bus->otg_port || hdev->parent)
5143 			delta = unit_load;
5144 		else
5145 			delta = 8;
5146 		if (delta > hub->mA_per_port)
5147 			dev_warn(&port_dev->dev, "%dmA is over %umA budget!\n",
5148 					delta, hub->mA_per_port);
5149 		remaining -= delta;
5150 	}
5151 	if (remaining < 0) {
5152 		dev_warn(hub->intfdev, "%dmA over power budget!\n",
5153 			-remaining);
5154 		remaining = 0;
5155 	}
5156 	return remaining;
5157 }
5158 
5159 
5160 static int descriptors_changed(struct usb_device *udev,
5161 		struct usb_device_descriptor *old_device_descriptor,
5162 		struct usb_host_bos *old_bos)
5163 {
5164 	int		changed = 0;
5165 	unsigned	index;
5166 	unsigned	serial_len = 0;
5167 	unsigned	len;
5168 	unsigned	old_length;
5169 	int		length;
5170 	char		*buf;
5171 
5172 	if (memcmp(&udev->descriptor, old_device_descriptor,
5173 			sizeof(*old_device_descriptor)) != 0)
5174 		return 1;
5175 
5176 	if ((old_bos && !udev->bos) || (!old_bos && udev->bos))
5177 		return 1;
5178 	if (udev->bos) {
5179 		len = le16_to_cpu(udev->bos->desc->wTotalLength);
5180 		if (len != le16_to_cpu(old_bos->desc->wTotalLength))
5181 			return 1;
5182 		if (memcmp(udev->bos->desc, old_bos->desc, len))
5183 			return 1;
5184 	}
5185 
5186 	/* Since the idVendor, idProduct, and bcdDevice values in the
5187 	 * device descriptor haven't changed, we will assume the
5188 	 * Manufacturer and Product strings haven't changed either.
5189 	 * But the SerialNumber string could be different (e.g., a
5190 	 * different flash card of the same brand).
5191 	 */
5192 	if (udev->serial)
5193 		serial_len = strlen(udev->serial) + 1;
5194 
5195 	len = serial_len;
5196 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5197 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5198 		len = max(len, old_length);
5199 	}
5200 
5201 	buf = kmalloc(len, GFP_NOIO);
5202 	if (!buf)
5203 		/* assume the worst */
5204 		return 1;
5205 
5206 	for (index = 0; index < udev->descriptor.bNumConfigurations; index++) {
5207 		old_length = le16_to_cpu(udev->config[index].desc.wTotalLength);
5208 		length = usb_get_descriptor(udev, USB_DT_CONFIG, index, buf,
5209 				old_length);
5210 		if (length != old_length) {
5211 			dev_dbg(&udev->dev, "config index %d, error %d\n",
5212 					index, length);
5213 			changed = 1;
5214 			break;
5215 		}
5216 		if (memcmp(buf, udev->rawdescriptors[index], old_length)
5217 				!= 0) {
5218 			dev_dbg(&udev->dev, "config index %d changed (#%d)\n",
5219 				index,
5220 				((struct usb_config_descriptor *) buf)->
5221 					bConfigurationValue);
5222 			changed = 1;
5223 			break;
5224 		}
5225 	}
5226 
5227 	if (!changed && serial_len) {
5228 		length = usb_string(udev, udev->descriptor.iSerialNumber,
5229 				buf, serial_len);
5230 		if (length + 1 != serial_len) {
5231 			dev_dbg(&udev->dev, "serial string error %d\n",
5232 					length);
5233 			changed = 1;
5234 		} else if (memcmp(buf, udev->serial, length) != 0) {
5235 			dev_dbg(&udev->dev, "serial string changed\n");
5236 			changed = 1;
5237 		}
5238 	}
5239 
5240 	kfree(buf);
5241 	return changed;
5242 }
5243 
5244 static void hub_port_connect(struct usb_hub *hub, int port1, u16 portstatus,
5245 		u16 portchange)
5246 {
5247 	int status = -ENODEV;
5248 	int i;
5249 	unsigned unit_load;
5250 	struct usb_device *hdev = hub->hdev;
5251 	struct usb_hcd *hcd = bus_to_hcd(hdev->bus);
5252 	struct usb_port *port_dev = hub->ports[port1 - 1];
5253 	struct usb_device *udev = port_dev->child;
5254 	static int unreliable_port = -1;
5255 	bool retry_locked;
5256 
5257 	/* Disconnect any existing devices under this port */
5258 	if (udev) {
5259 		if (hcd->usb_phy && !hdev->parent)
5260 			usb_phy_notify_disconnect(hcd->usb_phy, udev->speed);
5261 		usb_disconnect(&port_dev->child);
5262 	}
5263 
5264 	/* We can forget about a "removed" device when there's a physical
5265 	 * disconnect or the connect status changes.
5266 	 */
5267 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5268 			(portchange & USB_PORT_STAT_C_CONNECTION))
5269 		clear_bit(port1, hub->removed_bits);
5270 
5271 	if (portchange & (USB_PORT_STAT_C_CONNECTION |
5272 				USB_PORT_STAT_C_ENABLE)) {
5273 		status = hub_port_debounce_be_stable(hub, port1);
5274 		if (status < 0) {
5275 			if (status != -ENODEV &&
5276 				port1 != unreliable_port &&
5277 				printk_ratelimit())
5278 				dev_err(&port_dev->dev, "connect-debounce failed\n");
5279 			portstatus &= ~USB_PORT_STAT_CONNECTION;
5280 			unreliable_port = port1;
5281 		} else {
5282 			portstatus = status;
5283 		}
5284 	}
5285 
5286 	/* Return now if debouncing failed or nothing is connected or
5287 	 * the device was "removed".
5288 	 */
5289 	if (!(portstatus & USB_PORT_STAT_CONNECTION) ||
5290 			test_bit(port1, hub->removed_bits)) {
5291 
5292 		/*
5293 		 * maybe switch power back on (e.g. root hub was reset)
5294 		 * but only if the port isn't owned by someone else.
5295 		 */
5296 		if (hub_is_port_power_switchable(hub)
5297 				&& !usb_port_is_power_on(hub, portstatus)
5298 				&& !port_dev->port_owner)
5299 			set_port_feature(hdev, port1, USB_PORT_FEAT_POWER);
5300 
5301 		if (portstatus & USB_PORT_STAT_ENABLE)
5302 			goto done;
5303 		return;
5304 	}
5305 	if (hub_is_superspeed(hub->hdev))
5306 		unit_load = 150;
5307 	else
5308 		unit_load = 100;
5309 
5310 	status = 0;
5311 
5312 	for (i = 0; i < PORT_INIT_TRIES; i++) {
5313 		if (hub_port_stop_enumerate(hub, port1, i)) {
5314 			status = -ENODEV;
5315 			break;
5316 		}
5317 
5318 		usb_lock_port(port_dev);
5319 		mutex_lock(hcd->address0_mutex);
5320 		retry_locked = true;
5321 		/* reallocate for each attempt, since references
5322 		 * to the previous one can escape in various ways
5323 		 */
5324 		udev = usb_alloc_dev(hdev, hdev->bus, port1);
5325 		if (!udev) {
5326 			dev_err(&port_dev->dev,
5327 					"couldn't allocate usb_device\n");
5328 			mutex_unlock(hcd->address0_mutex);
5329 			usb_unlock_port(port_dev);
5330 			goto done;
5331 		}
5332 
5333 		usb_set_device_state(udev, USB_STATE_POWERED);
5334 		udev->bus_mA = hub->mA_per_port;
5335 		udev->level = hdev->level + 1;
5336 		udev->wusb = hub_is_wusb(hub);
5337 
5338 		/* Devices connected to SuperSpeed hubs are USB 3.0 or later */
5339 		if (hub_is_superspeed(hub->hdev))
5340 			udev->speed = USB_SPEED_SUPER;
5341 		else
5342 			udev->speed = USB_SPEED_UNKNOWN;
5343 
5344 		choose_devnum(udev);
5345 		if (udev->devnum <= 0) {
5346 			status = -ENOTCONN;	/* Don't retry */
5347 			goto loop;
5348 		}
5349 
5350 		/* reset (non-USB 3.0 devices) and get descriptor */
5351 		status = hub_port_init(hub, udev, port1, i);
5352 		if (status < 0)
5353 			goto loop;
5354 
5355 		mutex_unlock(hcd->address0_mutex);
5356 		usb_unlock_port(port_dev);
5357 		retry_locked = false;
5358 
5359 		if (udev->quirks & USB_QUIRK_DELAY_INIT)
5360 			msleep(2000);
5361 
5362 		/* consecutive bus-powered hubs aren't reliable; they can
5363 		 * violate the voltage drop budget.  if the new child has
5364 		 * a "powered" LED, users should notice we didn't enable it
5365 		 * (without reading syslog), even without per-port LEDs
5366 		 * on the parent.
5367 		 */
5368 		if (udev->descriptor.bDeviceClass == USB_CLASS_HUB
5369 				&& udev->bus_mA <= unit_load) {
5370 			u16	devstat;
5371 
5372 			status = usb_get_std_status(udev, USB_RECIP_DEVICE, 0,
5373 					&devstat);
5374 			if (status) {
5375 				dev_dbg(&udev->dev, "get status %d ?\n", status);
5376 				goto loop_disable;
5377 			}
5378 			if ((devstat & (1 << USB_DEVICE_SELF_POWERED)) == 0) {
5379 				dev_err(&udev->dev,
5380 					"can't connect bus-powered hub "
5381 					"to this port\n");
5382 				if (hub->has_indicators) {
5383 					hub->indicator[port1-1] =
5384 						INDICATOR_AMBER_BLINK;
5385 					queue_delayed_work(
5386 						system_power_efficient_wq,
5387 						&hub->leds, 0);
5388 				}
5389 				status = -ENOTCONN;	/* Don't retry */
5390 				goto loop_disable;
5391 			}
5392 		}
5393 
5394 		/* check for devices running slower than they could */
5395 		if (le16_to_cpu(udev->descriptor.bcdUSB) >= 0x0200
5396 				&& udev->speed == USB_SPEED_FULL
5397 				&& highspeed_hubs != 0)
5398 			check_highspeed(hub, udev, port1);
5399 
5400 		/* Store the parent's children[] pointer.  At this point
5401 		 * udev becomes globally accessible, although presumably
5402 		 * no one will look at it until hdev is unlocked.
5403 		 */
5404 		status = 0;
5405 
5406 		mutex_lock(&usb_port_peer_mutex);
5407 
5408 		/* We mustn't add new devices if the parent hub has
5409 		 * been disconnected; we would race with the
5410 		 * recursively_mark_NOTATTACHED() routine.
5411 		 */
5412 		spin_lock_irq(&device_state_lock);
5413 		if (hdev->state == USB_STATE_NOTATTACHED)
5414 			status = -ENOTCONN;
5415 		else
5416 			port_dev->child = udev;
5417 		spin_unlock_irq(&device_state_lock);
5418 		mutex_unlock(&usb_port_peer_mutex);
5419 
5420 		/* Run it through the hoops (find a driver, etc) */
5421 		if (!status) {
5422 			status = usb_new_device(udev);
5423 			if (status) {
5424 				mutex_lock(&usb_port_peer_mutex);
5425 				spin_lock_irq(&device_state_lock);
5426 				port_dev->child = NULL;
5427 				spin_unlock_irq(&device_state_lock);
5428 				mutex_unlock(&usb_port_peer_mutex);
5429 			} else {
5430 				if (hcd->usb_phy && !hdev->parent)
5431 					usb_phy_notify_connect(hcd->usb_phy,
5432 							udev->speed);
5433 			}
5434 		}
5435 
5436 		if (status)
5437 			goto loop_disable;
5438 
5439 		status = hub_power_remaining(hub);
5440 		if (status)
5441 			dev_dbg(hub->intfdev, "%dmA power budget left\n", status);
5442 
5443 		return;
5444 
5445 loop_disable:
5446 		hub_port_disable(hub, port1, 1);
5447 loop:
5448 		usb_ep0_reinit(udev);
5449 		release_devnum(udev);
5450 		hub_free_dev(udev);
5451 		if (retry_locked) {
5452 			mutex_unlock(hcd->address0_mutex);
5453 			usb_unlock_port(port_dev);
5454 		}
5455 		usb_put_dev(udev);
5456 		if ((status == -ENOTCONN) || (status == -ENOTSUPP))
5457 			break;
5458 
5459 		/* When halfway through our retry count, power-cycle the port */
5460 		if (i == (PORT_INIT_TRIES - 1) / 2) {
5461 			dev_info(&port_dev->dev, "attempt power cycle\n");
5462 			usb_hub_set_port_power(hdev, hub, port1, false);
5463 			msleep(2 * hub_power_on_good_delay(hub));
5464 			usb_hub_set_port_power(hdev, hub, port1, true);
5465 			msleep(hub_power_on_good_delay(hub));
5466 		}
5467 	}
5468 	if (hub->hdev->parent ||
5469 			!hcd->driver->port_handed_over ||
5470 			!(hcd->driver->port_handed_over)(hcd, port1)) {
5471 		if (status != -ENOTCONN && status != -ENODEV)
5472 			dev_err(&port_dev->dev,
5473 					"unable to enumerate USB device\n");
5474 	}
5475 
5476 done:
5477 	hub_port_disable(hub, port1, 1);
5478 	if (hcd->driver->relinquish_port && !hub->hdev->parent) {
5479 		if (status != -ENOTCONN && status != -ENODEV)
5480 			hcd->driver->relinquish_port(hcd, port1);
5481 	}
5482 }
5483 
5484 /* Handle physical or logical connection change events.
5485  * This routine is called when:
5486  *	a port connection-change occurs;
5487  *	a port enable-change occurs (often caused by EMI);
5488  *	usb_reset_and_verify_device() encounters changed descriptors (as from
5489  *		a firmware download)
5490  * caller already locked the hub
5491  */
5492 static void hub_port_connect_change(struct usb_hub *hub, int port1,
5493 					u16 portstatus, u16 portchange)
5494 		__must_hold(&port_dev->status_lock)
5495 {
5496 	struct usb_port *port_dev = hub->ports[port1 - 1];
5497 	struct usb_device *udev = port_dev->child;
5498 	struct usb_device_descriptor descriptor;
5499 	int status = -ENODEV;
5500 	int retval;
5501 
5502 	dev_dbg(&port_dev->dev, "status %04x, change %04x, %s\n", portstatus,
5503 			portchange, portspeed(hub, portstatus));
5504 
5505 	if (hub->has_indicators) {
5506 		set_port_led(hub, port1, HUB_LED_AUTO);
5507 		hub->indicator[port1-1] = INDICATOR_AUTO;
5508 	}
5509 
5510 #ifdef	CONFIG_USB_OTG
5511 	/* during HNP, don't repeat the debounce */
5512 	if (hub->hdev->bus->is_b_host)
5513 		portchange &= ~(USB_PORT_STAT_C_CONNECTION |
5514 				USB_PORT_STAT_C_ENABLE);
5515 #endif
5516 
5517 	/* Try to resuscitate an existing device */
5518 	if ((portstatus & USB_PORT_STAT_CONNECTION) && udev &&
5519 			udev->state != USB_STATE_NOTATTACHED) {
5520 		if (portstatus & USB_PORT_STAT_ENABLE) {
5521 			/*
5522 			 * USB-3 connections are initialized automatically by
5523 			 * the hostcontroller hardware. Therefore check for
5524 			 * changed device descriptors before resuscitating the
5525 			 * device.
5526 			 */
5527 			descriptor = udev->descriptor;
5528 			retval = usb_get_device_descriptor(udev,
5529 					sizeof(udev->descriptor));
5530 			if (retval < 0) {
5531 				dev_dbg(&udev->dev,
5532 						"can't read device descriptor %d\n",
5533 						retval);
5534 			} else {
5535 				if (descriptors_changed(udev, &descriptor,
5536 						udev->bos)) {
5537 					dev_dbg(&udev->dev,
5538 							"device descriptor has changed\n");
5539 					/* for disconnect() calls */
5540 					udev->descriptor = descriptor;
5541 				} else {
5542 					status = 0; /* Nothing to do */
5543 				}
5544 			}
5545 #ifdef CONFIG_PM
5546 		} else if (udev->state == USB_STATE_SUSPENDED &&
5547 				udev->persist_enabled) {
5548 			/* For a suspended device, treat this as a
5549 			 * remote wakeup event.
5550 			 */
5551 			usb_unlock_port(port_dev);
5552 			status = usb_remote_wakeup(udev);
5553 			usb_lock_port(port_dev);
5554 #endif
5555 		} else {
5556 			/* Don't resuscitate */;
5557 		}
5558 	}
5559 	clear_bit(port1, hub->change_bits);
5560 
5561 	/* successfully revalidated the connection */
5562 	if (status == 0)
5563 		return;
5564 
5565 	usb_unlock_port(port_dev);
5566 	hub_port_connect(hub, port1, portstatus, portchange);
5567 	usb_lock_port(port_dev);
5568 }
5569 
5570 /* Handle notifying userspace about hub over-current events */
5571 static void port_over_current_notify(struct usb_port *port_dev)
5572 {
5573 	char *envp[3] = { NULL, NULL, NULL };
5574 	struct device *hub_dev;
5575 	char *port_dev_path;
5576 
5577 	sysfs_notify(&port_dev->dev.kobj, NULL, "over_current_count");
5578 
5579 	hub_dev = port_dev->dev.parent;
5580 
5581 	if (!hub_dev)
5582 		return;
5583 
5584 	port_dev_path = kobject_get_path(&port_dev->dev.kobj, GFP_KERNEL);
5585 	if (!port_dev_path)
5586 		return;
5587 
5588 	envp[0] = kasprintf(GFP_KERNEL, "OVER_CURRENT_PORT=%s", port_dev_path);
5589 	if (!envp[0])
5590 		goto exit;
5591 
5592 	envp[1] = kasprintf(GFP_KERNEL, "OVER_CURRENT_COUNT=%u",
5593 			port_dev->over_current_count);
5594 	if (!envp[1])
5595 		goto exit;
5596 
5597 	kobject_uevent_env(&hub_dev->kobj, KOBJ_CHANGE, envp);
5598 
5599 exit:
5600 	kfree(envp[1]);
5601 	kfree(envp[0]);
5602 	kfree(port_dev_path);
5603 }
5604 
5605 static void port_event(struct usb_hub *hub, int port1)
5606 		__must_hold(&port_dev->status_lock)
5607 {
5608 	int connect_change;
5609 	struct usb_port *port_dev = hub->ports[port1 - 1];
5610 	struct usb_device *udev = port_dev->child;
5611 	struct usb_device *hdev = hub->hdev;
5612 	u16 portstatus, portchange;
5613 	int i = 0;
5614 
5615 	connect_change = test_bit(port1, hub->change_bits);
5616 	clear_bit(port1, hub->event_bits);
5617 	clear_bit(port1, hub->wakeup_bits);
5618 
5619 	if (usb_hub_port_status(hub, port1, &portstatus, &portchange) < 0)
5620 		return;
5621 
5622 	if (portchange & USB_PORT_STAT_C_CONNECTION) {
5623 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_CONNECTION);
5624 		connect_change = 1;
5625 	}
5626 
5627 	if (portchange & USB_PORT_STAT_C_ENABLE) {
5628 		if (!connect_change)
5629 			dev_dbg(&port_dev->dev, "enable change, status %08x\n",
5630 					portstatus);
5631 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_ENABLE);
5632 
5633 		/*
5634 		 * EM interference sometimes causes badly shielded USB devices
5635 		 * to be shutdown by the hub, this hack enables them again.
5636 		 * Works at least with mouse driver.
5637 		 */
5638 		if (!(portstatus & USB_PORT_STAT_ENABLE)
5639 		    && !connect_change && udev) {
5640 			dev_err(&port_dev->dev, "disabled by hub (EMI?), re-enabling...\n");
5641 			connect_change = 1;
5642 		}
5643 	}
5644 
5645 	if (portchange & USB_PORT_STAT_C_OVERCURRENT) {
5646 		u16 status = 0, unused;
5647 		port_dev->over_current_count++;
5648 		port_over_current_notify(port_dev);
5649 
5650 		dev_dbg(&port_dev->dev, "over-current change #%u\n",
5651 			port_dev->over_current_count);
5652 		usb_clear_port_feature(hdev, port1,
5653 				USB_PORT_FEAT_C_OVER_CURRENT);
5654 		msleep(100);	/* Cool down */
5655 		hub_power_on(hub, true);
5656 		usb_hub_port_status(hub, port1, &status, &unused);
5657 		if (status & USB_PORT_STAT_OVERCURRENT)
5658 			dev_err(&port_dev->dev, "over-current condition\n");
5659 	}
5660 
5661 	if (portchange & USB_PORT_STAT_C_RESET) {
5662 		dev_dbg(&port_dev->dev, "reset change\n");
5663 		usb_clear_port_feature(hdev, port1, USB_PORT_FEAT_C_RESET);
5664 	}
5665 	if ((portchange & USB_PORT_STAT_C_BH_RESET)
5666 	    && hub_is_superspeed(hdev)) {
5667 		dev_dbg(&port_dev->dev, "warm reset change\n");
5668 		usb_clear_port_feature(hdev, port1,
5669 				USB_PORT_FEAT_C_BH_PORT_RESET);
5670 	}
5671 	if (portchange & USB_PORT_STAT_C_LINK_STATE) {
5672 		dev_dbg(&port_dev->dev, "link state change\n");
5673 		usb_clear_port_feature(hdev, port1,
5674 				USB_PORT_FEAT_C_PORT_LINK_STATE);
5675 	}
5676 	if (portchange & USB_PORT_STAT_C_CONFIG_ERROR) {
5677 		dev_warn(&port_dev->dev, "config error\n");
5678 		usb_clear_port_feature(hdev, port1,
5679 				USB_PORT_FEAT_C_PORT_CONFIG_ERROR);
5680 	}
5681 
5682 	/* skip port actions that require the port to be powered on */
5683 	if (!pm_runtime_active(&port_dev->dev))
5684 		return;
5685 
5686 	/* skip port actions if ignore_event and early_stop are true */
5687 	if (port_dev->ignore_event && port_dev->early_stop)
5688 		return;
5689 
5690 	if (hub_handle_remote_wakeup(hub, port1, portstatus, portchange))
5691 		connect_change = 1;
5692 
5693 	/*
5694 	 * Avoid trying to recover a USB3 SS.Inactive port with a warm reset if
5695 	 * the device was disconnected. A 12ms disconnect detect timer in
5696 	 * SS.Inactive state transitions the port to RxDetect automatically.
5697 	 * SS.Inactive link error state is common during device disconnect.
5698 	 */
5699 	while (hub_port_warm_reset_required(hub, port1, portstatus)) {
5700 		if ((i++ < DETECT_DISCONNECT_TRIES) && udev) {
5701 			u16 unused;
5702 
5703 			msleep(20);
5704 			usb_hub_port_status(hub, port1, &portstatus, &unused);
5705 			dev_dbg(&port_dev->dev, "Wait for inactive link disconnect detect\n");
5706 			continue;
5707 		} else if (!udev || !(portstatus & USB_PORT_STAT_CONNECTION)
5708 				|| udev->state == USB_STATE_NOTATTACHED) {
5709 			dev_dbg(&port_dev->dev, "do warm reset, port only\n");
5710 			if (hub_port_reset(hub, port1, NULL,
5711 					HUB_BH_RESET_TIME, true) < 0)
5712 				hub_port_disable(hub, port1, 1);
5713 		} else {
5714 			dev_dbg(&port_dev->dev, "do warm reset, full device\n");
5715 			usb_unlock_port(port_dev);
5716 			usb_lock_device(udev);
5717 			usb_reset_device(udev);
5718 			usb_unlock_device(udev);
5719 			usb_lock_port(port_dev);
5720 			connect_change = 0;
5721 		}
5722 		break;
5723 	}
5724 
5725 	if (connect_change)
5726 		hub_port_connect_change(hub, port1, portstatus, portchange);
5727 }
5728 
5729 static void hub_event(struct work_struct *work)
5730 {
5731 	struct usb_device *hdev;
5732 	struct usb_interface *intf;
5733 	struct usb_hub *hub;
5734 	struct device *hub_dev;
5735 	u16 hubstatus;
5736 	u16 hubchange;
5737 	int i, ret;
5738 
5739 	hub = container_of(work, struct usb_hub, events);
5740 	hdev = hub->hdev;
5741 	hub_dev = hub->intfdev;
5742 	intf = to_usb_interface(hub_dev);
5743 
5744 	kcov_remote_start_usb((u64)hdev->bus->busnum);
5745 
5746 	dev_dbg(hub_dev, "state %d ports %d chg %04x evt %04x\n",
5747 			hdev->state, hdev->maxchild,
5748 			/* NOTE: expects max 15 ports... */
5749 			(u16) hub->change_bits[0],
5750 			(u16) hub->event_bits[0]);
5751 
5752 	/* Lock the device, then check to see if we were
5753 	 * disconnected while waiting for the lock to succeed. */
5754 	usb_lock_device(hdev);
5755 	if (unlikely(hub->disconnected))
5756 		goto out_hdev_lock;
5757 
5758 	/* If the hub has died, clean up after it */
5759 	if (hdev->state == USB_STATE_NOTATTACHED) {
5760 		hub->error = -ENODEV;
5761 		hub_quiesce(hub, HUB_DISCONNECT);
5762 		goto out_hdev_lock;
5763 	}
5764 
5765 	/* Autoresume */
5766 	ret = usb_autopm_get_interface(intf);
5767 	if (ret) {
5768 		dev_dbg(hub_dev, "Can't autoresume: %d\n", ret);
5769 		goto out_hdev_lock;
5770 	}
5771 
5772 	/* If this is an inactive hub, do nothing */
5773 	if (hub->quiescing)
5774 		goto out_autopm;
5775 
5776 	if (hub->error) {
5777 		dev_dbg(hub_dev, "resetting for error %d\n", hub->error);
5778 
5779 		ret = usb_reset_device(hdev);
5780 		if (ret) {
5781 			dev_dbg(hub_dev, "error resetting hub: %d\n", ret);
5782 			goto out_autopm;
5783 		}
5784 
5785 		hub->nerrors = 0;
5786 		hub->error = 0;
5787 	}
5788 
5789 	/* deal with port status changes */
5790 	for (i = 1; i <= hdev->maxchild; i++) {
5791 		struct usb_port *port_dev = hub->ports[i - 1];
5792 
5793 		if (test_bit(i, hub->event_bits)
5794 				|| test_bit(i, hub->change_bits)
5795 				|| test_bit(i, hub->wakeup_bits)) {
5796 			/*
5797 			 * The get_noresume and barrier ensure that if
5798 			 * the port was in the process of resuming, we
5799 			 * flush that work and keep the port active for
5800 			 * the duration of the port_event().  However,
5801 			 * if the port is runtime pm suspended
5802 			 * (powered-off), we leave it in that state, run
5803 			 * an abbreviated port_event(), and move on.
5804 			 */
5805 			pm_runtime_get_noresume(&port_dev->dev);
5806 			pm_runtime_barrier(&port_dev->dev);
5807 			usb_lock_port(port_dev);
5808 			port_event(hub, i);
5809 			usb_unlock_port(port_dev);
5810 			pm_runtime_put_sync(&port_dev->dev);
5811 		}
5812 	}
5813 
5814 	/* deal with hub status changes */
5815 	if (test_and_clear_bit(0, hub->event_bits) == 0)
5816 		;	/* do nothing */
5817 	else if (hub_hub_status(hub, &hubstatus, &hubchange) < 0)
5818 		dev_err(hub_dev, "get_hub_status failed\n");
5819 	else {
5820 		if (hubchange & HUB_CHANGE_LOCAL_POWER) {
5821 			dev_dbg(hub_dev, "power change\n");
5822 			clear_hub_feature(hdev, C_HUB_LOCAL_POWER);
5823 			if (hubstatus & HUB_STATUS_LOCAL_POWER)
5824 				/* FIXME: Is this always true? */
5825 				hub->limited_power = 1;
5826 			else
5827 				hub->limited_power = 0;
5828 		}
5829 		if (hubchange & HUB_CHANGE_OVERCURRENT) {
5830 			u16 status = 0;
5831 			u16 unused;
5832 
5833 			dev_dbg(hub_dev, "over-current change\n");
5834 			clear_hub_feature(hdev, C_HUB_OVER_CURRENT);
5835 			msleep(500);	/* Cool down */
5836 			hub_power_on(hub, true);
5837 			hub_hub_status(hub, &status, &unused);
5838 			if (status & HUB_STATUS_OVERCURRENT)
5839 				dev_err(hub_dev, "over-current condition\n");
5840 		}
5841 	}
5842 
5843 out_autopm:
5844 	/* Balance the usb_autopm_get_interface() above */
5845 	usb_autopm_put_interface_no_suspend(intf);
5846 out_hdev_lock:
5847 	usb_unlock_device(hdev);
5848 
5849 	/* Balance the stuff in kick_hub_wq() and allow autosuspend */
5850 	usb_autopm_put_interface(intf);
5851 	kref_put(&hub->kref, hub_release);
5852 
5853 	kcov_remote_stop();
5854 }
5855 
5856 static const struct usb_device_id hub_id_table[] = {
5857     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5858                    | USB_DEVICE_ID_MATCH_PRODUCT
5859                    | USB_DEVICE_ID_MATCH_INT_CLASS,
5860       .idVendor = USB_VENDOR_SMSC,
5861       .idProduct = USB_PRODUCT_USB5534B,
5862       .bInterfaceClass = USB_CLASS_HUB,
5863       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5864     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5865                    | USB_DEVICE_ID_MATCH_PRODUCT,
5866       .idVendor = USB_VENDOR_CYPRESS,
5867       .idProduct = USB_PRODUCT_CY7C65632,
5868       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5869     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5870 			| USB_DEVICE_ID_MATCH_INT_CLASS,
5871       .idVendor = USB_VENDOR_GENESYS_LOGIC,
5872       .bInterfaceClass = USB_CLASS_HUB,
5873       .driver_info = HUB_QUIRK_CHECK_PORT_AUTOSUSPEND},
5874     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5875 			| USB_DEVICE_ID_MATCH_PRODUCT,
5876       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5877       .idProduct = USB_PRODUCT_TUSB8041_USB2,
5878       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5879     { .match_flags = USB_DEVICE_ID_MATCH_VENDOR
5880 			| USB_DEVICE_ID_MATCH_PRODUCT,
5881       .idVendor = USB_VENDOR_TEXAS_INSTRUMENTS,
5882       .idProduct = USB_PRODUCT_TUSB8041_USB3,
5883       .driver_info = HUB_QUIRK_DISABLE_AUTOSUSPEND},
5884     { .match_flags = USB_DEVICE_ID_MATCH_DEV_CLASS,
5885       .bDeviceClass = USB_CLASS_HUB},
5886     { .match_flags = USB_DEVICE_ID_MATCH_INT_CLASS,
5887       .bInterfaceClass = USB_CLASS_HUB},
5888     { }						/* Terminating entry */
5889 };
5890 
5891 MODULE_DEVICE_TABLE(usb, hub_id_table);
5892 
5893 static struct usb_driver hub_driver = {
5894 	.name =		"hub",
5895 	.probe =	hub_probe,
5896 	.disconnect =	hub_disconnect,
5897 	.suspend =	hub_suspend,
5898 	.resume =	hub_resume,
5899 	.reset_resume =	hub_reset_resume,
5900 	.pre_reset =	hub_pre_reset,
5901 	.post_reset =	hub_post_reset,
5902 	.unlocked_ioctl = hub_ioctl,
5903 	.id_table =	hub_id_table,
5904 	.supports_autosuspend =	1,
5905 };
5906 
5907 int usb_hub_init(void)
5908 {
5909 	if (usb_register(&hub_driver) < 0) {
5910 		printk(KERN_ERR "%s: can't register hub driver\n",
5911 			usbcore_name);
5912 		return -1;
5913 	}
5914 
5915 	/*
5916 	 * The workqueue needs to be freezable to avoid interfering with
5917 	 * USB-PERSIST port handover. Otherwise it might see that a full-speed
5918 	 * device was gone before the EHCI controller had handed its port
5919 	 * over to the companion full-speed controller.
5920 	 */
5921 	hub_wq = alloc_workqueue("usb_hub_wq", WQ_FREEZABLE, 0);
5922 	if (hub_wq)
5923 		return 0;
5924 
5925 	/* Fall through if kernel_thread failed */
5926 	usb_deregister(&hub_driver);
5927 	pr_err("%s: can't allocate workqueue for usb hub\n", usbcore_name);
5928 
5929 	return -1;
5930 }
5931 
5932 void usb_hub_cleanup(void)
5933 {
5934 	destroy_workqueue(hub_wq);
5935 
5936 	/*
5937 	 * Hub resources are freed for us by usb_deregister. It calls
5938 	 * usb_driver_purge on every device which in turn calls that
5939 	 * devices disconnect function if it is using this driver.
5940 	 * The hub_disconnect function takes care of releasing the
5941 	 * individual hub resources. -greg
5942 	 */
5943 	usb_deregister(&hub_driver);
5944 } /* usb_hub_cleanup() */
5945 
5946 /**
5947  * usb_reset_and_verify_device - perform a USB port reset to reinitialize a device
5948  * @udev: device to reset (not in SUSPENDED or NOTATTACHED state)
5949  *
5950  * WARNING - don't use this routine to reset a composite device
5951  * (one with multiple interfaces owned by separate drivers)!
5952  * Use usb_reset_device() instead.
5953  *
5954  * Do a port reset, reassign the device's address, and establish its
5955  * former operating configuration.  If the reset fails, or the device's
5956  * descriptors change from their values before the reset, or the original
5957  * configuration and altsettings cannot be restored, a flag will be set
5958  * telling hub_wq to pretend the device has been disconnected and then
5959  * re-connected.  All drivers will be unbound, and the device will be
5960  * re-enumerated and probed all over again.
5961  *
5962  * Return: 0 if the reset succeeded, -ENODEV if the device has been
5963  * flagged for logical disconnection, or some other negative error code
5964  * if the reset wasn't even attempted.
5965  *
5966  * Note:
5967  * The caller must own the device lock and the port lock, the latter is
5968  * taken by usb_reset_device().  For example, it's safe to use
5969  * usb_reset_device() from a driver probe() routine after downloading
5970  * new firmware.  For calls that might not occur during probe(), drivers
5971  * should lock the device using usb_lock_device_for_reset().
5972  *
5973  * Locking exception: This routine may also be called from within an
5974  * autoresume handler.  Such usage won't conflict with other tasks
5975  * holding the device lock because these tasks should always call
5976  * usb_autopm_resume_device(), thereby preventing any unwanted
5977  * autoresume.  The autoresume handler is expected to have already
5978  * acquired the port lock before calling this routine.
5979  */
5980 static int usb_reset_and_verify_device(struct usb_device *udev)
5981 {
5982 	struct usb_device		*parent_hdev = udev->parent;
5983 	struct usb_hub			*parent_hub;
5984 	struct usb_hcd			*hcd = bus_to_hcd(udev->bus);
5985 	struct usb_device_descriptor	descriptor = udev->descriptor;
5986 	struct usb_host_bos		*bos;
5987 	int				i, j, ret = 0;
5988 	int				port1 = udev->portnum;
5989 
5990 	if (udev->state == USB_STATE_NOTATTACHED ||
5991 			udev->state == USB_STATE_SUSPENDED) {
5992 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
5993 				udev->state);
5994 		return -EINVAL;
5995 	}
5996 
5997 	if (!parent_hdev)
5998 		return -EISDIR;
5999 
6000 	parent_hub = usb_hub_to_struct_hub(parent_hdev);
6001 
6002 	/* Disable USB2 hardware LPM.
6003 	 * It will be re-enabled by the enumeration process.
6004 	 */
6005 	usb_disable_usb2_hardware_lpm(udev);
6006 
6007 	bos = udev->bos;
6008 	udev->bos = NULL;
6009 
6010 	mutex_lock(hcd->address0_mutex);
6011 
6012 	for (i = 0; i < PORT_INIT_TRIES; ++i) {
6013 		if (hub_port_stop_enumerate(parent_hub, port1, i)) {
6014 			ret = -ENODEV;
6015 			break;
6016 		}
6017 
6018 		/* ep0 maxpacket size may change; let the HCD know about it.
6019 		 * Other endpoints will be handled by re-enumeration. */
6020 		usb_ep0_reinit(udev);
6021 		ret = hub_port_init(parent_hub, udev, port1, i);
6022 		if (ret >= 0 || ret == -ENOTCONN || ret == -ENODEV)
6023 			break;
6024 	}
6025 	mutex_unlock(hcd->address0_mutex);
6026 
6027 	if (ret < 0)
6028 		goto re_enumerate;
6029 
6030 	/* Device might have changed firmware (DFU or similar) */
6031 	if (descriptors_changed(udev, &descriptor, bos)) {
6032 		dev_info(&udev->dev, "device firmware changed\n");
6033 		udev->descriptor = descriptor;	/* for disconnect() calls */
6034 		goto re_enumerate;
6035 	}
6036 
6037 	/* Restore the device's previous configuration */
6038 	if (!udev->actconfig)
6039 		goto done;
6040 
6041 	mutex_lock(hcd->bandwidth_mutex);
6042 	ret = usb_hcd_alloc_bandwidth(udev, udev->actconfig, NULL, NULL);
6043 	if (ret < 0) {
6044 		dev_warn(&udev->dev,
6045 				"Busted HC?  Not enough HCD resources for "
6046 				"old configuration.\n");
6047 		mutex_unlock(hcd->bandwidth_mutex);
6048 		goto re_enumerate;
6049 	}
6050 	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
6051 			USB_REQ_SET_CONFIGURATION, 0,
6052 			udev->actconfig->desc.bConfigurationValue, 0,
6053 			NULL, 0, USB_CTRL_SET_TIMEOUT);
6054 	if (ret < 0) {
6055 		dev_err(&udev->dev,
6056 			"can't restore configuration #%d (error=%d)\n",
6057 			udev->actconfig->desc.bConfigurationValue, ret);
6058 		mutex_unlock(hcd->bandwidth_mutex);
6059 		goto re_enumerate;
6060 	}
6061 	mutex_unlock(hcd->bandwidth_mutex);
6062 	usb_set_device_state(udev, USB_STATE_CONFIGURED);
6063 
6064 	/* Put interfaces back into the same altsettings as before.
6065 	 * Don't bother to send the Set-Interface request for interfaces
6066 	 * that were already in altsetting 0; besides being unnecessary,
6067 	 * many devices can't handle it.  Instead just reset the host-side
6068 	 * endpoint state.
6069 	 */
6070 	for (i = 0; i < udev->actconfig->desc.bNumInterfaces; i++) {
6071 		struct usb_host_config *config = udev->actconfig;
6072 		struct usb_interface *intf = config->interface[i];
6073 		struct usb_interface_descriptor *desc;
6074 
6075 		desc = &intf->cur_altsetting->desc;
6076 		if (desc->bAlternateSetting == 0) {
6077 			usb_disable_interface(udev, intf, true);
6078 			usb_enable_interface(udev, intf, true);
6079 			ret = 0;
6080 		} else {
6081 			/* Let the bandwidth allocation function know that this
6082 			 * device has been reset, and it will have to use
6083 			 * alternate setting 0 as the current alternate setting.
6084 			 */
6085 			intf->resetting_device = 1;
6086 			ret = usb_set_interface(udev, desc->bInterfaceNumber,
6087 					desc->bAlternateSetting);
6088 			intf->resetting_device = 0;
6089 		}
6090 		if (ret < 0) {
6091 			dev_err(&udev->dev, "failed to restore interface %d "
6092 				"altsetting %d (error=%d)\n",
6093 				desc->bInterfaceNumber,
6094 				desc->bAlternateSetting,
6095 				ret);
6096 			goto re_enumerate;
6097 		}
6098 		/* Resetting also frees any allocated streams */
6099 		for (j = 0; j < intf->cur_altsetting->desc.bNumEndpoints; j++)
6100 			intf->cur_altsetting->endpoint[j].streams = 0;
6101 	}
6102 
6103 done:
6104 	/* Now that the alt settings are re-installed, enable LTM and LPM. */
6105 	usb_enable_usb2_hardware_lpm(udev);
6106 	usb_unlocked_enable_lpm(udev);
6107 	usb_enable_ltm(udev);
6108 	usb_release_bos_descriptor(udev);
6109 	udev->bos = bos;
6110 	return 0;
6111 
6112 re_enumerate:
6113 	usb_release_bos_descriptor(udev);
6114 	udev->bos = bos;
6115 	hub_port_logical_disconnect(parent_hub, port1);
6116 	return -ENODEV;
6117 }
6118 
6119 /**
6120  * usb_reset_device - warn interface drivers and perform a USB port reset
6121  * @udev: device to reset (not in NOTATTACHED state)
6122  *
6123  * Warns all drivers bound to registered interfaces (using their pre_reset
6124  * method), performs the port reset, and then lets the drivers know that
6125  * the reset is over (using their post_reset method).
6126  *
6127  * Return: The same as for usb_reset_and_verify_device().
6128  * However, if a reset is already in progress (for instance, if a
6129  * driver doesn't have pre_reset() or post_reset() callbacks, and while
6130  * being unbound or re-bound during the ongoing reset its disconnect()
6131  * or probe() routine tries to perform a second, nested reset), the
6132  * routine returns -EINPROGRESS.
6133  *
6134  * Note:
6135  * The caller must own the device lock.  For example, it's safe to use
6136  * this from a driver probe() routine after downloading new firmware.
6137  * For calls that might not occur during probe(), drivers should lock
6138  * the device using usb_lock_device_for_reset().
6139  *
6140  * If an interface is currently being probed or disconnected, we assume
6141  * its driver knows how to handle resets.  For all other interfaces,
6142  * if the driver doesn't have pre_reset and post_reset methods then
6143  * we attempt to unbind it and rebind afterward.
6144  */
6145 int usb_reset_device(struct usb_device *udev)
6146 {
6147 	int ret;
6148 	int i;
6149 	unsigned int noio_flag;
6150 	struct usb_port *port_dev;
6151 	struct usb_host_config *config = udev->actconfig;
6152 	struct usb_hub *hub = usb_hub_to_struct_hub(udev->parent);
6153 
6154 	if (udev->state == USB_STATE_NOTATTACHED) {
6155 		dev_dbg(&udev->dev, "device reset not allowed in state %d\n",
6156 				udev->state);
6157 		return -EINVAL;
6158 	}
6159 
6160 	if (!udev->parent) {
6161 		/* this requires hcd-specific logic; see ohci_restart() */
6162 		dev_dbg(&udev->dev, "%s for root hub!\n", __func__);
6163 		return -EISDIR;
6164 	}
6165 
6166 	if (udev->reset_in_progress)
6167 		return -EINPROGRESS;
6168 	udev->reset_in_progress = 1;
6169 
6170 	port_dev = hub->ports[udev->portnum - 1];
6171 
6172 	/*
6173 	 * Don't allocate memory with GFP_KERNEL in current
6174 	 * context to avoid possible deadlock if usb mass
6175 	 * storage interface or usbnet interface(iSCSI case)
6176 	 * is included in current configuration. The easist
6177 	 * approach is to do it for every device reset,
6178 	 * because the device 'memalloc_noio' flag may have
6179 	 * not been set before reseting the usb device.
6180 	 */
6181 	noio_flag = memalloc_noio_save();
6182 
6183 	/* Prevent autosuspend during the reset */
6184 	usb_autoresume_device(udev);
6185 
6186 	if (config) {
6187 		for (i = 0; i < config->desc.bNumInterfaces; ++i) {
6188 			struct usb_interface *cintf = config->interface[i];
6189 			struct usb_driver *drv;
6190 			int unbind = 0;
6191 
6192 			if (cintf->dev.driver) {
6193 				drv = to_usb_driver(cintf->dev.driver);
6194 				if (drv->pre_reset && drv->post_reset)
6195 					unbind = (drv->pre_reset)(cintf);
6196 				else if (cintf->condition ==
6197 						USB_INTERFACE_BOUND)
6198 					unbind = 1;
6199 				if (unbind)
6200 					usb_forced_unbind_intf(cintf);
6201 			}
6202 		}
6203 	}
6204 
6205 	usb_lock_port(port_dev);
6206 	ret = usb_reset_and_verify_device(udev);
6207 	usb_unlock_port(port_dev);
6208 
6209 	if (config) {
6210 		for (i = config->desc.bNumInterfaces - 1; i >= 0; --i) {
6211 			struct usb_interface *cintf = config->interface[i];
6212 			struct usb_driver *drv;
6213 			int rebind = cintf->needs_binding;
6214 
6215 			if (!rebind && cintf->dev.driver) {
6216 				drv = to_usb_driver(cintf->dev.driver);
6217 				if (drv->post_reset)
6218 					rebind = (drv->post_reset)(cintf);
6219 				else if (cintf->condition ==
6220 						USB_INTERFACE_BOUND)
6221 					rebind = 1;
6222 				if (rebind)
6223 					cintf->needs_binding = 1;
6224 			}
6225 		}
6226 
6227 		/* If the reset failed, hub_wq will unbind drivers later */
6228 		if (ret == 0)
6229 			usb_unbind_and_rebind_marked_interfaces(udev);
6230 	}
6231 
6232 	usb_autosuspend_device(udev);
6233 	memalloc_noio_restore(noio_flag);
6234 	udev->reset_in_progress = 0;
6235 	return ret;
6236 }
6237 EXPORT_SYMBOL_GPL(usb_reset_device);
6238 
6239 
6240 /**
6241  * usb_queue_reset_device - Reset a USB device from an atomic context
6242  * @iface: USB interface belonging to the device to reset
6243  *
6244  * This function can be used to reset a USB device from an atomic
6245  * context, where usb_reset_device() won't work (as it blocks).
6246  *
6247  * Doing a reset via this method is functionally equivalent to calling
6248  * usb_reset_device(), except for the fact that it is delayed to a
6249  * workqueue. This means that any drivers bound to other interfaces
6250  * might be unbound, as well as users from usbfs in user space.
6251  *
6252  * Corner cases:
6253  *
6254  * - Scheduling two resets at the same time from two different drivers
6255  *   attached to two different interfaces of the same device is
6256  *   possible; depending on how the driver attached to each interface
6257  *   handles ->pre_reset(), the second reset might happen or not.
6258  *
6259  * - If the reset is delayed so long that the interface is unbound from
6260  *   its driver, the reset will be skipped.
6261  *
6262  * - This function can be called during .probe().  It can also be called
6263  *   during .disconnect(), but doing so is pointless because the reset
6264  *   will not occur.  If you really want to reset the device during
6265  *   .disconnect(), call usb_reset_device() directly -- but watch out
6266  *   for nested unbinding issues!
6267  */
6268 void usb_queue_reset_device(struct usb_interface *iface)
6269 {
6270 	if (schedule_work(&iface->reset_ws))
6271 		usb_get_intf(iface);
6272 }
6273 EXPORT_SYMBOL_GPL(usb_queue_reset_device);
6274 
6275 /**
6276  * usb_hub_find_child - Get the pointer of child device
6277  * attached to the port which is specified by @port1.
6278  * @hdev: USB device belonging to the usb hub
6279  * @port1: port num to indicate which port the child device
6280  *	is attached to.
6281  *
6282  * USB drivers call this function to get hub's child device
6283  * pointer.
6284  *
6285  * Return: %NULL if input param is invalid and
6286  * child's usb_device pointer if non-NULL.
6287  */
6288 struct usb_device *usb_hub_find_child(struct usb_device *hdev,
6289 		int port1)
6290 {
6291 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6292 
6293 	if (port1 < 1 || port1 > hdev->maxchild)
6294 		return NULL;
6295 	return hub->ports[port1 - 1]->child;
6296 }
6297 EXPORT_SYMBOL_GPL(usb_hub_find_child);
6298 
6299 void usb_hub_adjust_deviceremovable(struct usb_device *hdev,
6300 		struct usb_hub_descriptor *desc)
6301 {
6302 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6303 	enum usb_port_connect_type connect_type;
6304 	int i;
6305 
6306 	if (!hub)
6307 		return;
6308 
6309 	if (!hub_is_superspeed(hdev)) {
6310 		for (i = 1; i <= hdev->maxchild; i++) {
6311 			struct usb_port *port_dev = hub->ports[i - 1];
6312 
6313 			connect_type = port_dev->connect_type;
6314 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6315 				u8 mask = 1 << (i%8);
6316 
6317 				if (!(desc->u.hs.DeviceRemovable[i/8] & mask)) {
6318 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6319 					desc->u.hs.DeviceRemovable[i/8]	|= mask;
6320 				}
6321 			}
6322 		}
6323 	} else {
6324 		u16 port_removable = le16_to_cpu(desc->u.ss.DeviceRemovable);
6325 
6326 		for (i = 1; i <= hdev->maxchild; i++) {
6327 			struct usb_port *port_dev = hub->ports[i - 1];
6328 
6329 			connect_type = port_dev->connect_type;
6330 			if (connect_type == USB_PORT_CONNECT_TYPE_HARD_WIRED) {
6331 				u16 mask = 1 << i;
6332 
6333 				if (!(port_removable & mask)) {
6334 					dev_dbg(&port_dev->dev, "DeviceRemovable is changed to 1 according to platform information.\n");
6335 					port_removable |= mask;
6336 				}
6337 			}
6338 		}
6339 
6340 		desc->u.ss.DeviceRemovable = cpu_to_le16(port_removable);
6341 	}
6342 }
6343 
6344 #ifdef CONFIG_ACPI
6345 /**
6346  * usb_get_hub_port_acpi_handle - Get the usb port's acpi handle
6347  * @hdev: USB device belonging to the usb hub
6348  * @port1: port num of the port
6349  *
6350  * Return: Port's acpi handle if successful, %NULL if params are
6351  * invalid.
6352  */
6353 acpi_handle usb_get_hub_port_acpi_handle(struct usb_device *hdev,
6354 	int port1)
6355 {
6356 	struct usb_hub *hub = usb_hub_to_struct_hub(hdev);
6357 
6358 	if (!hub)
6359 		return NULL;
6360 
6361 	return ACPI_HANDLE(&hub->ports[port1 - 1]->dev);
6362 }
6363 #endif
6364