Linux Audio

Check our new training course

Loading...
v4.6
 
   1/*
   2 * xHCI host controller driver
   3 *
   4 * Copyright (C) 2008 Intel Corp.
   5 *
   6 * Author: Sarah Sharp
   7 * Some code borrowed from the Linux EHCI driver.
   8 *
   9 * This program is free software; you can redistribute it and/or modify
  10 * it under the terms of the GNU General Public License version 2 as
  11 * published by the Free Software Foundation.
  12 *
  13 * This program is distributed in the hope that it will be useful, but
  14 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  15 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  16 * for more details.
  17 *
  18 * You should have received a copy of the GNU General Public License
  19 * along with this program; if not, write to the Free Software Foundation,
  20 * Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  21 */
  22
  23#include <linux/pci.h>
 
  24#include <linux/irq.h>
  25#include <linux/log2.h>
  26#include <linux/module.h>
  27#include <linux/moduleparam.h>
  28#include <linux/slab.h>
  29#include <linux/dmi.h>
  30#include <linux/dma-mapping.h>
  31
  32#include "xhci.h"
  33#include "xhci-trace.h"
  34#include "xhci-mtk.h"
 
 
  35
  36#define DRIVER_AUTHOR "Sarah Sharp"
  37#define DRIVER_DESC "'eXtensible' Host Controller (xHC) Driver"
  38
  39#define	PORT_WAKE_BITS	(PORT_WKOC_E | PORT_WKDISC_E | PORT_WKCONN_E)
  40
  41/* Some 0.95 hardware can't handle the chain bit on a Link TRB being cleared */
  42static int link_quirk;
  43module_param(link_quirk, int, S_IRUGO | S_IWUSR);
  44MODULE_PARM_DESC(link_quirk, "Don't clear the chain bit on a link TRB");
  45
  46static unsigned int quirks;
  47module_param(quirks, uint, S_IRUGO);
  48MODULE_PARM_DESC(quirks, "Bit flags for quirks to be enabled as default");
  49
  50/* TODO: copied from ehci-hcd.c - can this be refactored? */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  51/*
  52 * xhci_handshake - spin reading hc until handshake completes or fails
  53 * @ptr: address of hc register to be read
  54 * @mask: bits to look at in result of read
  55 * @done: value of those bits when handshake succeeds
  56 * @usec: timeout in microseconds
  57 *
  58 * Returns negative errno, or zero on success
  59 *
  60 * Success happens when the "mask" bits have the specified value (hardware
  61 * handshake done).  There are two failure modes:  "usec" have passed (major
  62 * hardware flakeout), or the register reads as all-ones (hardware removed).
  63 */
  64int xhci_handshake(void __iomem *ptr, u32 mask, u32 done, int usec)
  65{
  66	u32	result;
 
  67
  68	do {
  69		result = readl(ptr);
  70		if (result == ~(u32)0)		/* card removed */
  71			return -ENODEV;
  72		result &= mask;
  73		if (result == done)
  74			return 0;
  75		udelay(1);
  76		usec--;
  77	} while (usec > 0);
  78	return -ETIMEDOUT;
  79}
  80
  81/*
  82 * Disable interrupts and begin the xHCI halting process.
  83 */
  84void xhci_quiesce(struct xhci_hcd *xhci)
  85{
  86	u32 halted;
  87	u32 cmd;
  88	u32 mask;
  89
  90	mask = ~(XHCI_IRQS);
  91	halted = readl(&xhci->op_regs->status) & STS_HALT;
  92	if (!halted)
  93		mask &= ~CMD_RUN;
  94
  95	cmd = readl(&xhci->op_regs->command);
  96	cmd &= mask;
  97	writel(cmd, &xhci->op_regs->command);
  98}
  99
 100/*
 101 * Force HC into halt state.
 102 *
 103 * Disable any IRQs and clear the run/stop bit.
 104 * HC will complete any current and actively pipelined transactions, and
 105 * should halt within 16 ms of the run/stop bit being cleared.
 106 * Read HC Halted bit in the status register to see when the HC is finished.
 107 */
 108int xhci_halt(struct xhci_hcd *xhci)
 109{
 110	int ret;
 111	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Halt the HC");
 112	xhci_quiesce(xhci);
 113
 114	ret = xhci_handshake(&xhci->op_regs->status,
 115			STS_HALT, STS_HALT, XHCI_MAX_HALT_USEC);
 116	if (!ret) {
 117		xhci->xhc_state |= XHCI_STATE_HALTED;
 118		xhci->cmd_ring_state = CMD_RING_STATE_STOPPED;
 119	} else
 120		xhci_warn(xhci, "Host not halted after %u microseconds.\n",
 121				XHCI_MAX_HALT_USEC);
 122	return ret;
 123}
 124
 125/*
 126 * Set the run bit and wait for the host to be running.
 127 */
 128static int xhci_start(struct xhci_hcd *xhci)
 129{
 130	u32 temp;
 131	int ret;
 132
 133	temp = readl(&xhci->op_regs->command);
 134	temp |= (CMD_RUN);
 135	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Turn on HC, cmd = 0x%x.",
 136			temp);
 137	writel(temp, &xhci->op_regs->command);
 138
 139	/*
 140	 * Wait for the HCHalted Status bit to be 0 to indicate the host is
 141	 * running.
 142	 */
 143	ret = xhci_handshake(&xhci->op_regs->status,
 144			STS_HALT, 0, XHCI_MAX_HALT_USEC);
 145	if (ret == -ETIMEDOUT)
 146		xhci_err(xhci, "Host took too long to start, "
 147				"waited %u microseconds.\n",
 148				XHCI_MAX_HALT_USEC);
 149	if (!ret)
 150		/* clear state flags. Including dying, halted or removing */
 151		xhci->xhc_state = 0;
 152
 153	return ret;
 154}
 155
 156/*
 157 * Reset a halted HC.
 158 *
 159 * This resets pipelines, timers, counters, state machines, etc.
 160 * Transactions will be terminated immediately, and operational registers
 161 * will be set to their defaults.
 162 */
 163int xhci_reset(struct xhci_hcd *xhci)
 164{
 165	u32 command;
 166	u32 state;
 167	int ret, i;
 168
 169	state = readl(&xhci->op_regs->status);
 
 
 
 
 
 
 170	if ((state & STS_HALT) == 0) {
 171		xhci_warn(xhci, "Host controller not halted, aborting reset.\n");
 172		return 0;
 173	}
 174
 175	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Reset the HC");
 176	command = readl(&xhci->op_regs->command);
 177	command |= CMD_RESET;
 178	writel(command, &xhci->op_regs->command);
 179
 180	/* Existing Intel xHCI controllers require a delay of 1 mS,
 181	 * after setting the CMD_RESET bit, and before accessing any
 182	 * HC registers. This allows the HC to complete the
 183	 * reset operation and be ready for HC register access.
 184	 * Without this delay, the subsequent HC register access,
 185	 * may result in a system hang very rarely.
 186	 */
 187	if (xhci->quirks & XHCI_INTEL_HOST)
 188		udelay(1000);
 189
 190	ret = xhci_handshake(&xhci->op_regs->command,
 191			CMD_RESET, 0, 10 * 1000 * 1000);
 192	if (ret)
 193		return ret;
 194
 
 
 
 195	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 196			 "Wait for controller to be ready for doorbell rings");
 197	/*
 198	 * xHCI cannot write to any doorbells or operational registers other
 199	 * than status until the "Controller Not Ready" flag is cleared.
 200	 */
 201	ret = xhci_handshake(&xhci->op_regs->status,
 202			STS_CNR, 0, 10 * 1000 * 1000);
 203
 204	for (i = 0; i < 2; ++i) {
 205		xhci->bus_state[i].port_c_suspend = 0;
 206		xhci->bus_state[i].suspended_ports = 0;
 207		xhci->bus_state[i].resuming_ports = 0;
 208	}
 
 209
 210	return ret;
 211}
 212
 213#ifdef CONFIG_PCI
 214static int xhci_free_msi(struct xhci_hcd *xhci)
 215{
 216	int i;
 
 
 217
 218	if (!xhci->msix_entries)
 219		return -EINVAL;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 220
 221	for (i = 0; i < xhci->msix_count; i++)
 222		if (xhci->msix_entries[i].vector)
 223			free_irq(xhci->msix_entries[i].vector,
 224					xhci_to_hcd(xhci));
 225	return 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 226}
 227
 
 228/*
 229 * Set up MSI
 230 */
 231static int xhci_setup_msi(struct xhci_hcd *xhci)
 232{
 233	int ret;
 
 
 
 234	struct pci_dev  *pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
 235
 236	ret = pci_enable_msi(pdev);
 237	if (ret) {
 238		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 239				"failed to allocate MSI entry");
 240		return ret;
 241	}
 242
 243	ret = request_irq(pdev->irq, xhci_msi_irq,
 244				0, "xhci_hcd", xhci_to_hcd(xhci));
 245	if (ret) {
 246		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 247				"disable MSI interrupt");
 248		pci_disable_msi(pdev);
 249	}
 250
 251	return ret;
 252}
 253
 254/*
 255 * Free IRQs
 256 * free all IRQs request
 257 */
 258static void xhci_free_irq(struct xhci_hcd *xhci)
 259{
 260	struct pci_dev *pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
 261	int ret;
 262
 263	/* return if using legacy interrupt */
 264	if (xhci_to_hcd(xhci)->irq > 0)
 265		return;
 266
 267	ret = xhci_free_msi(xhci);
 268	if (!ret)
 269		return;
 270	if (pdev->irq > 0)
 271		free_irq(pdev->irq, xhci_to_hcd(xhci));
 272
 273	return;
 274}
 275
 276/*
 277 * Set up MSI-X
 278 */
 279static int xhci_setup_msix(struct xhci_hcd *xhci)
 280{
 281	int i, ret = 0;
 282	struct usb_hcd *hcd = xhci_to_hcd(xhci);
 283	struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
 284
 285	/*
 286	 * calculate number of msi-x vectors supported.
 287	 * - HCS_MAX_INTRS: the max number of interrupts the host can handle,
 288	 *   with max number of interrupters based on the xhci HCSPARAMS1.
 289	 * - num_online_cpus: maximum msi-x vectors per CPUs core.
 290	 *   Add additional 1 vector to ensure always available interrupt.
 291	 */
 292	xhci->msix_count = min(num_online_cpus() + 1,
 293				HCS_MAX_INTRS(xhci->hcs_params1));
 294
 295	xhci->msix_entries =
 296		kmalloc((sizeof(struct msix_entry))*xhci->msix_count,
 297				GFP_KERNEL);
 298	if (!xhci->msix_entries) {
 299		xhci_err(xhci, "Failed to allocate MSI-X entries\n");
 300		return -ENOMEM;
 301	}
 302
 303	for (i = 0; i < xhci->msix_count; i++) {
 304		xhci->msix_entries[i].entry = i;
 305		xhci->msix_entries[i].vector = 0;
 306	}
 307
 308	ret = pci_enable_msix_exact(pdev, xhci->msix_entries, xhci->msix_count);
 309	if (ret) {
 310		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 311				"Failed to enable MSI-X");
 312		goto free_entries;
 313	}
 314
 315	for (i = 0; i < xhci->msix_count; i++) {
 316		ret = request_irq(xhci->msix_entries[i].vector,
 317				xhci_msi_irq,
 318				0, "xhci_hcd", xhci_to_hcd(xhci));
 319		if (ret)
 320			goto disable_msix;
 321	}
 322
 323	hcd->msix_enabled = 1;
 324	return ret;
 325
 326disable_msix:
 327	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "disable MSI-X interrupt");
 328	xhci_free_irq(xhci);
 329	pci_disable_msix(pdev);
 330free_entries:
 331	kfree(xhci->msix_entries);
 332	xhci->msix_entries = NULL;
 333	return ret;
 334}
 335
 336/* Free any IRQs and disable MSI-X */
 337static void xhci_cleanup_msix(struct xhci_hcd *xhci)
 338{
 339	struct usb_hcd *hcd = xhci_to_hcd(xhci);
 340	struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
 341
 342	if (xhci->quirks & XHCI_PLAT)
 343		return;
 344
 345	xhci_free_irq(xhci);
 
 
 
 
 
 346
 347	if (xhci->msix_entries) {
 348		pci_disable_msix(pdev);
 349		kfree(xhci->msix_entries);
 350		xhci->msix_entries = NULL;
 351	} else {
 352		pci_disable_msi(pdev);
 353	}
 354
 
 355	hcd->msix_enabled = 0;
 356	return;
 357}
 358
 359static void __maybe_unused xhci_msix_sync_irqs(struct xhci_hcd *xhci)
 360{
 361	int i;
 
 
 
 
 362
 363	if (xhci->msix_entries) {
 364		for (i = 0; i < xhci->msix_count; i++)
 365			synchronize_irq(xhci->msix_entries[i].vector);
 366	}
 367}
 368
 369static int xhci_try_enable_msi(struct usb_hcd *hcd)
 370{
 371	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 372	struct pci_dev  *pdev;
 373	int ret;
 374
 375	/* The xhci platform device has set up IRQs through usb_add_hcd. */
 376	if (xhci->quirks & XHCI_PLAT)
 377		return 0;
 378
 379	pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
 380	/*
 381	 * Some Fresco Logic host controllers advertise MSI, but fail to
 382	 * generate interrupts.  Don't even try to enable MSI.
 383	 */
 384	if (xhci->quirks & XHCI_BROKEN_MSI)
 385		goto legacy_irq;
 386
 387	/* unregister the legacy interrupt */
 388	if (hcd->irq)
 389		free_irq(hcd->irq, hcd);
 390	hcd->irq = 0;
 391
 392	ret = xhci_setup_msix(xhci);
 393	if (ret)
 394		/* fall back to msi*/
 395		ret = xhci_setup_msi(xhci);
 396
 397	if (!ret)
 398		/* hcd->irq is 0, we have MSI */
 399		return 0;
 
 400
 401	if (!pdev->irq) {
 402		xhci_err(xhci, "No msi-x/msi found and no IRQ in BIOS\n");
 403		return -EINVAL;
 404	}
 405
 406 legacy_irq:
 407	if (!strlen(hcd->irq_descr))
 408		snprintf(hcd->irq_descr, sizeof(hcd->irq_descr), "%s:usb%d",
 409			 hcd->driver->description, hcd->self.busnum);
 410
 411	/* fall back to legacy interrupt*/
 412	ret = request_irq(pdev->irq, &usb_hcd_irq, IRQF_SHARED,
 413			hcd->irq_descr, hcd);
 414	if (ret) {
 415		xhci_err(xhci, "request interrupt %d failed\n",
 416				pdev->irq);
 417		return ret;
 418	}
 419	hcd->irq = pdev->irq;
 420	return 0;
 421}
 422
 423#else
 424
 425static inline int xhci_try_enable_msi(struct usb_hcd *hcd)
 426{
 427	return 0;
 428}
 429
 430static inline void xhci_cleanup_msix(struct xhci_hcd *xhci)
 431{
 432}
 433
 434static inline void xhci_msix_sync_irqs(struct xhci_hcd *xhci)
 435{
 436}
 437
 438#endif
 439
 440static void compliance_mode_recovery(unsigned long arg)
 441{
 442	struct xhci_hcd *xhci;
 443	struct usb_hcd *hcd;
 
 444	u32 temp;
 445	int i;
 446
 447	xhci = (struct xhci_hcd *)arg;
 
 448
 449	for (i = 0; i < xhci->num_usb3_ports; i++) {
 450		temp = readl(xhci->usb3_ports[i]);
 451		if ((temp & PORT_PLS_MASK) == USB_SS_PORT_LS_COMP_MOD) {
 452			/*
 453			 * Compliance Mode Detected. Letting USB Core
 454			 * handle the Warm Reset
 455			 */
 456			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 457					"Compliance mode detected->port %d",
 458					i + 1);
 459			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 460					"Attempting compliance mode recovery");
 461			hcd = xhci->shared_hcd;
 462
 463			if (hcd->state == HC_STATE_SUSPENDED)
 464				usb_hcd_resume_root_hub(hcd);
 465
 466			usb_hcd_poll_rh_status(hcd);
 467		}
 468	}
 469
 470	if (xhci->port_status_u0 != ((1 << xhci->num_usb3_ports)-1))
 471		mod_timer(&xhci->comp_mode_recovery_timer,
 472			jiffies + msecs_to_jiffies(COMP_MODE_RCVRY_MSECS));
 473}
 474
 475/*
 476 * Quirk to work around issue generated by the SN65LVPE502CP USB3.0 re-driver
 477 * that causes ports behind that hardware to enter compliance mode sometimes.
 478 * The quirk creates a timer that polls every 2 seconds the link state of
 479 * each host controller's port and recovers it by issuing a Warm reset
 480 * if Compliance mode is detected, otherwise the port will become "dead" (no
 481 * device connections or disconnections will be detected anymore). Becasue no
 482 * status event is generated when entering compliance mode (per xhci spec),
 483 * this quirk is needed on systems that have the failing hardware installed.
 484 */
 485static void compliance_mode_recovery_timer_init(struct xhci_hcd *xhci)
 486{
 487	xhci->port_status_u0 = 0;
 488	setup_timer(&xhci->comp_mode_recovery_timer,
 489		    compliance_mode_recovery, (unsigned long)xhci);
 490	xhci->comp_mode_recovery_timer.expires = jiffies +
 491			msecs_to_jiffies(COMP_MODE_RCVRY_MSECS);
 492
 493	set_timer_slack(&xhci->comp_mode_recovery_timer,
 494			msecs_to_jiffies(COMP_MODE_RCVRY_MSECS));
 495	add_timer(&xhci->comp_mode_recovery_timer);
 496	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 497			"Compliance mode recovery timer initialized");
 498}
 499
 500/*
 501 * This function identifies the systems that have installed the SN65LVPE502CP
 502 * USB3.0 re-driver and that need the Compliance Mode Quirk.
 503 * Systems:
 504 * Vendor: Hewlett-Packard -> System Models: Z420, Z620 and Z820
 505 */
 506static bool xhci_compliance_mode_recovery_timer_quirk_check(void)
 507{
 508	const char *dmi_product_name, *dmi_sys_vendor;
 509
 510	dmi_product_name = dmi_get_system_info(DMI_PRODUCT_NAME);
 511	dmi_sys_vendor = dmi_get_system_info(DMI_SYS_VENDOR);
 512	if (!dmi_product_name || !dmi_sys_vendor)
 513		return false;
 514
 515	if (!(strstr(dmi_sys_vendor, "Hewlett-Packard")))
 516		return false;
 517
 518	if (strstr(dmi_product_name, "Z420") ||
 519			strstr(dmi_product_name, "Z620") ||
 520			strstr(dmi_product_name, "Z820") ||
 521			strstr(dmi_product_name, "Z1 Workstation"))
 522		return true;
 523
 524	return false;
 525}
 526
 527static int xhci_all_ports_seen_u0(struct xhci_hcd *xhci)
 528{
 529	return (xhci->port_status_u0 == ((1 << xhci->num_usb3_ports)-1));
 530}
 531
 532
 533/*
 534 * Initialize memory for HCD and xHC (one-time init).
 535 *
 536 * Program the PAGESIZE register, initialize the device context array, create
 537 * device contexts (?), set up a command ring segment (or two?), create event
 538 * ring (one for now).
 539 */
 540int xhci_init(struct usb_hcd *hcd)
 541{
 542	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 543	int retval = 0;
 544
 545	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "xhci_init");
 546	spin_lock_init(&xhci->lock);
 547	if (xhci->hci_version == 0x95 && link_quirk) {
 548		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 549				"QUIRK: Not clearing Link TRB chain bits.");
 550		xhci->quirks |= XHCI_LINK_TRB_QUIRK;
 551	} else {
 552		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 553				"xHCI doesn't need link TRB QUIRK");
 554	}
 555	retval = xhci_mem_init(xhci, GFP_KERNEL);
 556	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "Finished xhci_init");
 557
 558	/* Initializing Compliance Mode Recovery Data If Needed */
 559	if (xhci_compliance_mode_recovery_timer_quirk_check()) {
 560		xhci->quirks |= XHCI_COMP_MODE_QUIRK;
 561		compliance_mode_recovery_timer_init(xhci);
 562	}
 563
 564	return retval;
 565}
 566
 567/*-------------------------------------------------------------------------*/
 568
 569
 570static int xhci_run_finished(struct xhci_hcd *xhci)
 571{
 572	if (xhci_start(xhci)) {
 573		xhci_halt(xhci);
 574		return -ENODEV;
 575	}
 576	xhci->shared_hcd->state = HC_STATE_RUNNING;
 577	xhci->cmd_ring_state = CMD_RING_STATE_RUNNING;
 578
 579	if (xhci->quirks & XHCI_NEC_HOST)
 580		xhci_ring_cmd_db(xhci);
 581
 582	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 583			"Finished xhci_run for USB3 roothub");
 584	return 0;
 585}
 586
 587/*
 588 * Start the HC after it was halted.
 589 *
 590 * This function is called by the USB core when the HC driver is added.
 591 * Its opposite is xhci_stop().
 592 *
 593 * xhci_init() must be called once before this function can be called.
 594 * Reset the HC, enable device slot contexts, program DCBAAP, and
 595 * set command ring pointer and event ring pointer.
 596 *
 597 * Setup MSI-X vectors and enable interrupts.
 598 */
 599int xhci_run(struct usb_hcd *hcd)
 600{
 601	u32 temp;
 602	u64 temp_64;
 603	int ret;
 604	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 605
 606	/* Start the xHCI host controller running only after the USB 2.0 roothub
 607	 * is setup.
 608	 */
 609
 610	hcd->uses_new_polling = 1;
 611	if (!usb_hcd_is_primary_hcd(hcd))
 612		return xhci_run_finished(xhci);
 613
 614	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "xhci_run");
 615
 616	ret = xhci_try_enable_msi(hcd);
 617	if (ret)
 618		return ret;
 619
 620	xhci_dbg(xhci, "Command ring memory map follows:\n");
 621	xhci_debug_ring(xhci, xhci->cmd_ring);
 622	xhci_dbg_ring_ptrs(xhci, xhci->cmd_ring);
 623	xhci_dbg_cmd_ptrs(xhci);
 624
 625	xhci_dbg(xhci, "ERST memory map follows:\n");
 626	xhci_dbg_erst(xhci, &xhci->erst);
 627	xhci_dbg(xhci, "Event ring:\n");
 628	xhci_debug_ring(xhci, xhci->event_ring);
 629	xhci_dbg_ring_ptrs(xhci, xhci->event_ring);
 630	temp_64 = xhci_read_64(xhci, &xhci->ir_set->erst_dequeue);
 631	temp_64 &= ~ERST_PTR_MASK;
 632	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 633			"ERST deq = 64'h%0lx", (long unsigned int) temp_64);
 634
 635	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 636			"// Set the interrupt modulation register");
 637	temp = readl(&xhci->ir_set->irq_control);
 638	temp &= ~ER_IRQ_INTERVAL_MASK;
 639	/*
 640	 * the increment interval is 8 times as much as that defined
 641	 * in xHCI spec on MTK's controller
 642	 */
 643	temp |= (u32) ((xhci->quirks & XHCI_MTK_HOST) ? 20 : 160);
 644	writel(temp, &xhci->ir_set->irq_control);
 645
 646	/* Set the HCD state before we enable the irqs */
 647	temp = readl(&xhci->op_regs->command);
 648	temp |= (CMD_EIE);
 649	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 650			"// Enable interrupts, cmd = 0x%x.", temp);
 651	writel(temp, &xhci->op_regs->command);
 652
 653	temp = readl(&xhci->ir_set->irq_pending);
 654	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 655			"// Enabling event ring interrupter %p by writing 0x%x to irq_pending",
 656			xhci->ir_set, (unsigned int) ER_IRQ_ENABLE(temp));
 657	writel(ER_IRQ_ENABLE(temp), &xhci->ir_set->irq_pending);
 658	xhci_print_ir_set(xhci, 0);
 659
 660	if (xhci->quirks & XHCI_NEC_HOST) {
 661		struct xhci_command *command;
 662		command = xhci_alloc_command(xhci, false, false, GFP_KERNEL);
 
 663		if (!command)
 664			return -ENOMEM;
 665		xhci_queue_vendor_command(xhci, command, 0, 0, 0,
 
 666				TRB_TYPE(TRB_NEC_GET_FW));
 
 
 667	}
 668	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 669			"Finished xhci_run for USB2 roothub");
 
 
 
 
 
 670	return 0;
 671}
 672EXPORT_SYMBOL_GPL(xhci_run);
 673
 674/*
 675 * Stop xHCI driver.
 676 *
 677 * This function is called by the USB core when the HC driver is removed.
 678 * Its opposite is xhci_run().
 679 *
 680 * Disable device contexts, disable IRQs, and quiesce the HC.
 681 * Reset the HC, finish any completed transactions, and cleanup memory.
 682 */
 683void xhci_stop(struct usb_hcd *hcd)
 684{
 685	u32 temp;
 686	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 687
 688	if (xhci->xhc_state & XHCI_STATE_HALTED)
 
 
 
 
 689		return;
 
 
 
 690
 691	mutex_lock(&xhci->mutex);
 692	spin_lock_irq(&xhci->lock);
 693	xhci->xhc_state |= XHCI_STATE_HALTED;
 694	xhci->cmd_ring_state = CMD_RING_STATE_STOPPED;
 695
 696	/* Make sure the xHC is halted for a USB3 roothub
 697	 * (xhci_stop() could be called as part of failed init).
 698	 */
 699	xhci_halt(xhci);
 700	xhci_reset(xhci);
 701	spin_unlock_irq(&xhci->lock);
 702
 703	xhci_cleanup_msix(xhci);
 704
 705	/* Deleting Compliance Mode Recovery Timer */
 706	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
 707			(!(xhci_all_ports_seen_u0(xhci)))) {
 708		del_timer_sync(&xhci->comp_mode_recovery_timer);
 709		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 710				"%s: compliance mode recovery timer deleted",
 711				__func__);
 712	}
 713
 714	if (xhci->quirks & XHCI_AMD_PLL_FIX)
 715		usb_amd_dev_put();
 716
 717	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 718			"// Disabling event ring interrupts");
 719	temp = readl(&xhci->op_regs->status);
 720	writel(temp & ~STS_EINT, &xhci->op_regs->status);
 721	temp = readl(&xhci->ir_set->irq_pending);
 722	writel(ER_IRQ_DISABLE(temp), &xhci->ir_set->irq_pending);
 723	xhci_print_ir_set(xhci, 0);
 724
 725	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "cleaning up memory");
 726	xhci_mem_cleanup(xhci);
 
 727	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 728			"xhci_stop completed - status = %x",
 729			readl(&xhci->op_regs->status));
 730	mutex_unlock(&xhci->mutex);
 731}
 732
 733/*
 734 * Shutdown HC (not bus-specific)
 735 *
 736 * This is called when the machine is rebooting or halting.  We assume that the
 737 * machine will be powered off, and the HC's internal state will be reset.
 738 * Don't bother to free memory.
 739 *
 740 * This will only ever be called with the main usb_hcd (the USB3 roothub).
 741 */
 742void xhci_shutdown(struct usb_hcd *hcd)
 743{
 744	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 745
 746	if (xhci->quirks & XHCI_SPURIOUS_REBOOT)
 747		usb_disable_xhci_ports(to_pci_dev(hcd->self.controller));
 748
 749	spin_lock_irq(&xhci->lock);
 750	xhci_halt(xhci);
 751	/* Workaround for spurious wakeups at shutdown with HSW */
 752	if (xhci->quirks & XHCI_SPURIOUS_WAKEUP)
 753		xhci_reset(xhci);
 754	spin_unlock_irq(&xhci->lock);
 755
 756	xhci_cleanup_msix(xhci);
 757
 758	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 759			"xhci_shutdown completed - status = %x",
 760			readl(&xhci->op_regs->status));
 761
 762	/* Yet another workaround for spurious wakeups at shutdown with HSW */
 763	if (xhci->quirks & XHCI_SPURIOUS_WAKEUP)
 764		pci_set_power_state(to_pci_dev(hcd->self.controller), PCI_D3hot);
 765}
 
 766
 767#ifdef CONFIG_PM
 768static void xhci_save_registers(struct xhci_hcd *xhci)
 769{
 770	xhci->s3.command = readl(&xhci->op_regs->command);
 771	xhci->s3.dev_nt = readl(&xhci->op_regs->dev_notification);
 772	xhci->s3.dcbaa_ptr = xhci_read_64(xhci, &xhci->op_regs->dcbaa_ptr);
 773	xhci->s3.config_reg = readl(&xhci->op_regs->config_reg);
 774	xhci->s3.erst_size = readl(&xhci->ir_set->erst_size);
 775	xhci->s3.erst_base = xhci_read_64(xhci, &xhci->ir_set->erst_base);
 776	xhci->s3.erst_dequeue = xhci_read_64(xhci, &xhci->ir_set->erst_dequeue);
 777	xhci->s3.irq_pending = readl(&xhci->ir_set->irq_pending);
 778	xhci->s3.irq_control = readl(&xhci->ir_set->irq_control);
 779}
 780
 781static void xhci_restore_registers(struct xhci_hcd *xhci)
 782{
 783	writel(xhci->s3.command, &xhci->op_regs->command);
 784	writel(xhci->s3.dev_nt, &xhci->op_regs->dev_notification);
 785	xhci_write_64(xhci, xhci->s3.dcbaa_ptr, &xhci->op_regs->dcbaa_ptr);
 786	writel(xhci->s3.config_reg, &xhci->op_regs->config_reg);
 787	writel(xhci->s3.erst_size, &xhci->ir_set->erst_size);
 788	xhci_write_64(xhci, xhci->s3.erst_base, &xhci->ir_set->erst_base);
 789	xhci_write_64(xhci, xhci->s3.erst_dequeue, &xhci->ir_set->erst_dequeue);
 790	writel(xhci->s3.irq_pending, &xhci->ir_set->irq_pending);
 791	writel(xhci->s3.irq_control, &xhci->ir_set->irq_control);
 792}
 793
 794static void xhci_set_cmd_ring_deq(struct xhci_hcd *xhci)
 795{
 796	u64	val_64;
 797
 798	/* step 2: initialize command ring buffer */
 799	val_64 = xhci_read_64(xhci, &xhci->op_regs->cmd_ring);
 800	val_64 = (val_64 & (u64) CMD_RING_RSVD_BITS) |
 801		(xhci_trb_virt_to_dma(xhci->cmd_ring->deq_seg,
 802				      xhci->cmd_ring->dequeue) &
 803		 (u64) ~CMD_RING_RSVD_BITS) |
 804		xhci->cmd_ring->cycle_state;
 805	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 806			"// Setting command ring address to 0x%llx",
 807			(long unsigned long) val_64);
 808	xhci_write_64(xhci, val_64, &xhci->op_regs->cmd_ring);
 809}
 810
 811/*
 812 * The whole command ring must be cleared to zero when we suspend the host.
 813 *
 814 * The host doesn't save the command ring pointer in the suspend well, so we
 815 * need to re-program it on resume.  Unfortunately, the pointer must be 64-byte
 816 * aligned, because of the reserved bits in the command ring dequeue pointer
 817 * register.  Therefore, we can't just set the dequeue pointer back in the
 818 * middle of the ring (TRBs are 16-byte aligned).
 819 */
 820static void xhci_clear_command_ring(struct xhci_hcd *xhci)
 821{
 822	struct xhci_ring *ring;
 823	struct xhci_segment *seg;
 824
 825	ring = xhci->cmd_ring;
 826	seg = ring->deq_seg;
 827	do {
 828		memset(seg->trbs, 0,
 829			sizeof(union xhci_trb) * (TRBS_PER_SEGMENT - 1));
 830		seg->trbs[TRBS_PER_SEGMENT - 1].link.control &=
 831			cpu_to_le32(~TRB_CYCLE);
 832		seg = seg->next;
 833	} while (seg != ring->deq_seg);
 834
 835	/* Reset the software enqueue and dequeue pointers */
 836	ring->deq_seg = ring->first_seg;
 837	ring->dequeue = ring->first_seg->trbs;
 838	ring->enq_seg = ring->deq_seg;
 839	ring->enqueue = ring->dequeue;
 840
 841	ring->num_trbs_free = ring->num_segs * (TRBS_PER_SEGMENT - 1) - 1;
 842	/*
 843	 * Ring is now zeroed, so the HW should look for change of ownership
 844	 * when the cycle bit is set to 1.
 845	 */
 846	ring->cycle_state = 1;
 847
 848	/*
 849	 * Reset the hardware dequeue pointer.
 850	 * Yes, this will need to be re-written after resume, but we're paranoid
 851	 * and want to make sure the hardware doesn't access bogus memory
 852	 * because, say, the BIOS or an SMI started the host without changing
 853	 * the command ring pointers.
 854	 */
 855	xhci_set_cmd_ring_deq(xhci);
 856}
 857
 858static void xhci_disable_port_wake_on_bits(struct xhci_hcd *xhci)
 859{
 
 860	int port_index;
 861	__le32 __iomem **port_array;
 862	unsigned long flags;
 863	u32 t1, t2;
 864
 865	spin_lock_irqsave(&xhci->lock, flags);
 866
 867	/* disble usb3 ports Wake bits*/
 868	port_index = xhci->num_usb3_ports;
 869	port_array = xhci->usb3_ports;
 870	while (port_index--) {
 871		t1 = readl(port_array[port_index]);
 
 872		t1 = xhci_port_state_to_neutral(t1);
 873		t2 = t1 & ~PORT_WAKE_BITS;
 874		if (t1 != t2)
 875			writel(t2, port_array[port_index]);
 
 
 
 
 876	}
 877
 878	/* disble usb2 ports Wake bits*/
 879	port_index = xhci->num_usb2_ports;
 880	port_array = xhci->usb2_ports;
 881	while (port_index--) {
 882		t1 = readl(port_array[port_index]);
 
 883		t1 = xhci_port_state_to_neutral(t1);
 884		t2 = t1 & ~PORT_WAKE_BITS;
 885		if (t1 != t2)
 886			writel(t2, port_array[port_index]);
 
 
 
 
 887	}
 888
 889	spin_unlock_irqrestore(&xhci->lock, flags);
 890}
 891
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 892/*
 893 * Stop HC (not bus-specific)
 894 *
 895 * This is called when the machine transition into S3/S4 mode.
 896 *
 897 */
 898int xhci_suspend(struct xhci_hcd *xhci, bool do_wakeup)
 899{
 900	int			rc = 0;
 901	unsigned int		delay = XHCI_MAX_HALT_USEC;
 902	struct usb_hcd		*hcd = xhci_to_hcd(xhci);
 903	u32			command;
 
 904
 905	if (!hcd->state)
 906		return 0;
 907
 908	if (hcd->state != HC_STATE_SUSPENDED ||
 909			xhci->shared_hcd->state != HC_STATE_SUSPENDED)
 910		return -EINVAL;
 911
 
 
 912	/* Clear root port wake on bits if wakeup not allowed. */
 913	if (!do_wakeup)
 914		xhci_disable_port_wake_on_bits(xhci);
 915
 916	/* Don't poll the roothubs on bus suspend. */
 917	xhci_dbg(xhci, "%s: stopping port polling.\n", __func__);
 918	clear_bit(HCD_FLAG_POLL_RH, &hcd->flags);
 919	del_timer_sync(&hcd->rh_timer);
 920	clear_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
 921	del_timer_sync(&xhci->shared_hcd->rh_timer);
 922
 
 
 
 923	spin_lock_irq(&xhci->lock);
 924	clear_bit(HCD_FLAG_HW_ACCESSIBLE, &hcd->flags);
 925	clear_bit(HCD_FLAG_HW_ACCESSIBLE, &xhci->shared_hcd->flags);
 926	/* step 1: stop endpoint */
 927	/* skipped assuming that port suspend has done */
 928
 929	/* step 2: clear Run/Stop bit */
 930	command = readl(&xhci->op_regs->command);
 931	command &= ~CMD_RUN;
 932	writel(command, &xhci->op_regs->command);
 933
 934	/* Some chips from Fresco Logic need an extraordinary delay */
 935	delay *= (xhci->quirks & XHCI_SLOW_SUSPEND) ? 10 : 1;
 936
 937	if (xhci_handshake(&xhci->op_regs->status,
 938		      STS_HALT, STS_HALT, delay)) {
 939		xhci_warn(xhci, "WARN: xHC CMD_RUN timeout\n");
 940		spin_unlock_irq(&xhci->lock);
 941		return -ETIMEDOUT;
 942	}
 943	xhci_clear_command_ring(xhci);
 944
 945	/* step 3: save registers */
 946	xhci_save_registers(xhci);
 947
 948	/* step 4: set CSS flag */
 949	command = readl(&xhci->op_regs->command);
 950	command |= CMD_CSS;
 951	writel(command, &xhci->op_regs->command);
 
 952	if (xhci_handshake(&xhci->op_regs->status,
 953				STS_SAVE, 0, 10 * 1000)) {
 954		xhci_warn(xhci, "WARN: xHC save state timeout\n");
 955		spin_unlock_irq(&xhci->lock);
 956		return -ETIMEDOUT;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 957	}
 958	spin_unlock_irq(&xhci->lock);
 959
 960	/*
 961	 * Deleting Compliance Mode Recovery Timer because the xHCI Host
 962	 * is about to be suspended.
 963	 */
 964	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
 965			(!(xhci_all_ports_seen_u0(xhci)))) {
 966		del_timer_sync(&xhci->comp_mode_recovery_timer);
 967		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 968				"%s: compliance mode recovery timer deleted",
 969				__func__);
 970	}
 971
 972	/* step 5: remove core well power */
 973	/* synchronize irq when using MSI-X */
 974	xhci_msix_sync_irqs(xhci);
 975
 976	return rc;
 977}
 978EXPORT_SYMBOL_GPL(xhci_suspend);
 979
 980/*
 981 * start xHC (not bus-specific)
 982 *
 983 * This is called when the machine transition from S3/S4 mode.
 984 *
 985 */
 986int xhci_resume(struct xhci_hcd *xhci, bool hibernated)
 987{
 988	u32			command, temp = 0, status;
 989	struct usb_hcd		*hcd = xhci_to_hcd(xhci);
 990	struct usb_hcd		*secondary_hcd;
 991	int			retval = 0;
 992	bool			comp_timer_running = false;
 993
 994	if (!hcd->state)
 995		return 0;
 996
 997	/* Wait a bit if either of the roothubs need to settle from the
 998	 * transition into bus suspend.
 999	 */
1000	if (time_before(jiffies, xhci->bus_state[0].next_statechange) ||
1001			time_before(jiffies,
1002				xhci->bus_state[1].next_statechange))
1003		msleep(100);
1004
1005	set_bit(HCD_FLAG_HW_ACCESSIBLE, &hcd->flags);
1006	set_bit(HCD_FLAG_HW_ACCESSIBLE, &xhci->shared_hcd->flags);
1007
1008	spin_lock_irq(&xhci->lock);
1009	if (xhci->quirks & XHCI_RESET_ON_RESUME)
1010		hibernated = true;
1011
1012	if (!hibernated) {
 
 
 
 
 
 
 
 
 
 
 
 
1013		/* step 1: restore register */
1014		xhci_restore_registers(xhci);
1015		/* step 2: initialize command ring buffer */
1016		xhci_set_cmd_ring_deq(xhci);
1017		/* step 3: restore state and start state*/
1018		/* step 3: set CRS flag */
1019		command = readl(&xhci->op_regs->command);
1020		command |= CMD_CRS;
1021		writel(command, &xhci->op_regs->command);
 
 
 
 
 
1022		if (xhci_handshake(&xhci->op_regs->status,
1023			      STS_RESTORE, 0, 10 * 1000)) {
1024			xhci_warn(xhci, "WARN: xHC restore state timeout\n");
1025			spin_unlock_irq(&xhci->lock);
1026			return -ETIMEDOUT;
1027		}
1028		temp = readl(&xhci->op_regs->status);
1029	}
1030
1031	/* If restore operation fails, re-initialize the HC during resume */
1032	if ((temp & STS_SRE) || hibernated) {
1033
1034		if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
1035				!(xhci_all_ports_seen_u0(xhci))) {
1036			del_timer_sync(&xhci->comp_mode_recovery_timer);
1037			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
1038				"Compliance Mode Recovery Timer deleted!");
1039		}
1040
1041		/* Let the USB core know _both_ roothubs lost power. */
1042		usb_root_hub_lost_power(xhci->main_hcd->self.root_hub);
1043		usb_root_hub_lost_power(xhci->shared_hcd->self.root_hub);
1044
1045		xhci_dbg(xhci, "Stop HCD\n");
1046		xhci_halt(xhci);
1047		xhci_reset(xhci);
 
1048		spin_unlock_irq(&xhci->lock);
 
 
1049		xhci_cleanup_msix(xhci);
1050
1051		xhci_dbg(xhci, "// Disabling event ring interrupts\n");
1052		temp = readl(&xhci->op_regs->status);
1053		writel(temp & ~STS_EINT, &xhci->op_regs->status);
1054		temp = readl(&xhci->ir_set->irq_pending);
1055		writel(ER_IRQ_DISABLE(temp), &xhci->ir_set->irq_pending);
1056		xhci_print_ir_set(xhci, 0);
1057
1058		xhci_dbg(xhci, "cleaning up memory\n");
1059		xhci_mem_cleanup(xhci);
 
1060		xhci_dbg(xhci, "xhci_stop completed - status = %x\n",
1061			    readl(&xhci->op_regs->status));
1062
1063		/* USB core calls the PCI reinit and start functions twice:
1064		 * first with the primary HCD, and then with the secondary HCD.
1065		 * If we don't do the same, the host will never be started.
1066		 */
1067		if (!usb_hcd_is_primary_hcd(hcd))
1068			secondary_hcd = hcd;
1069		else
1070			secondary_hcd = xhci->shared_hcd;
1071
1072		xhci_dbg(xhci, "Initialize the xhci_hcd\n");
1073		retval = xhci_init(hcd->primary_hcd);
1074		if (retval)
1075			return retval;
1076		comp_timer_running = true;
1077
1078		xhci_dbg(xhci, "Start the primary HCD\n");
1079		retval = xhci_run(hcd->primary_hcd);
1080		if (!retval) {
1081			xhci_dbg(xhci, "Start the secondary HCD\n");
1082			retval = xhci_run(secondary_hcd);
1083		}
1084		hcd->state = HC_STATE_SUSPENDED;
1085		xhci->shared_hcd->state = HC_STATE_SUSPENDED;
1086		goto done;
1087	}
1088
1089	/* step 4: set Run/Stop bit */
1090	command = readl(&xhci->op_regs->command);
1091	command |= CMD_RUN;
1092	writel(command, &xhci->op_regs->command);
1093	xhci_handshake(&xhci->op_regs->status, STS_HALT,
1094		  0, 250 * 1000);
1095
1096	/* step 5: walk topology and initialize portsc,
1097	 * portpmsc and portli
1098	 */
1099	/* this is done in bus_resume */
1100
1101	/* step 6: restart each of the previously
1102	 * Running endpoints by ringing their doorbells
1103	 */
1104
1105	spin_unlock_irq(&xhci->lock);
1106
 
 
1107 done:
1108	if (retval == 0) {
1109		/* Resume root hubs only when have pending events. */
1110		status = readl(&xhci->op_regs->status);
1111		if (status & STS_EINT) {
1112			usb_hcd_resume_root_hub(xhci->shared_hcd);
1113			usb_hcd_resume_root_hub(hcd);
1114		}
1115	}
1116
1117	/*
1118	 * If system is subject to the Quirk, Compliance Mode Timer needs to
1119	 * be re-initialized Always after a system resume. Ports are subject
1120	 * to suffer the Compliance Mode issue again. It doesn't matter if
1121	 * ports have entered previously to U0 before system's suspension.
1122	 */
1123	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) && !comp_timer_running)
1124		compliance_mode_recovery_timer_init(xhci);
1125
 
 
 
1126	/* Re-enable port polling. */
1127	xhci_dbg(xhci, "%s: starting port polling.\n", __func__);
1128	set_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
1129	usb_hcd_poll_rh_status(xhci->shared_hcd);
1130	set_bit(HCD_FLAG_POLL_RH, &hcd->flags);
1131	usb_hcd_poll_rh_status(hcd);
1132
1133	return retval;
1134}
1135EXPORT_SYMBOL_GPL(xhci_resume);
1136#endif	/* CONFIG_PM */
1137
1138/*-------------------------------------------------------------------------*/
1139
1140/**
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1141 * xhci_get_endpoint_index - Used for passing endpoint bitmasks between the core and
1142 * HCDs.  Find the index for an endpoint given its descriptor.  Use the return
1143 * value to right shift 1 for the bitmask.
1144 *
1145 * Index  = (epnum * 2) + direction - 1,
1146 * where direction = 0 for OUT, 1 for IN.
1147 * For control endpoints, the IN index is used (OUT index is unused), so
1148 * index = (epnum * 2) + direction - 1 = (epnum * 2) + 1 - 1 = (epnum * 2)
1149 */
1150unsigned int xhci_get_endpoint_index(struct usb_endpoint_descriptor *desc)
1151{
1152	unsigned int index;
1153	if (usb_endpoint_xfer_control(desc))
1154		index = (unsigned int) (usb_endpoint_num(desc)*2);
1155	else
1156		index = (unsigned int) (usb_endpoint_num(desc)*2) +
1157			(usb_endpoint_dir_in(desc) ? 1 : 0) - 1;
1158	return index;
1159}
1160
1161/* The reverse operation to xhci_get_endpoint_index. Calculate the USB endpoint
1162 * address from the XHCI endpoint index.
1163 */
1164unsigned int xhci_get_endpoint_address(unsigned int ep_index)
1165{
1166	unsigned int number = DIV_ROUND_UP(ep_index, 2);
1167	unsigned int direction = ep_index % 2 ? USB_DIR_OUT : USB_DIR_IN;
1168	return direction | number;
1169}
1170
1171/* Find the flag for this endpoint (for use in the control context).  Use the
1172 * endpoint index to create a bitmask.  The slot context is bit 0, endpoint 0 is
1173 * bit 1, etc.
1174 */
1175unsigned int xhci_get_endpoint_flag(struct usb_endpoint_descriptor *desc)
1176{
1177	return 1 << (xhci_get_endpoint_index(desc) + 1);
1178}
1179
1180/* Find the flag for this endpoint (for use in the control context).  Use the
1181 * endpoint index to create a bitmask.  The slot context is bit 0, endpoint 0 is
1182 * bit 1, etc.
1183 */
1184unsigned int xhci_get_endpoint_flag_from_index(unsigned int ep_index)
1185{
1186	return 1 << (ep_index + 1);
1187}
1188
1189/* Compute the last valid endpoint context index.  Basically, this is the
1190 * endpoint index plus one.  For slot contexts with more than valid endpoint,
1191 * we find the most significant bit set in the added contexts flags.
1192 * e.g. ep 1 IN (with epnum 0x81) => added_ctxs = 0b1000
1193 * fls(0b1000) = 4, but the endpoint context index is 3, so subtract one.
1194 */
1195unsigned int xhci_last_valid_endpoint(u32 added_ctxs)
1196{
1197	return fls(added_ctxs) - 1;
1198}
1199
1200/* Returns 1 if the arguments are OK;
1201 * returns 0 this is a root hub; returns -EINVAL for NULL pointers.
1202 */
1203static int xhci_check_args(struct usb_hcd *hcd, struct usb_device *udev,
1204		struct usb_host_endpoint *ep, int check_ep, bool check_virt_dev,
1205		const char *func) {
1206	struct xhci_hcd	*xhci;
1207	struct xhci_virt_device	*virt_dev;
1208
1209	if (!hcd || (check_ep && !ep) || !udev) {
1210		pr_debug("xHCI %s called with invalid args\n", func);
1211		return -EINVAL;
1212	}
1213	if (!udev->parent) {
1214		pr_debug("xHCI %s called for root hub\n", func);
1215		return 0;
1216	}
1217
1218	xhci = hcd_to_xhci(hcd);
1219	if (check_virt_dev) {
1220		if (!udev->slot_id || !xhci->devs[udev->slot_id]) {
1221			xhci_dbg(xhci, "xHCI %s called with unaddressed device\n",
1222					func);
1223			return -EINVAL;
1224		}
1225
1226		virt_dev = xhci->devs[udev->slot_id];
1227		if (virt_dev->udev != udev) {
1228			xhci_dbg(xhci, "xHCI %s called with udev and "
1229					  "virt_dev does not match\n", func);
1230			return -EINVAL;
1231		}
1232	}
1233
1234	if (xhci->xhc_state & XHCI_STATE_HALTED)
1235		return -ENODEV;
1236
1237	return 1;
1238}
1239
1240static int xhci_configure_endpoint(struct xhci_hcd *xhci,
1241		struct usb_device *udev, struct xhci_command *command,
1242		bool ctx_change, bool must_succeed);
1243
1244/*
1245 * Full speed devices may have a max packet size greater than 8 bytes, but the
1246 * USB core doesn't know that until it reads the first 8 bytes of the
1247 * descriptor.  If the usb_device's max packet size changes after that point,
1248 * we need to issue an evaluate context command and wait on it.
1249 */
1250static int xhci_check_maxpacket(struct xhci_hcd *xhci, unsigned int slot_id,
1251		unsigned int ep_index, struct urb *urb)
1252{
1253	struct xhci_container_ctx *out_ctx;
1254	struct xhci_input_control_ctx *ctrl_ctx;
1255	struct xhci_ep_ctx *ep_ctx;
1256	struct xhci_command *command;
1257	int max_packet_size;
1258	int hw_max_packet_size;
1259	int ret = 0;
1260
1261	out_ctx = xhci->devs[slot_id]->out_ctx;
1262	ep_ctx = xhci_get_ep_ctx(xhci, out_ctx, ep_index);
1263	hw_max_packet_size = MAX_PACKET_DECODED(le32_to_cpu(ep_ctx->ep_info2));
1264	max_packet_size = usb_endpoint_maxp(&urb->dev->ep0.desc);
1265	if (hw_max_packet_size != max_packet_size) {
1266		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1267				"Max Packet Size for ep 0 changed.");
1268		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1269				"Max packet size in usb_device = %d",
1270				max_packet_size);
1271		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1272				"Max packet size in xHCI HW = %d",
1273				hw_max_packet_size);
1274		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1275				"Issuing evaluate context command.");
1276
1277		/* Set up the input context flags for the command */
1278		/* FIXME: This won't work if a non-default control endpoint
1279		 * changes max packet sizes.
1280		 */
1281
1282		command = xhci_alloc_command(xhci, false, true, GFP_KERNEL);
1283		if (!command)
1284			return -ENOMEM;
1285
1286		command->in_ctx = xhci->devs[slot_id]->in_ctx;
1287		ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
1288		if (!ctrl_ctx) {
1289			xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1290					__func__);
1291			ret = -ENOMEM;
1292			goto command_cleanup;
1293		}
1294		/* Set up the modified control endpoint 0 */
1295		xhci_endpoint_copy(xhci, xhci->devs[slot_id]->in_ctx,
1296				xhci->devs[slot_id]->out_ctx, ep_index);
1297
1298		ep_ctx = xhci_get_ep_ctx(xhci, command->in_ctx, ep_index);
 
1299		ep_ctx->ep_info2 &= cpu_to_le32(~MAX_PACKET_MASK);
1300		ep_ctx->ep_info2 |= cpu_to_le32(MAX_PACKET(max_packet_size));
1301
1302		ctrl_ctx->add_flags = cpu_to_le32(EP0_FLAG);
1303		ctrl_ctx->drop_flags = 0;
1304
1305		xhci_dbg(xhci, "Slot %d input context\n", slot_id);
1306		xhci_dbg_ctx(xhci, command->in_ctx, ep_index);
1307		xhci_dbg(xhci, "Slot %d output context\n", slot_id);
1308		xhci_dbg_ctx(xhci, out_ctx, ep_index);
1309
1310		ret = xhci_configure_endpoint(xhci, urb->dev, command,
1311				true, false);
1312
1313		/* Clean up the input context for later use by bandwidth
1314		 * functions.
1315		 */
1316		ctrl_ctx->add_flags = cpu_to_le32(SLOT_FLAG);
1317command_cleanup:
1318		kfree(command->completion);
1319		kfree(command);
1320	}
1321	return ret;
1322}
1323
1324/*
1325 * non-error returns are a promise to giveback() the urb later
1326 * we drop ownership so next owner (or urb unlink) can get it
1327 */
1328int xhci_urb_enqueue(struct usb_hcd *hcd, struct urb *urb, gfp_t mem_flags)
1329{
1330	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
1331	struct xhci_td *buffer;
1332	unsigned long flags;
1333	int ret = 0;
1334	unsigned int slot_id, ep_index;
 
1335	struct urb_priv	*urb_priv;
1336	int size, i;
1337
1338	if (!urb || xhci_check_args(hcd, urb->dev, urb->ep,
1339					true, true, __func__) <= 0)
1340		return -EINVAL;
1341
1342	slot_id = urb->dev->slot_id;
1343	ep_index = xhci_get_endpoint_index(&urb->ep->desc);
 
1344
1345	if (!HCD_HW_ACCESSIBLE(hcd)) {
1346		if (!in_interrupt())
1347			xhci_dbg(xhci, "urb submitted during PCI suspend\n");
1348		ret = -ESHUTDOWN;
1349		goto exit;
 
 
 
1350	}
1351
1352	if (usb_endpoint_xfer_isoc(&urb->ep->desc))
1353		size = urb->number_of_packets;
1354	else if (usb_endpoint_is_bulk_out(&urb->ep->desc) &&
1355	    urb->transfer_buffer_length > 0 &&
1356	    urb->transfer_flags & URB_ZERO_PACKET &&
1357	    !(urb->transfer_buffer_length % usb_endpoint_maxp(&urb->ep->desc)))
1358		size = 2;
1359	else
1360		size = 1;
1361
1362	urb_priv = kzalloc(sizeof(struct urb_priv) +
1363				  size * sizeof(struct xhci_td *), mem_flags);
1364	if (!urb_priv)
1365		return -ENOMEM;
1366
1367	buffer = kzalloc(size * sizeof(struct xhci_td), mem_flags);
1368	if (!buffer) {
1369		kfree(urb_priv);
1370		return -ENOMEM;
1371	}
1372
1373	for (i = 0; i < size; i++) {
1374		urb_priv->td[i] = buffer;
1375		buffer++;
1376	}
1377
1378	urb_priv->length = size;
1379	urb_priv->td_cnt = 0;
1380	urb->hcpriv = urb_priv;
1381
 
 
1382	if (usb_endpoint_xfer_control(&urb->ep->desc)) {
1383		/* Check to see if the max packet size for the default control
1384		 * endpoint changed during FS device enumeration
1385		 */
1386		if (urb->dev->speed == USB_SPEED_FULL) {
1387			ret = xhci_check_maxpacket(xhci, slot_id,
1388					ep_index, urb);
1389			if (ret < 0) {
1390				xhci_urb_free_priv(urb_priv);
1391				urb->hcpriv = NULL;
1392				return ret;
1393			}
1394		}
 
1395
1396		/* We have a spinlock and interrupts disabled, so we must pass
1397		 * atomic context to this function, which may allocate memory.
1398		 */
1399		spin_lock_irqsave(&xhci->lock, flags);
1400		if (xhci->xhc_state & XHCI_STATE_DYING)
1401			goto dying;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1402		ret = xhci_queue_ctrl_tx(xhci, GFP_ATOMIC, urb,
1403				slot_id, ep_index);
1404		if (ret)
1405			goto free_priv;
1406		spin_unlock_irqrestore(&xhci->lock, flags);
1407	} else if (usb_endpoint_xfer_bulk(&urb->ep->desc)) {
1408		spin_lock_irqsave(&xhci->lock, flags);
1409		if (xhci->xhc_state & XHCI_STATE_DYING)
1410			goto dying;
1411		if (xhci->devs[slot_id]->eps[ep_index].ep_state &
1412				EP_GETTING_STREAMS) {
1413			xhci_warn(xhci, "WARN: Can't enqueue URB while bulk ep "
1414					"is transitioning to using streams.\n");
1415			ret = -EINVAL;
1416		} else if (xhci->devs[slot_id]->eps[ep_index].ep_state &
1417				EP_GETTING_NO_STREAMS) {
1418			xhci_warn(xhci, "WARN: Can't enqueue URB while bulk ep "
1419					"is transitioning to "
1420					"not having streams.\n");
1421			ret = -EINVAL;
1422		} else {
1423			ret = xhci_queue_bulk_tx(xhci, GFP_ATOMIC, urb,
1424					slot_id, ep_index);
1425		}
1426		if (ret)
1427			goto free_priv;
1428		spin_unlock_irqrestore(&xhci->lock, flags);
1429	} else if (usb_endpoint_xfer_int(&urb->ep->desc)) {
1430		spin_lock_irqsave(&xhci->lock, flags);
1431		if (xhci->xhc_state & XHCI_STATE_DYING)
1432			goto dying;
1433		ret = xhci_queue_intr_tx(xhci, GFP_ATOMIC, urb,
1434				slot_id, ep_index);
1435		if (ret)
1436			goto free_priv;
1437		spin_unlock_irqrestore(&xhci->lock, flags);
1438	} else {
1439		spin_lock_irqsave(&xhci->lock, flags);
1440		if (xhci->xhc_state & XHCI_STATE_DYING)
1441			goto dying;
1442		ret = xhci_queue_isoc_tx_prepare(xhci, GFP_ATOMIC, urb,
1443				slot_id, ep_index);
1444		if (ret)
1445			goto free_priv;
1446		spin_unlock_irqrestore(&xhci->lock, flags);
1447	}
1448exit:
1449	return ret;
1450dying:
1451	xhci_dbg(xhci, "Ep 0x%x: URB %p submitted for "
1452			"non-responsive xHCI host.\n",
1453			urb->ep->desc.bEndpointAddress, urb);
1454	ret = -ESHUTDOWN;
1455free_priv:
1456	xhci_urb_free_priv(urb_priv);
1457	urb->hcpriv = NULL;
 
1458	spin_unlock_irqrestore(&xhci->lock, flags);
1459	return ret;
1460}
1461
1462/* Get the right ring for the given URB.
1463 * If the endpoint supports streams, boundary check the URB's stream ID.
1464 * If the endpoint doesn't support streams, return the singular endpoint ring.
1465 */
1466static struct xhci_ring *xhci_urb_to_transfer_ring(struct xhci_hcd *xhci,
1467		struct urb *urb)
1468{
1469	unsigned int slot_id;
1470	unsigned int ep_index;
1471	unsigned int stream_id;
1472	struct xhci_virt_ep *ep;
1473
1474	slot_id = urb->dev->slot_id;
1475	ep_index = xhci_get_endpoint_index(&urb->ep->desc);
1476	stream_id = urb->stream_id;
1477	ep = &xhci->devs[slot_id]->eps[ep_index];
1478	/* Common case: no streams */
1479	if (!(ep->ep_state & EP_HAS_STREAMS))
1480		return ep->ring;
1481
1482	if (stream_id == 0) {
1483		xhci_warn(xhci,
1484				"WARN: Slot ID %u, ep index %u has streams, "
1485				"but URB has no stream ID.\n",
1486				slot_id, ep_index);
1487		return NULL;
1488	}
1489
1490	if (stream_id < ep->stream_info->num_streams)
1491		return ep->stream_info->stream_rings[stream_id];
1492
1493	xhci_warn(xhci,
1494			"WARN: Slot ID %u, ep index %u has "
1495			"stream IDs 1 to %u allocated, "
1496			"but stream ID %u is requested.\n",
1497			slot_id, ep_index,
1498			ep->stream_info->num_streams - 1,
1499			stream_id);
1500	return NULL;
1501}
1502
1503/*
1504 * Remove the URB's TD from the endpoint ring.  This may cause the HC to stop
1505 * USB transfers, potentially stopping in the middle of a TRB buffer.  The HC
1506 * should pick up where it left off in the TD, unless a Set Transfer Ring
1507 * Dequeue Pointer is issued.
1508 *
1509 * The TRBs that make up the buffers for the canceled URB will be "removed" from
1510 * the ring.  Since the ring is a contiguous structure, they can't be physically
1511 * removed.  Instead, there are two options:
1512 *
1513 *  1) If the HC is in the middle of processing the URB to be canceled, we
1514 *     simply move the ring's dequeue pointer past those TRBs using the Set
1515 *     Transfer Ring Dequeue Pointer command.  This will be the common case,
1516 *     when drivers timeout on the last submitted URB and attempt to cancel.
1517 *
1518 *  2) If the HC is in the middle of a different TD, we turn the TRBs into a
1519 *     series of 1-TRB transfer no-op TDs.  (No-ops shouldn't be chained.)  The
1520 *     HC will need to invalidate the any TRBs it has cached after the stop
1521 *     endpoint command, as noted in the xHCI 0.95 errata.
1522 *
1523 *  3) The TD may have completed by the time the Stop Endpoint Command
1524 *     completes, so software needs to handle that case too.
1525 *
1526 * This function should protect against the TD enqueueing code ringing the
1527 * doorbell while this code is waiting for a Stop Endpoint command to complete.
1528 * It also needs to account for multiple cancellations on happening at the same
1529 * time for the same endpoint.
1530 *
1531 * Note that this function can be called in any context, or so says
1532 * usb_hcd_unlink_urb()
1533 */
1534int xhci_urb_dequeue(struct usb_hcd *hcd, struct urb *urb, int status)
1535{
1536	unsigned long flags;
1537	int ret, i;
1538	u32 temp;
1539	struct xhci_hcd *xhci;
1540	struct urb_priv	*urb_priv;
1541	struct xhci_td *td;
1542	unsigned int ep_index;
1543	struct xhci_ring *ep_ring;
1544	struct xhci_virt_ep *ep;
1545	struct xhci_command *command;
 
1546
1547	xhci = hcd_to_xhci(hcd);
1548	spin_lock_irqsave(&xhci->lock, flags);
 
 
 
1549	/* Make sure the URB hasn't completed or been unlinked already */
1550	ret = usb_hcd_check_unlink_urb(hcd, urb, status);
1551	if (ret || !urb->hcpriv)
1552		goto done;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1553	temp = readl(&xhci->op_regs->status);
1554	if (temp == 0xffffffff || (xhci->xhc_state & XHCI_STATE_HALTED)) {
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1555		xhci_dbg_trace(xhci, trace_xhci_dbg_cancel_urb,
1556				"HW died, freeing TD.");
1557		urb_priv = urb->hcpriv;
1558		for (i = urb_priv->td_cnt;
1559		     i < urb_priv->length && xhci->devs[urb->dev->slot_id];
1560		     i++) {
1561			td = urb_priv->td[i];
1562			if (!list_empty(&td->td_list))
1563				list_del_init(&td->td_list);
1564			if (!list_empty(&td->cancelled_td_list))
1565				list_del_init(&td->cancelled_td_list);
1566		}
1567
1568		usb_hcd_unlink_urb_from_ep(hcd, urb);
1569		spin_unlock_irqrestore(&xhci->lock, flags);
1570		usb_hcd_giveback_urb(hcd, urb, -ESHUTDOWN);
1571		xhci_urb_free_priv(urb_priv);
1572		return ret;
1573	}
1574	if ((xhci->xhc_state & XHCI_STATE_DYING) ||
1575			(xhci->xhc_state & XHCI_STATE_HALTED)) {
1576		xhci_dbg_trace(xhci, trace_xhci_dbg_cancel_urb,
1577				"Ep 0x%x: URB %p to be canceled on "
1578				"non-responsive xHCI host.",
1579				urb->ep->desc.bEndpointAddress, urb);
1580		/* Let the stop endpoint command watchdog timer (which set this
1581		 * state) finish cleaning up the endpoint TD lists.  We must
1582		 * have caught it in the middle of dropping a lock and giving
1583		 * back an URB.
1584		 */
1585		goto done;
1586	}
1587
1588	ep_index = xhci_get_endpoint_index(&urb->ep->desc);
1589	ep = &xhci->devs[urb->dev->slot_id]->eps[ep_index];
1590	ep_ring = xhci_urb_to_transfer_ring(xhci, urb);
1591	if (!ep_ring) {
1592		ret = -EINVAL;
1593		goto done;
1594	}
1595
1596	urb_priv = urb->hcpriv;
1597	i = urb_priv->td_cnt;
1598	if (i < urb_priv->length)
1599		xhci_dbg_trace(xhci, trace_xhci_dbg_cancel_urb,
1600				"Cancel URB %p, dev %s, ep 0x%x, "
1601				"starting at offset 0x%llx",
1602				urb, urb->dev->devpath,
1603				urb->ep->desc.bEndpointAddress,
1604				(unsigned long long) xhci_trb_virt_to_dma(
1605					urb_priv->td[i]->start_seg,
1606					urb_priv->td[i]->first_trb));
1607
1608	for (; i < urb_priv->length; i++) {
1609		td = urb_priv->td[i];
1610		list_add_tail(&td->cancelled_td_list, &ep->cancelled_td_list);
1611	}
1612
1613	/* Queue a stop endpoint command, but only if this is
1614	 * the first cancellation to be handled.
1615	 */
1616	if (!(ep->ep_state & EP_HALT_PENDING)) {
1617		command = xhci_alloc_command(xhci, false, false, GFP_ATOMIC);
1618		if (!command) {
1619			ret = -ENOMEM;
1620			goto done;
1621		}
1622		ep->ep_state |= EP_HALT_PENDING;
1623		ep->stop_cmds_pending++;
1624		ep->stop_cmd_timer.expires = jiffies +
1625			XHCI_STOP_EP_CMD_TIMEOUT * HZ;
1626		add_timer(&ep->stop_cmd_timer);
1627		xhci_queue_stop_endpoint(xhci, command, urb->dev->slot_id,
1628					 ep_index, 0);
1629		xhci_ring_cmd_db(xhci);
1630	}
1631done:
1632	spin_unlock_irqrestore(&xhci->lock, flags);
1633	return ret;
 
 
 
 
 
 
 
 
1634}
1635
1636/* Drop an endpoint from a new bandwidth configuration for this device.
1637 * Only one call to this function is allowed per endpoint before
1638 * check_bandwidth() or reset_bandwidth() must be called.
1639 * A call to xhci_drop_endpoint() followed by a call to xhci_add_endpoint() will
1640 * add the endpoint to the schedule with possibly new parameters denoted by a
1641 * different endpoint descriptor in usb_host_endpoint.
1642 * A call to xhci_add_endpoint() followed by a call to xhci_drop_endpoint() is
1643 * not allowed.
1644 *
1645 * The USB core will not allow URBs to be queued to an endpoint that is being
1646 * disabled, so there's no need for mutual exclusion to protect
1647 * the xhci->devs[slot_id] structure.
1648 */
1649int xhci_drop_endpoint(struct usb_hcd *hcd, struct usb_device *udev,
1650		struct usb_host_endpoint *ep)
1651{
1652	struct xhci_hcd *xhci;
1653	struct xhci_container_ctx *in_ctx, *out_ctx;
1654	struct xhci_input_control_ctx *ctrl_ctx;
1655	unsigned int ep_index;
1656	struct xhci_ep_ctx *ep_ctx;
1657	u32 drop_flag;
1658	u32 new_add_flags, new_drop_flags;
1659	int ret;
1660
1661	ret = xhci_check_args(hcd, udev, ep, 1, true, __func__);
1662	if (ret <= 0)
1663		return ret;
1664	xhci = hcd_to_xhci(hcd);
1665	if (xhci->xhc_state & XHCI_STATE_DYING)
1666		return -ENODEV;
1667
1668	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
1669	drop_flag = xhci_get_endpoint_flag(&ep->desc);
1670	if (drop_flag == SLOT_FLAG || drop_flag == EP0_FLAG) {
1671		xhci_dbg(xhci, "xHCI %s - can't drop slot or ep 0 %#x\n",
1672				__func__, drop_flag);
1673		return 0;
1674	}
1675
1676	in_ctx = xhci->devs[udev->slot_id]->in_ctx;
1677	out_ctx = xhci->devs[udev->slot_id]->out_ctx;
1678	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
1679	if (!ctrl_ctx) {
1680		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1681				__func__);
1682		return 0;
1683	}
1684
1685	ep_index = xhci_get_endpoint_index(&ep->desc);
1686	ep_ctx = xhci_get_ep_ctx(xhci, out_ctx, ep_index);
1687	/* If the HC already knows the endpoint is disabled,
1688	 * or the HCD has noted it is disabled, ignore this request
1689	 */
1690	if (((ep_ctx->ep_info & cpu_to_le32(EP_STATE_MASK)) ==
1691	     cpu_to_le32(EP_STATE_DISABLED)) ||
1692	    le32_to_cpu(ctrl_ctx->drop_flags) &
1693	    xhci_get_endpoint_flag(&ep->desc)) {
1694		/* Do not warn when called after a usb_device_reset */
1695		if (xhci->devs[udev->slot_id]->eps[ep_index].ring != NULL)
1696			xhci_warn(xhci, "xHCI %s called with disabled ep %p\n",
1697				  __func__, ep);
1698		return 0;
1699	}
1700
1701	ctrl_ctx->drop_flags |= cpu_to_le32(drop_flag);
1702	new_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags);
1703
1704	ctrl_ctx->add_flags &= cpu_to_le32(~drop_flag);
1705	new_add_flags = le32_to_cpu(ctrl_ctx->add_flags);
1706
 
 
1707	xhci_endpoint_zero(xhci, xhci->devs[udev->slot_id], ep);
1708
1709	if (xhci->quirks & XHCI_MTK_HOST)
1710		xhci_mtk_drop_ep_quirk(hcd, udev, ep);
1711
1712	xhci_dbg(xhci, "drop ep 0x%x, slot id %d, new drop flags = %#x, new add flags = %#x\n",
1713			(unsigned int) ep->desc.bEndpointAddress,
1714			udev->slot_id,
1715			(unsigned int) new_drop_flags,
1716			(unsigned int) new_add_flags);
1717	return 0;
1718}
1719
1720/* Add an endpoint to a new possible bandwidth configuration for this device.
1721 * Only one call to this function is allowed per endpoint before
1722 * check_bandwidth() or reset_bandwidth() must be called.
1723 * A call to xhci_drop_endpoint() followed by a call to xhci_add_endpoint() will
1724 * add the endpoint to the schedule with possibly new parameters denoted by a
1725 * different endpoint descriptor in usb_host_endpoint.
1726 * A call to xhci_add_endpoint() followed by a call to xhci_drop_endpoint() is
1727 * not allowed.
1728 *
1729 * The USB core will not allow URBs to be queued to an endpoint until the
1730 * configuration or alt setting is installed in the device, so there's no need
1731 * for mutual exclusion to protect the xhci->devs[slot_id] structure.
1732 */
1733int xhci_add_endpoint(struct usb_hcd *hcd, struct usb_device *udev,
1734		struct usb_host_endpoint *ep)
1735{
1736	struct xhci_hcd *xhci;
1737	struct xhci_container_ctx *in_ctx;
1738	unsigned int ep_index;
1739	struct xhci_input_control_ctx *ctrl_ctx;
 
1740	u32 added_ctxs;
1741	u32 new_add_flags, new_drop_flags;
1742	struct xhci_virt_device *virt_dev;
1743	int ret = 0;
1744
1745	ret = xhci_check_args(hcd, udev, ep, 1, true, __func__);
1746	if (ret <= 0) {
1747		/* So we won't queue a reset ep command for a root hub */
1748		ep->hcpriv = NULL;
1749		return ret;
1750	}
1751	xhci = hcd_to_xhci(hcd);
1752	if (xhci->xhc_state & XHCI_STATE_DYING)
1753		return -ENODEV;
1754
1755	added_ctxs = xhci_get_endpoint_flag(&ep->desc);
1756	if (added_ctxs == SLOT_FLAG || added_ctxs == EP0_FLAG) {
1757		/* FIXME when we have to issue an evaluate endpoint command to
1758		 * deal with ep0 max packet size changing once we get the
1759		 * descriptors
1760		 */
1761		xhci_dbg(xhci, "xHCI %s - can't add slot or ep 0 %#x\n",
1762				__func__, added_ctxs);
1763		return 0;
1764	}
1765
1766	virt_dev = xhci->devs[udev->slot_id];
1767	in_ctx = virt_dev->in_ctx;
1768	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
1769	if (!ctrl_ctx) {
1770		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1771				__func__);
1772		return 0;
1773	}
1774
1775	ep_index = xhci_get_endpoint_index(&ep->desc);
1776	/* If this endpoint is already in use, and the upper layers are trying
1777	 * to add it again without dropping it, reject the addition.
1778	 */
1779	if (virt_dev->eps[ep_index].ring &&
1780			!(le32_to_cpu(ctrl_ctx->drop_flags) & added_ctxs)) {
1781		xhci_warn(xhci, "Trying to add endpoint 0x%x "
1782				"without dropping it.\n",
1783				(unsigned int) ep->desc.bEndpointAddress);
1784		return -EINVAL;
1785	}
1786
1787	/* If the HCD has already noted the endpoint is enabled,
1788	 * ignore this request.
1789	 */
1790	if (le32_to_cpu(ctrl_ctx->add_flags) & added_ctxs) {
1791		xhci_warn(xhci, "xHCI %s called with enabled ep %p\n",
1792				__func__, ep);
1793		return 0;
1794	}
1795
1796	/*
1797	 * Configuration and alternate setting changes must be done in
1798	 * process context, not interrupt context (or so documenation
1799	 * for usb_set_interface() and usb_set_configuration() claim).
1800	 */
1801	if (xhci_endpoint_init(xhci, virt_dev, udev, ep, GFP_NOIO) < 0) {
1802		dev_dbg(&udev->dev, "%s - could not initialize ep %#x\n",
1803				__func__, ep->desc.bEndpointAddress);
1804		return -ENOMEM;
1805	}
1806
1807	if (xhci->quirks & XHCI_MTK_HOST) {
1808		ret = xhci_mtk_add_ep_quirk(hcd, udev, ep);
1809		if (ret < 0) {
1810			xhci_free_or_cache_endpoint_ring(xhci,
1811				virt_dev, ep_index);
1812			return ret;
1813		}
1814	}
1815
1816	ctrl_ctx->add_flags |= cpu_to_le32(added_ctxs);
1817	new_add_flags = le32_to_cpu(ctrl_ctx->add_flags);
1818
1819	/* If xhci_endpoint_disable() was called for this endpoint, but the
1820	 * xHC hasn't been notified yet through the check_bandwidth() call,
1821	 * this re-adds a new state for the endpoint from the new endpoint
1822	 * descriptors.  We must drop and re-add this endpoint, so we leave the
1823	 * drop flags alone.
1824	 */
1825	new_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags);
1826
1827	/* Store the usb_device pointer for later use */
1828	ep->hcpriv = udev;
1829
 
 
 
 
 
1830	xhci_dbg(xhci, "add ep 0x%x, slot id %d, new drop flags = %#x, new add flags = %#x\n",
1831			(unsigned int) ep->desc.bEndpointAddress,
1832			udev->slot_id,
1833			(unsigned int) new_drop_flags,
1834			(unsigned int) new_add_flags);
1835	return 0;
1836}
1837
1838static void xhci_zero_in_ctx(struct xhci_hcd *xhci, struct xhci_virt_device *virt_dev)
1839{
1840	struct xhci_input_control_ctx *ctrl_ctx;
1841	struct xhci_ep_ctx *ep_ctx;
1842	struct xhci_slot_ctx *slot_ctx;
1843	int i;
1844
1845	ctrl_ctx = xhci_get_input_control_ctx(virt_dev->in_ctx);
1846	if (!ctrl_ctx) {
1847		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1848				__func__);
1849		return;
1850	}
1851
1852	/* When a device's add flag and drop flag are zero, any subsequent
1853	 * configure endpoint command will leave that endpoint's state
1854	 * untouched.  Make sure we don't leave any old state in the input
1855	 * endpoint contexts.
1856	 */
1857	ctrl_ctx->drop_flags = 0;
1858	ctrl_ctx->add_flags = 0;
1859	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
1860	slot_ctx->dev_info &= cpu_to_le32(~LAST_CTX_MASK);
1861	/* Endpoint 0 is always valid */
1862	slot_ctx->dev_info |= cpu_to_le32(LAST_CTX(1));
1863	for (i = 1; i < 31; ++i) {
1864		ep_ctx = xhci_get_ep_ctx(xhci, virt_dev->in_ctx, i);
1865		ep_ctx->ep_info = 0;
1866		ep_ctx->ep_info2 = 0;
1867		ep_ctx->deq = 0;
1868		ep_ctx->tx_info = 0;
1869	}
1870}
1871
1872static int xhci_configure_endpoint_result(struct xhci_hcd *xhci,
1873		struct usb_device *udev, u32 *cmd_status)
1874{
1875	int ret;
1876
1877	switch (*cmd_status) {
1878	case COMP_CMD_ABORT:
1879	case COMP_CMD_STOP:
1880		xhci_warn(xhci, "Timeout while waiting for configure endpoint command\n");
1881		ret = -ETIME;
1882		break;
1883	case COMP_ENOMEM:
1884		dev_warn(&udev->dev,
1885			 "Not enough host controller resources for new device state.\n");
1886		ret = -ENOMEM;
1887		/* FIXME: can we allocate more resources for the HC? */
1888		break;
1889	case COMP_BW_ERR:
1890	case COMP_2ND_BW_ERR:
1891		dev_warn(&udev->dev,
1892			 "Not enough bandwidth for new device state.\n");
1893		ret = -ENOSPC;
1894		/* FIXME: can we go back to the old state? */
1895		break;
1896	case COMP_TRB_ERR:
1897		/* the HCD set up something wrong */
1898		dev_warn(&udev->dev, "ERROR: Endpoint drop flag = 0, "
1899				"add flag = 1, "
1900				"and endpoint is not disabled.\n");
1901		ret = -EINVAL;
1902		break;
1903	case COMP_DEV_ERR:
1904		dev_warn(&udev->dev,
1905			 "ERROR: Incompatible device for endpoint configure command.\n");
1906		ret = -ENODEV;
1907		break;
1908	case COMP_SUCCESS:
1909		xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
1910				"Successful Endpoint Configure command");
1911		ret = 0;
1912		break;
1913	default:
1914		xhci_err(xhci, "ERROR: unexpected command completion code 0x%x.\n",
1915				*cmd_status);
1916		ret = -EINVAL;
1917		break;
1918	}
1919	return ret;
1920}
1921
1922static int xhci_evaluate_context_result(struct xhci_hcd *xhci,
1923		struct usb_device *udev, u32 *cmd_status)
1924{
1925	int ret;
1926	struct xhci_virt_device *virt_dev = xhci->devs[udev->slot_id];
1927
1928	switch (*cmd_status) {
1929	case COMP_CMD_ABORT:
1930	case COMP_CMD_STOP:
1931		xhci_warn(xhci, "Timeout while waiting for evaluate context command\n");
1932		ret = -ETIME;
1933		break;
1934	case COMP_EINVAL:
1935		dev_warn(&udev->dev,
1936			 "WARN: xHCI driver setup invalid evaluate context command.\n");
1937		ret = -EINVAL;
1938		break;
1939	case COMP_EBADSLT:
1940		dev_warn(&udev->dev,
1941			"WARN: slot not enabled for evaluate context command.\n");
1942		ret = -EINVAL;
1943		break;
1944	case COMP_CTX_STATE:
1945		dev_warn(&udev->dev,
1946			"WARN: invalid context state for evaluate context command.\n");
1947		xhci_dbg_ctx(xhci, virt_dev->out_ctx, 1);
1948		ret = -EINVAL;
1949		break;
1950	case COMP_DEV_ERR:
1951		dev_warn(&udev->dev,
1952			"ERROR: Incompatible device for evaluate context command.\n");
1953		ret = -ENODEV;
1954		break;
1955	case COMP_MEL_ERR:
1956		/* Max Exit Latency too large error */
1957		dev_warn(&udev->dev, "WARN: Max Exit Latency too large\n");
1958		ret = -EINVAL;
1959		break;
1960	case COMP_SUCCESS:
1961		xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
1962				"Successful evaluate context command");
1963		ret = 0;
1964		break;
1965	default:
1966		xhci_err(xhci, "ERROR: unexpected command completion code 0x%x.\n",
1967			*cmd_status);
1968		ret = -EINVAL;
1969		break;
1970	}
1971	return ret;
1972}
1973
1974static u32 xhci_count_num_new_endpoints(struct xhci_hcd *xhci,
1975		struct xhci_input_control_ctx *ctrl_ctx)
1976{
1977	u32 valid_add_flags;
1978	u32 valid_drop_flags;
1979
1980	/* Ignore the slot flag (bit 0), and the default control endpoint flag
1981	 * (bit 1).  The default control endpoint is added during the Address
1982	 * Device command and is never removed until the slot is disabled.
1983	 */
1984	valid_add_flags = le32_to_cpu(ctrl_ctx->add_flags) >> 2;
1985	valid_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags) >> 2;
1986
1987	/* Use hweight32 to count the number of ones in the add flags, or
1988	 * number of endpoints added.  Don't count endpoints that are changed
1989	 * (both added and dropped).
1990	 */
1991	return hweight32(valid_add_flags) -
1992		hweight32(valid_add_flags & valid_drop_flags);
1993}
1994
1995static unsigned int xhci_count_num_dropped_endpoints(struct xhci_hcd *xhci,
1996		struct xhci_input_control_ctx *ctrl_ctx)
1997{
1998	u32 valid_add_flags;
1999	u32 valid_drop_flags;
2000
2001	valid_add_flags = le32_to_cpu(ctrl_ctx->add_flags) >> 2;
2002	valid_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags) >> 2;
2003
2004	return hweight32(valid_drop_flags) -
2005		hweight32(valid_add_flags & valid_drop_flags);
2006}
2007
2008/*
2009 * We need to reserve the new number of endpoints before the configure endpoint
2010 * command completes.  We can't subtract the dropped endpoints from the number
2011 * of active endpoints until the command completes because we can oversubscribe
2012 * the host in this case:
2013 *
2014 *  - the first configure endpoint command drops more endpoints than it adds
2015 *  - a second configure endpoint command that adds more endpoints is queued
2016 *  - the first configure endpoint command fails, so the config is unchanged
2017 *  - the second command may succeed, even though there isn't enough resources
2018 *
2019 * Must be called with xhci->lock held.
2020 */
2021static int xhci_reserve_host_resources(struct xhci_hcd *xhci,
2022		struct xhci_input_control_ctx *ctrl_ctx)
2023{
2024	u32 added_eps;
2025
2026	added_eps = xhci_count_num_new_endpoints(xhci, ctrl_ctx);
2027	if (xhci->num_active_eps + added_eps > xhci->limit_active_eps) {
2028		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2029				"Not enough ep ctxs: "
2030				"%u active, need to add %u, limit is %u.",
2031				xhci->num_active_eps, added_eps,
2032				xhci->limit_active_eps);
2033		return -ENOMEM;
2034	}
2035	xhci->num_active_eps += added_eps;
2036	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2037			"Adding %u ep ctxs, %u now active.", added_eps,
2038			xhci->num_active_eps);
2039	return 0;
2040}
2041
2042/*
2043 * The configure endpoint was failed by the xHC for some other reason, so we
2044 * need to revert the resources that failed configuration would have used.
2045 *
2046 * Must be called with xhci->lock held.
2047 */
2048static void xhci_free_host_resources(struct xhci_hcd *xhci,
2049		struct xhci_input_control_ctx *ctrl_ctx)
2050{
2051	u32 num_failed_eps;
2052
2053	num_failed_eps = xhci_count_num_new_endpoints(xhci, ctrl_ctx);
2054	xhci->num_active_eps -= num_failed_eps;
2055	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2056			"Removing %u failed ep ctxs, %u now active.",
2057			num_failed_eps,
2058			xhci->num_active_eps);
2059}
2060
2061/*
2062 * Now that the command has completed, clean up the active endpoint count by
2063 * subtracting out the endpoints that were dropped (but not changed).
2064 *
2065 * Must be called with xhci->lock held.
2066 */
2067static void xhci_finish_resource_reservation(struct xhci_hcd *xhci,
2068		struct xhci_input_control_ctx *ctrl_ctx)
2069{
2070	u32 num_dropped_eps;
2071
2072	num_dropped_eps = xhci_count_num_dropped_endpoints(xhci, ctrl_ctx);
2073	xhci->num_active_eps -= num_dropped_eps;
2074	if (num_dropped_eps)
2075		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2076				"Removing %u dropped ep ctxs, %u now active.",
2077				num_dropped_eps,
2078				xhci->num_active_eps);
2079}
2080
2081static unsigned int xhci_get_block_size(struct usb_device *udev)
2082{
2083	switch (udev->speed) {
2084	case USB_SPEED_LOW:
2085	case USB_SPEED_FULL:
2086		return FS_BLOCK;
2087	case USB_SPEED_HIGH:
2088		return HS_BLOCK;
2089	case USB_SPEED_SUPER:
2090	case USB_SPEED_SUPER_PLUS:
2091		return SS_BLOCK;
2092	case USB_SPEED_UNKNOWN:
2093	case USB_SPEED_WIRELESS:
2094	default:
2095		/* Should never happen */
2096		return 1;
2097	}
2098}
2099
2100static unsigned int
2101xhci_get_largest_overhead(struct xhci_interval_bw *interval_bw)
2102{
2103	if (interval_bw->overhead[LS_OVERHEAD_TYPE])
2104		return LS_OVERHEAD;
2105	if (interval_bw->overhead[FS_OVERHEAD_TYPE])
2106		return FS_OVERHEAD;
2107	return HS_OVERHEAD;
2108}
2109
2110/* If we are changing a LS/FS device under a HS hub,
2111 * make sure (if we are activating a new TT) that the HS bus has enough
2112 * bandwidth for this new TT.
2113 */
2114static int xhci_check_tt_bw_table(struct xhci_hcd *xhci,
2115		struct xhci_virt_device *virt_dev,
2116		int old_active_eps)
2117{
2118	struct xhci_interval_bw_table *bw_table;
2119	struct xhci_tt_bw_info *tt_info;
2120
2121	/* Find the bandwidth table for the root port this TT is attached to. */
2122	bw_table = &xhci->rh_bw[virt_dev->real_port - 1].bw_table;
2123	tt_info = virt_dev->tt_info;
2124	/* If this TT already had active endpoints, the bandwidth for this TT
2125	 * has already been added.  Removing all periodic endpoints (and thus
2126	 * making the TT enactive) will only decrease the bandwidth used.
2127	 */
2128	if (old_active_eps)
2129		return 0;
2130	if (old_active_eps == 0 && tt_info->active_eps != 0) {
2131		if (bw_table->bw_used + TT_HS_OVERHEAD > HS_BW_LIMIT)
2132			return -ENOMEM;
2133		return 0;
2134	}
2135	/* Not sure why we would have no new active endpoints...
2136	 *
2137	 * Maybe because of an Evaluate Context change for a hub update or a
2138	 * control endpoint 0 max packet size change?
2139	 * FIXME: skip the bandwidth calculation in that case.
2140	 */
2141	return 0;
2142}
2143
2144static int xhci_check_ss_bw(struct xhci_hcd *xhci,
2145		struct xhci_virt_device *virt_dev)
2146{
2147	unsigned int bw_reserved;
2148
2149	bw_reserved = DIV_ROUND_UP(SS_BW_RESERVED*SS_BW_LIMIT_IN, 100);
2150	if (virt_dev->bw_table->ss_bw_in > (SS_BW_LIMIT_IN - bw_reserved))
2151		return -ENOMEM;
2152
2153	bw_reserved = DIV_ROUND_UP(SS_BW_RESERVED*SS_BW_LIMIT_OUT, 100);
2154	if (virt_dev->bw_table->ss_bw_out > (SS_BW_LIMIT_OUT - bw_reserved))
2155		return -ENOMEM;
2156
2157	return 0;
2158}
2159
2160/*
2161 * This algorithm is a very conservative estimate of the worst-case scheduling
2162 * scenario for any one interval.  The hardware dynamically schedules the
2163 * packets, so we can't tell which microframe could be the limiting factor in
2164 * the bandwidth scheduling.  This only takes into account periodic endpoints.
2165 *
2166 * Obviously, we can't solve an NP complete problem to find the minimum worst
2167 * case scenario.  Instead, we come up with an estimate that is no less than
2168 * the worst case bandwidth used for any one microframe, but may be an
2169 * over-estimate.
2170 *
2171 * We walk the requirements for each endpoint by interval, starting with the
2172 * smallest interval, and place packets in the schedule where there is only one
2173 * possible way to schedule packets for that interval.  In order to simplify
2174 * this algorithm, we record the largest max packet size for each interval, and
2175 * assume all packets will be that size.
2176 *
2177 * For interval 0, we obviously must schedule all packets for each interval.
2178 * The bandwidth for interval 0 is just the amount of data to be transmitted
2179 * (the sum of all max ESIT payload sizes, plus any overhead per packet times
2180 * the number of packets).
2181 *
2182 * For interval 1, we have two possible microframes to schedule those packets
2183 * in.  For this algorithm, if we can schedule the same number of packets for
2184 * each possible scheduling opportunity (each microframe), we will do so.  The
2185 * remaining number of packets will be saved to be transmitted in the gaps in
2186 * the next interval's scheduling sequence.
2187 *
2188 * As we move those remaining packets to be scheduled with interval 2 packets,
2189 * we have to double the number of remaining packets to transmit.  This is
2190 * because the intervals are actually powers of 2, and we would be transmitting
2191 * the previous interval's packets twice in this interval.  We also have to be
2192 * sure that when we look at the largest max packet size for this interval, we
2193 * also look at the largest max packet size for the remaining packets and take
2194 * the greater of the two.
2195 *
2196 * The algorithm continues to evenly distribute packets in each scheduling
2197 * opportunity, and push the remaining packets out, until we get to the last
2198 * interval.  Then those packets and their associated overhead are just added
2199 * to the bandwidth used.
2200 */
2201static int xhci_check_bw_table(struct xhci_hcd *xhci,
2202		struct xhci_virt_device *virt_dev,
2203		int old_active_eps)
2204{
2205	unsigned int bw_reserved;
2206	unsigned int max_bandwidth;
2207	unsigned int bw_used;
2208	unsigned int block_size;
2209	struct xhci_interval_bw_table *bw_table;
2210	unsigned int packet_size = 0;
2211	unsigned int overhead = 0;
2212	unsigned int packets_transmitted = 0;
2213	unsigned int packets_remaining = 0;
2214	unsigned int i;
2215
2216	if (virt_dev->udev->speed >= USB_SPEED_SUPER)
2217		return xhci_check_ss_bw(xhci, virt_dev);
2218
2219	if (virt_dev->udev->speed == USB_SPEED_HIGH) {
2220		max_bandwidth = HS_BW_LIMIT;
2221		/* Convert percent of bus BW reserved to blocks reserved */
2222		bw_reserved = DIV_ROUND_UP(HS_BW_RESERVED * max_bandwidth, 100);
2223	} else {
2224		max_bandwidth = FS_BW_LIMIT;
2225		bw_reserved = DIV_ROUND_UP(FS_BW_RESERVED * max_bandwidth, 100);
2226	}
2227
2228	bw_table = virt_dev->bw_table;
2229	/* We need to translate the max packet size and max ESIT payloads into
2230	 * the units the hardware uses.
2231	 */
2232	block_size = xhci_get_block_size(virt_dev->udev);
2233
2234	/* If we are manipulating a LS/FS device under a HS hub, double check
2235	 * that the HS bus has enough bandwidth if we are activing a new TT.
2236	 */
2237	if (virt_dev->tt_info) {
2238		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2239				"Recalculating BW for rootport %u",
2240				virt_dev->real_port);
2241		if (xhci_check_tt_bw_table(xhci, virt_dev, old_active_eps)) {
2242			xhci_warn(xhci, "Not enough bandwidth on HS bus for "
2243					"newly activated TT.\n");
2244			return -ENOMEM;
2245		}
2246		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2247				"Recalculating BW for TT slot %u port %u",
2248				virt_dev->tt_info->slot_id,
2249				virt_dev->tt_info->ttport);
2250	} else {
2251		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2252				"Recalculating BW for rootport %u",
2253				virt_dev->real_port);
2254	}
2255
2256	/* Add in how much bandwidth will be used for interval zero, or the
2257	 * rounded max ESIT payload + number of packets * largest overhead.
2258	 */
2259	bw_used = DIV_ROUND_UP(bw_table->interval0_esit_payload, block_size) +
2260		bw_table->interval_bw[0].num_packets *
2261		xhci_get_largest_overhead(&bw_table->interval_bw[0]);
2262
2263	for (i = 1; i < XHCI_MAX_INTERVAL; i++) {
2264		unsigned int bw_added;
2265		unsigned int largest_mps;
2266		unsigned int interval_overhead;
2267
2268		/*
2269		 * How many packets could we transmit in this interval?
2270		 * If packets didn't fit in the previous interval, we will need
2271		 * to transmit that many packets twice within this interval.
2272		 */
2273		packets_remaining = 2 * packets_remaining +
2274			bw_table->interval_bw[i].num_packets;
2275
2276		/* Find the largest max packet size of this or the previous
2277		 * interval.
2278		 */
2279		if (list_empty(&bw_table->interval_bw[i].endpoints))
2280			largest_mps = 0;
2281		else {
2282			struct xhci_virt_ep *virt_ep;
2283			struct list_head *ep_entry;
2284
2285			ep_entry = bw_table->interval_bw[i].endpoints.next;
2286			virt_ep = list_entry(ep_entry,
2287					struct xhci_virt_ep, bw_endpoint_list);
2288			/* Convert to blocks, rounding up */
2289			largest_mps = DIV_ROUND_UP(
2290					virt_ep->bw_info.max_packet_size,
2291					block_size);
2292		}
2293		if (largest_mps > packet_size)
2294			packet_size = largest_mps;
2295
2296		/* Use the larger overhead of this or the previous interval. */
2297		interval_overhead = xhci_get_largest_overhead(
2298				&bw_table->interval_bw[i]);
2299		if (interval_overhead > overhead)
2300			overhead = interval_overhead;
2301
2302		/* How many packets can we evenly distribute across
2303		 * (1 << (i + 1)) possible scheduling opportunities?
2304		 */
2305		packets_transmitted = packets_remaining >> (i + 1);
2306
2307		/* Add in the bandwidth used for those scheduled packets */
2308		bw_added = packets_transmitted * (overhead + packet_size);
2309
2310		/* How many packets do we have remaining to transmit? */
2311		packets_remaining = packets_remaining % (1 << (i + 1));
2312
2313		/* What largest max packet size should those packets have? */
2314		/* If we've transmitted all packets, don't carry over the
2315		 * largest packet size.
2316		 */
2317		if (packets_remaining == 0) {
2318			packet_size = 0;
2319			overhead = 0;
2320		} else if (packets_transmitted > 0) {
2321			/* Otherwise if we do have remaining packets, and we've
2322			 * scheduled some packets in this interval, take the
2323			 * largest max packet size from endpoints with this
2324			 * interval.
2325			 */
2326			packet_size = largest_mps;
2327			overhead = interval_overhead;
2328		}
2329		/* Otherwise carry over packet_size and overhead from the last
2330		 * time we had a remainder.
2331		 */
2332		bw_used += bw_added;
2333		if (bw_used > max_bandwidth) {
2334			xhci_warn(xhci, "Not enough bandwidth. "
2335					"Proposed: %u, Max: %u\n",
2336				bw_used, max_bandwidth);
2337			return -ENOMEM;
2338		}
2339	}
2340	/*
2341	 * Ok, we know we have some packets left over after even-handedly
2342	 * scheduling interval 15.  We don't know which microframes they will
2343	 * fit into, so we over-schedule and say they will be scheduled every
2344	 * microframe.
2345	 */
2346	if (packets_remaining > 0)
2347		bw_used += overhead + packet_size;
2348
2349	if (!virt_dev->tt_info && virt_dev->udev->speed == USB_SPEED_HIGH) {
2350		unsigned int port_index = virt_dev->real_port - 1;
2351
2352		/* OK, we're manipulating a HS device attached to a
2353		 * root port bandwidth domain.  Include the number of active TTs
2354		 * in the bandwidth used.
2355		 */
2356		bw_used += TT_HS_OVERHEAD *
2357			xhci->rh_bw[port_index].num_active_tts;
2358	}
2359
2360	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2361		"Final bandwidth: %u, Limit: %u, Reserved: %u, "
2362		"Available: %u " "percent",
2363		bw_used, max_bandwidth, bw_reserved,
2364		(max_bandwidth - bw_used - bw_reserved) * 100 /
2365		max_bandwidth);
2366
2367	bw_used += bw_reserved;
2368	if (bw_used > max_bandwidth) {
2369		xhci_warn(xhci, "Not enough bandwidth. Proposed: %u, Max: %u\n",
2370				bw_used, max_bandwidth);
2371		return -ENOMEM;
2372	}
2373
2374	bw_table->bw_used = bw_used;
2375	return 0;
2376}
2377
2378static bool xhci_is_async_ep(unsigned int ep_type)
2379{
2380	return (ep_type != ISOC_OUT_EP && ep_type != INT_OUT_EP &&
2381					ep_type != ISOC_IN_EP &&
2382					ep_type != INT_IN_EP);
2383}
2384
2385static bool xhci_is_sync_in_ep(unsigned int ep_type)
2386{
2387	return (ep_type == ISOC_IN_EP || ep_type == INT_IN_EP);
2388}
2389
2390static unsigned int xhci_get_ss_bw_consumed(struct xhci_bw_info *ep_bw)
2391{
2392	unsigned int mps = DIV_ROUND_UP(ep_bw->max_packet_size, SS_BLOCK);
2393
2394	if (ep_bw->ep_interval == 0)
2395		return SS_OVERHEAD_BURST +
2396			(ep_bw->mult * ep_bw->num_packets *
2397					(SS_OVERHEAD + mps));
2398	return DIV_ROUND_UP(ep_bw->mult * ep_bw->num_packets *
2399				(SS_OVERHEAD + mps + SS_OVERHEAD_BURST),
2400				1 << ep_bw->ep_interval);
2401
2402}
2403
2404void xhci_drop_ep_from_interval_table(struct xhci_hcd *xhci,
2405		struct xhci_bw_info *ep_bw,
2406		struct xhci_interval_bw_table *bw_table,
2407		struct usb_device *udev,
2408		struct xhci_virt_ep *virt_ep,
2409		struct xhci_tt_bw_info *tt_info)
2410{
2411	struct xhci_interval_bw	*interval_bw;
2412	int normalized_interval;
2413
2414	if (xhci_is_async_ep(ep_bw->type))
2415		return;
2416
2417	if (udev->speed >= USB_SPEED_SUPER) {
2418		if (xhci_is_sync_in_ep(ep_bw->type))
2419			xhci->devs[udev->slot_id]->bw_table->ss_bw_in -=
2420				xhci_get_ss_bw_consumed(ep_bw);
2421		else
2422			xhci->devs[udev->slot_id]->bw_table->ss_bw_out -=
2423				xhci_get_ss_bw_consumed(ep_bw);
2424		return;
2425	}
2426
2427	/* SuperSpeed endpoints never get added to intervals in the table, so
2428	 * this check is only valid for HS/FS/LS devices.
2429	 */
2430	if (list_empty(&virt_ep->bw_endpoint_list))
2431		return;
2432	/* For LS/FS devices, we need to translate the interval expressed in
2433	 * microframes to frames.
2434	 */
2435	if (udev->speed == USB_SPEED_HIGH)
2436		normalized_interval = ep_bw->ep_interval;
2437	else
2438		normalized_interval = ep_bw->ep_interval - 3;
2439
2440	if (normalized_interval == 0)
2441		bw_table->interval0_esit_payload -= ep_bw->max_esit_payload;
2442	interval_bw = &bw_table->interval_bw[normalized_interval];
2443	interval_bw->num_packets -= ep_bw->num_packets;
2444	switch (udev->speed) {
2445	case USB_SPEED_LOW:
2446		interval_bw->overhead[LS_OVERHEAD_TYPE] -= 1;
2447		break;
2448	case USB_SPEED_FULL:
2449		interval_bw->overhead[FS_OVERHEAD_TYPE] -= 1;
2450		break;
2451	case USB_SPEED_HIGH:
2452		interval_bw->overhead[HS_OVERHEAD_TYPE] -= 1;
2453		break;
2454	case USB_SPEED_SUPER:
2455	case USB_SPEED_SUPER_PLUS:
2456	case USB_SPEED_UNKNOWN:
2457	case USB_SPEED_WIRELESS:
2458		/* Should never happen because only LS/FS/HS endpoints will get
2459		 * added to the endpoint list.
2460		 */
2461		return;
2462	}
2463	if (tt_info)
2464		tt_info->active_eps -= 1;
2465	list_del_init(&virt_ep->bw_endpoint_list);
2466}
2467
2468static void xhci_add_ep_to_interval_table(struct xhci_hcd *xhci,
2469		struct xhci_bw_info *ep_bw,
2470		struct xhci_interval_bw_table *bw_table,
2471		struct usb_device *udev,
2472		struct xhci_virt_ep *virt_ep,
2473		struct xhci_tt_bw_info *tt_info)
2474{
2475	struct xhci_interval_bw	*interval_bw;
2476	struct xhci_virt_ep *smaller_ep;
2477	int normalized_interval;
2478
2479	if (xhci_is_async_ep(ep_bw->type))
2480		return;
2481
2482	if (udev->speed == USB_SPEED_SUPER) {
2483		if (xhci_is_sync_in_ep(ep_bw->type))
2484			xhci->devs[udev->slot_id]->bw_table->ss_bw_in +=
2485				xhci_get_ss_bw_consumed(ep_bw);
2486		else
2487			xhci->devs[udev->slot_id]->bw_table->ss_bw_out +=
2488				xhci_get_ss_bw_consumed(ep_bw);
2489		return;
2490	}
2491
2492	/* For LS/FS devices, we need to translate the interval expressed in
2493	 * microframes to frames.
2494	 */
2495	if (udev->speed == USB_SPEED_HIGH)
2496		normalized_interval = ep_bw->ep_interval;
2497	else
2498		normalized_interval = ep_bw->ep_interval - 3;
2499
2500	if (normalized_interval == 0)
2501		bw_table->interval0_esit_payload += ep_bw->max_esit_payload;
2502	interval_bw = &bw_table->interval_bw[normalized_interval];
2503	interval_bw->num_packets += ep_bw->num_packets;
2504	switch (udev->speed) {
2505	case USB_SPEED_LOW:
2506		interval_bw->overhead[LS_OVERHEAD_TYPE] += 1;
2507		break;
2508	case USB_SPEED_FULL:
2509		interval_bw->overhead[FS_OVERHEAD_TYPE] += 1;
2510		break;
2511	case USB_SPEED_HIGH:
2512		interval_bw->overhead[HS_OVERHEAD_TYPE] += 1;
2513		break;
2514	case USB_SPEED_SUPER:
2515	case USB_SPEED_SUPER_PLUS:
2516	case USB_SPEED_UNKNOWN:
2517	case USB_SPEED_WIRELESS:
2518		/* Should never happen because only LS/FS/HS endpoints will get
2519		 * added to the endpoint list.
2520		 */
2521		return;
2522	}
2523
2524	if (tt_info)
2525		tt_info->active_eps += 1;
2526	/* Insert the endpoint into the list, largest max packet size first. */
2527	list_for_each_entry(smaller_ep, &interval_bw->endpoints,
2528			bw_endpoint_list) {
2529		if (ep_bw->max_packet_size >=
2530				smaller_ep->bw_info.max_packet_size) {
2531			/* Add the new ep before the smaller endpoint */
2532			list_add_tail(&virt_ep->bw_endpoint_list,
2533					&smaller_ep->bw_endpoint_list);
2534			return;
2535		}
2536	}
2537	/* Add the new endpoint at the end of the list. */
2538	list_add_tail(&virt_ep->bw_endpoint_list,
2539			&interval_bw->endpoints);
2540}
2541
2542void xhci_update_tt_active_eps(struct xhci_hcd *xhci,
2543		struct xhci_virt_device *virt_dev,
2544		int old_active_eps)
2545{
2546	struct xhci_root_port_bw_info *rh_bw_info;
2547	if (!virt_dev->tt_info)
2548		return;
2549
2550	rh_bw_info = &xhci->rh_bw[virt_dev->real_port - 1];
2551	if (old_active_eps == 0 &&
2552				virt_dev->tt_info->active_eps != 0) {
2553		rh_bw_info->num_active_tts += 1;
2554		rh_bw_info->bw_table.bw_used += TT_HS_OVERHEAD;
2555	} else if (old_active_eps != 0 &&
2556				virt_dev->tt_info->active_eps == 0) {
2557		rh_bw_info->num_active_tts -= 1;
2558		rh_bw_info->bw_table.bw_used -= TT_HS_OVERHEAD;
2559	}
2560}
2561
2562static int xhci_reserve_bandwidth(struct xhci_hcd *xhci,
2563		struct xhci_virt_device *virt_dev,
2564		struct xhci_container_ctx *in_ctx)
2565{
2566	struct xhci_bw_info ep_bw_info[31];
2567	int i;
2568	struct xhci_input_control_ctx *ctrl_ctx;
2569	int old_active_eps = 0;
2570
2571	if (virt_dev->tt_info)
2572		old_active_eps = virt_dev->tt_info->active_eps;
2573
2574	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
2575	if (!ctrl_ctx) {
2576		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2577				__func__);
2578		return -ENOMEM;
2579	}
2580
2581	for (i = 0; i < 31; i++) {
2582		if (!EP_IS_ADDED(ctrl_ctx, i) && !EP_IS_DROPPED(ctrl_ctx, i))
2583			continue;
2584
2585		/* Make a copy of the BW info in case we need to revert this */
2586		memcpy(&ep_bw_info[i], &virt_dev->eps[i].bw_info,
2587				sizeof(ep_bw_info[i]));
2588		/* Drop the endpoint from the interval table if the endpoint is
2589		 * being dropped or changed.
2590		 */
2591		if (EP_IS_DROPPED(ctrl_ctx, i))
2592			xhci_drop_ep_from_interval_table(xhci,
2593					&virt_dev->eps[i].bw_info,
2594					virt_dev->bw_table,
2595					virt_dev->udev,
2596					&virt_dev->eps[i],
2597					virt_dev->tt_info);
2598	}
2599	/* Overwrite the information stored in the endpoints' bw_info */
2600	xhci_update_bw_info(xhci, virt_dev->in_ctx, ctrl_ctx, virt_dev);
2601	for (i = 0; i < 31; i++) {
2602		/* Add any changed or added endpoints to the interval table */
2603		if (EP_IS_ADDED(ctrl_ctx, i))
2604			xhci_add_ep_to_interval_table(xhci,
2605					&virt_dev->eps[i].bw_info,
2606					virt_dev->bw_table,
2607					virt_dev->udev,
2608					&virt_dev->eps[i],
2609					virt_dev->tt_info);
2610	}
2611
2612	if (!xhci_check_bw_table(xhci, virt_dev, old_active_eps)) {
2613		/* Ok, this fits in the bandwidth we have.
2614		 * Update the number of active TTs.
2615		 */
2616		xhci_update_tt_active_eps(xhci, virt_dev, old_active_eps);
2617		return 0;
2618	}
2619
2620	/* We don't have enough bandwidth for this, revert the stored info. */
2621	for (i = 0; i < 31; i++) {
2622		if (!EP_IS_ADDED(ctrl_ctx, i) && !EP_IS_DROPPED(ctrl_ctx, i))
2623			continue;
2624
2625		/* Drop the new copies of any added or changed endpoints from
2626		 * the interval table.
2627		 */
2628		if (EP_IS_ADDED(ctrl_ctx, i)) {
2629			xhci_drop_ep_from_interval_table(xhci,
2630					&virt_dev->eps[i].bw_info,
2631					virt_dev->bw_table,
2632					virt_dev->udev,
2633					&virt_dev->eps[i],
2634					virt_dev->tt_info);
2635		}
2636		/* Revert the endpoint back to its old information */
2637		memcpy(&virt_dev->eps[i].bw_info, &ep_bw_info[i],
2638				sizeof(ep_bw_info[i]));
2639		/* Add any changed or dropped endpoints back into the table */
2640		if (EP_IS_DROPPED(ctrl_ctx, i))
2641			xhci_add_ep_to_interval_table(xhci,
2642					&virt_dev->eps[i].bw_info,
2643					virt_dev->bw_table,
2644					virt_dev->udev,
2645					&virt_dev->eps[i],
2646					virt_dev->tt_info);
2647	}
2648	return -ENOMEM;
2649}
2650
2651
2652/* Issue a configure endpoint command or evaluate context command
2653 * and wait for it to finish.
2654 */
2655static int xhci_configure_endpoint(struct xhci_hcd *xhci,
2656		struct usb_device *udev,
2657		struct xhci_command *command,
2658		bool ctx_change, bool must_succeed)
2659{
2660	int ret;
2661	unsigned long flags;
2662	struct xhci_input_control_ctx *ctrl_ctx;
2663	struct xhci_virt_device *virt_dev;
 
2664
2665	if (!command)
2666		return -EINVAL;
2667
2668	spin_lock_irqsave(&xhci->lock, flags);
 
 
 
 
 
 
2669	virt_dev = xhci->devs[udev->slot_id];
2670
2671	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
2672	if (!ctrl_ctx) {
2673		spin_unlock_irqrestore(&xhci->lock, flags);
2674		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2675				__func__);
2676		return -ENOMEM;
2677	}
2678
2679	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK) &&
2680			xhci_reserve_host_resources(xhci, ctrl_ctx)) {
2681		spin_unlock_irqrestore(&xhci->lock, flags);
2682		xhci_warn(xhci, "Not enough host resources, "
2683				"active endpoint contexts = %u\n",
2684				xhci->num_active_eps);
2685		return -ENOMEM;
2686	}
2687	if ((xhci->quirks & XHCI_SW_BW_CHECKING) &&
2688	    xhci_reserve_bandwidth(xhci, virt_dev, command->in_ctx)) {
2689		if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK))
2690			xhci_free_host_resources(xhci, ctrl_ctx);
2691		spin_unlock_irqrestore(&xhci->lock, flags);
2692		xhci_warn(xhci, "Not enough bandwidth\n");
2693		return -ENOMEM;
2694	}
2695
 
 
 
 
 
2696	if (!ctx_change)
2697		ret = xhci_queue_configure_endpoint(xhci, command,
2698				command->in_ctx->dma,
2699				udev->slot_id, must_succeed);
2700	else
2701		ret = xhci_queue_evaluate_context(xhci, command,
2702				command->in_ctx->dma,
2703				udev->slot_id, must_succeed);
2704	if (ret < 0) {
2705		if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK))
2706			xhci_free_host_resources(xhci, ctrl_ctx);
2707		spin_unlock_irqrestore(&xhci->lock, flags);
2708		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
2709				"FIXME allocate a new ring segment");
2710		return -ENOMEM;
2711	}
2712	xhci_ring_cmd_db(xhci);
2713	spin_unlock_irqrestore(&xhci->lock, flags);
2714
2715	/* Wait for the configure endpoint command to complete */
2716	wait_for_completion(command->completion);
2717
2718	if (!ctx_change)
2719		ret = xhci_configure_endpoint_result(xhci, udev,
2720						     &command->status);
2721	else
2722		ret = xhci_evaluate_context_result(xhci, udev,
2723						   &command->status);
2724
2725	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
2726		spin_lock_irqsave(&xhci->lock, flags);
2727		/* If the command failed, remove the reserved resources.
2728		 * Otherwise, clean up the estimate to include dropped eps.
2729		 */
2730		if (ret)
2731			xhci_free_host_resources(xhci, ctrl_ctx);
2732		else
2733			xhci_finish_resource_reservation(xhci, ctrl_ctx);
2734		spin_unlock_irqrestore(&xhci->lock, flags);
2735	}
2736	return ret;
2737}
2738
2739static void xhci_check_bw_drop_ep_streams(struct xhci_hcd *xhci,
2740	struct xhci_virt_device *vdev, int i)
2741{
2742	struct xhci_virt_ep *ep = &vdev->eps[i];
2743
2744	if (ep->ep_state & EP_HAS_STREAMS) {
2745		xhci_warn(xhci, "WARN: endpoint 0x%02x has streams on set_interface, freeing streams.\n",
2746				xhci_get_endpoint_address(i));
2747		xhci_free_stream_info(xhci, ep->stream_info);
2748		ep->stream_info = NULL;
2749		ep->ep_state &= ~EP_HAS_STREAMS;
2750	}
2751}
2752
2753/* Called after one or more calls to xhci_add_endpoint() or
2754 * xhci_drop_endpoint().  If this call fails, the USB core is expected
2755 * to call xhci_reset_bandwidth().
2756 *
2757 * Since we are in the middle of changing either configuration or
2758 * installing a new alt setting, the USB core won't allow URBs to be
2759 * enqueued for any endpoint on the old config or interface.  Nothing
2760 * else should be touching the xhci->devs[slot_id] structure, so we
2761 * don't need to take the xhci->lock for manipulating that.
2762 */
2763int xhci_check_bandwidth(struct usb_hcd *hcd, struct usb_device *udev)
2764{
2765	int i;
2766	int ret = 0;
2767	struct xhci_hcd *xhci;
2768	struct xhci_virt_device	*virt_dev;
2769	struct xhci_input_control_ctx *ctrl_ctx;
2770	struct xhci_slot_ctx *slot_ctx;
2771	struct xhci_command *command;
2772
2773	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
2774	if (ret <= 0)
2775		return ret;
2776	xhci = hcd_to_xhci(hcd);
2777	if ((xhci->xhc_state & XHCI_STATE_DYING) ||
2778		(xhci->xhc_state & XHCI_STATE_REMOVING))
2779		return -ENODEV;
2780
2781	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
2782	virt_dev = xhci->devs[udev->slot_id];
2783
2784	command = xhci_alloc_command(xhci, false, true, GFP_KERNEL);
2785	if (!command)
2786		return -ENOMEM;
2787
2788	command->in_ctx = virt_dev->in_ctx;
2789
2790	/* See section 4.6.6 - A0 = 1; A1 = D0 = D1 = 0 */
2791	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
2792	if (!ctrl_ctx) {
2793		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2794				__func__);
2795		ret = -ENOMEM;
2796		goto command_cleanup;
2797	}
2798	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
2799	ctrl_ctx->add_flags &= cpu_to_le32(~EP0_FLAG);
2800	ctrl_ctx->drop_flags &= cpu_to_le32(~(SLOT_FLAG | EP0_FLAG));
2801
2802	/* Don't issue the command if there's no endpoints to update. */
2803	if (ctrl_ctx->add_flags == cpu_to_le32(SLOT_FLAG) &&
2804	    ctrl_ctx->drop_flags == 0) {
2805		ret = 0;
2806		goto command_cleanup;
2807	}
2808	/* Fix up Context Entries field. Minimum value is EP0 == BIT(1). */
2809	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
2810	for (i = 31; i >= 1; i--) {
2811		__le32 le32 = cpu_to_le32(BIT(i));
2812
2813		if ((virt_dev->eps[i-1].ring && !(ctrl_ctx->drop_flags & le32))
2814		    || (ctrl_ctx->add_flags & le32) || i == 1) {
2815			slot_ctx->dev_info &= cpu_to_le32(~LAST_CTX_MASK);
2816			slot_ctx->dev_info |= cpu_to_le32(LAST_CTX(i));
2817			break;
2818		}
2819	}
2820	xhci_dbg(xhci, "New Input Control Context:\n");
2821	xhci_dbg_ctx(xhci, virt_dev->in_ctx,
2822		     LAST_CTX_TO_EP_NUM(le32_to_cpu(slot_ctx->dev_info)));
2823
2824	ret = xhci_configure_endpoint(xhci, udev, command,
2825			false, false);
2826	if (ret)
2827		/* Callee should call reset_bandwidth() */
2828		goto command_cleanup;
2829
2830	xhci_dbg(xhci, "Output context after successful config ep cmd:\n");
2831	xhci_dbg_ctx(xhci, virt_dev->out_ctx,
2832		     LAST_CTX_TO_EP_NUM(le32_to_cpu(slot_ctx->dev_info)));
2833
2834	/* Free any rings that were dropped, but not changed. */
2835	for (i = 1; i < 31; ++i) {
2836		if ((le32_to_cpu(ctrl_ctx->drop_flags) & (1 << (i + 1))) &&
2837		    !(le32_to_cpu(ctrl_ctx->add_flags) & (1 << (i + 1)))) {
2838			xhci_free_or_cache_endpoint_ring(xhci, virt_dev, i);
2839			xhci_check_bw_drop_ep_streams(xhci, virt_dev, i);
2840		}
2841	}
2842	xhci_zero_in_ctx(xhci, virt_dev);
2843	/*
2844	 * Install any rings for completely new endpoints or changed endpoints,
2845	 * and free or cache any old rings from changed endpoints.
2846	 */
2847	for (i = 1; i < 31; ++i) {
2848		if (!virt_dev->eps[i].new_ring)
2849			continue;
2850		/* Only cache or free the old ring if it exists.
2851		 * It may not if this is the first add of an endpoint.
2852		 */
2853		if (virt_dev->eps[i].ring) {
2854			xhci_free_or_cache_endpoint_ring(xhci, virt_dev, i);
2855		}
2856		xhci_check_bw_drop_ep_streams(xhci, virt_dev, i);
2857		virt_dev->eps[i].ring = virt_dev->eps[i].new_ring;
2858		virt_dev->eps[i].new_ring = NULL;
2859	}
2860command_cleanup:
2861	kfree(command->completion);
2862	kfree(command);
2863
2864	return ret;
2865}
2866
2867void xhci_reset_bandwidth(struct usb_hcd *hcd, struct usb_device *udev)
2868{
2869	struct xhci_hcd *xhci;
2870	struct xhci_virt_device	*virt_dev;
2871	int i, ret;
2872
2873	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
2874	if (ret <= 0)
2875		return;
2876	xhci = hcd_to_xhci(hcd);
2877
2878	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
2879	virt_dev = xhci->devs[udev->slot_id];
2880	/* Free any rings allocated for added endpoints */
2881	for (i = 0; i < 31; ++i) {
2882		if (virt_dev->eps[i].new_ring) {
 
2883			xhci_ring_free(xhci, virt_dev->eps[i].new_ring);
2884			virt_dev->eps[i].new_ring = NULL;
2885		}
2886	}
2887	xhci_zero_in_ctx(xhci, virt_dev);
2888}
2889
2890static void xhci_setup_input_ctx_for_config_ep(struct xhci_hcd *xhci,
2891		struct xhci_container_ctx *in_ctx,
2892		struct xhci_container_ctx *out_ctx,
2893		struct xhci_input_control_ctx *ctrl_ctx,
2894		u32 add_flags, u32 drop_flags)
2895{
2896	ctrl_ctx->add_flags = cpu_to_le32(add_flags);
2897	ctrl_ctx->drop_flags = cpu_to_le32(drop_flags);
2898	xhci_slot_copy(xhci, in_ctx, out_ctx);
2899	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
2900
2901	xhci_dbg(xhci, "Input Context:\n");
2902	xhci_dbg_ctx(xhci, in_ctx, xhci_last_valid_endpoint(add_flags));
2903}
2904
2905static void xhci_setup_input_ctx_for_quirk(struct xhci_hcd *xhci,
2906		unsigned int slot_id, unsigned int ep_index,
2907		struct xhci_dequeue_state *deq_state)
2908{
2909	struct xhci_input_control_ctx *ctrl_ctx;
2910	struct xhci_container_ctx *in_ctx;
2911	struct xhci_ep_ctx *ep_ctx;
2912	u32 added_ctxs;
2913	dma_addr_t addr;
2914
2915	in_ctx = xhci->devs[slot_id]->in_ctx;
2916	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
2917	if (!ctrl_ctx) {
2918		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2919				__func__);
2920		return;
2921	}
2922
2923	xhci_endpoint_copy(xhci, xhci->devs[slot_id]->in_ctx,
2924			xhci->devs[slot_id]->out_ctx, ep_index);
2925	ep_ctx = xhci_get_ep_ctx(xhci, in_ctx, ep_index);
2926	addr = xhci_trb_virt_to_dma(deq_state->new_deq_seg,
2927			deq_state->new_deq_ptr);
2928	if (addr == 0) {
2929		xhci_warn(xhci, "WARN Cannot submit config ep after "
2930				"reset ep command\n");
2931		xhci_warn(xhci, "WARN deq seg = %p, deq ptr = %p\n",
2932				deq_state->new_deq_seg,
2933				deq_state->new_deq_ptr);
2934		return;
2935	}
2936	ep_ctx->deq = cpu_to_le64(addr | deq_state->new_cycle_state);
2937
2938	added_ctxs = xhci_get_endpoint_flag_from_index(ep_index);
2939	xhci_setup_input_ctx_for_config_ep(xhci, xhci->devs[slot_id]->in_ctx,
2940			xhci->devs[slot_id]->out_ctx, ctrl_ctx,
2941			added_ctxs, added_ctxs);
2942}
2943
2944void xhci_cleanup_stalled_ring(struct xhci_hcd *xhci,
2945			unsigned int ep_index, struct xhci_td *td)
 
2946{
2947	struct xhci_dequeue_state deq_state;
2948	struct xhci_virt_ep *ep;
2949	struct usb_device *udev = td->urb->dev;
2950
2951	xhci_dbg_trace(xhci, trace_xhci_dbg_reset_ep,
2952			"Cleaning up stalled endpoint ring");
2953	ep = &xhci->devs[udev->slot_id]->eps[ep_index];
2954	/* We need to move the HW's dequeue pointer past this TD,
2955	 * or it will attempt to resend it on the next doorbell ring.
2956	 */
2957	xhci_find_new_dequeue_state(xhci, udev->slot_id,
2958			ep_index, ep->stopped_stream, td, &deq_state);
2959
2960	if (!deq_state.new_deq_ptr || !deq_state.new_deq_seg)
2961		return;
2962
2963	/* HW with the reset endpoint quirk will use the saved dequeue state to
2964	 * issue a configure endpoint command later.
2965	 */
2966	if (!(xhci->quirks & XHCI_RESET_EP_QUIRK)) {
2967		xhci_dbg_trace(xhci, trace_xhci_dbg_reset_ep,
2968				"Queueing new dequeue state");
2969		xhci_queue_new_dequeue_state(xhci, udev->slot_id,
2970				ep_index, ep->stopped_stream, &deq_state);
2971	} else {
2972		/* Better hope no one uses the input context between now and the
2973		 * reset endpoint completion!
2974		 * XXX: No idea how this hardware will react when stream rings
2975		 * are enabled.
2976		 */
2977		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2978				"Setting up input context for "
2979				"configure endpoint command");
2980		xhci_setup_input_ctx_for_quirk(xhci, udev->slot_id,
2981				ep_index, &deq_state);
2982	}
2983}
2984
2985/* Called when clearing halted device. The core should have sent the control
2986 * message to clear the device halt condition. The host side of the halt should
2987 * already be cleared with a reset endpoint command issued when the STALL tx
2988 * event was received.
2989 *
2990 * Context: in_interrupt
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2991 */
2992
2993void xhci_endpoint_reset(struct usb_hcd *hcd,
2994		struct usb_host_endpoint *ep)
2995{
2996	struct xhci_hcd *xhci;
 
 
 
 
 
 
 
 
 
2997
2998	xhci = hcd_to_xhci(hcd);
 
 
 
 
2999
3000	/*
3001	 * We might need to implement the config ep cmd in xhci 4.8.1 note:
3002	 * The Reset Endpoint Command may only be issued to endpoints in the
3003	 * Halted state. If software wishes reset the Data Toggle or Sequence
3004	 * Number of an endpoint that isn't in the Halted state, then software
3005	 * may issue a Configure Endpoint Command with the Drop and Add bits set
3006	 * for the target endpoint. that is in the Stopped state.
3007	 */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
3008
3009	/* For now just print debug to follow the situation */
3010	xhci_dbg(xhci, "Endpoint 0x%x ep reset callback called\n",
3011		 ep->desc.bEndpointAddress);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
3012}
3013
3014static int xhci_check_streams_endpoint(struct xhci_hcd *xhci,
3015		struct usb_device *udev, struct usb_host_endpoint *ep,
3016		unsigned int slot_id)
3017{
3018	int ret;
3019	unsigned int ep_index;
3020	unsigned int ep_state;
3021
3022	if (!ep)
3023		return -EINVAL;
3024	ret = xhci_check_args(xhci_to_hcd(xhci), udev, ep, 1, true, __func__);
3025	if (ret <= 0)
3026		return -EINVAL;
3027	if (usb_ss_max_streams(&ep->ss_ep_comp) == 0) {
3028		xhci_warn(xhci, "WARN: SuperSpeed Endpoint Companion"
3029				" descriptor for ep 0x%x does not support streams\n",
3030				ep->desc.bEndpointAddress);
3031		return -EINVAL;
3032	}
3033
3034	ep_index = xhci_get_endpoint_index(&ep->desc);
3035	ep_state = xhci->devs[slot_id]->eps[ep_index].ep_state;
3036	if (ep_state & EP_HAS_STREAMS ||
3037			ep_state & EP_GETTING_STREAMS) {
3038		xhci_warn(xhci, "WARN: SuperSpeed bulk endpoint 0x%x "
3039				"already has streams set up.\n",
3040				ep->desc.bEndpointAddress);
3041		xhci_warn(xhci, "Send email to xHCI maintainer and ask for "
3042				"dynamic stream context array reallocation.\n");
3043		return -EINVAL;
3044	}
3045	if (!list_empty(&xhci->devs[slot_id]->eps[ep_index].ring->td_list)) {
3046		xhci_warn(xhci, "Cannot setup streams for SuperSpeed bulk "
3047				"endpoint 0x%x; URBs are pending.\n",
3048				ep->desc.bEndpointAddress);
3049		return -EINVAL;
3050	}
3051	return 0;
3052}
3053
3054static void xhci_calculate_streams_entries(struct xhci_hcd *xhci,
3055		unsigned int *num_streams, unsigned int *num_stream_ctxs)
3056{
3057	unsigned int max_streams;
3058
3059	/* The stream context array size must be a power of two */
3060	*num_stream_ctxs = roundup_pow_of_two(*num_streams);
3061	/*
3062	 * Find out how many primary stream array entries the host controller
3063	 * supports.  Later we may use secondary stream arrays (similar to 2nd
3064	 * level page entries), but that's an optional feature for xHCI host
3065	 * controllers. xHCs must support at least 4 stream IDs.
3066	 */
3067	max_streams = HCC_MAX_PSA(xhci->hcc_params);
3068	if (*num_stream_ctxs > max_streams) {
3069		xhci_dbg(xhci, "xHCI HW only supports %u stream ctx entries.\n",
3070				max_streams);
3071		*num_stream_ctxs = max_streams;
3072		*num_streams = max_streams;
3073	}
3074}
3075
3076/* Returns an error code if one of the endpoint already has streams.
3077 * This does not change any data structures, it only checks and gathers
3078 * information.
3079 */
3080static int xhci_calculate_streams_and_bitmask(struct xhci_hcd *xhci,
3081		struct usb_device *udev,
3082		struct usb_host_endpoint **eps, unsigned int num_eps,
3083		unsigned int *num_streams, u32 *changed_ep_bitmask)
3084{
3085	unsigned int max_streams;
3086	unsigned int endpoint_flag;
3087	int i;
3088	int ret;
3089
3090	for (i = 0; i < num_eps; i++) {
3091		ret = xhci_check_streams_endpoint(xhci, udev,
3092				eps[i], udev->slot_id);
3093		if (ret < 0)
3094			return ret;
3095
3096		max_streams = usb_ss_max_streams(&eps[i]->ss_ep_comp);
3097		if (max_streams < (*num_streams - 1)) {
3098			xhci_dbg(xhci, "Ep 0x%x only supports %u stream IDs.\n",
3099					eps[i]->desc.bEndpointAddress,
3100					max_streams);
3101			*num_streams = max_streams+1;
3102		}
3103
3104		endpoint_flag = xhci_get_endpoint_flag(&eps[i]->desc);
3105		if (*changed_ep_bitmask & endpoint_flag)
3106			return -EINVAL;
3107		*changed_ep_bitmask |= endpoint_flag;
3108	}
3109	return 0;
3110}
3111
3112static u32 xhci_calculate_no_streams_bitmask(struct xhci_hcd *xhci,
3113		struct usb_device *udev,
3114		struct usb_host_endpoint **eps, unsigned int num_eps)
3115{
3116	u32 changed_ep_bitmask = 0;
3117	unsigned int slot_id;
3118	unsigned int ep_index;
3119	unsigned int ep_state;
3120	int i;
3121
3122	slot_id = udev->slot_id;
3123	if (!xhci->devs[slot_id])
3124		return 0;
3125
3126	for (i = 0; i < num_eps; i++) {
3127		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3128		ep_state = xhci->devs[slot_id]->eps[ep_index].ep_state;
3129		/* Are streams already being freed for the endpoint? */
3130		if (ep_state & EP_GETTING_NO_STREAMS) {
3131			xhci_warn(xhci, "WARN Can't disable streams for "
3132					"endpoint 0x%x, "
3133					"streams are being disabled already\n",
3134					eps[i]->desc.bEndpointAddress);
3135			return 0;
3136		}
3137		/* Are there actually any streams to free? */
3138		if (!(ep_state & EP_HAS_STREAMS) &&
3139				!(ep_state & EP_GETTING_STREAMS)) {
3140			xhci_warn(xhci, "WARN Can't disable streams for "
3141					"endpoint 0x%x, "
3142					"streams are already disabled!\n",
3143					eps[i]->desc.bEndpointAddress);
3144			xhci_warn(xhci, "WARN xhci_free_streams() called "
3145					"with non-streams endpoint\n");
3146			return 0;
3147		}
3148		changed_ep_bitmask |= xhci_get_endpoint_flag(&eps[i]->desc);
3149	}
3150	return changed_ep_bitmask;
3151}
3152
3153/*
3154 * The USB device drivers use this function (through the HCD interface in USB
3155 * core) to prepare a set of bulk endpoints to use streams.  Streams are used to
3156 * coordinate mass storage command queueing across multiple endpoints (basically
3157 * a stream ID == a task ID).
3158 *
3159 * Setting up streams involves allocating the same size stream context array
3160 * for each endpoint and issuing a configure endpoint command for all endpoints.
3161 *
3162 * Don't allow the call to succeed if one endpoint only supports one stream
3163 * (which means it doesn't support streams at all).
3164 *
3165 * Drivers may get less stream IDs than they asked for, if the host controller
3166 * hardware or endpoints claim they can't support the number of requested
3167 * stream IDs.
3168 */
3169int xhci_alloc_streams(struct usb_hcd *hcd, struct usb_device *udev,
3170		struct usb_host_endpoint **eps, unsigned int num_eps,
3171		unsigned int num_streams, gfp_t mem_flags)
3172{
3173	int i, ret;
3174	struct xhci_hcd *xhci;
3175	struct xhci_virt_device *vdev;
3176	struct xhci_command *config_cmd;
3177	struct xhci_input_control_ctx *ctrl_ctx;
3178	unsigned int ep_index;
3179	unsigned int num_stream_ctxs;
 
3180	unsigned long flags;
3181	u32 changed_ep_bitmask = 0;
3182
3183	if (!eps)
3184		return -EINVAL;
3185
3186	/* Add one to the number of streams requested to account for
3187	 * stream 0 that is reserved for xHCI usage.
3188	 */
3189	num_streams += 1;
3190	xhci = hcd_to_xhci(hcd);
3191	xhci_dbg(xhci, "Driver wants %u stream IDs (including stream 0).\n",
3192			num_streams);
3193
3194	/* MaxPSASize value 0 (2 streams) means streams are not supported */
3195	if ((xhci->quirks & XHCI_BROKEN_STREAMS) ||
3196			HCC_MAX_PSA(xhci->hcc_params) < 4) {
3197		xhci_dbg(xhci, "xHCI controller does not support streams.\n");
3198		return -ENOSYS;
3199	}
3200
3201	config_cmd = xhci_alloc_command(xhci, true, true, mem_flags);
3202	if (!config_cmd) {
3203		xhci_dbg(xhci, "Could not allocate xHCI command structure.\n");
3204		return -ENOMEM;
3205	}
3206	ctrl_ctx = xhci_get_input_control_ctx(config_cmd->in_ctx);
3207	if (!ctrl_ctx) {
3208		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3209				__func__);
3210		xhci_free_command(xhci, config_cmd);
3211		return -ENOMEM;
3212	}
3213
3214	/* Check to make sure all endpoints are not already configured for
3215	 * streams.  While we're at it, find the maximum number of streams that
3216	 * all the endpoints will support and check for duplicate endpoints.
3217	 */
3218	spin_lock_irqsave(&xhci->lock, flags);
3219	ret = xhci_calculate_streams_and_bitmask(xhci, udev, eps,
3220			num_eps, &num_streams, &changed_ep_bitmask);
3221	if (ret < 0) {
3222		xhci_free_command(xhci, config_cmd);
3223		spin_unlock_irqrestore(&xhci->lock, flags);
3224		return ret;
3225	}
3226	if (num_streams <= 1) {
3227		xhci_warn(xhci, "WARN: endpoints can't handle "
3228				"more than one stream.\n");
3229		xhci_free_command(xhci, config_cmd);
3230		spin_unlock_irqrestore(&xhci->lock, flags);
3231		return -EINVAL;
3232	}
3233	vdev = xhci->devs[udev->slot_id];
3234	/* Mark each endpoint as being in transition, so
3235	 * xhci_urb_enqueue() will reject all URBs.
3236	 */
3237	for (i = 0; i < num_eps; i++) {
3238		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3239		vdev->eps[ep_index].ep_state |= EP_GETTING_STREAMS;
3240	}
3241	spin_unlock_irqrestore(&xhci->lock, flags);
3242
3243	/* Setup internal data structures and allocate HW data structures for
3244	 * streams (but don't install the HW structures in the input context
3245	 * until we're sure all memory allocation succeeded).
3246	 */
3247	xhci_calculate_streams_entries(xhci, &num_streams, &num_stream_ctxs);
3248	xhci_dbg(xhci, "Need %u stream ctx entries for %u stream IDs.\n",
3249			num_stream_ctxs, num_streams);
3250
3251	for (i = 0; i < num_eps; i++) {
3252		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
 
3253		vdev->eps[ep_index].stream_info = xhci_alloc_stream_info(xhci,
3254				num_stream_ctxs,
3255				num_streams, mem_flags);
 
3256		if (!vdev->eps[ep_index].stream_info)
3257			goto cleanup;
3258		/* Set maxPstreams in endpoint context and update deq ptr to
3259		 * point to stream context array. FIXME
3260		 */
3261	}
3262
3263	/* Set up the input context for a configure endpoint command. */
3264	for (i = 0; i < num_eps; i++) {
3265		struct xhci_ep_ctx *ep_ctx;
3266
3267		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3268		ep_ctx = xhci_get_ep_ctx(xhci, config_cmd->in_ctx, ep_index);
3269
3270		xhci_endpoint_copy(xhci, config_cmd->in_ctx,
3271				vdev->out_ctx, ep_index);
3272		xhci_setup_streams_ep_input_ctx(xhci, ep_ctx,
3273				vdev->eps[ep_index].stream_info);
3274	}
3275	/* Tell the HW to drop its old copy of the endpoint context info
3276	 * and add the updated copy from the input context.
3277	 */
3278	xhci_setup_input_ctx_for_config_ep(xhci, config_cmd->in_ctx,
3279			vdev->out_ctx, ctrl_ctx,
3280			changed_ep_bitmask, changed_ep_bitmask);
3281
3282	/* Issue and wait for the configure endpoint command */
3283	ret = xhci_configure_endpoint(xhci, udev, config_cmd,
3284			false, false);
3285
3286	/* xHC rejected the configure endpoint command for some reason, so we
3287	 * leave the old ring intact and free our internal streams data
3288	 * structure.
3289	 */
3290	if (ret < 0)
3291		goto cleanup;
3292
3293	spin_lock_irqsave(&xhci->lock, flags);
3294	for (i = 0; i < num_eps; i++) {
3295		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3296		vdev->eps[ep_index].ep_state &= ~EP_GETTING_STREAMS;
3297		xhci_dbg(xhci, "Slot %u ep ctx %u now has streams.\n",
3298			 udev->slot_id, ep_index);
3299		vdev->eps[ep_index].ep_state |= EP_HAS_STREAMS;
3300	}
3301	xhci_free_command(xhci, config_cmd);
3302	spin_unlock_irqrestore(&xhci->lock, flags);
3303
3304	/* Subtract 1 for stream 0, which drivers can't use */
3305	return num_streams - 1;
3306
3307cleanup:
3308	/* If it didn't work, free the streams! */
3309	for (i = 0; i < num_eps; i++) {
3310		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3311		xhci_free_stream_info(xhci, vdev->eps[ep_index].stream_info);
3312		vdev->eps[ep_index].stream_info = NULL;
3313		/* FIXME Unset maxPstreams in endpoint context and
3314		 * update deq ptr to point to normal string ring.
3315		 */
3316		vdev->eps[ep_index].ep_state &= ~EP_GETTING_STREAMS;
3317		vdev->eps[ep_index].ep_state &= ~EP_HAS_STREAMS;
3318		xhci_endpoint_zero(xhci, vdev, eps[i]);
3319	}
3320	xhci_free_command(xhci, config_cmd);
3321	return -ENOMEM;
3322}
3323
3324/* Transition the endpoint from using streams to being a "normal" endpoint
3325 * without streams.
3326 *
3327 * Modify the endpoint context state, submit a configure endpoint command,
3328 * and free all endpoint rings for streams if that completes successfully.
3329 */
3330int xhci_free_streams(struct usb_hcd *hcd, struct usb_device *udev,
3331		struct usb_host_endpoint **eps, unsigned int num_eps,
3332		gfp_t mem_flags)
3333{
3334	int i, ret;
3335	struct xhci_hcd *xhci;
3336	struct xhci_virt_device *vdev;
3337	struct xhci_command *command;
3338	struct xhci_input_control_ctx *ctrl_ctx;
3339	unsigned int ep_index;
3340	unsigned long flags;
3341	u32 changed_ep_bitmask;
3342
3343	xhci = hcd_to_xhci(hcd);
3344	vdev = xhci->devs[udev->slot_id];
3345
3346	/* Set up a configure endpoint command to remove the streams rings */
3347	spin_lock_irqsave(&xhci->lock, flags);
3348	changed_ep_bitmask = xhci_calculate_no_streams_bitmask(xhci,
3349			udev, eps, num_eps);
3350	if (changed_ep_bitmask == 0) {
3351		spin_unlock_irqrestore(&xhci->lock, flags);
3352		return -EINVAL;
3353	}
3354
3355	/* Use the xhci_command structure from the first endpoint.  We may have
3356	 * allocated too many, but the driver may call xhci_free_streams() for
3357	 * each endpoint it grouped into one call to xhci_alloc_streams().
3358	 */
3359	ep_index = xhci_get_endpoint_index(&eps[0]->desc);
3360	command = vdev->eps[ep_index].stream_info->free_streams_command;
3361	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
3362	if (!ctrl_ctx) {
3363		spin_unlock_irqrestore(&xhci->lock, flags);
3364		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3365				__func__);
3366		return -EINVAL;
3367	}
3368
3369	for (i = 0; i < num_eps; i++) {
3370		struct xhci_ep_ctx *ep_ctx;
3371
3372		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3373		ep_ctx = xhci_get_ep_ctx(xhci, command->in_ctx, ep_index);
3374		xhci->devs[udev->slot_id]->eps[ep_index].ep_state |=
3375			EP_GETTING_NO_STREAMS;
3376
3377		xhci_endpoint_copy(xhci, command->in_ctx,
3378				vdev->out_ctx, ep_index);
3379		xhci_setup_no_streams_ep_input_ctx(ep_ctx,
3380				&vdev->eps[ep_index]);
3381	}
3382	xhci_setup_input_ctx_for_config_ep(xhci, command->in_ctx,
3383			vdev->out_ctx, ctrl_ctx,
3384			changed_ep_bitmask, changed_ep_bitmask);
3385	spin_unlock_irqrestore(&xhci->lock, flags);
3386
3387	/* Issue and wait for the configure endpoint command,
3388	 * which must succeed.
3389	 */
3390	ret = xhci_configure_endpoint(xhci, udev, command,
3391			false, true);
3392
3393	/* xHC rejected the configure endpoint command for some reason, so we
3394	 * leave the streams rings intact.
3395	 */
3396	if (ret < 0)
3397		return ret;
3398
3399	spin_lock_irqsave(&xhci->lock, flags);
3400	for (i = 0; i < num_eps; i++) {
3401		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3402		xhci_free_stream_info(xhci, vdev->eps[ep_index].stream_info);
3403		vdev->eps[ep_index].stream_info = NULL;
3404		/* FIXME Unset maxPstreams in endpoint context and
3405		 * update deq ptr to point to normal string ring.
3406		 */
3407		vdev->eps[ep_index].ep_state &= ~EP_GETTING_NO_STREAMS;
3408		vdev->eps[ep_index].ep_state &= ~EP_HAS_STREAMS;
3409	}
3410	spin_unlock_irqrestore(&xhci->lock, flags);
3411
3412	return 0;
3413}
3414
3415/*
3416 * Deletes endpoint resources for endpoints that were active before a Reset
3417 * Device command, or a Disable Slot command.  The Reset Device command leaves
3418 * the control endpoint intact, whereas the Disable Slot command deletes it.
3419 *
3420 * Must be called with xhci->lock held.
3421 */
3422void xhci_free_device_endpoint_resources(struct xhci_hcd *xhci,
3423	struct xhci_virt_device *virt_dev, bool drop_control_ep)
3424{
3425	int i;
3426	unsigned int num_dropped_eps = 0;
3427	unsigned int drop_flags = 0;
3428
3429	for (i = (drop_control_ep ? 0 : 1); i < 31; i++) {
3430		if (virt_dev->eps[i].ring) {
3431			drop_flags |= 1 << i;
3432			num_dropped_eps++;
3433		}
3434	}
3435	xhci->num_active_eps -= num_dropped_eps;
3436	if (num_dropped_eps)
3437		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3438				"Dropped %u ep ctxs, flags = 0x%x, "
3439				"%u now active.",
3440				num_dropped_eps, drop_flags,
3441				xhci->num_active_eps);
3442}
3443
3444/*
3445 * This submits a Reset Device Command, which will set the device state to 0,
3446 * set the device address to 0, and disable all the endpoints except the default
3447 * control endpoint.  The USB core should come back and call
3448 * xhci_address_device(), and then re-set up the configuration.  If this is
3449 * called because of a usb_reset_and_verify_device(), then the old alternate
3450 * settings will be re-installed through the normal bandwidth allocation
3451 * functions.
3452 *
3453 * Wait for the Reset Device command to finish.  Remove all structures
3454 * associated with the endpoints that were disabled.  Clear the input device
3455 * structure?  Cache the rings?  Reset the control endpoint 0 max packet size?
3456 *
3457 * If the virt_dev to be reset does not exist or does not match the udev,
3458 * it means the device is lost, possibly due to the xHC restore error and
3459 * re-initialization during S3/S4. In this case, call xhci_alloc_dev() to
3460 * re-allocate the device.
3461 */
3462int xhci_discover_or_reset_device(struct usb_hcd *hcd, struct usb_device *udev)
 
3463{
3464	int ret, i;
3465	unsigned long flags;
3466	struct xhci_hcd *xhci;
3467	unsigned int slot_id;
3468	struct xhci_virt_device *virt_dev;
3469	struct xhci_command *reset_device_cmd;
3470	int last_freed_endpoint;
3471	struct xhci_slot_ctx *slot_ctx;
3472	int old_active_eps = 0;
3473
3474	ret = xhci_check_args(hcd, udev, NULL, 0, false, __func__);
3475	if (ret <= 0)
3476		return ret;
3477	xhci = hcd_to_xhci(hcd);
3478	slot_id = udev->slot_id;
3479	virt_dev = xhci->devs[slot_id];
3480	if (!virt_dev) {
3481		xhci_dbg(xhci, "The device to be reset with slot ID %u does "
3482				"not exist. Re-allocate the device\n", slot_id);
3483		ret = xhci_alloc_dev(hcd, udev);
3484		if (ret == 1)
3485			return 0;
3486		else
3487			return -EINVAL;
3488	}
3489
3490	if (virt_dev->tt_info)
3491		old_active_eps = virt_dev->tt_info->active_eps;
3492
3493	if (virt_dev->udev != udev) {
3494		/* If the virt_dev and the udev does not match, this virt_dev
3495		 * may belong to another udev.
3496		 * Re-allocate the device.
3497		 */
3498		xhci_dbg(xhci, "The device to be reset with slot ID %u does "
3499				"not match the udev. Re-allocate the device\n",
3500				slot_id);
3501		ret = xhci_alloc_dev(hcd, udev);
3502		if (ret == 1)
3503			return 0;
3504		else
3505			return -EINVAL;
3506	}
3507
3508	/* If device is not setup, there is no point in resetting it */
3509	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
3510	if (GET_SLOT_STATE(le32_to_cpu(slot_ctx->dev_state)) ==
3511						SLOT_STATE_DISABLED)
3512		return 0;
3513
 
 
3514	xhci_dbg(xhci, "Resetting device with slot ID %u\n", slot_id);
3515	/* Allocate the command structure that holds the struct completion.
3516	 * Assume we're in process context, since the normal device reset
3517	 * process has to wait for the device anyway.  Storage devices are
3518	 * reset as part of error handling, so use GFP_NOIO instead of
3519	 * GFP_KERNEL.
3520	 */
3521	reset_device_cmd = xhci_alloc_command(xhci, false, true, GFP_NOIO);
3522	if (!reset_device_cmd) {
3523		xhci_dbg(xhci, "Couldn't allocate command structure.\n");
3524		return -ENOMEM;
3525	}
3526
3527	/* Attempt to submit the Reset Device command to the command ring */
3528	spin_lock_irqsave(&xhci->lock, flags);
3529
3530	ret = xhci_queue_reset_device(xhci, reset_device_cmd, slot_id);
3531	if (ret) {
3532		xhci_dbg(xhci, "FIXME: allocate a command ring segment\n");
3533		spin_unlock_irqrestore(&xhci->lock, flags);
3534		goto command_cleanup;
3535	}
3536	xhci_ring_cmd_db(xhci);
3537	spin_unlock_irqrestore(&xhci->lock, flags);
3538
3539	/* Wait for the Reset Device command to finish */
3540	wait_for_completion(reset_device_cmd->completion);
3541
3542	/* The Reset Device command can't fail, according to the 0.95/0.96 spec,
3543	 * unless we tried to reset a slot ID that wasn't enabled,
3544	 * or the device wasn't in the addressed or configured state.
3545	 */
3546	ret = reset_device_cmd->status;
3547	switch (ret) {
3548	case COMP_CMD_ABORT:
3549	case COMP_CMD_STOP:
3550		xhci_warn(xhci, "Timeout waiting for reset device command\n");
3551		ret = -ETIME;
3552		goto command_cleanup;
3553	case COMP_EBADSLT: /* 0.95 completion code for bad slot ID */
3554	case COMP_CTX_STATE: /* 0.96 completion code for same thing */
3555		xhci_dbg(xhci, "Can't reset device (slot ID %u) in %s state\n",
3556				slot_id,
3557				xhci_get_slot_state(xhci, virt_dev->out_ctx));
3558		xhci_dbg(xhci, "Not freeing device rings.\n");
3559		/* Don't treat this as an error.  May change my mind later. */
3560		ret = 0;
3561		goto command_cleanup;
3562	case COMP_SUCCESS:
3563		xhci_dbg(xhci, "Successful reset device command.\n");
3564		break;
3565	default:
3566		if (xhci_is_vendor_info_code(xhci, ret))
3567			break;
3568		xhci_warn(xhci, "Unknown completion code %u for "
3569				"reset device command.\n", ret);
3570		ret = -EINVAL;
3571		goto command_cleanup;
3572	}
3573
3574	/* Free up host controller endpoint resources */
3575	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
3576		spin_lock_irqsave(&xhci->lock, flags);
3577		/* Don't delete the default control endpoint resources */
3578		xhci_free_device_endpoint_resources(xhci, virt_dev, false);
3579		spin_unlock_irqrestore(&xhci->lock, flags);
3580	}
3581
3582	/* Everything but endpoint 0 is disabled, so free or cache the rings. */
3583	last_freed_endpoint = 1;
3584	for (i = 1; i < 31; ++i) {
3585		struct xhci_virt_ep *ep = &virt_dev->eps[i];
3586
3587		if (ep->ep_state & EP_HAS_STREAMS) {
3588			xhci_warn(xhci, "WARN: endpoint 0x%02x has streams on device reset, freeing streams.\n",
3589					xhci_get_endpoint_address(i));
3590			xhci_free_stream_info(xhci, ep->stream_info);
3591			ep->stream_info = NULL;
3592			ep->ep_state &= ~EP_HAS_STREAMS;
3593		}
3594
3595		if (ep->ring) {
3596			xhci_free_or_cache_endpoint_ring(xhci, virt_dev, i);
3597			last_freed_endpoint = i;
3598		}
3599		if (!list_empty(&virt_dev->eps[i].bw_endpoint_list))
3600			xhci_drop_ep_from_interval_table(xhci,
3601					&virt_dev->eps[i].bw_info,
3602					virt_dev->bw_table,
3603					udev,
3604					&virt_dev->eps[i],
3605					virt_dev->tt_info);
3606		xhci_clear_endpoint_bw_info(&virt_dev->eps[i].bw_info);
3607	}
3608	/* If necessary, update the number of active TTs on this root port */
3609	xhci_update_tt_active_eps(xhci, virt_dev, old_active_eps);
3610
3611	xhci_dbg(xhci, "Output context after successful reset device cmd:\n");
3612	xhci_dbg_ctx(xhci, virt_dev->out_ctx, last_freed_endpoint);
3613	ret = 0;
3614
3615command_cleanup:
3616	xhci_free_command(xhci, reset_device_cmd);
3617	return ret;
3618}
3619
3620/*
3621 * At this point, the struct usb_device is about to go away, the device has
3622 * disconnected, and all traffic has been stopped and the endpoints have been
3623 * disabled.  Free any HC data structures associated with that device.
3624 */
3625void xhci_free_dev(struct usb_hcd *hcd, struct usb_device *udev)
3626{
3627	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
3628	struct xhci_virt_device *virt_dev;
3629	unsigned long flags;
3630	u32 state;
3631	int i, ret;
3632	struct xhci_command *command;
3633
3634	command = xhci_alloc_command(xhci, false, false, GFP_KERNEL);
3635	if (!command)
3636		return;
3637
3638#ifndef CONFIG_USB_DEFAULT_PERSIST
3639	/*
3640	 * We called pm_runtime_get_noresume when the device was attached.
3641	 * Decrement the counter here to allow controller to runtime suspend
3642	 * if no devices remain.
3643	 */
3644	if (xhci->quirks & XHCI_RESET_ON_RESUME)
3645		pm_runtime_put_noidle(hcd->self.controller);
3646#endif
3647
3648	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
3649	/* If the host is halted due to driver unload, we still need to free the
3650	 * device.
3651	 */
3652	if (ret <= 0 && ret != -ENODEV) {
3653		kfree(command);
3654		return;
3655	}
3656
3657	virt_dev = xhci->devs[udev->slot_id];
 
 
3658
3659	/* Stop any wayward timer functions (which may grab the lock) */
3660	for (i = 0; i < 31; ++i) {
3661		virt_dev->eps[i].ep_state &= ~EP_HALT_PENDING;
3662		del_timer_sync(&virt_dev->eps[i].stop_cmd_timer);
3663	}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
3664
3665	spin_lock_irqsave(&xhci->lock, flags);
3666	/* Don't disable the slot if the host controller is dead. */
3667	state = readl(&xhci->op_regs->status);
3668	if (state == 0xffffffff || (xhci->xhc_state & XHCI_STATE_DYING) ||
3669			(xhci->xhc_state & XHCI_STATE_HALTED)) {
3670		xhci_free_virt_device(xhci, udev->slot_id);
3671		spin_unlock_irqrestore(&xhci->lock, flags);
3672		kfree(command);
3673		return;
3674	}
3675
3676	if (xhci_queue_slot_control(xhci, command, TRB_DISABLE_SLOT,
3677				    udev->slot_id)) {
 
3678		spin_unlock_irqrestore(&xhci->lock, flags);
3679		xhci_dbg(xhci, "FIXME: allocate a command ring segment\n");
3680		return;
3681	}
3682	xhci_ring_cmd_db(xhci);
3683	spin_unlock_irqrestore(&xhci->lock, flags);
3684
3685	/*
3686	 * Event command completion handler will free any data structures
3687	 * associated with the slot.  XXX Can free sleep?
3688	 */
3689}
3690
3691/*
3692 * Checks if we have enough host controller resources for the default control
3693 * endpoint.
3694 *
3695 * Must be called with xhci->lock held.
3696 */
3697static int xhci_reserve_host_control_ep_resources(struct xhci_hcd *xhci)
3698{
3699	if (xhci->num_active_eps + 1 > xhci->limit_active_eps) {
3700		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3701				"Not enough ep ctxs: "
3702				"%u active, need to add 1, limit is %u.",
3703				xhci->num_active_eps, xhci->limit_active_eps);
3704		return -ENOMEM;
3705	}
3706	xhci->num_active_eps += 1;
3707	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3708			"Adding 1 ep ctx, %u now active.",
3709			xhci->num_active_eps);
3710	return 0;
3711}
3712
3713
3714/*
3715 * Returns 0 if the xHC ran out of device slots, the Enable Slot command
3716 * timed out, or allocating memory failed.  Returns 1 on success.
3717 */
3718int xhci_alloc_dev(struct usb_hcd *hcd, struct usb_device *udev)
3719{
3720	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 
 
3721	unsigned long flags;
3722	int ret, slot_id;
3723	struct xhci_command *command;
3724
3725	command = xhci_alloc_command(xhci, false, false, GFP_KERNEL);
3726	if (!command)
3727		return 0;
3728
3729	/* xhci->slot_id and xhci->addr_dev are not thread-safe */
3730	mutex_lock(&xhci->mutex);
3731	spin_lock_irqsave(&xhci->lock, flags);
3732	command->completion = &xhci->addr_dev;
3733	ret = xhci_queue_slot_control(xhci, command, TRB_ENABLE_SLOT, 0);
3734	if (ret) {
3735		spin_unlock_irqrestore(&xhci->lock, flags);
3736		mutex_unlock(&xhci->mutex);
3737		xhci_dbg(xhci, "FIXME: allocate a command ring segment\n");
3738		kfree(command);
3739		return 0;
3740	}
3741	xhci_ring_cmd_db(xhci);
3742	spin_unlock_irqrestore(&xhci->lock, flags);
3743
3744	wait_for_completion(command->completion);
3745	slot_id = xhci->slot_id;
3746	mutex_unlock(&xhci->mutex);
3747
3748	if (!slot_id || command->status != COMP_SUCCESS) {
3749		xhci_err(xhci, "Error while assigning device slot ID\n");
3750		xhci_err(xhci, "Max number of devices this xHCI host supports is %u.\n",
3751				HCS_MAX_SLOTS(
3752					readl(&xhci->cap_regs->hcs_params1)));
3753		kfree(command);
3754		return 0;
3755	}
3756
 
 
3757	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
3758		spin_lock_irqsave(&xhci->lock, flags);
3759		ret = xhci_reserve_host_control_ep_resources(xhci);
3760		if (ret) {
3761			spin_unlock_irqrestore(&xhci->lock, flags);
3762			xhci_warn(xhci, "Not enough host resources, "
3763					"active endpoint contexts = %u\n",
3764					xhci->num_active_eps);
3765			goto disable_slot;
3766		}
3767		spin_unlock_irqrestore(&xhci->lock, flags);
3768	}
3769	/* Use GFP_NOIO, since this function can be called from
3770	 * xhci_discover_or_reset_device(), which may be called as part of
3771	 * mass storage driver error handling.
3772	 */
3773	if (!xhci_alloc_virt_device(xhci, slot_id, udev, GFP_NOIO)) {
3774		xhci_warn(xhci, "Could not allocate xHCI USB device data structures\n");
3775		goto disable_slot;
3776	}
 
 
 
 
3777	udev->slot_id = slot_id;
3778
 
 
3779#ifndef CONFIG_USB_DEFAULT_PERSIST
3780	/*
3781	 * If resetting upon resume, we can't put the controller into runtime
3782	 * suspend if there is a device attached.
3783	 */
3784	if (xhci->quirks & XHCI_RESET_ON_RESUME)
3785		pm_runtime_get_noresume(hcd->self.controller);
3786#endif
3787
3788
3789	kfree(command);
3790	/* Is this a LS or FS device under a HS hub? */
3791	/* Hub or peripherial? */
3792	return 1;
3793
3794disable_slot:
3795	/* Disable slot, if we can do it without mem alloc */
3796	spin_lock_irqsave(&xhci->lock, flags);
3797	command->completion = NULL;
3798	command->status = 0;
3799	if (!xhci_queue_slot_control(xhci, command, TRB_DISABLE_SLOT,
3800				     udev->slot_id))
3801		xhci_ring_cmd_db(xhci);
3802	spin_unlock_irqrestore(&xhci->lock, flags);
3803	return 0;
3804}
3805
3806/*
3807 * Issue an Address Device command and optionally send a corresponding
3808 * SetAddress request to the device.
3809 */
3810static int xhci_setup_device(struct usb_hcd *hcd, struct usb_device *udev,
3811			     enum xhci_setup_dev setup)
3812{
3813	const char *act = setup == SETUP_CONTEXT_ONLY ? "context" : "address";
3814	unsigned long flags;
3815	struct xhci_virt_device *virt_dev;
3816	int ret = 0;
3817	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
3818	struct xhci_slot_ctx *slot_ctx;
3819	struct xhci_input_control_ctx *ctrl_ctx;
3820	u64 temp_64;
3821	struct xhci_command *command = NULL;
3822
3823	mutex_lock(&xhci->mutex);
3824
3825	if (xhci->xhc_state)	/* dying, removing or halted */
 
3826		goto out;
 
3827
3828	if (!udev->slot_id) {
3829		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3830				"Bad Slot ID %d", udev->slot_id);
3831		ret = -EINVAL;
3832		goto out;
3833	}
3834
3835	virt_dev = xhci->devs[udev->slot_id];
3836
3837	if (WARN_ON(!virt_dev)) {
3838		/*
3839		 * In plug/unplug torture test with an NEC controller,
3840		 * a zero-dereference was observed once due to virt_dev = 0.
3841		 * Print useful debug rather than crash if it is observed again!
3842		 */
3843		xhci_warn(xhci, "Virt dev invalid for slot_id 0x%x!\n",
3844			udev->slot_id);
3845		ret = -EINVAL;
3846		goto out;
3847	}
 
 
3848
3849	if (setup == SETUP_CONTEXT_ONLY) {
3850		slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
3851		if (GET_SLOT_STATE(le32_to_cpu(slot_ctx->dev_state)) ==
3852		    SLOT_STATE_DEFAULT) {
3853			xhci_dbg(xhci, "Slot already in default state\n");
3854			goto out;
3855		}
3856	}
3857
3858	command = xhci_alloc_command(xhci, false, false, GFP_KERNEL);
3859	if (!command) {
3860		ret = -ENOMEM;
3861		goto out;
3862	}
3863
3864	command->in_ctx = virt_dev->in_ctx;
3865	command->completion = &xhci->addr_dev;
3866
3867	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
3868	ctrl_ctx = xhci_get_input_control_ctx(virt_dev->in_ctx);
3869	if (!ctrl_ctx) {
3870		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3871				__func__);
3872		ret = -EINVAL;
3873		goto out;
3874	}
3875	/*
3876	 * If this is the first Set Address since device plug-in or
3877	 * virt_device realloaction after a resume with an xHCI power loss,
3878	 * then set up the slot context.
3879	 */
3880	if (!slot_ctx->dev_info)
3881		xhci_setup_addressable_virt_dev(xhci, udev);
3882	/* Otherwise, update the control endpoint ring enqueue pointer. */
3883	else
3884		xhci_copy_ep0_dequeue_into_input_ctx(xhci, udev);
3885	ctrl_ctx->add_flags = cpu_to_le32(SLOT_FLAG | EP0_FLAG);
3886	ctrl_ctx->drop_flags = 0;
3887
3888	xhci_dbg(xhci, "Slot ID %d Input Context:\n", udev->slot_id);
3889	xhci_dbg_ctx(xhci, virt_dev->in_ctx, 2);
3890	trace_xhci_address_ctx(xhci, virt_dev->in_ctx,
3891				le32_to_cpu(slot_ctx->dev_info) >> 27);
3892
 
3893	spin_lock_irqsave(&xhci->lock, flags);
 
3894	ret = xhci_queue_address_device(xhci, command, virt_dev->in_ctx->dma,
3895					udev->slot_id, setup);
3896	if (ret) {
3897		spin_unlock_irqrestore(&xhci->lock, flags);
3898		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3899				"FIXME: allocate a command ring segment");
3900		goto out;
3901	}
3902	xhci_ring_cmd_db(xhci);
3903	spin_unlock_irqrestore(&xhci->lock, flags);
3904
3905	/* ctrl tx can take up to 5 sec; XXX: need more time for xHC? */
3906	wait_for_completion(command->completion);
3907
3908	/* FIXME: From section 4.3.4: "Software shall be responsible for timing
3909	 * the SetAddress() "recovery interval" required by USB and aborting the
3910	 * command on a timeout.
3911	 */
3912	switch (command->status) {
3913	case COMP_CMD_ABORT:
3914	case COMP_CMD_STOP:
3915		xhci_warn(xhci, "Timeout while waiting for setup device command\n");
3916		ret = -ETIME;
3917		break;
3918	case COMP_CTX_STATE:
3919	case COMP_EBADSLT:
3920		xhci_err(xhci, "Setup ERROR: setup %s command for slot %d.\n",
3921			 act, udev->slot_id);
3922		ret = -EINVAL;
3923		break;
3924	case COMP_TX_ERR:
3925		dev_warn(&udev->dev, "Device not responding to setup %s.\n", act);
3926		ret = -EPROTO;
3927		break;
3928	case COMP_DEV_ERR:
 
 
 
 
 
 
3929		dev_warn(&udev->dev,
3930			 "ERROR: Incompatible device for setup %s command\n", act);
3931		ret = -ENODEV;
3932		break;
3933	case COMP_SUCCESS:
3934		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3935			       "Successful setup %s command", act);
3936		break;
3937	default:
3938		xhci_err(xhci,
3939			 "ERROR: unexpected setup %s command completion code 0x%x.\n",
3940			 act, command->status);
3941		xhci_dbg(xhci, "Slot ID %d Output Context:\n", udev->slot_id);
3942		xhci_dbg_ctx(xhci, virt_dev->out_ctx, 2);
3943		trace_xhci_address_ctx(xhci, virt_dev->out_ctx, 1);
3944		ret = -EINVAL;
3945		break;
3946	}
3947	if (ret)
3948		goto out;
3949	temp_64 = xhci_read_64(xhci, &xhci->op_regs->dcbaa_ptr);
3950	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3951			"Op regs DCBAA ptr = %#016llx", temp_64);
3952	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3953		"Slot ID %d dcbaa entry @%p = %#016llx",
3954		udev->slot_id,
3955		&xhci->dcbaa->dev_context_ptrs[udev->slot_id],
3956		(unsigned long long)
3957		le64_to_cpu(xhci->dcbaa->dev_context_ptrs[udev->slot_id]));
3958	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3959			"Output Context DMA address = %#08llx",
3960			(unsigned long long)virt_dev->out_ctx->dma);
3961	xhci_dbg(xhci, "Slot ID %d Input Context:\n", udev->slot_id);
3962	xhci_dbg_ctx(xhci, virt_dev->in_ctx, 2);
3963	trace_xhci_address_ctx(xhci, virt_dev->in_ctx,
3964				le32_to_cpu(slot_ctx->dev_info) >> 27);
3965	xhci_dbg(xhci, "Slot ID %d Output Context:\n", udev->slot_id);
3966	xhci_dbg_ctx(xhci, virt_dev->out_ctx, 2);
3967	/*
3968	 * USB core uses address 1 for the roothubs, so we add one to the
3969	 * address given back to us by the HC.
3970	 */
3971	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
3972	trace_xhci_address_ctx(xhci, virt_dev->out_ctx,
3973				le32_to_cpu(slot_ctx->dev_info) >> 27);
3974	/* Zero the input context control for later use */
3975	ctrl_ctx->add_flags = 0;
3976	ctrl_ctx->drop_flags = 0;
 
 
3977
3978	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
3979		       "Internal device address = %d",
3980		       le32_to_cpu(slot_ctx->dev_state) & DEV_ADDR_MASK);
3981out:
3982	mutex_unlock(&xhci->mutex);
3983	kfree(command);
 
 
 
3984	return ret;
3985}
3986
3987int xhci_address_device(struct usb_hcd *hcd, struct usb_device *udev)
3988{
3989	return xhci_setup_device(hcd, udev, SETUP_CONTEXT_ADDRESS);
3990}
3991
3992int xhci_enable_device(struct usb_hcd *hcd, struct usb_device *udev)
3993{
3994	return xhci_setup_device(hcd, udev, SETUP_CONTEXT_ONLY);
3995}
3996
3997/*
3998 * Transfer the port index into real index in the HW port status
3999 * registers. Caculate offset between the port's PORTSC register
4000 * and port status base. Divide the number of per port register
4001 * to get the real index. The raw port number bases 1.
4002 */
4003int xhci_find_raw_port_number(struct usb_hcd *hcd, int port1)
4004{
4005	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4006	__le32 __iomem *base_addr = &xhci->op_regs->port_status_base;
4007	__le32 __iomem *addr;
4008	int raw_port;
4009
4010	if (hcd->speed < HCD_USB3)
4011		addr = xhci->usb2_ports[port1 - 1];
4012	else
4013		addr = xhci->usb3_ports[port1 - 1];
4014
4015	raw_port = (addr - base_addr)/NUM_PORT_REGS + 1;
4016	return raw_port;
4017}
4018
4019/*
4020 * Issue an Evaluate Context command to change the Maximum Exit Latency in the
4021 * slot context.  If that succeeds, store the new MEL in the xhci_virt_device.
4022 */
4023static int __maybe_unused xhci_change_max_exit_latency(struct xhci_hcd *xhci,
4024			struct usb_device *udev, u16 max_exit_latency)
4025{
4026	struct xhci_virt_device *virt_dev;
4027	struct xhci_command *command;
4028	struct xhci_input_control_ctx *ctrl_ctx;
4029	struct xhci_slot_ctx *slot_ctx;
4030	unsigned long flags;
4031	int ret;
4032
4033	spin_lock_irqsave(&xhci->lock, flags);
4034
4035	virt_dev = xhci->devs[udev->slot_id];
4036
4037	/*
4038	 * virt_dev might not exists yet if xHC resumed from hibernate (S4) and
4039	 * xHC was re-initialized. Exit latency will be set later after
4040	 * hub_port_finish_reset() is done and xhci->devs[] are re-allocated
4041	 */
4042
4043	if (!virt_dev || max_exit_latency == virt_dev->current_mel) {
4044		spin_unlock_irqrestore(&xhci->lock, flags);
4045		return 0;
4046	}
4047
4048	/* Attempt to issue an Evaluate Context command to change the MEL. */
4049	command = xhci->lpm_command;
4050	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
4051	if (!ctrl_ctx) {
4052		spin_unlock_irqrestore(&xhci->lock, flags);
4053		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
4054				__func__);
4055		return -ENOMEM;
4056	}
4057
4058	xhci_slot_copy(xhci, command->in_ctx, virt_dev->out_ctx);
4059	spin_unlock_irqrestore(&xhci->lock, flags);
4060
4061	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
4062	slot_ctx = xhci_get_slot_ctx(xhci, command->in_ctx);
4063	slot_ctx->dev_info2 &= cpu_to_le32(~((u32) MAX_EXIT));
4064	slot_ctx->dev_info2 |= cpu_to_le32(max_exit_latency);
4065	slot_ctx->dev_state = 0;
4066
4067	xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
4068			"Set up evaluate context for LPM MEL change.");
4069	xhci_dbg(xhci, "Slot %u Input Context:\n", udev->slot_id);
4070	xhci_dbg_ctx(xhci, command->in_ctx, 0);
4071
4072	/* Issue and wait for the evaluate context command. */
4073	ret = xhci_configure_endpoint(xhci, udev, command,
4074			true, true);
4075	xhci_dbg(xhci, "Slot %u Output Context:\n", udev->slot_id);
4076	xhci_dbg_ctx(xhci, virt_dev->out_ctx, 0);
4077
4078	if (!ret) {
4079		spin_lock_irqsave(&xhci->lock, flags);
4080		virt_dev->current_mel = max_exit_latency;
4081		spin_unlock_irqrestore(&xhci->lock, flags);
4082	}
4083	return ret;
4084}
4085
4086#ifdef CONFIG_PM
4087
4088/* BESL to HIRD Encoding array for USB2 LPM */
4089static int xhci_besl_encoding[16] = {125, 150, 200, 300, 400, 500, 1000, 2000,
4090	3000, 4000, 5000, 6000, 7000, 8000, 9000, 10000};
4091
4092/* Calculate HIRD/BESL for USB2 PORTPMSC*/
4093static int xhci_calculate_hird_besl(struct xhci_hcd *xhci,
4094					struct usb_device *udev)
4095{
4096	int u2del, besl, besl_host;
4097	int besl_device = 0;
4098	u32 field;
4099
4100	u2del = HCS_U2_LATENCY(xhci->hcs_params3);
4101	field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4102
4103	if (field & USB_BESL_SUPPORT) {
4104		for (besl_host = 0; besl_host < 16; besl_host++) {
4105			if (xhci_besl_encoding[besl_host] >= u2del)
4106				break;
4107		}
4108		/* Use baseline BESL value as default */
4109		if (field & USB_BESL_BASELINE_VALID)
4110			besl_device = USB_GET_BESL_BASELINE(field);
4111		else if (field & USB_BESL_DEEP_VALID)
4112			besl_device = USB_GET_BESL_DEEP(field);
4113	} else {
4114		if (u2del <= 50)
4115			besl_host = 0;
4116		else
4117			besl_host = (u2del - 51) / 75 + 1;
4118	}
4119
4120	besl = besl_host + besl_device;
4121	if (besl > 15)
4122		besl = 15;
4123
4124	return besl;
4125}
4126
4127/* Calculate BESLD, L1 timeout and HIRDM for USB2 PORTHLPMC */
4128static int xhci_calculate_usb2_hw_lpm_params(struct usb_device *udev)
4129{
4130	u32 field;
4131	int l1;
4132	int besld = 0;
4133	int hirdm = 0;
4134
4135	field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4136
4137	/* xHCI l1 is set in steps of 256us, xHCI 1.0 section 5.4.11.2 */
4138	l1 = udev->l1_params.timeout / 256;
4139
4140	/* device has preferred BESLD */
4141	if (field & USB_BESL_DEEP_VALID) {
4142		besld = USB_GET_BESL_DEEP(field);
4143		hirdm = 1;
4144	}
4145
4146	return PORT_BESLD(besld) | PORT_L1_TIMEOUT(l1) | PORT_HIRDM(hirdm);
4147}
4148
4149int xhci_set_usb2_hardware_lpm(struct usb_hcd *hcd,
4150			struct usb_device *udev, int enable)
4151{
4152	struct xhci_hcd	*xhci = hcd_to_xhci(hcd);
4153	__le32 __iomem	**port_array;
4154	__le32 __iomem	*pm_addr, *hlpm_addr;
4155	u32		pm_val, hlpm_val, field;
4156	unsigned int	port_num;
4157	unsigned long	flags;
4158	int		hird, exit_latency;
4159	int		ret;
4160
 
 
 
4161	if (hcd->speed >= HCD_USB3 || !xhci->hw_lpm_support ||
4162			!udev->lpm_capable)
4163		return -EPERM;
4164
4165	if (!udev->parent || udev->parent->parent ||
4166			udev->descriptor.bDeviceClass == USB_CLASS_HUB)
4167		return -EPERM;
4168
4169	if (udev->usb2_hw_lpm_capable != 1)
4170		return -EPERM;
4171
4172	spin_lock_irqsave(&xhci->lock, flags);
4173
4174	port_array = xhci->usb2_ports;
4175	port_num = udev->portnum - 1;
4176	pm_addr = port_array[port_num] + PORTPMSC;
4177	pm_val = readl(pm_addr);
4178	hlpm_addr = port_array[port_num] + PORTHLPMC;
4179	field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4180
4181	xhci_dbg(xhci, "%s port %d USB2 hardware LPM\n",
4182			enable ? "enable" : "disable", port_num + 1);
4183
4184	if (enable) {
4185		/* Host supports BESL timeout instead of HIRD */
4186		if (udev->usb2_hw_lpm_besl_capable) {
4187			/* if device doesn't have a preferred BESL value use a
4188			 * default one which works with mixed HIRD and BESL
4189			 * systems. See XHCI_DEFAULT_BESL definition in xhci.h
4190			 */
 
4191			if ((field & USB_BESL_SUPPORT) &&
4192			    (field & USB_BESL_BASELINE_VALID))
4193				hird = USB_GET_BESL_BASELINE(field);
4194			else
4195				hird = udev->l1_params.besl;
4196
4197			exit_latency = xhci_besl_encoding[hird];
4198			spin_unlock_irqrestore(&xhci->lock, flags);
4199
4200			/* USB 3.0 code dedicate one xhci->lpm_command->in_ctx
4201			 * input context for link powermanagement evaluate
4202			 * context commands. It is protected by hcd->bandwidth
4203			 * mutex and is shared by all devices. We need to set
4204			 * the max ext latency in USB 2 BESL LPM as well, so
4205			 * use the same mutex and xhci_change_max_exit_latency()
4206			 */
4207			mutex_lock(hcd->bandwidth_mutex);
4208			ret = xhci_change_max_exit_latency(xhci, udev,
4209							   exit_latency);
4210			mutex_unlock(hcd->bandwidth_mutex);
4211
4212			if (ret < 0)
4213				return ret;
4214			spin_lock_irqsave(&xhci->lock, flags);
4215
4216			hlpm_val = xhci_calculate_usb2_hw_lpm_params(udev);
4217			writel(hlpm_val, hlpm_addr);
4218			/* flush write */
4219			readl(hlpm_addr);
4220		} else {
4221			hird = xhci_calculate_hird_besl(xhci, udev);
4222		}
4223
4224		pm_val &= ~PORT_HIRD_MASK;
4225		pm_val |= PORT_HIRD(hird) | PORT_RWE | PORT_L1DS(udev->slot_id);
4226		writel(pm_val, pm_addr);
4227		pm_val = readl(pm_addr);
4228		pm_val |= PORT_HLE;
4229		writel(pm_val, pm_addr);
4230		/* flush write */
4231		readl(pm_addr);
4232	} else {
4233		pm_val &= ~(PORT_HLE | PORT_RWE | PORT_HIRD_MASK | PORT_L1DS_MASK);
4234		writel(pm_val, pm_addr);
4235		/* flush write */
4236		readl(pm_addr);
4237		if (udev->usb2_hw_lpm_besl_capable) {
4238			spin_unlock_irqrestore(&xhci->lock, flags);
4239			mutex_lock(hcd->bandwidth_mutex);
4240			xhci_change_max_exit_latency(xhci, udev, 0);
4241			mutex_unlock(hcd->bandwidth_mutex);
 
 
 
4242			return 0;
4243		}
4244	}
4245
4246	spin_unlock_irqrestore(&xhci->lock, flags);
4247	return 0;
4248}
4249
4250/* check if a usb2 port supports a given extened capability protocol
4251 * only USB2 ports extended protocol capability values are cached.
4252 * Return 1 if capability is supported
4253 */
4254static int xhci_check_usb2_port_capability(struct xhci_hcd *xhci, int port,
4255					   unsigned capability)
4256{
4257	u32 port_offset, port_count;
4258	int i;
4259
4260	for (i = 0; i < xhci->num_ext_caps; i++) {
4261		if (xhci->ext_caps[i] & capability) {
4262			/* port offsets starts at 1 */
4263			port_offset = XHCI_EXT_PORT_OFF(xhci->ext_caps[i]) - 1;
4264			port_count = XHCI_EXT_PORT_COUNT(xhci->ext_caps[i]);
4265			if (port >= port_offset &&
4266			    port < port_offset + port_count)
4267				return 1;
4268		}
4269	}
4270	return 0;
4271}
4272
4273int xhci_update_device(struct usb_hcd *hcd, struct usb_device *udev)
4274{
4275	struct xhci_hcd	*xhci = hcd_to_xhci(hcd);
4276	int		portnum = udev->portnum - 1;
4277
4278	if (hcd->speed >= HCD_USB3 || !xhci->sw_lpm_support ||
4279			!udev->lpm_capable)
4280		return 0;
4281
4282	/* we only support lpm for non-hub device connected to root hub yet */
4283	if (!udev->parent || udev->parent->parent ||
4284			udev->descriptor.bDeviceClass == USB_CLASS_HUB)
4285		return 0;
4286
4287	if (xhci->hw_lpm_support == 1 &&
4288			xhci_check_usb2_port_capability(
4289				xhci, portnum, XHCI_HLC)) {
4290		udev->usb2_hw_lpm_capable = 1;
4291		udev->l1_params.timeout = XHCI_L1_TIMEOUT;
4292		udev->l1_params.besl = XHCI_DEFAULT_BESL;
4293		if (xhci_check_usb2_port_capability(xhci, portnum,
4294					XHCI_BLC))
4295			udev->usb2_hw_lpm_besl_capable = 1;
4296	}
4297
4298	return 0;
4299}
4300
4301/*---------------------- USB 3.0 Link PM functions ------------------------*/
4302
4303/* Service interval in nanoseconds = 2^(bInterval - 1) * 125us * 1000ns / 1us */
4304static unsigned long long xhci_service_interval_to_ns(
4305		struct usb_endpoint_descriptor *desc)
4306{
4307	return (1ULL << (desc->bInterval - 1)) * 125 * 1000;
4308}
4309
4310static u16 xhci_get_timeout_no_hub_lpm(struct usb_device *udev,
4311		enum usb3_link_state state)
4312{
4313	unsigned long long sel;
4314	unsigned long long pel;
4315	unsigned int max_sel_pel;
4316	char *state_name;
4317
4318	switch (state) {
4319	case USB3_LPM_U1:
4320		/* Convert SEL and PEL stored in nanoseconds to microseconds */
4321		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4322		pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
4323		max_sel_pel = USB3_LPM_MAX_U1_SEL_PEL;
4324		state_name = "U1";
4325		break;
4326	case USB3_LPM_U2:
4327		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4328		pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
4329		max_sel_pel = USB3_LPM_MAX_U2_SEL_PEL;
4330		state_name = "U2";
4331		break;
4332	default:
4333		dev_warn(&udev->dev, "%s: Can't get timeout for non-U1 or U2 state.\n",
4334				__func__);
4335		return USB3_LPM_DISABLED;
4336	}
4337
4338	if (sel <= max_sel_pel && pel <= max_sel_pel)
4339		return USB3_LPM_DEVICE_INITIATED;
4340
4341	if (sel > max_sel_pel)
4342		dev_dbg(&udev->dev, "Device-initiated %s disabled "
4343				"due to long SEL %llu ms\n",
4344				state_name, sel);
4345	else
4346		dev_dbg(&udev->dev, "Device-initiated %s disabled "
4347				"due to long PEL %llu ms\n",
4348				state_name, pel);
4349	return USB3_LPM_DISABLED;
4350}
4351
4352/* The U1 timeout should be the maximum of the following values:
4353 *  - For control endpoints, U1 system exit latency (SEL) * 3
4354 *  - For bulk endpoints, U1 SEL * 5
4355 *  - For interrupt endpoints:
4356 *    - Notification EPs, U1 SEL * 3
4357 *    - Periodic EPs, max(105% of bInterval, U1 SEL * 2)
4358 *  - For isochronous endpoints, max(105% of bInterval, U1 SEL * 2)
4359 */
4360static unsigned long long xhci_calculate_intel_u1_timeout(
4361		struct usb_device *udev,
4362		struct usb_endpoint_descriptor *desc)
4363{
4364	unsigned long long timeout_ns;
4365	int ep_type;
4366	int intr_type;
4367
4368	ep_type = usb_endpoint_type(desc);
4369	switch (ep_type) {
4370	case USB_ENDPOINT_XFER_CONTROL:
4371		timeout_ns = udev->u1_params.sel * 3;
4372		break;
4373	case USB_ENDPOINT_XFER_BULK:
4374		timeout_ns = udev->u1_params.sel * 5;
4375		break;
4376	case USB_ENDPOINT_XFER_INT:
4377		intr_type = usb_endpoint_interrupt_type(desc);
4378		if (intr_type == USB_ENDPOINT_INTR_NOTIFICATION) {
4379			timeout_ns = udev->u1_params.sel * 3;
4380			break;
4381		}
4382		/* Otherwise the calculation is the same as isoc eps */
 
4383	case USB_ENDPOINT_XFER_ISOC:
4384		timeout_ns = xhci_service_interval_to_ns(desc);
4385		timeout_ns = DIV_ROUND_UP_ULL(timeout_ns * 105, 100);
4386		if (timeout_ns < udev->u1_params.sel * 2)
4387			timeout_ns = udev->u1_params.sel * 2;
4388		break;
4389	default:
4390		return 0;
4391	}
4392
4393	return timeout_ns;
4394}
4395
4396/* Returns the hub-encoded U1 timeout value. */
4397static u16 xhci_calculate_u1_timeout(struct xhci_hcd *xhci,
4398		struct usb_device *udev,
4399		struct usb_endpoint_descriptor *desc)
4400{
4401	unsigned long long timeout_ns;
4402
 
 
 
 
 
 
 
 
4403	if (xhci->quirks & XHCI_INTEL_HOST)
4404		timeout_ns = xhci_calculate_intel_u1_timeout(udev, desc);
4405	else
4406		timeout_ns = udev->u1_params.sel;
4407
4408	/* The U1 timeout is encoded in 1us intervals.
4409	 * Don't return a timeout of zero, because that's USB3_LPM_DISABLED.
4410	 */
4411	if (timeout_ns == USB3_LPM_DISABLED)
4412		timeout_ns = 1;
4413	else
4414		timeout_ns = DIV_ROUND_UP_ULL(timeout_ns, 1000);
4415
4416	/* If the necessary timeout value is bigger than what we can set in the
4417	 * USB 3.0 hub, we have to disable hub-initiated U1.
4418	 */
4419	if (timeout_ns <= USB3_LPM_U1_MAX_TIMEOUT)
4420		return timeout_ns;
4421	dev_dbg(&udev->dev, "Hub-initiated U1 disabled "
4422			"due to long timeout %llu ms\n", timeout_ns);
4423	return xhci_get_timeout_no_hub_lpm(udev, USB3_LPM_U1);
4424}
4425
4426/* The U2 timeout should be the maximum of:
4427 *  - 10 ms (to avoid the bandwidth impact on the scheduler)
4428 *  - largest bInterval of any active periodic endpoint (to avoid going
4429 *    into lower power link states between intervals).
4430 *  - the U2 Exit Latency of the device
4431 */
4432static unsigned long long xhci_calculate_intel_u2_timeout(
4433		struct usb_device *udev,
4434		struct usb_endpoint_descriptor *desc)
4435{
4436	unsigned long long timeout_ns;
4437	unsigned long long u2_del_ns;
4438
4439	timeout_ns = 10 * 1000 * 1000;
4440
4441	if ((usb_endpoint_xfer_int(desc) || usb_endpoint_xfer_isoc(desc)) &&
4442			(xhci_service_interval_to_ns(desc) > timeout_ns))
4443		timeout_ns = xhci_service_interval_to_ns(desc);
4444
4445	u2_del_ns = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat) * 1000ULL;
4446	if (u2_del_ns > timeout_ns)
4447		timeout_ns = u2_del_ns;
4448
4449	return timeout_ns;
4450}
4451
4452/* Returns the hub-encoded U2 timeout value. */
4453static u16 xhci_calculate_u2_timeout(struct xhci_hcd *xhci,
4454		struct usb_device *udev,
4455		struct usb_endpoint_descriptor *desc)
4456{
4457	unsigned long long timeout_ns;
4458
 
 
 
 
 
 
 
 
4459	if (xhci->quirks & XHCI_INTEL_HOST)
4460		timeout_ns = xhci_calculate_intel_u2_timeout(udev, desc);
4461	else
4462		timeout_ns = udev->u2_params.sel;
4463
4464	/* The U2 timeout is encoded in 256us intervals */
4465	timeout_ns = DIV_ROUND_UP_ULL(timeout_ns, 256 * 1000);
4466	/* If the necessary timeout value is bigger than what we can set in the
4467	 * USB 3.0 hub, we have to disable hub-initiated U2.
4468	 */
4469	if (timeout_ns <= USB3_LPM_U2_MAX_TIMEOUT)
4470		return timeout_ns;
4471	dev_dbg(&udev->dev, "Hub-initiated U2 disabled "
4472			"due to long timeout %llu ms\n", timeout_ns);
4473	return xhci_get_timeout_no_hub_lpm(udev, USB3_LPM_U2);
4474}
4475
4476static u16 xhci_call_host_update_timeout_for_endpoint(struct xhci_hcd *xhci,
4477		struct usb_device *udev,
4478		struct usb_endpoint_descriptor *desc,
4479		enum usb3_link_state state,
4480		u16 *timeout)
4481{
4482	if (state == USB3_LPM_U1)
4483		return xhci_calculate_u1_timeout(xhci, udev, desc);
4484	else if (state == USB3_LPM_U2)
4485		return xhci_calculate_u2_timeout(xhci, udev, desc);
4486
4487	return USB3_LPM_DISABLED;
4488}
4489
4490static int xhci_update_timeout_for_endpoint(struct xhci_hcd *xhci,
4491		struct usb_device *udev,
4492		struct usb_endpoint_descriptor *desc,
4493		enum usb3_link_state state,
4494		u16 *timeout)
4495{
4496	u16 alt_timeout;
4497
4498	alt_timeout = xhci_call_host_update_timeout_for_endpoint(xhci, udev,
4499		desc, state, timeout);
4500
4501	/* If we found we can't enable hub-initiated LPM, or
4502	 * the U1 or U2 exit latency was too high to allow
4503	 * device-initiated LPM as well, just stop searching.
 
4504	 */
4505	if (alt_timeout == USB3_LPM_DISABLED ||
4506			alt_timeout == USB3_LPM_DEVICE_INITIATED) {
4507		*timeout = alt_timeout;
4508		return -E2BIG;
4509	}
4510	if (alt_timeout > *timeout)
4511		*timeout = alt_timeout;
4512	return 0;
4513}
4514
4515static int xhci_update_timeout_for_interface(struct xhci_hcd *xhci,
4516		struct usb_device *udev,
4517		struct usb_host_interface *alt,
4518		enum usb3_link_state state,
4519		u16 *timeout)
4520{
4521	int j;
4522
4523	for (j = 0; j < alt->desc.bNumEndpoints; j++) {
4524		if (xhci_update_timeout_for_endpoint(xhci, udev,
4525					&alt->endpoint[j].desc, state, timeout))
4526			return -E2BIG;
4527		continue;
4528	}
4529	return 0;
4530}
4531
4532static int xhci_check_intel_tier_policy(struct usb_device *udev,
4533		enum usb3_link_state state)
4534{
4535	struct usb_device *parent;
4536	unsigned int num_hubs;
4537
4538	if (state == USB3_LPM_U2)
4539		return 0;
4540
4541	/* Don't enable U1 if the device is on a 2nd tier hub or lower. */
4542	for (parent = udev->parent, num_hubs = 0; parent->parent;
4543			parent = parent->parent)
4544		num_hubs++;
4545
4546	if (num_hubs < 2)
4547		return 0;
4548
4549	dev_dbg(&udev->dev, "Disabling U1 link state for device"
4550			" below second-tier hub.\n");
4551	dev_dbg(&udev->dev, "Plug device into first-tier hub "
4552			"to decrease power consumption.\n");
4553	return -E2BIG;
4554}
4555
4556static int xhci_check_tier_policy(struct xhci_hcd *xhci,
4557		struct usb_device *udev,
4558		enum usb3_link_state state)
4559{
4560	if (xhci->quirks & XHCI_INTEL_HOST)
4561		return xhci_check_intel_tier_policy(udev, state);
4562	else
4563		return 0;
4564}
4565
4566/* Returns the U1 or U2 timeout that should be enabled.
4567 * If the tier check or timeout setting functions return with a non-zero exit
4568 * code, that means the timeout value has been finalized and we shouldn't look
4569 * at any more endpoints.
4570 */
4571static u16 xhci_calculate_lpm_timeout(struct usb_hcd *hcd,
4572			struct usb_device *udev, enum usb3_link_state state)
4573{
4574	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4575	struct usb_host_config *config;
4576	char *state_name;
4577	int i;
4578	u16 timeout = USB3_LPM_DISABLED;
4579
4580	if (state == USB3_LPM_U1)
4581		state_name = "U1";
4582	else if (state == USB3_LPM_U2)
4583		state_name = "U2";
4584	else {
4585		dev_warn(&udev->dev, "Can't enable unknown link state %i\n",
4586				state);
4587		return timeout;
4588	}
4589
4590	if (xhci_check_tier_policy(xhci, udev, state) < 0)
4591		return timeout;
4592
4593	/* Gather some information about the currently installed configuration
4594	 * and alternate interface settings.
4595	 */
4596	if (xhci_update_timeout_for_endpoint(xhci, udev, &udev->ep0.desc,
4597			state, &timeout))
4598		return timeout;
4599
4600	config = udev->actconfig;
4601	if (!config)
4602		return timeout;
4603
4604	for (i = 0; i < config->desc.bNumInterfaces; i++) {
4605		struct usb_driver *driver;
4606		struct usb_interface *intf = config->interface[i];
4607
4608		if (!intf)
4609			continue;
4610
4611		/* Check if any currently bound drivers want hub-initiated LPM
4612		 * disabled.
4613		 */
4614		if (intf->dev.driver) {
4615			driver = to_usb_driver(intf->dev.driver);
4616			if (driver && driver->disable_hub_initiated_lpm) {
4617				dev_dbg(&udev->dev, "Hub-initiated %s disabled "
4618						"at request of driver %s\n",
4619						state_name, driver->name);
4620				return xhci_get_timeout_no_hub_lpm(udev, state);
 
 
4621			}
4622		}
4623
4624		/* Not sure how this could happen... */
4625		if (!intf->cur_altsetting)
4626			continue;
4627
4628		if (xhci_update_timeout_for_interface(xhci, udev,
4629					intf->cur_altsetting,
4630					state, &timeout))
4631			return timeout;
4632	}
4633	return timeout;
4634}
4635
4636static int calculate_max_exit_latency(struct usb_device *udev,
4637		enum usb3_link_state state_changed,
4638		u16 hub_encoded_timeout)
4639{
4640	unsigned long long u1_mel_us = 0;
4641	unsigned long long u2_mel_us = 0;
4642	unsigned long long mel_us = 0;
4643	bool disabling_u1;
4644	bool disabling_u2;
4645	bool enabling_u1;
4646	bool enabling_u2;
4647
4648	disabling_u1 = (state_changed == USB3_LPM_U1 &&
4649			hub_encoded_timeout == USB3_LPM_DISABLED);
4650	disabling_u2 = (state_changed == USB3_LPM_U2 &&
4651			hub_encoded_timeout == USB3_LPM_DISABLED);
4652
4653	enabling_u1 = (state_changed == USB3_LPM_U1 &&
4654			hub_encoded_timeout != USB3_LPM_DISABLED);
4655	enabling_u2 = (state_changed == USB3_LPM_U2 &&
4656			hub_encoded_timeout != USB3_LPM_DISABLED);
4657
4658	/* If U1 was already enabled and we're not disabling it,
4659	 * or we're going to enable U1, account for the U1 max exit latency.
4660	 */
4661	if ((udev->u1_params.timeout != USB3_LPM_DISABLED && !disabling_u1) ||
4662			enabling_u1)
4663		u1_mel_us = DIV_ROUND_UP(udev->u1_params.mel, 1000);
4664	if ((udev->u2_params.timeout != USB3_LPM_DISABLED && !disabling_u2) ||
4665			enabling_u2)
4666		u2_mel_us = DIV_ROUND_UP(udev->u2_params.mel, 1000);
4667
4668	if (u1_mel_us > u2_mel_us)
4669		mel_us = u1_mel_us;
4670	else
4671		mel_us = u2_mel_us;
4672	/* xHCI host controller max exit latency field is only 16 bits wide. */
4673	if (mel_us > MAX_EXIT) {
4674		dev_warn(&udev->dev, "Link PM max exit latency of %lluus "
4675				"is too big.\n", mel_us);
4676		return -E2BIG;
4677	}
4678	return mel_us;
4679}
4680
4681/* Returns the USB3 hub-encoded value for the U1/U2 timeout. */
4682int xhci_enable_usb3_lpm_timeout(struct usb_hcd *hcd,
4683			struct usb_device *udev, enum usb3_link_state state)
4684{
4685	struct xhci_hcd	*xhci;
4686	u16 hub_encoded_timeout;
4687	int mel;
4688	int ret;
4689
4690	xhci = hcd_to_xhci(hcd);
4691	/* The LPM timeout values are pretty host-controller specific, so don't
4692	 * enable hub-initiated timeouts unless the vendor has provided
4693	 * information about their timeout algorithm.
4694	 */
4695	if (!xhci || !(xhci->quirks & XHCI_LPM_SUPPORT) ||
4696			!xhci->devs[udev->slot_id])
4697		return USB3_LPM_DISABLED;
4698
4699	hub_encoded_timeout = xhci_calculate_lpm_timeout(hcd, udev, state);
4700	mel = calculate_max_exit_latency(udev, state, hub_encoded_timeout);
4701	if (mel < 0) {
4702		/* Max Exit Latency is too big, disable LPM. */
4703		hub_encoded_timeout = USB3_LPM_DISABLED;
4704		mel = 0;
4705	}
4706
4707	ret = xhci_change_max_exit_latency(xhci, udev, mel);
4708	if (ret)
4709		return ret;
4710	return hub_encoded_timeout;
4711}
4712
4713int xhci_disable_usb3_lpm_timeout(struct usb_hcd *hcd,
4714			struct usb_device *udev, enum usb3_link_state state)
4715{
4716	struct xhci_hcd	*xhci;
4717	u16 mel;
4718
4719	xhci = hcd_to_xhci(hcd);
4720	if (!xhci || !(xhci->quirks & XHCI_LPM_SUPPORT) ||
4721			!xhci->devs[udev->slot_id])
4722		return 0;
4723
4724	mel = calculate_max_exit_latency(udev, state, USB3_LPM_DISABLED);
4725	return xhci_change_max_exit_latency(xhci, udev, mel);
4726}
4727#else /* CONFIG_PM */
4728
4729int xhci_set_usb2_hardware_lpm(struct usb_hcd *hcd,
4730				struct usb_device *udev, int enable)
4731{
4732	return 0;
4733}
4734
4735int xhci_update_device(struct usb_hcd *hcd, struct usb_device *udev)
4736{
4737	return 0;
4738}
4739
4740int xhci_enable_usb3_lpm_timeout(struct usb_hcd *hcd,
4741			struct usb_device *udev, enum usb3_link_state state)
4742{
4743	return USB3_LPM_DISABLED;
4744}
4745
4746int xhci_disable_usb3_lpm_timeout(struct usb_hcd *hcd,
4747			struct usb_device *udev, enum usb3_link_state state)
4748{
4749	return 0;
4750}
4751#endif	/* CONFIG_PM */
4752
4753/*-------------------------------------------------------------------------*/
4754
4755/* Once a hub descriptor is fetched for a device, we need to update the xHC's
4756 * internal data structures for the device.
4757 */
4758int xhci_update_hub_device(struct usb_hcd *hcd, struct usb_device *hdev,
4759			struct usb_tt *tt, gfp_t mem_flags)
4760{
4761	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4762	struct xhci_virt_device *vdev;
4763	struct xhci_command *config_cmd;
4764	struct xhci_input_control_ctx *ctrl_ctx;
4765	struct xhci_slot_ctx *slot_ctx;
4766	unsigned long flags;
4767	unsigned think_time;
4768	int ret;
4769
4770	/* Ignore root hubs */
4771	if (!hdev->parent)
4772		return 0;
4773
4774	vdev = xhci->devs[hdev->slot_id];
4775	if (!vdev) {
4776		xhci_warn(xhci, "Cannot update hub desc for unknown device.\n");
4777		return -EINVAL;
4778	}
4779	config_cmd = xhci_alloc_command(xhci, true, true, mem_flags);
4780	if (!config_cmd) {
4781		xhci_dbg(xhci, "Could not allocate xHCI command structure.\n");
4782		return -ENOMEM;
4783	}
4784	ctrl_ctx = xhci_get_input_control_ctx(config_cmd->in_ctx);
4785	if (!ctrl_ctx) {
4786		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
4787				__func__);
4788		xhci_free_command(xhci, config_cmd);
4789		return -ENOMEM;
4790	}
4791
4792	spin_lock_irqsave(&xhci->lock, flags);
4793	if (hdev->speed == USB_SPEED_HIGH &&
4794			xhci_alloc_tt_info(xhci, vdev, hdev, tt, GFP_ATOMIC)) {
4795		xhci_dbg(xhci, "Could not allocate xHCI TT structure.\n");
4796		xhci_free_command(xhci, config_cmd);
4797		spin_unlock_irqrestore(&xhci->lock, flags);
4798		return -ENOMEM;
4799	}
4800
4801	xhci_slot_copy(xhci, config_cmd->in_ctx, vdev->out_ctx);
4802	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
4803	slot_ctx = xhci_get_slot_ctx(xhci, config_cmd->in_ctx);
4804	slot_ctx->dev_info |= cpu_to_le32(DEV_HUB);
4805	/*
4806	 * refer to section 6.2.2: MTT should be 0 for full speed hub,
4807	 * but it may be already set to 1 when setup an xHCI virtual
4808	 * device, so clear it anyway.
4809	 */
4810	if (tt->multi)
4811		slot_ctx->dev_info |= cpu_to_le32(DEV_MTT);
4812	else if (hdev->speed == USB_SPEED_FULL)
4813		slot_ctx->dev_info &= cpu_to_le32(~DEV_MTT);
4814
4815	if (xhci->hci_version > 0x95) {
4816		xhci_dbg(xhci, "xHCI version %x needs hub "
4817				"TT think time and number of ports\n",
4818				(unsigned int) xhci->hci_version);
4819		slot_ctx->dev_info2 |= cpu_to_le32(XHCI_MAX_PORTS(hdev->maxchild));
4820		/* Set TT think time - convert from ns to FS bit times.
4821		 * 0 = 8 FS bit times, 1 = 16 FS bit times,
4822		 * 2 = 24 FS bit times, 3 = 32 FS bit times.
4823		 *
4824		 * xHCI 1.0: this field shall be 0 if the device is not a
4825		 * High-spped hub.
4826		 */
4827		think_time = tt->think_time;
4828		if (think_time != 0)
4829			think_time = (think_time / 666) - 1;
4830		if (xhci->hci_version < 0x100 || hdev->speed == USB_SPEED_HIGH)
4831			slot_ctx->tt_info |=
4832				cpu_to_le32(TT_THINK_TIME(think_time));
4833	} else {
4834		xhci_dbg(xhci, "xHCI version %x doesn't need hub "
4835				"TT think time or number of ports\n",
4836				(unsigned int) xhci->hci_version);
4837	}
4838	slot_ctx->dev_state = 0;
4839	spin_unlock_irqrestore(&xhci->lock, flags);
4840
4841	xhci_dbg(xhci, "Set up %s for hub device.\n",
4842			(xhci->hci_version > 0x95) ?
4843			"configure endpoint" : "evaluate context");
4844	xhci_dbg(xhci, "Slot %u Input Context:\n", hdev->slot_id);
4845	xhci_dbg_ctx(xhci, config_cmd->in_ctx, 0);
4846
4847	/* Issue and wait for the configure endpoint or
4848	 * evaluate context command.
4849	 */
4850	if (xhci->hci_version > 0x95)
4851		ret = xhci_configure_endpoint(xhci, hdev, config_cmd,
4852				false, false);
4853	else
4854		ret = xhci_configure_endpoint(xhci, hdev, config_cmd,
4855				true, false);
4856
4857	xhci_dbg(xhci, "Slot %u Output Context:\n", hdev->slot_id);
4858	xhci_dbg_ctx(xhci, vdev->out_ctx, 0);
4859
4860	xhci_free_command(xhci, config_cmd);
4861	return ret;
4862}
4863
4864int xhci_get_frame(struct usb_hcd *hcd)
4865{
4866	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4867	/* EHCI mods by the periodic size.  Why? */
4868	return readl(&xhci->run_regs->microframe_index) >> 3;
4869}
4870
4871int xhci_gen_setup(struct usb_hcd *hcd, xhci_get_quirks_t get_quirks)
4872{
4873	struct xhci_hcd		*xhci;
4874	struct device		*dev = hcd->self.controller;
 
 
 
 
 
4875	int			retval;
4876
4877	/* Accept arbitrarily long scatter-gather lists */
4878	hcd->self.sg_tablesize = ~0;
4879
4880	/* support to build packet from discontinuous buffers */
4881	hcd->self.no_sg_constraint = 1;
4882
4883	/* XHCI controllers don't stop the ep queue on short packets :| */
4884	hcd->self.no_stop_on_short = 1;
4885
4886	xhci = hcd_to_xhci(hcd);
4887
4888	if (usb_hcd_is_primary_hcd(hcd)) {
4889		xhci->main_hcd = hcd;
 
4890		/* Mark the first roothub as being USB 2.0.
4891		 * The xHCI driver will register the USB 3.0 roothub.
4892		 */
4893		hcd->speed = HCD_USB2;
4894		hcd->self.root_hub->speed = USB_SPEED_HIGH;
4895		/*
4896		 * USB 2.0 roothub under xHCI has an integrated TT,
4897		 * (rate matching hub) as opposed to having an OHCI/UHCI
4898		 * companion controller.
4899		 */
4900		hcd->has_tt = 1;
4901	} else {
4902		if (xhci->sbrn == 0x31) {
4903			xhci_info(xhci, "Host supports USB 3.1 Enhanced SuperSpeed\n");
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
4904			hcd->speed = HCD_USB31;
4905			hcd->self.root_hub->speed = USB_SPEED_SUPER_PLUS;
 
4906		}
 
 
 
 
 
4907		/* xHCI private pointer was set in xhci_pci_probe for the second
4908		 * registered roothub.
4909		 */
4910		return 0;
4911	}
4912
4913	mutex_init(&xhci->mutex);
4914	xhci->cap_regs = hcd->regs;
4915	xhci->op_regs = hcd->regs +
4916		HC_LENGTH(readl(&xhci->cap_regs->hc_capbase));
4917	xhci->run_regs = hcd->regs +
4918		(readl(&xhci->cap_regs->run_regs_off) & RTSOFF_MASK);
4919	/* Cache read-only capability registers */
4920	xhci->hcs_params1 = readl(&xhci->cap_regs->hcs_params1);
4921	xhci->hcs_params2 = readl(&xhci->cap_regs->hcs_params2);
4922	xhci->hcs_params3 = readl(&xhci->cap_regs->hcs_params3);
4923	xhci->hcc_params = readl(&xhci->cap_regs->hc_capbase);
4924	xhci->hci_version = HC_VERSION(xhci->hcc_params);
4925	xhci->hcc_params = readl(&xhci->cap_regs->hcc_params);
4926	if (xhci->hci_version > 0x100)
4927		xhci->hcc_params2 = readl(&xhci->cap_regs->hcc_params2);
4928	xhci_print_registers(xhci);
4929
4930	xhci->quirks = quirks;
4931
4932	get_quirks(dev, xhci);
4933
4934	/* In xhci controllers which follow xhci 1.0 spec gives a spurious
4935	 * success event after a short transfer. This quirk will ignore such
4936	 * spurious event.
4937	 */
4938	if (xhci->hci_version > 0x96)
4939		xhci->quirks |= XHCI_SPURIOUS_SUCCESS;
4940
4941	/* Make sure the HC is halted. */
4942	retval = xhci_halt(xhci);
4943	if (retval)
4944		return retval;
4945
 
 
4946	xhci_dbg(xhci, "Resetting HCD\n");
4947	/* Reset the internal HC memory state and registers. */
4948	retval = xhci_reset(xhci);
4949	if (retval)
4950		return retval;
4951	xhci_dbg(xhci, "Reset complete\n");
4952
4953	/*
4954	 * On some xHCI controllers (e.g. R-Car SoCs), the AC64 bit (bit 0)
4955	 * of HCCPARAMS1 is set to 1. However, the xHCs don't support 64-bit
4956	 * address memory pointers actually. So, this driver clears the AC64
4957	 * bit of xhci->hcc_params to call dma_set_coherent_mask(dev,
4958	 * DMA_BIT_MASK(32)) in this xhci_gen_setup().
4959	 */
4960	if (xhci->quirks & XHCI_NO_64BIT_SUPPORT)
4961		xhci->hcc_params &= ~BIT(0);
4962
4963	/* Set dma_mask and coherent_dma_mask to 64-bits,
4964	 * if xHC supports 64-bit addressing */
4965	if (HCC_64BIT_ADDR(xhci->hcc_params) &&
4966			!dma_set_mask(dev, DMA_BIT_MASK(64))) {
4967		xhci_dbg(xhci, "Enabling 64-bit DMA addresses.\n");
4968		dma_set_coherent_mask(dev, DMA_BIT_MASK(64));
4969	} else {
4970		/*
4971		 * This is to avoid error in cases where a 32-bit USB
4972		 * controller is used on a 64-bit capable system.
4973		 */
4974		retval = dma_set_mask(dev, DMA_BIT_MASK(32));
4975		if (retval)
4976			return retval;
4977		xhci_dbg(xhci, "Enabling 32-bit DMA addresses.\n");
4978		dma_set_coherent_mask(dev, DMA_BIT_MASK(32));
4979	}
4980
4981	xhci_dbg(xhci, "Calling HCD init\n");
4982	/* Initialize HCD and host controller data structures. */
4983	retval = xhci_init(hcd);
4984	if (retval)
4985		return retval;
4986	xhci_dbg(xhci, "Called HCD init\n");
4987
4988	xhci_info(xhci, "hcc params 0x%08x hci version 0x%x quirks 0x%08x\n",
4989		  xhci->hcc_params, xhci->hci_version, xhci->quirks);
4990
4991	return 0;
4992}
4993EXPORT_SYMBOL_GPL(xhci_gen_setup);
4994
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
4995static const struct hc_driver xhci_hc_driver = {
4996	.description =		"xhci-hcd",
4997	.product_desc =		"xHCI Host Controller",
4998	.hcd_priv_size =	sizeof(struct xhci_hcd),
4999
5000	/*
5001	 * generic hardware linkage
5002	 */
5003	.irq =			xhci_irq,
5004	.flags =		HCD_MEMORY | HCD_USB3 | HCD_SHARED,
 
5005
5006	/*
5007	 * basic lifecycle operations
5008	 */
5009	.reset =		NULL, /* set in xhci_init_driver() */
5010	.start =		xhci_run,
5011	.stop =			xhci_stop,
5012	.shutdown =		xhci_shutdown,
5013
5014	/*
5015	 * managing i/o requests and associated device resources
5016	 */
 
5017	.urb_enqueue =		xhci_urb_enqueue,
5018	.urb_dequeue =		xhci_urb_dequeue,
5019	.alloc_dev =		xhci_alloc_dev,
5020	.free_dev =		xhci_free_dev,
5021	.alloc_streams =	xhci_alloc_streams,
5022	.free_streams =		xhci_free_streams,
5023	.add_endpoint =		xhci_add_endpoint,
5024	.drop_endpoint =	xhci_drop_endpoint,
 
5025	.endpoint_reset =	xhci_endpoint_reset,
5026	.check_bandwidth =	xhci_check_bandwidth,
5027	.reset_bandwidth =	xhci_reset_bandwidth,
5028	.address_device =	xhci_address_device,
5029	.enable_device =	xhci_enable_device,
5030	.update_hub_device =	xhci_update_hub_device,
5031	.reset_device =		xhci_discover_or_reset_device,
5032
5033	/*
5034	 * scheduling support
5035	 */
5036	.get_frame_number =	xhci_get_frame,
5037
5038	/*
5039	 * root hub support
5040	 */
5041	.hub_control =		xhci_hub_control,
5042	.hub_status_data =	xhci_hub_status_data,
5043	.bus_suspend =		xhci_bus_suspend,
5044	.bus_resume =		xhci_bus_resume,
 
5045
5046	/*
5047	 * call back when device connected and addressed
5048	 */
5049	.update_device =        xhci_update_device,
5050	.set_usb2_hw_lpm =	xhci_set_usb2_hardware_lpm,
5051	.enable_usb3_lpm_timeout =	xhci_enable_usb3_lpm_timeout,
5052	.disable_usb3_lpm_timeout =	xhci_disable_usb3_lpm_timeout,
5053	.find_raw_port_number =	xhci_find_raw_port_number,
 
5054};
5055
5056void xhci_init_driver(struct hc_driver *drv,
5057		      const struct xhci_driver_overrides *over)
5058{
5059	BUG_ON(!over);
5060
5061	/* Copy the generic table to drv then apply the overrides */
5062	*drv = xhci_hc_driver;
5063
5064	if (over) {
5065		drv->hcd_priv_size += over->extra_priv_size;
5066		if (over->reset)
5067			drv->reset = over->reset;
5068		if (over->start)
5069			drv->start = over->start;
5070	}
5071}
5072EXPORT_SYMBOL_GPL(xhci_init_driver);
5073
5074MODULE_DESCRIPTION(DRIVER_DESC);
5075MODULE_AUTHOR(DRIVER_AUTHOR);
5076MODULE_LICENSE("GPL");
5077
5078static int __init xhci_hcd_init(void)
5079{
5080	/*
5081	 * Check the compiler generated sizes of structures that must be laid
5082	 * out in specific ways for hardware access.
5083	 */
5084	BUILD_BUG_ON(sizeof(struct xhci_doorbell_array) != 256*32/8);
5085	BUILD_BUG_ON(sizeof(struct xhci_slot_ctx) != 8*32/8);
5086	BUILD_BUG_ON(sizeof(struct xhci_ep_ctx) != 8*32/8);
5087	/* xhci_device_control has eight fields, and also
5088	 * embeds one xhci_slot_ctx and 31 xhci_ep_ctx
5089	 */
5090	BUILD_BUG_ON(sizeof(struct xhci_stream_ctx) != 4*32/8);
5091	BUILD_BUG_ON(sizeof(union xhci_trb) != 4*32/8);
5092	BUILD_BUG_ON(sizeof(struct xhci_erst_entry) != 4*32/8);
5093	BUILD_BUG_ON(sizeof(struct xhci_cap_regs) != 8*32/8);
5094	BUILD_BUG_ON(sizeof(struct xhci_intr_reg) != 8*32/8);
5095	/* xhci_run_regs has eight fields and embeds 128 xhci_intr_regs */
5096	BUILD_BUG_ON(sizeof(struct xhci_run_regs) != (8+8*128)*32/8);
5097
5098	if (usb_disabled())
5099		return -ENODEV;
5100
 
 
5101	return 0;
5102}
5103
5104/*
5105 * If an init function is provided, an exit function must also be provided
5106 * to allow module unload.
5107 */
5108static void __exit xhci_hcd_fini(void) { }
 
 
 
5109
5110module_init(xhci_hcd_init);
5111module_exit(xhci_hcd_fini);
v5.9
   1// SPDX-License-Identifier: GPL-2.0
   2/*
   3 * xHCI host controller driver
   4 *
   5 * Copyright (C) 2008 Intel Corp.
   6 *
   7 * Author: Sarah Sharp
   8 * Some code borrowed from the Linux EHCI driver.
 
 
 
 
 
 
 
 
 
 
 
 
 
   9 */
  10
  11#include <linux/pci.h>
  12#include <linux/iopoll.h>
  13#include <linux/irq.h>
  14#include <linux/log2.h>
  15#include <linux/module.h>
  16#include <linux/moduleparam.h>
  17#include <linux/slab.h>
  18#include <linux/dmi.h>
  19#include <linux/dma-mapping.h>
  20
  21#include "xhci.h"
  22#include "xhci-trace.h"
  23#include "xhci-mtk.h"
  24#include "xhci-debugfs.h"
  25#include "xhci-dbgcap.h"
  26
  27#define DRIVER_AUTHOR "Sarah Sharp"
  28#define DRIVER_DESC "'eXtensible' Host Controller (xHC) Driver"
  29
  30#define	PORT_WAKE_BITS	(PORT_WKOC_E | PORT_WKDISC_E | PORT_WKCONN_E)
  31
  32/* Some 0.95 hardware can't handle the chain bit on a Link TRB being cleared */
  33static int link_quirk;
  34module_param(link_quirk, int, S_IRUGO | S_IWUSR);
  35MODULE_PARM_DESC(link_quirk, "Don't clear the chain bit on a link TRB");
  36
  37static unsigned long long quirks;
  38module_param(quirks, ullong, S_IRUGO);
  39MODULE_PARM_DESC(quirks, "Bit flags for quirks to be enabled as default");
  40
  41static bool td_on_ring(struct xhci_td *td, struct xhci_ring *ring)
  42{
  43	struct xhci_segment *seg = ring->first_seg;
  44
  45	if (!td || !td->start_seg)
  46		return false;
  47	do {
  48		if (seg == td->start_seg)
  49			return true;
  50		seg = seg->next;
  51	} while (seg && seg != ring->first_seg);
  52
  53	return false;
  54}
  55
  56/*
  57 * xhci_handshake - spin reading hc until handshake completes or fails
  58 * @ptr: address of hc register to be read
  59 * @mask: bits to look at in result of read
  60 * @done: value of those bits when handshake succeeds
  61 * @usec: timeout in microseconds
  62 *
  63 * Returns negative errno, or zero on success
  64 *
  65 * Success happens when the "mask" bits have the specified value (hardware
  66 * handshake done).  There are two failure modes:  "usec" have passed (major
  67 * hardware flakeout), or the register reads as all-ones (hardware removed).
  68 */
  69int xhci_handshake(void __iomem *ptr, u32 mask, u32 done, int usec)
  70{
  71	u32	result;
  72	int	ret;
  73
  74	ret = readl_poll_timeout_atomic(ptr, result,
  75					(result & mask) == done ||
  76					result == U32_MAX,
  77					1, usec);
  78	if (result == U32_MAX)		/* card removed */
  79		return -ENODEV;
  80
  81	return ret;
 
 
 
  82}
  83
  84/*
  85 * Disable interrupts and begin the xHCI halting process.
  86 */
  87void xhci_quiesce(struct xhci_hcd *xhci)
  88{
  89	u32 halted;
  90	u32 cmd;
  91	u32 mask;
  92
  93	mask = ~(XHCI_IRQS);
  94	halted = readl(&xhci->op_regs->status) & STS_HALT;
  95	if (!halted)
  96		mask &= ~CMD_RUN;
  97
  98	cmd = readl(&xhci->op_regs->command);
  99	cmd &= mask;
 100	writel(cmd, &xhci->op_regs->command);
 101}
 102
 103/*
 104 * Force HC into halt state.
 105 *
 106 * Disable any IRQs and clear the run/stop bit.
 107 * HC will complete any current and actively pipelined transactions, and
 108 * should halt within 16 ms of the run/stop bit being cleared.
 109 * Read HC Halted bit in the status register to see when the HC is finished.
 110 */
 111int xhci_halt(struct xhci_hcd *xhci)
 112{
 113	int ret;
 114	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Halt the HC");
 115	xhci_quiesce(xhci);
 116
 117	ret = xhci_handshake(&xhci->op_regs->status,
 118			STS_HALT, STS_HALT, XHCI_MAX_HALT_USEC);
 119	if (ret) {
 120		xhci_warn(xhci, "Host halt failed, %d\n", ret);
 121		return ret;
 122	}
 123	xhci->xhc_state |= XHCI_STATE_HALTED;
 124	xhci->cmd_ring_state = CMD_RING_STATE_STOPPED;
 125	return ret;
 126}
 127
 128/*
 129 * Set the run bit and wait for the host to be running.
 130 */
 131int xhci_start(struct xhci_hcd *xhci)
 132{
 133	u32 temp;
 134	int ret;
 135
 136	temp = readl(&xhci->op_regs->command);
 137	temp |= (CMD_RUN);
 138	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Turn on HC, cmd = 0x%x.",
 139			temp);
 140	writel(temp, &xhci->op_regs->command);
 141
 142	/*
 143	 * Wait for the HCHalted Status bit to be 0 to indicate the host is
 144	 * running.
 145	 */
 146	ret = xhci_handshake(&xhci->op_regs->status,
 147			STS_HALT, 0, XHCI_MAX_HALT_USEC);
 148	if (ret == -ETIMEDOUT)
 149		xhci_err(xhci, "Host took too long to start, "
 150				"waited %u microseconds.\n",
 151				XHCI_MAX_HALT_USEC);
 152	if (!ret)
 153		/* clear state flags. Including dying, halted or removing */
 154		xhci->xhc_state = 0;
 155
 156	return ret;
 157}
 158
 159/*
 160 * Reset a halted HC.
 161 *
 162 * This resets pipelines, timers, counters, state machines, etc.
 163 * Transactions will be terminated immediately, and operational registers
 164 * will be set to their defaults.
 165 */
 166int xhci_reset(struct xhci_hcd *xhci)
 167{
 168	u32 command;
 169	u32 state;
 170	int ret;
 171
 172	state = readl(&xhci->op_regs->status);
 173
 174	if (state == ~(u32)0) {
 175		xhci_warn(xhci, "Host not accessible, reset failed.\n");
 176		return -ENODEV;
 177	}
 178
 179	if ((state & STS_HALT) == 0) {
 180		xhci_warn(xhci, "Host controller not halted, aborting reset.\n");
 181		return 0;
 182	}
 183
 184	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "// Reset the HC");
 185	command = readl(&xhci->op_regs->command);
 186	command |= CMD_RESET;
 187	writel(command, &xhci->op_regs->command);
 188
 189	/* Existing Intel xHCI controllers require a delay of 1 mS,
 190	 * after setting the CMD_RESET bit, and before accessing any
 191	 * HC registers. This allows the HC to complete the
 192	 * reset operation and be ready for HC register access.
 193	 * Without this delay, the subsequent HC register access,
 194	 * may result in a system hang very rarely.
 195	 */
 196	if (xhci->quirks & XHCI_INTEL_HOST)
 197		udelay(1000);
 198
 199	ret = xhci_handshake(&xhci->op_regs->command,
 200			CMD_RESET, 0, 10 * 1000 * 1000);
 201	if (ret)
 202		return ret;
 203
 204	if (xhci->quirks & XHCI_ASMEDIA_MODIFY_FLOWCONTROL)
 205		usb_asmedia_modifyflowcontrol(to_pci_dev(xhci_to_hcd(xhci)->self.controller));
 206
 207	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 208			 "Wait for controller to be ready for doorbell rings");
 209	/*
 210	 * xHCI cannot write to any doorbells or operational registers other
 211	 * than status until the "Controller Not Ready" flag is cleared.
 212	 */
 213	ret = xhci_handshake(&xhci->op_regs->status,
 214			STS_CNR, 0, 10 * 1000 * 1000);
 215
 216	xhci->usb2_rhub.bus_state.port_c_suspend = 0;
 217	xhci->usb2_rhub.bus_state.suspended_ports = 0;
 218	xhci->usb2_rhub.bus_state.resuming_ports = 0;
 219	xhci->usb3_rhub.bus_state.port_c_suspend = 0;
 220	xhci->usb3_rhub.bus_state.suspended_ports = 0;
 221	xhci->usb3_rhub.bus_state.resuming_ports = 0;
 222
 223	return ret;
 224}
 225
 226static void xhci_zero_64b_regs(struct xhci_hcd *xhci)
 
 227{
 228	struct device *dev = xhci_to_hcd(xhci)->self.sysdev;
 229	int err, i;
 230	u64 val;
 231
 232	/*
 233	 * Some Renesas controllers get into a weird state if they are
 234	 * reset while programmed with 64bit addresses (they will preserve
 235	 * the top half of the address in internal, non visible
 236	 * registers). You end up with half the address coming from the
 237	 * kernel, and the other half coming from the firmware. Also,
 238	 * changing the programming leads to extra accesses even if the
 239	 * controller is supposed to be halted. The controller ends up with
 240	 * a fatal fault, and is then ripe for being properly reset.
 241	 *
 242	 * Special care is taken to only apply this if the device is behind
 243	 * an iommu. Doing anything when there is no iommu is definitely
 244	 * unsafe...
 245	 */
 246	if (!(xhci->quirks & XHCI_ZERO_64B_REGS) || !device_iommu_mapped(dev))
 247		return;
 248
 249	xhci_info(xhci, "Zeroing 64bit base registers, expecting fault\n");
 250
 251	/* Clear HSEIE so that faults do not get signaled */
 252	val = readl(&xhci->op_regs->command);
 253	val &= ~CMD_HSEIE;
 254	writel(val, &xhci->op_regs->command);
 255
 256	/* Clear HSE (aka FATAL) */
 257	val = readl(&xhci->op_regs->status);
 258	val |= STS_FATAL;
 259	writel(val, &xhci->op_regs->status);
 260
 261	/* Now zero the registers, and brace for impact */
 262	val = xhci_read_64(xhci, &xhci->op_regs->dcbaa_ptr);
 263	if (upper_32_bits(val))
 264		xhci_write_64(xhci, 0, &xhci->op_regs->dcbaa_ptr);
 265	val = xhci_read_64(xhci, &xhci->op_regs->cmd_ring);
 266	if (upper_32_bits(val))
 267		xhci_write_64(xhci, 0, &xhci->op_regs->cmd_ring);
 268
 269	for (i = 0; i < HCS_MAX_INTRS(xhci->hcs_params1); i++) {
 270		struct xhci_intr_reg __iomem *ir;
 271
 272		ir = &xhci->run_regs->ir_set[i];
 273		val = xhci_read_64(xhci, &ir->erst_base);
 274		if (upper_32_bits(val))
 275			xhci_write_64(xhci, 0, &ir->erst_base);
 276		val= xhci_read_64(xhci, &ir->erst_dequeue);
 277		if (upper_32_bits(val))
 278			xhci_write_64(xhci, 0, &ir->erst_dequeue);
 279	}
 280
 281	/* Wait for the fault to appear. It will be cleared on reset */
 282	err = xhci_handshake(&xhci->op_regs->status,
 283			     STS_FATAL, STS_FATAL,
 284			     XHCI_MAX_HALT_USEC);
 285	if (!err)
 286		xhci_info(xhci, "Fault detected\n");
 287}
 288
 289#ifdef CONFIG_USB_PCI
 290/*
 291 * Set up MSI
 292 */
 293static int xhci_setup_msi(struct xhci_hcd *xhci)
 294{
 295	int ret;
 296	/*
 297	 * TODO:Check with MSI Soc for sysdev
 298	 */
 299	struct pci_dev  *pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
 300
 301	ret = pci_alloc_irq_vectors(pdev, 1, 1, PCI_IRQ_MSI);
 302	if (ret < 0) {
 303		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 304				"failed to allocate MSI entry");
 305		return ret;
 306	}
 307
 308	ret = request_irq(pdev->irq, xhci_msi_irq,
 309				0, "xhci_hcd", xhci_to_hcd(xhci));
 310	if (ret) {
 311		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 312				"disable MSI interrupt");
 313		pci_free_irq_vectors(pdev);
 314	}
 315
 316	return ret;
 317}
 318
 319/*
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 320 * Set up MSI-X
 321 */
 322static int xhci_setup_msix(struct xhci_hcd *xhci)
 323{
 324	int i, ret = 0;
 325	struct usb_hcd *hcd = xhci_to_hcd(xhci);
 326	struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
 327
 328	/*
 329	 * calculate number of msi-x vectors supported.
 330	 * - HCS_MAX_INTRS: the max number of interrupts the host can handle,
 331	 *   with max number of interrupters based on the xhci HCSPARAMS1.
 332	 * - num_online_cpus: maximum msi-x vectors per CPUs core.
 333	 *   Add additional 1 vector to ensure always available interrupt.
 334	 */
 335	xhci->msix_count = min(num_online_cpus() + 1,
 336				HCS_MAX_INTRS(xhci->hcs_params1));
 337
 338	ret = pci_alloc_irq_vectors(pdev, xhci->msix_count, xhci->msix_count,
 339			PCI_IRQ_MSIX);
 340	if (ret < 0) {
 
 
 
 
 
 
 
 
 
 
 
 
 341		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 342				"Failed to enable MSI-X");
 343		return ret;
 344	}
 345
 346	for (i = 0; i < xhci->msix_count; i++) {
 347		ret = request_irq(pci_irq_vector(pdev, i), xhci_msi_irq, 0,
 348				"xhci_hcd", xhci_to_hcd(xhci));
 
 349		if (ret)
 350			goto disable_msix;
 351	}
 352
 353	hcd->msix_enabled = 1;
 354	return ret;
 355
 356disable_msix:
 357	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "disable MSI-X interrupt");
 358	while (--i >= 0)
 359		free_irq(pci_irq_vector(pdev, i), xhci_to_hcd(xhci));
 360	pci_free_irq_vectors(pdev);
 
 
 361	return ret;
 362}
 363
 364/* Free any IRQs and disable MSI-X */
 365static void xhci_cleanup_msix(struct xhci_hcd *xhci)
 366{
 367	struct usb_hcd *hcd = xhci_to_hcd(xhci);
 368	struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
 369
 370	if (xhci->quirks & XHCI_PLAT)
 371		return;
 372
 373	/* return if using legacy interrupt */
 374	if (hcd->irq > 0)
 375		return;
 376
 377	if (hcd->msix_enabled) {
 378		int i;
 379
 380		for (i = 0; i < xhci->msix_count; i++)
 381			free_irq(pci_irq_vector(pdev, i), xhci_to_hcd(xhci));
 
 
 382	} else {
 383		free_irq(pci_irq_vector(pdev, 0), xhci_to_hcd(xhci));
 384	}
 385
 386	pci_free_irq_vectors(pdev);
 387	hcd->msix_enabled = 0;
 
 388}
 389
 390static void __maybe_unused xhci_msix_sync_irqs(struct xhci_hcd *xhci)
 391{
 392	struct usb_hcd *hcd = xhci_to_hcd(xhci);
 393
 394	if (hcd->msix_enabled) {
 395		struct pci_dev *pdev = to_pci_dev(hcd->self.controller);
 396		int i;
 397
 
 398		for (i = 0; i < xhci->msix_count; i++)
 399			synchronize_irq(pci_irq_vector(pdev, i));
 400	}
 401}
 402
 403static int xhci_try_enable_msi(struct usb_hcd *hcd)
 404{
 405	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 406	struct pci_dev  *pdev;
 407	int ret;
 408
 409	/* The xhci platform device has set up IRQs through usb_add_hcd. */
 410	if (xhci->quirks & XHCI_PLAT)
 411		return 0;
 412
 413	pdev = to_pci_dev(xhci_to_hcd(xhci)->self.controller);
 414	/*
 415	 * Some Fresco Logic host controllers advertise MSI, but fail to
 416	 * generate interrupts.  Don't even try to enable MSI.
 417	 */
 418	if (xhci->quirks & XHCI_BROKEN_MSI)
 419		goto legacy_irq;
 420
 421	/* unregister the legacy interrupt */
 422	if (hcd->irq)
 423		free_irq(hcd->irq, hcd);
 424	hcd->irq = 0;
 425
 426	ret = xhci_setup_msix(xhci);
 427	if (ret)
 428		/* fall back to msi*/
 429		ret = xhci_setup_msi(xhci);
 430
 431	if (!ret) {
 432		hcd->msi_enabled = 1;
 433		return 0;
 434	}
 435
 436	if (!pdev->irq) {
 437		xhci_err(xhci, "No msi-x/msi found and no IRQ in BIOS\n");
 438		return -EINVAL;
 439	}
 440
 441 legacy_irq:
 442	if (!strlen(hcd->irq_descr))
 443		snprintf(hcd->irq_descr, sizeof(hcd->irq_descr), "%s:usb%d",
 444			 hcd->driver->description, hcd->self.busnum);
 445
 446	/* fall back to legacy interrupt*/
 447	ret = request_irq(pdev->irq, &usb_hcd_irq, IRQF_SHARED,
 448			hcd->irq_descr, hcd);
 449	if (ret) {
 450		xhci_err(xhci, "request interrupt %d failed\n",
 451				pdev->irq);
 452		return ret;
 453	}
 454	hcd->irq = pdev->irq;
 455	return 0;
 456}
 457
 458#else
 459
 460static inline int xhci_try_enable_msi(struct usb_hcd *hcd)
 461{
 462	return 0;
 463}
 464
 465static inline void xhci_cleanup_msix(struct xhci_hcd *xhci)
 466{
 467}
 468
 469static inline void xhci_msix_sync_irqs(struct xhci_hcd *xhci)
 470{
 471}
 472
 473#endif
 474
 475static void compliance_mode_recovery(struct timer_list *t)
 476{
 477	struct xhci_hcd *xhci;
 478	struct usb_hcd *hcd;
 479	struct xhci_hub *rhub;
 480	u32 temp;
 481	int i;
 482
 483	xhci = from_timer(xhci, t, comp_mode_recovery_timer);
 484	rhub = &xhci->usb3_rhub;
 485
 486	for (i = 0; i < rhub->num_ports; i++) {
 487		temp = readl(rhub->ports[i]->addr);
 488		if ((temp & PORT_PLS_MASK) == USB_SS_PORT_LS_COMP_MOD) {
 489			/*
 490			 * Compliance Mode Detected. Letting USB Core
 491			 * handle the Warm Reset
 492			 */
 493			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 494					"Compliance mode detected->port %d",
 495					i + 1);
 496			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 497					"Attempting compliance mode recovery");
 498			hcd = xhci->shared_hcd;
 499
 500			if (hcd->state == HC_STATE_SUSPENDED)
 501				usb_hcd_resume_root_hub(hcd);
 502
 503			usb_hcd_poll_rh_status(hcd);
 504		}
 505	}
 506
 507	if (xhci->port_status_u0 != ((1 << rhub->num_ports) - 1))
 508		mod_timer(&xhci->comp_mode_recovery_timer,
 509			jiffies + msecs_to_jiffies(COMP_MODE_RCVRY_MSECS));
 510}
 511
 512/*
 513 * Quirk to work around issue generated by the SN65LVPE502CP USB3.0 re-driver
 514 * that causes ports behind that hardware to enter compliance mode sometimes.
 515 * The quirk creates a timer that polls every 2 seconds the link state of
 516 * each host controller's port and recovers it by issuing a Warm reset
 517 * if Compliance mode is detected, otherwise the port will become "dead" (no
 518 * device connections or disconnections will be detected anymore). Becasue no
 519 * status event is generated when entering compliance mode (per xhci spec),
 520 * this quirk is needed on systems that have the failing hardware installed.
 521 */
 522static void compliance_mode_recovery_timer_init(struct xhci_hcd *xhci)
 523{
 524	xhci->port_status_u0 = 0;
 525	timer_setup(&xhci->comp_mode_recovery_timer, compliance_mode_recovery,
 526		    0);
 527	xhci->comp_mode_recovery_timer.expires = jiffies +
 528			msecs_to_jiffies(COMP_MODE_RCVRY_MSECS);
 529
 
 
 530	add_timer(&xhci->comp_mode_recovery_timer);
 531	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 532			"Compliance mode recovery timer initialized");
 533}
 534
 535/*
 536 * This function identifies the systems that have installed the SN65LVPE502CP
 537 * USB3.0 re-driver and that need the Compliance Mode Quirk.
 538 * Systems:
 539 * Vendor: Hewlett-Packard -> System Models: Z420, Z620 and Z820
 540 */
 541static bool xhci_compliance_mode_recovery_timer_quirk_check(void)
 542{
 543	const char *dmi_product_name, *dmi_sys_vendor;
 544
 545	dmi_product_name = dmi_get_system_info(DMI_PRODUCT_NAME);
 546	dmi_sys_vendor = dmi_get_system_info(DMI_SYS_VENDOR);
 547	if (!dmi_product_name || !dmi_sys_vendor)
 548		return false;
 549
 550	if (!(strstr(dmi_sys_vendor, "Hewlett-Packard")))
 551		return false;
 552
 553	if (strstr(dmi_product_name, "Z420") ||
 554			strstr(dmi_product_name, "Z620") ||
 555			strstr(dmi_product_name, "Z820") ||
 556			strstr(dmi_product_name, "Z1 Workstation"))
 557		return true;
 558
 559	return false;
 560}
 561
 562static int xhci_all_ports_seen_u0(struct xhci_hcd *xhci)
 563{
 564	return (xhci->port_status_u0 == ((1 << xhci->usb3_rhub.num_ports) - 1));
 565}
 566
 567
 568/*
 569 * Initialize memory for HCD and xHC (one-time init).
 570 *
 571 * Program the PAGESIZE register, initialize the device context array, create
 572 * device contexts (?), set up a command ring segment (or two?), create event
 573 * ring (one for now).
 574 */
 575static int xhci_init(struct usb_hcd *hcd)
 576{
 577	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 578	int retval = 0;
 579
 580	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "xhci_init");
 581	spin_lock_init(&xhci->lock);
 582	if (xhci->hci_version == 0x95 && link_quirk) {
 583		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 584				"QUIRK: Not clearing Link TRB chain bits.");
 585		xhci->quirks |= XHCI_LINK_TRB_QUIRK;
 586	} else {
 587		xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 588				"xHCI doesn't need link TRB QUIRK");
 589	}
 590	retval = xhci_mem_init(xhci, GFP_KERNEL);
 591	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "Finished xhci_init");
 592
 593	/* Initializing Compliance Mode Recovery Data If Needed */
 594	if (xhci_compliance_mode_recovery_timer_quirk_check()) {
 595		xhci->quirks |= XHCI_COMP_MODE_QUIRK;
 596		compliance_mode_recovery_timer_init(xhci);
 597	}
 598
 599	return retval;
 600}
 601
 602/*-------------------------------------------------------------------------*/
 603
 604
 605static int xhci_run_finished(struct xhci_hcd *xhci)
 606{
 607	if (xhci_start(xhci)) {
 608		xhci_halt(xhci);
 609		return -ENODEV;
 610	}
 611	xhci->shared_hcd->state = HC_STATE_RUNNING;
 612	xhci->cmd_ring_state = CMD_RING_STATE_RUNNING;
 613
 614	if (xhci->quirks & XHCI_NEC_HOST)
 615		xhci_ring_cmd_db(xhci);
 616
 617	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 618			"Finished xhci_run for USB3 roothub");
 619	return 0;
 620}
 621
 622/*
 623 * Start the HC after it was halted.
 624 *
 625 * This function is called by the USB core when the HC driver is added.
 626 * Its opposite is xhci_stop().
 627 *
 628 * xhci_init() must be called once before this function can be called.
 629 * Reset the HC, enable device slot contexts, program DCBAAP, and
 630 * set command ring pointer and event ring pointer.
 631 *
 632 * Setup MSI-X vectors and enable interrupts.
 633 */
 634int xhci_run(struct usb_hcd *hcd)
 635{
 636	u32 temp;
 637	u64 temp_64;
 638	int ret;
 639	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 640
 641	/* Start the xHCI host controller running only after the USB 2.0 roothub
 642	 * is setup.
 643	 */
 644
 645	hcd->uses_new_polling = 1;
 646	if (!usb_hcd_is_primary_hcd(hcd))
 647		return xhci_run_finished(xhci);
 648
 649	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "xhci_run");
 650
 651	ret = xhci_try_enable_msi(hcd);
 652	if (ret)
 653		return ret;
 654
 
 
 
 
 
 
 
 
 
 
 655	temp_64 = xhci_read_64(xhci, &xhci->ir_set->erst_dequeue);
 656	temp_64 &= ~ERST_PTR_MASK;
 657	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 658			"ERST deq = 64'h%0lx", (long unsigned int) temp_64);
 659
 660	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 661			"// Set the interrupt modulation register");
 662	temp = readl(&xhci->ir_set->irq_control);
 663	temp &= ~ER_IRQ_INTERVAL_MASK;
 664	temp |= (xhci->imod_interval / 250) & ER_IRQ_INTERVAL_MASK;
 
 
 
 
 665	writel(temp, &xhci->ir_set->irq_control);
 666
 667	/* Set the HCD state before we enable the irqs */
 668	temp = readl(&xhci->op_regs->command);
 669	temp |= (CMD_EIE);
 670	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 671			"// Enable interrupts, cmd = 0x%x.", temp);
 672	writel(temp, &xhci->op_regs->command);
 673
 674	temp = readl(&xhci->ir_set->irq_pending);
 675	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 676			"// Enabling event ring interrupter %p by writing 0x%x to irq_pending",
 677			xhci->ir_set, (unsigned int) ER_IRQ_ENABLE(temp));
 678	writel(ER_IRQ_ENABLE(temp), &xhci->ir_set->irq_pending);
 
 679
 680	if (xhci->quirks & XHCI_NEC_HOST) {
 681		struct xhci_command *command;
 682
 683		command = xhci_alloc_command(xhci, false, GFP_KERNEL);
 684		if (!command)
 685			return -ENOMEM;
 686
 687		ret = xhci_queue_vendor_command(xhci, command, 0, 0, 0,
 688				TRB_TYPE(TRB_NEC_GET_FW));
 689		if (ret)
 690			xhci_free_command(xhci, command);
 691	}
 692	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 693			"Finished xhci_run for USB2 roothub");
 694
 695	xhci_dbc_init(xhci);
 696
 697	xhci_debugfs_init(xhci);
 698
 699	return 0;
 700}
 701EXPORT_SYMBOL_GPL(xhci_run);
 702
 703/*
 704 * Stop xHCI driver.
 705 *
 706 * This function is called by the USB core when the HC driver is removed.
 707 * Its opposite is xhci_run().
 708 *
 709 * Disable device contexts, disable IRQs, and quiesce the HC.
 710 * Reset the HC, finish any completed transactions, and cleanup memory.
 711 */
 712static void xhci_stop(struct usb_hcd *hcd)
 713{
 714	u32 temp;
 715	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 716
 717	mutex_lock(&xhci->mutex);
 718
 719	/* Only halt host and free memory after both hcds are removed */
 720	if (!usb_hcd_is_primary_hcd(hcd)) {
 721		mutex_unlock(&xhci->mutex);
 722		return;
 723	}
 724
 725	xhci_dbc_exit(xhci);
 726
 
 727	spin_lock_irq(&xhci->lock);
 728	xhci->xhc_state |= XHCI_STATE_HALTED;
 729	xhci->cmd_ring_state = CMD_RING_STATE_STOPPED;
 
 
 
 
 730	xhci_halt(xhci);
 731	xhci_reset(xhci);
 732	spin_unlock_irq(&xhci->lock);
 733
 734	xhci_cleanup_msix(xhci);
 735
 736	/* Deleting Compliance Mode Recovery Timer */
 737	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
 738			(!(xhci_all_ports_seen_u0(xhci)))) {
 739		del_timer_sync(&xhci->comp_mode_recovery_timer);
 740		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
 741				"%s: compliance mode recovery timer deleted",
 742				__func__);
 743	}
 744
 745	if (xhci->quirks & XHCI_AMD_PLL_FIX)
 746		usb_amd_dev_put();
 747
 748	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 749			"// Disabling event ring interrupts");
 750	temp = readl(&xhci->op_regs->status);
 751	writel((temp & ~0x1fff) | STS_EINT, &xhci->op_regs->status);
 752	temp = readl(&xhci->ir_set->irq_pending);
 753	writel(ER_IRQ_DISABLE(temp), &xhci->ir_set->irq_pending);
 
 754
 755	xhci_dbg_trace(xhci, trace_xhci_dbg_init, "cleaning up memory");
 756	xhci_mem_cleanup(xhci);
 757	xhci_debugfs_exit(xhci);
 758	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 759			"xhci_stop completed - status = %x",
 760			readl(&xhci->op_regs->status));
 761	mutex_unlock(&xhci->mutex);
 762}
 763
 764/*
 765 * Shutdown HC (not bus-specific)
 766 *
 767 * This is called when the machine is rebooting or halting.  We assume that the
 768 * machine will be powered off, and the HC's internal state will be reset.
 769 * Don't bother to free memory.
 770 *
 771 * This will only ever be called with the main usb_hcd (the USB3 roothub).
 772 */
 773void xhci_shutdown(struct usb_hcd *hcd)
 774{
 775	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 776
 777	if (xhci->quirks & XHCI_SPURIOUS_REBOOT)
 778		usb_disable_xhci_ports(to_pci_dev(hcd->self.sysdev));
 779
 780	spin_lock_irq(&xhci->lock);
 781	xhci_halt(xhci);
 782	/* Workaround for spurious wakeups at shutdown with HSW */
 783	if (xhci->quirks & XHCI_SPURIOUS_WAKEUP)
 784		xhci_reset(xhci);
 785	spin_unlock_irq(&xhci->lock);
 786
 787	xhci_cleanup_msix(xhci);
 788
 789	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 790			"xhci_shutdown completed - status = %x",
 791			readl(&xhci->op_regs->status));
 
 
 
 
 792}
 793EXPORT_SYMBOL_GPL(xhci_shutdown);
 794
 795#ifdef CONFIG_PM
 796static void xhci_save_registers(struct xhci_hcd *xhci)
 797{
 798	xhci->s3.command = readl(&xhci->op_regs->command);
 799	xhci->s3.dev_nt = readl(&xhci->op_regs->dev_notification);
 800	xhci->s3.dcbaa_ptr = xhci_read_64(xhci, &xhci->op_regs->dcbaa_ptr);
 801	xhci->s3.config_reg = readl(&xhci->op_regs->config_reg);
 802	xhci->s3.erst_size = readl(&xhci->ir_set->erst_size);
 803	xhci->s3.erst_base = xhci_read_64(xhci, &xhci->ir_set->erst_base);
 804	xhci->s3.erst_dequeue = xhci_read_64(xhci, &xhci->ir_set->erst_dequeue);
 805	xhci->s3.irq_pending = readl(&xhci->ir_set->irq_pending);
 806	xhci->s3.irq_control = readl(&xhci->ir_set->irq_control);
 807}
 808
 809static void xhci_restore_registers(struct xhci_hcd *xhci)
 810{
 811	writel(xhci->s3.command, &xhci->op_regs->command);
 812	writel(xhci->s3.dev_nt, &xhci->op_regs->dev_notification);
 813	xhci_write_64(xhci, xhci->s3.dcbaa_ptr, &xhci->op_regs->dcbaa_ptr);
 814	writel(xhci->s3.config_reg, &xhci->op_regs->config_reg);
 815	writel(xhci->s3.erst_size, &xhci->ir_set->erst_size);
 816	xhci_write_64(xhci, xhci->s3.erst_base, &xhci->ir_set->erst_base);
 817	xhci_write_64(xhci, xhci->s3.erst_dequeue, &xhci->ir_set->erst_dequeue);
 818	writel(xhci->s3.irq_pending, &xhci->ir_set->irq_pending);
 819	writel(xhci->s3.irq_control, &xhci->ir_set->irq_control);
 820}
 821
 822static void xhci_set_cmd_ring_deq(struct xhci_hcd *xhci)
 823{
 824	u64	val_64;
 825
 826	/* step 2: initialize command ring buffer */
 827	val_64 = xhci_read_64(xhci, &xhci->op_regs->cmd_ring);
 828	val_64 = (val_64 & (u64) CMD_RING_RSVD_BITS) |
 829		(xhci_trb_virt_to_dma(xhci->cmd_ring->deq_seg,
 830				      xhci->cmd_ring->dequeue) &
 831		 (u64) ~CMD_RING_RSVD_BITS) |
 832		xhci->cmd_ring->cycle_state;
 833	xhci_dbg_trace(xhci, trace_xhci_dbg_init,
 834			"// Setting command ring address to 0x%llx",
 835			(long unsigned long) val_64);
 836	xhci_write_64(xhci, val_64, &xhci->op_regs->cmd_ring);
 837}
 838
 839/*
 840 * The whole command ring must be cleared to zero when we suspend the host.
 841 *
 842 * The host doesn't save the command ring pointer in the suspend well, so we
 843 * need to re-program it on resume.  Unfortunately, the pointer must be 64-byte
 844 * aligned, because of the reserved bits in the command ring dequeue pointer
 845 * register.  Therefore, we can't just set the dequeue pointer back in the
 846 * middle of the ring (TRBs are 16-byte aligned).
 847 */
 848static void xhci_clear_command_ring(struct xhci_hcd *xhci)
 849{
 850	struct xhci_ring *ring;
 851	struct xhci_segment *seg;
 852
 853	ring = xhci->cmd_ring;
 854	seg = ring->deq_seg;
 855	do {
 856		memset(seg->trbs, 0,
 857			sizeof(union xhci_trb) * (TRBS_PER_SEGMENT - 1));
 858		seg->trbs[TRBS_PER_SEGMENT - 1].link.control &=
 859			cpu_to_le32(~TRB_CYCLE);
 860		seg = seg->next;
 861	} while (seg != ring->deq_seg);
 862
 863	/* Reset the software enqueue and dequeue pointers */
 864	ring->deq_seg = ring->first_seg;
 865	ring->dequeue = ring->first_seg->trbs;
 866	ring->enq_seg = ring->deq_seg;
 867	ring->enqueue = ring->dequeue;
 868
 869	ring->num_trbs_free = ring->num_segs * (TRBS_PER_SEGMENT - 1) - 1;
 870	/*
 871	 * Ring is now zeroed, so the HW should look for change of ownership
 872	 * when the cycle bit is set to 1.
 873	 */
 874	ring->cycle_state = 1;
 875
 876	/*
 877	 * Reset the hardware dequeue pointer.
 878	 * Yes, this will need to be re-written after resume, but we're paranoid
 879	 * and want to make sure the hardware doesn't access bogus memory
 880	 * because, say, the BIOS or an SMI started the host without changing
 881	 * the command ring pointers.
 882	 */
 883	xhci_set_cmd_ring_deq(xhci);
 884}
 885
 886static void xhci_disable_port_wake_on_bits(struct xhci_hcd *xhci)
 887{
 888	struct xhci_port **ports;
 889	int port_index;
 
 890	unsigned long flags;
 891	u32 t1, t2, portsc;
 892
 893	spin_lock_irqsave(&xhci->lock, flags);
 894
 895	/* disable usb3 ports Wake bits */
 896	port_index = xhci->usb3_rhub.num_ports;
 897	ports = xhci->usb3_rhub.ports;
 898	while (port_index--) {
 899		t1 = readl(ports[port_index]->addr);
 900		portsc = t1;
 901		t1 = xhci_port_state_to_neutral(t1);
 902		t2 = t1 & ~PORT_WAKE_BITS;
 903		if (t1 != t2) {
 904			writel(t2, ports[port_index]->addr);
 905			xhci_dbg(xhci, "disable wake bits port %d-%d, portsc: 0x%x, write: 0x%x\n",
 906				 xhci->usb3_rhub.hcd->self.busnum,
 907				 port_index + 1, portsc, t2);
 908		}
 909	}
 910
 911	/* disable usb2 ports Wake bits */
 912	port_index = xhci->usb2_rhub.num_ports;
 913	ports = xhci->usb2_rhub.ports;
 914	while (port_index--) {
 915		t1 = readl(ports[port_index]->addr);
 916		portsc = t1;
 917		t1 = xhci_port_state_to_neutral(t1);
 918		t2 = t1 & ~PORT_WAKE_BITS;
 919		if (t1 != t2) {
 920			writel(t2, ports[port_index]->addr);
 921			xhci_dbg(xhci, "disable wake bits port %d-%d, portsc: 0x%x, write: 0x%x\n",
 922				 xhci->usb2_rhub.hcd->self.busnum,
 923				 port_index + 1, portsc, t2);
 924		}
 925	}
 
 926	spin_unlock_irqrestore(&xhci->lock, flags);
 927}
 928
 929static bool xhci_pending_portevent(struct xhci_hcd *xhci)
 930{
 931	struct xhci_port	**ports;
 932	int			port_index;
 933	u32			status;
 934	u32			portsc;
 935
 936	status = readl(&xhci->op_regs->status);
 937	if (status & STS_EINT)
 938		return true;
 939	/*
 940	 * Checking STS_EINT is not enough as there is a lag between a change
 941	 * bit being set and the Port Status Change Event that it generated
 942	 * being written to the Event Ring. See note in xhci 1.1 section 4.19.2.
 943	 */
 944
 945	port_index = xhci->usb2_rhub.num_ports;
 946	ports = xhci->usb2_rhub.ports;
 947	while (port_index--) {
 948		portsc = readl(ports[port_index]->addr);
 949		if (portsc & PORT_CHANGE_MASK ||
 950		    (portsc & PORT_PLS_MASK) == XDEV_RESUME)
 951			return true;
 952	}
 953	port_index = xhci->usb3_rhub.num_ports;
 954	ports = xhci->usb3_rhub.ports;
 955	while (port_index--) {
 956		portsc = readl(ports[port_index]->addr);
 957		if (portsc & PORT_CHANGE_MASK ||
 958		    (portsc & PORT_PLS_MASK) == XDEV_RESUME)
 959			return true;
 960	}
 961	return false;
 962}
 963
 964/*
 965 * Stop HC (not bus-specific)
 966 *
 967 * This is called when the machine transition into S3/S4 mode.
 968 *
 969 */
 970int xhci_suspend(struct xhci_hcd *xhci, bool do_wakeup)
 971{
 972	int			rc = 0;
 973	unsigned int		delay = XHCI_MAX_HALT_USEC * 2;
 974	struct usb_hcd		*hcd = xhci_to_hcd(xhci);
 975	u32			command;
 976	u32			res;
 977
 978	if (!hcd->state)
 979		return 0;
 980
 981	if (hcd->state != HC_STATE_SUSPENDED ||
 982			xhci->shared_hcd->state != HC_STATE_SUSPENDED)
 983		return -EINVAL;
 984
 985	xhci_dbc_suspend(xhci);
 986
 987	/* Clear root port wake on bits if wakeup not allowed. */
 988	if (!do_wakeup)
 989		xhci_disable_port_wake_on_bits(xhci);
 990
 991	/* Don't poll the roothubs on bus suspend. */
 992	xhci_dbg(xhci, "%s: stopping port polling.\n", __func__);
 993	clear_bit(HCD_FLAG_POLL_RH, &hcd->flags);
 994	del_timer_sync(&hcd->rh_timer);
 995	clear_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
 996	del_timer_sync(&xhci->shared_hcd->rh_timer);
 997
 998	if (xhci->quirks & XHCI_SUSPEND_DELAY)
 999		usleep_range(1000, 1500);
1000
1001	spin_lock_irq(&xhci->lock);
1002	clear_bit(HCD_FLAG_HW_ACCESSIBLE, &hcd->flags);
1003	clear_bit(HCD_FLAG_HW_ACCESSIBLE, &xhci->shared_hcd->flags);
1004	/* step 1: stop endpoint */
1005	/* skipped assuming that port suspend has done */
1006
1007	/* step 2: clear Run/Stop bit */
1008	command = readl(&xhci->op_regs->command);
1009	command &= ~CMD_RUN;
1010	writel(command, &xhci->op_regs->command);
1011
1012	/* Some chips from Fresco Logic need an extraordinary delay */
1013	delay *= (xhci->quirks & XHCI_SLOW_SUSPEND) ? 10 : 1;
1014
1015	if (xhci_handshake(&xhci->op_regs->status,
1016		      STS_HALT, STS_HALT, delay)) {
1017		xhci_warn(xhci, "WARN: xHC CMD_RUN timeout\n");
1018		spin_unlock_irq(&xhci->lock);
1019		return -ETIMEDOUT;
1020	}
1021	xhci_clear_command_ring(xhci);
1022
1023	/* step 3: save registers */
1024	xhci_save_registers(xhci);
1025
1026	/* step 4: set CSS flag */
1027	command = readl(&xhci->op_regs->command);
1028	command |= CMD_CSS;
1029	writel(command, &xhci->op_regs->command);
1030	xhci->broken_suspend = 0;
1031	if (xhci_handshake(&xhci->op_regs->status,
1032				STS_SAVE, 0, 20 * 1000)) {
1033	/*
1034	 * AMD SNPS xHC 3.0 occasionally does not clear the
1035	 * SSS bit of USBSTS and when driver tries to poll
1036	 * to see if the xHC clears BIT(8) which never happens
1037	 * and driver assumes that controller is not responding
1038	 * and times out. To workaround this, its good to check
1039	 * if SRE and HCE bits are not set (as per xhci
1040	 * Section 5.4.2) and bypass the timeout.
1041	 */
1042		res = readl(&xhci->op_regs->status);
1043		if ((xhci->quirks & XHCI_SNPS_BROKEN_SUSPEND) &&
1044		    (((res & STS_SRE) == 0) &&
1045				((res & STS_HCE) == 0))) {
1046			xhci->broken_suspend = 1;
1047		} else {
1048			xhci_warn(xhci, "WARN: xHC save state timeout\n");
1049			spin_unlock_irq(&xhci->lock);
1050			return -ETIMEDOUT;
1051		}
1052	}
1053	spin_unlock_irq(&xhci->lock);
1054
1055	/*
1056	 * Deleting Compliance Mode Recovery Timer because the xHCI Host
1057	 * is about to be suspended.
1058	 */
1059	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
1060			(!(xhci_all_ports_seen_u0(xhci)))) {
1061		del_timer_sync(&xhci->comp_mode_recovery_timer);
1062		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
1063				"%s: compliance mode recovery timer deleted",
1064				__func__);
1065	}
1066
1067	/* step 5: remove core well power */
1068	/* synchronize irq when using MSI-X */
1069	xhci_msix_sync_irqs(xhci);
1070
1071	return rc;
1072}
1073EXPORT_SYMBOL_GPL(xhci_suspend);
1074
1075/*
1076 * start xHC (not bus-specific)
1077 *
1078 * This is called when the machine transition from S3/S4 mode.
1079 *
1080 */
1081int xhci_resume(struct xhci_hcd *xhci, bool hibernated)
1082{
1083	u32			command, temp = 0;
1084	struct usb_hcd		*hcd = xhci_to_hcd(xhci);
1085	struct usb_hcd		*secondary_hcd;
1086	int			retval = 0;
1087	bool			comp_timer_running = false;
1088
1089	if (!hcd->state)
1090		return 0;
1091
1092	/* Wait a bit if either of the roothubs need to settle from the
1093	 * transition into bus suspend.
1094	 */
1095
1096	if (time_before(jiffies, xhci->usb2_rhub.bus_state.next_statechange) ||
1097	    time_before(jiffies, xhci->usb3_rhub.bus_state.next_statechange))
1098		msleep(100);
1099
1100	set_bit(HCD_FLAG_HW_ACCESSIBLE, &hcd->flags);
1101	set_bit(HCD_FLAG_HW_ACCESSIBLE, &xhci->shared_hcd->flags);
1102
1103	spin_lock_irq(&xhci->lock);
1104	if ((xhci->quirks & XHCI_RESET_ON_RESUME) || xhci->broken_suspend)
1105		hibernated = true;
1106
1107	if (!hibernated) {
1108		/*
1109		 * Some controllers might lose power during suspend, so wait
1110		 * for controller not ready bit to clear, just as in xHC init.
1111		 */
1112		retval = xhci_handshake(&xhci->op_regs->status,
1113					STS_CNR, 0, 10 * 1000 * 1000);
1114		if (retval) {
1115			xhci_warn(xhci, "Controller not ready at resume %d\n",
1116				  retval);
1117			spin_unlock_irq(&xhci->lock);
1118			return retval;
1119		}
1120		/* step 1: restore register */
1121		xhci_restore_registers(xhci);
1122		/* step 2: initialize command ring buffer */
1123		xhci_set_cmd_ring_deq(xhci);
1124		/* step 3: restore state and start state*/
1125		/* step 3: set CRS flag */
1126		command = readl(&xhci->op_regs->command);
1127		command |= CMD_CRS;
1128		writel(command, &xhci->op_regs->command);
1129		/*
1130		 * Some controllers take up to 55+ ms to complete the controller
1131		 * restore so setting the timeout to 100ms. Xhci specification
1132		 * doesn't mention any timeout value.
1133		 */
1134		if (xhci_handshake(&xhci->op_regs->status,
1135			      STS_RESTORE, 0, 100 * 1000)) {
1136			xhci_warn(xhci, "WARN: xHC restore state timeout\n");
1137			spin_unlock_irq(&xhci->lock);
1138			return -ETIMEDOUT;
1139		}
1140		temp = readl(&xhci->op_regs->status);
1141	}
1142
1143	/* If restore operation fails, re-initialize the HC during resume */
1144	if ((temp & STS_SRE) || hibernated) {
1145
1146		if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) &&
1147				!(xhci_all_ports_seen_u0(xhci))) {
1148			del_timer_sync(&xhci->comp_mode_recovery_timer);
1149			xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
1150				"Compliance Mode Recovery Timer deleted!");
1151		}
1152
1153		/* Let the USB core know _both_ roothubs lost power. */
1154		usb_root_hub_lost_power(xhci->main_hcd->self.root_hub);
1155		usb_root_hub_lost_power(xhci->shared_hcd->self.root_hub);
1156
1157		xhci_dbg(xhci, "Stop HCD\n");
1158		xhci_halt(xhci);
1159		xhci_zero_64b_regs(xhci);
1160		retval = xhci_reset(xhci);
1161		spin_unlock_irq(&xhci->lock);
1162		if (retval)
1163			return retval;
1164		xhci_cleanup_msix(xhci);
1165
1166		xhci_dbg(xhci, "// Disabling event ring interrupts\n");
1167		temp = readl(&xhci->op_regs->status);
1168		writel((temp & ~0x1fff) | STS_EINT, &xhci->op_regs->status);
1169		temp = readl(&xhci->ir_set->irq_pending);
1170		writel(ER_IRQ_DISABLE(temp), &xhci->ir_set->irq_pending);
 
1171
1172		xhci_dbg(xhci, "cleaning up memory\n");
1173		xhci_mem_cleanup(xhci);
1174		xhci_debugfs_exit(xhci);
1175		xhci_dbg(xhci, "xhci_stop completed - status = %x\n",
1176			    readl(&xhci->op_regs->status));
1177
1178		/* USB core calls the PCI reinit and start functions twice:
1179		 * first with the primary HCD, and then with the secondary HCD.
1180		 * If we don't do the same, the host will never be started.
1181		 */
1182		if (!usb_hcd_is_primary_hcd(hcd))
1183			secondary_hcd = hcd;
1184		else
1185			secondary_hcd = xhci->shared_hcd;
1186
1187		xhci_dbg(xhci, "Initialize the xhci_hcd\n");
1188		retval = xhci_init(hcd->primary_hcd);
1189		if (retval)
1190			return retval;
1191		comp_timer_running = true;
1192
1193		xhci_dbg(xhci, "Start the primary HCD\n");
1194		retval = xhci_run(hcd->primary_hcd);
1195		if (!retval) {
1196			xhci_dbg(xhci, "Start the secondary HCD\n");
1197			retval = xhci_run(secondary_hcd);
1198		}
1199		hcd->state = HC_STATE_SUSPENDED;
1200		xhci->shared_hcd->state = HC_STATE_SUSPENDED;
1201		goto done;
1202	}
1203
1204	/* step 4: set Run/Stop bit */
1205	command = readl(&xhci->op_regs->command);
1206	command |= CMD_RUN;
1207	writel(command, &xhci->op_regs->command);
1208	xhci_handshake(&xhci->op_regs->status, STS_HALT,
1209		  0, 250 * 1000);
1210
1211	/* step 5: walk topology and initialize portsc,
1212	 * portpmsc and portli
1213	 */
1214	/* this is done in bus_resume */
1215
1216	/* step 6: restart each of the previously
1217	 * Running endpoints by ringing their doorbells
1218	 */
1219
1220	spin_unlock_irq(&xhci->lock);
1221
1222	xhci_dbc_resume(xhci);
1223
1224 done:
1225	if (retval == 0) {
1226		/* Resume root hubs only when have pending events. */
1227		if (xhci_pending_portevent(xhci)) {
 
1228			usb_hcd_resume_root_hub(xhci->shared_hcd);
1229			usb_hcd_resume_root_hub(hcd);
1230		}
1231	}
1232
1233	/*
1234	 * If system is subject to the Quirk, Compliance Mode Timer needs to
1235	 * be re-initialized Always after a system resume. Ports are subject
1236	 * to suffer the Compliance Mode issue again. It doesn't matter if
1237	 * ports have entered previously to U0 before system's suspension.
1238	 */
1239	if ((xhci->quirks & XHCI_COMP_MODE_QUIRK) && !comp_timer_running)
1240		compliance_mode_recovery_timer_init(xhci);
1241
1242	if (xhci->quirks & XHCI_ASMEDIA_MODIFY_FLOWCONTROL)
1243		usb_asmedia_modifyflowcontrol(to_pci_dev(hcd->self.controller));
1244
1245	/* Re-enable port polling. */
1246	xhci_dbg(xhci, "%s: starting port polling.\n", __func__);
1247	set_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
1248	usb_hcd_poll_rh_status(xhci->shared_hcd);
1249	set_bit(HCD_FLAG_POLL_RH, &hcd->flags);
1250	usb_hcd_poll_rh_status(hcd);
1251
1252	return retval;
1253}
1254EXPORT_SYMBOL_GPL(xhci_resume);
1255#endif	/* CONFIG_PM */
1256
1257/*-------------------------------------------------------------------------*/
1258
1259/*
1260 * Bypass the DMA mapping if URB is suitable for Immediate Transfer (IDT),
1261 * we'll copy the actual data into the TRB address register. This is limited to
1262 * transfers up to 8 bytes on output endpoints of any kind with wMaxPacketSize
1263 * >= 8 bytes. If suitable for IDT only one Transfer TRB per TD is allowed.
1264 */
1265static int xhci_map_urb_for_dma(struct usb_hcd *hcd, struct urb *urb,
1266				gfp_t mem_flags)
1267{
1268	if (xhci_urb_suitable_for_idt(urb))
1269		return 0;
1270
1271	return usb_hcd_map_urb_for_dma(hcd, urb, mem_flags);
1272}
1273
1274/*
1275 * xhci_get_endpoint_index - Used for passing endpoint bitmasks between the core and
1276 * HCDs.  Find the index for an endpoint given its descriptor.  Use the return
1277 * value to right shift 1 for the bitmask.
1278 *
1279 * Index  = (epnum * 2) + direction - 1,
1280 * where direction = 0 for OUT, 1 for IN.
1281 * For control endpoints, the IN index is used (OUT index is unused), so
1282 * index = (epnum * 2) + direction - 1 = (epnum * 2) + 1 - 1 = (epnum * 2)
1283 */
1284unsigned int xhci_get_endpoint_index(struct usb_endpoint_descriptor *desc)
1285{
1286	unsigned int index;
1287	if (usb_endpoint_xfer_control(desc))
1288		index = (unsigned int) (usb_endpoint_num(desc)*2);
1289	else
1290		index = (unsigned int) (usb_endpoint_num(desc)*2) +
1291			(usb_endpoint_dir_in(desc) ? 1 : 0) - 1;
1292	return index;
1293}
1294
1295/* The reverse operation to xhci_get_endpoint_index. Calculate the USB endpoint
1296 * address from the XHCI endpoint index.
1297 */
1298unsigned int xhci_get_endpoint_address(unsigned int ep_index)
1299{
1300	unsigned int number = DIV_ROUND_UP(ep_index, 2);
1301	unsigned int direction = ep_index % 2 ? USB_DIR_OUT : USB_DIR_IN;
1302	return direction | number;
1303}
1304
1305/* Find the flag for this endpoint (for use in the control context).  Use the
1306 * endpoint index to create a bitmask.  The slot context is bit 0, endpoint 0 is
1307 * bit 1, etc.
1308 */
1309static unsigned int xhci_get_endpoint_flag(struct usb_endpoint_descriptor *desc)
1310{
1311	return 1 << (xhci_get_endpoint_index(desc) + 1);
1312}
1313
1314/* Find the flag for this endpoint (for use in the control context).  Use the
1315 * endpoint index to create a bitmask.  The slot context is bit 0, endpoint 0 is
1316 * bit 1, etc.
1317 */
1318static unsigned int xhci_get_endpoint_flag_from_index(unsigned int ep_index)
1319{
1320	return 1 << (ep_index + 1);
1321}
1322
1323/* Compute the last valid endpoint context index.  Basically, this is the
1324 * endpoint index plus one.  For slot contexts with more than valid endpoint,
1325 * we find the most significant bit set in the added contexts flags.
1326 * e.g. ep 1 IN (with epnum 0x81) => added_ctxs = 0b1000
1327 * fls(0b1000) = 4, but the endpoint context index is 3, so subtract one.
1328 */
1329unsigned int xhci_last_valid_endpoint(u32 added_ctxs)
1330{
1331	return fls(added_ctxs) - 1;
1332}
1333
1334/* Returns 1 if the arguments are OK;
1335 * returns 0 this is a root hub; returns -EINVAL for NULL pointers.
1336 */
1337static int xhci_check_args(struct usb_hcd *hcd, struct usb_device *udev,
1338		struct usb_host_endpoint *ep, int check_ep, bool check_virt_dev,
1339		const char *func) {
1340	struct xhci_hcd	*xhci;
1341	struct xhci_virt_device	*virt_dev;
1342
1343	if (!hcd || (check_ep && !ep) || !udev) {
1344		pr_debug("xHCI %s called with invalid args\n", func);
1345		return -EINVAL;
1346	}
1347	if (!udev->parent) {
1348		pr_debug("xHCI %s called for root hub\n", func);
1349		return 0;
1350	}
1351
1352	xhci = hcd_to_xhci(hcd);
1353	if (check_virt_dev) {
1354		if (!udev->slot_id || !xhci->devs[udev->slot_id]) {
1355			xhci_dbg(xhci, "xHCI %s called with unaddressed device\n",
1356					func);
1357			return -EINVAL;
1358		}
1359
1360		virt_dev = xhci->devs[udev->slot_id];
1361		if (virt_dev->udev != udev) {
1362			xhci_dbg(xhci, "xHCI %s called with udev and "
1363					  "virt_dev does not match\n", func);
1364			return -EINVAL;
1365		}
1366	}
1367
1368	if (xhci->xhc_state & XHCI_STATE_HALTED)
1369		return -ENODEV;
1370
1371	return 1;
1372}
1373
1374static int xhci_configure_endpoint(struct xhci_hcd *xhci,
1375		struct usb_device *udev, struct xhci_command *command,
1376		bool ctx_change, bool must_succeed);
1377
1378/*
1379 * Full speed devices may have a max packet size greater than 8 bytes, but the
1380 * USB core doesn't know that until it reads the first 8 bytes of the
1381 * descriptor.  If the usb_device's max packet size changes after that point,
1382 * we need to issue an evaluate context command and wait on it.
1383 */
1384static int xhci_check_maxpacket(struct xhci_hcd *xhci, unsigned int slot_id,
1385		unsigned int ep_index, struct urb *urb)
1386{
1387	struct xhci_container_ctx *out_ctx;
1388	struct xhci_input_control_ctx *ctrl_ctx;
1389	struct xhci_ep_ctx *ep_ctx;
1390	struct xhci_command *command;
1391	int max_packet_size;
1392	int hw_max_packet_size;
1393	int ret = 0;
1394
1395	out_ctx = xhci->devs[slot_id]->out_ctx;
1396	ep_ctx = xhci_get_ep_ctx(xhci, out_ctx, ep_index);
1397	hw_max_packet_size = MAX_PACKET_DECODED(le32_to_cpu(ep_ctx->ep_info2));
1398	max_packet_size = usb_endpoint_maxp(&urb->dev->ep0.desc);
1399	if (hw_max_packet_size != max_packet_size) {
1400		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1401				"Max Packet Size for ep 0 changed.");
1402		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1403				"Max packet size in usb_device = %d",
1404				max_packet_size);
1405		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1406				"Max packet size in xHCI HW = %d",
1407				hw_max_packet_size);
1408		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
1409				"Issuing evaluate context command.");
1410
1411		/* Set up the input context flags for the command */
1412		/* FIXME: This won't work if a non-default control endpoint
1413		 * changes max packet sizes.
1414		 */
1415
1416		command = xhci_alloc_command(xhci, true, GFP_KERNEL);
1417		if (!command)
1418			return -ENOMEM;
1419
1420		command->in_ctx = xhci->devs[slot_id]->in_ctx;
1421		ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
1422		if (!ctrl_ctx) {
1423			xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1424					__func__);
1425			ret = -ENOMEM;
1426			goto command_cleanup;
1427		}
1428		/* Set up the modified control endpoint 0 */
1429		xhci_endpoint_copy(xhci, xhci->devs[slot_id]->in_ctx,
1430				xhci->devs[slot_id]->out_ctx, ep_index);
1431
1432		ep_ctx = xhci_get_ep_ctx(xhci, command->in_ctx, ep_index);
1433		ep_ctx->ep_info &= cpu_to_le32(~EP_STATE_MASK);/* must clear */
1434		ep_ctx->ep_info2 &= cpu_to_le32(~MAX_PACKET_MASK);
1435		ep_ctx->ep_info2 |= cpu_to_le32(MAX_PACKET(max_packet_size));
1436
1437		ctrl_ctx->add_flags = cpu_to_le32(EP0_FLAG);
1438		ctrl_ctx->drop_flags = 0;
1439
 
 
 
 
 
1440		ret = xhci_configure_endpoint(xhci, urb->dev, command,
1441				true, false);
1442
1443		/* Clean up the input context for later use by bandwidth
1444		 * functions.
1445		 */
1446		ctrl_ctx->add_flags = cpu_to_le32(SLOT_FLAG);
1447command_cleanup:
1448		kfree(command->completion);
1449		kfree(command);
1450	}
1451	return ret;
1452}
1453
1454/*
1455 * non-error returns are a promise to giveback() the urb later
1456 * we drop ownership so next owner (or urb unlink) can get it
1457 */
1458static int xhci_urb_enqueue(struct usb_hcd *hcd, struct urb *urb, gfp_t mem_flags)
1459{
1460	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
 
1461	unsigned long flags;
1462	int ret = 0;
1463	unsigned int slot_id, ep_index;
1464	unsigned int *ep_state;
1465	struct urb_priv	*urb_priv;
1466	int num_tds;
1467
1468	if (!urb || xhci_check_args(hcd, urb->dev, urb->ep,
1469					true, true, __func__) <= 0)
1470		return -EINVAL;
1471
1472	slot_id = urb->dev->slot_id;
1473	ep_index = xhci_get_endpoint_index(&urb->ep->desc);
1474	ep_state = &xhci->devs[slot_id]->eps[ep_index].ep_state;
1475
1476	if (!HCD_HW_ACCESSIBLE(hcd)) {
1477		if (!in_interrupt())
1478			xhci_dbg(xhci, "urb submitted during PCI suspend\n");
1479		return -ESHUTDOWN;
1480	}
1481	if (xhci->devs[slot_id]->flags & VDEV_PORT_ERROR) {
1482		xhci_dbg(xhci, "Can't queue urb, port error, link inactive\n");
1483		return -ENODEV;
1484	}
1485
1486	if (usb_endpoint_xfer_isoc(&urb->ep->desc))
1487		num_tds = urb->number_of_packets;
1488	else if (usb_endpoint_is_bulk_out(&urb->ep->desc) &&
1489	    urb->transfer_buffer_length > 0 &&
1490	    urb->transfer_flags & URB_ZERO_PACKET &&
1491	    !(urb->transfer_buffer_length % usb_endpoint_maxp(&urb->ep->desc)))
1492		num_tds = 2;
1493	else
1494		num_tds = 1;
1495
1496	urb_priv = kzalloc(struct_size(urb_priv, td, num_tds), mem_flags);
 
1497	if (!urb_priv)
1498		return -ENOMEM;
1499
1500	urb_priv->num_tds = num_tds;
1501	urb_priv->num_tds_done = 0;
 
 
 
 
 
 
 
 
 
 
 
1502	urb->hcpriv = urb_priv;
1503
1504	trace_xhci_urb_enqueue(urb);
1505
1506	if (usb_endpoint_xfer_control(&urb->ep->desc)) {
1507		/* Check to see if the max packet size for the default control
1508		 * endpoint changed during FS device enumeration
1509		 */
1510		if (urb->dev->speed == USB_SPEED_FULL) {
1511			ret = xhci_check_maxpacket(xhci, slot_id,
1512					ep_index, urb);
1513			if (ret < 0) {
1514				xhci_urb_free_priv(urb_priv);
1515				urb->hcpriv = NULL;
1516				return ret;
1517			}
1518		}
1519	}
1520
1521	spin_lock_irqsave(&xhci->lock, flags);
1522
1523	if (xhci->xhc_state & XHCI_STATE_DYING) {
1524		xhci_dbg(xhci, "Ep 0x%x: URB %p submitted for non-responsive xHCI host.\n",
1525			 urb->ep->desc.bEndpointAddress, urb);
1526		ret = -ESHUTDOWN;
1527		goto free_priv;
1528	}
1529	if (*ep_state & (EP_GETTING_STREAMS | EP_GETTING_NO_STREAMS)) {
1530		xhci_warn(xhci, "WARN: Can't enqueue URB, ep in streams transition state %x\n",
1531			  *ep_state);
1532		ret = -EINVAL;
1533		goto free_priv;
1534	}
1535	if (*ep_state & EP_SOFT_CLEAR_TOGGLE) {
1536		xhci_warn(xhci, "Can't enqueue URB while manually clearing toggle\n");
1537		ret = -EINVAL;
1538		goto free_priv;
1539	}
1540
1541	switch (usb_endpoint_type(&urb->ep->desc)) {
1542
1543	case USB_ENDPOINT_XFER_CONTROL:
1544		ret = xhci_queue_ctrl_tx(xhci, GFP_ATOMIC, urb,
1545					 slot_id, ep_index);
1546		break;
1547	case USB_ENDPOINT_XFER_BULK:
1548		ret = xhci_queue_bulk_tx(xhci, GFP_ATOMIC, urb,
1549					 slot_id, ep_index);
1550		break;
1551	case USB_ENDPOINT_XFER_INT:
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1552		ret = xhci_queue_intr_tx(xhci, GFP_ATOMIC, urb,
1553				slot_id, ep_index);
1554		break;
1555	case USB_ENDPOINT_XFER_ISOC:
 
 
 
 
 
1556		ret = xhci_queue_isoc_tx_prepare(xhci, GFP_ATOMIC, urb,
1557				slot_id, ep_index);
 
 
 
1558	}
1559
1560	if (ret) {
 
 
 
 
 
1561free_priv:
1562		xhci_urb_free_priv(urb_priv);
1563		urb->hcpriv = NULL;
1564	}
1565	spin_unlock_irqrestore(&xhci->lock, flags);
1566	return ret;
1567}
1568
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1569/*
1570 * Remove the URB's TD from the endpoint ring.  This may cause the HC to stop
1571 * USB transfers, potentially stopping in the middle of a TRB buffer.  The HC
1572 * should pick up where it left off in the TD, unless a Set Transfer Ring
1573 * Dequeue Pointer is issued.
1574 *
1575 * The TRBs that make up the buffers for the canceled URB will be "removed" from
1576 * the ring.  Since the ring is a contiguous structure, they can't be physically
1577 * removed.  Instead, there are two options:
1578 *
1579 *  1) If the HC is in the middle of processing the URB to be canceled, we
1580 *     simply move the ring's dequeue pointer past those TRBs using the Set
1581 *     Transfer Ring Dequeue Pointer command.  This will be the common case,
1582 *     when drivers timeout on the last submitted URB and attempt to cancel.
1583 *
1584 *  2) If the HC is in the middle of a different TD, we turn the TRBs into a
1585 *     series of 1-TRB transfer no-op TDs.  (No-ops shouldn't be chained.)  The
1586 *     HC will need to invalidate the any TRBs it has cached after the stop
1587 *     endpoint command, as noted in the xHCI 0.95 errata.
1588 *
1589 *  3) The TD may have completed by the time the Stop Endpoint Command
1590 *     completes, so software needs to handle that case too.
1591 *
1592 * This function should protect against the TD enqueueing code ringing the
1593 * doorbell while this code is waiting for a Stop Endpoint command to complete.
1594 * It also needs to account for multiple cancellations on happening at the same
1595 * time for the same endpoint.
1596 *
1597 * Note that this function can be called in any context, or so says
1598 * usb_hcd_unlink_urb()
1599 */
1600static int xhci_urb_dequeue(struct usb_hcd *hcd, struct urb *urb, int status)
1601{
1602	unsigned long flags;
1603	int ret, i;
1604	u32 temp;
1605	struct xhci_hcd *xhci;
1606	struct urb_priv	*urb_priv;
1607	struct xhci_td *td;
1608	unsigned int ep_index;
1609	struct xhci_ring *ep_ring;
1610	struct xhci_virt_ep *ep;
1611	struct xhci_command *command;
1612	struct xhci_virt_device *vdev;
1613
1614	xhci = hcd_to_xhci(hcd);
1615	spin_lock_irqsave(&xhci->lock, flags);
1616
1617	trace_xhci_urb_dequeue(urb);
1618
1619	/* Make sure the URB hasn't completed or been unlinked already */
1620	ret = usb_hcd_check_unlink_urb(hcd, urb, status);
1621	if (ret)
1622		goto done;
1623
1624	/* give back URB now if we can't queue it for cancel */
1625	vdev = xhci->devs[urb->dev->slot_id];
1626	urb_priv = urb->hcpriv;
1627	if (!vdev || !urb_priv)
1628		goto err_giveback;
1629
1630	ep_index = xhci_get_endpoint_index(&urb->ep->desc);
1631	ep = &vdev->eps[ep_index];
1632	ep_ring = xhci_urb_to_transfer_ring(xhci, urb);
1633	if (!ep || !ep_ring)
1634		goto err_giveback;
1635
1636	/* If xHC is dead take it down and return ALL URBs in xhci_hc_died() */
1637	temp = readl(&xhci->op_regs->status);
1638	if (temp == ~(u32)0 || xhci->xhc_state & XHCI_STATE_DYING) {
1639		xhci_hc_died(xhci);
1640		goto done;
1641	}
1642
1643	/*
1644	 * check ring is not re-allocated since URB was enqueued. If it is, then
1645	 * make sure none of the ring related pointers in this URB private data
1646	 * are touched, such as td_list, otherwise we overwrite freed data
1647	 */
1648	if (!td_on_ring(&urb_priv->td[0], ep_ring)) {
1649		xhci_err(xhci, "Canceled URB td not found on endpoint ring");
1650		for (i = urb_priv->num_tds_done; i < urb_priv->num_tds; i++) {
1651			td = &urb_priv->td[i];
1652			if (!list_empty(&td->cancelled_td_list))
1653				list_del_init(&td->cancelled_td_list);
1654		}
1655		goto err_giveback;
1656	}
1657
1658	if (xhci->xhc_state & XHCI_STATE_HALTED) {
1659		xhci_dbg_trace(xhci, trace_xhci_dbg_cancel_urb,
1660				"HC halted, freeing TD manually.");
1661		for (i = urb_priv->num_tds_done;
1662		     i < urb_priv->num_tds;
 
1663		     i++) {
1664			td = &urb_priv->td[i];
1665			if (!list_empty(&td->td_list))
1666				list_del_init(&td->td_list);
1667			if (!list_empty(&td->cancelled_td_list))
1668				list_del_init(&td->cancelled_td_list);
1669		}
1670		goto err_giveback;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1671	}
1672
1673	i = urb_priv->num_tds_done;
1674	if (i < urb_priv->num_tds)
 
 
 
 
 
 
 
 
 
1675		xhci_dbg_trace(xhci, trace_xhci_dbg_cancel_urb,
1676				"Cancel URB %p, dev %s, ep 0x%x, "
1677				"starting at offset 0x%llx",
1678				urb, urb->dev->devpath,
1679				urb->ep->desc.bEndpointAddress,
1680				(unsigned long long) xhci_trb_virt_to_dma(
1681					urb_priv->td[i].start_seg,
1682					urb_priv->td[i].first_trb));
1683
1684	for (; i < urb_priv->num_tds; i++) {
1685		td = &urb_priv->td[i];
1686		list_add_tail(&td->cancelled_td_list, &ep->cancelled_td_list);
1687	}
1688
1689	/* Queue a stop endpoint command, but only if this is
1690	 * the first cancellation to be handled.
1691	 */
1692	if (!(ep->ep_state & EP_STOP_CMD_PENDING)) {
1693		command = xhci_alloc_command(xhci, false, GFP_ATOMIC);
1694		if (!command) {
1695			ret = -ENOMEM;
1696			goto done;
1697		}
1698		ep->ep_state |= EP_STOP_CMD_PENDING;
 
1699		ep->stop_cmd_timer.expires = jiffies +
1700			XHCI_STOP_EP_CMD_TIMEOUT * HZ;
1701		add_timer(&ep->stop_cmd_timer);
1702		xhci_queue_stop_endpoint(xhci, command, urb->dev->slot_id,
1703					 ep_index, 0);
1704		xhci_ring_cmd_db(xhci);
1705	}
1706done:
1707	spin_unlock_irqrestore(&xhci->lock, flags);
1708	return ret;
1709
1710err_giveback:
1711	if (urb_priv)
1712		xhci_urb_free_priv(urb_priv);
1713	usb_hcd_unlink_urb_from_ep(hcd, urb);
1714	spin_unlock_irqrestore(&xhci->lock, flags);
1715	usb_hcd_giveback_urb(hcd, urb, -ESHUTDOWN);
1716	return ret;
1717}
1718
1719/* Drop an endpoint from a new bandwidth configuration for this device.
1720 * Only one call to this function is allowed per endpoint before
1721 * check_bandwidth() or reset_bandwidth() must be called.
1722 * A call to xhci_drop_endpoint() followed by a call to xhci_add_endpoint() will
1723 * add the endpoint to the schedule with possibly new parameters denoted by a
1724 * different endpoint descriptor in usb_host_endpoint.
1725 * A call to xhci_add_endpoint() followed by a call to xhci_drop_endpoint() is
1726 * not allowed.
1727 *
1728 * The USB core will not allow URBs to be queued to an endpoint that is being
1729 * disabled, so there's no need for mutual exclusion to protect
1730 * the xhci->devs[slot_id] structure.
1731 */
1732static int xhci_drop_endpoint(struct usb_hcd *hcd, struct usb_device *udev,
1733		struct usb_host_endpoint *ep)
1734{
1735	struct xhci_hcd *xhci;
1736	struct xhci_container_ctx *in_ctx, *out_ctx;
1737	struct xhci_input_control_ctx *ctrl_ctx;
1738	unsigned int ep_index;
1739	struct xhci_ep_ctx *ep_ctx;
1740	u32 drop_flag;
1741	u32 new_add_flags, new_drop_flags;
1742	int ret;
1743
1744	ret = xhci_check_args(hcd, udev, ep, 1, true, __func__);
1745	if (ret <= 0)
1746		return ret;
1747	xhci = hcd_to_xhci(hcd);
1748	if (xhci->xhc_state & XHCI_STATE_DYING)
1749		return -ENODEV;
1750
1751	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
1752	drop_flag = xhci_get_endpoint_flag(&ep->desc);
1753	if (drop_flag == SLOT_FLAG || drop_flag == EP0_FLAG) {
1754		xhci_dbg(xhci, "xHCI %s - can't drop slot or ep 0 %#x\n",
1755				__func__, drop_flag);
1756		return 0;
1757	}
1758
1759	in_ctx = xhci->devs[udev->slot_id]->in_ctx;
1760	out_ctx = xhci->devs[udev->slot_id]->out_ctx;
1761	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
1762	if (!ctrl_ctx) {
1763		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1764				__func__);
1765		return 0;
1766	}
1767
1768	ep_index = xhci_get_endpoint_index(&ep->desc);
1769	ep_ctx = xhci_get_ep_ctx(xhci, out_ctx, ep_index);
1770	/* If the HC already knows the endpoint is disabled,
1771	 * or the HCD has noted it is disabled, ignore this request
1772	 */
1773	if ((GET_EP_CTX_STATE(ep_ctx) == EP_STATE_DISABLED) ||
 
1774	    le32_to_cpu(ctrl_ctx->drop_flags) &
1775	    xhci_get_endpoint_flag(&ep->desc)) {
1776		/* Do not warn when called after a usb_device_reset */
1777		if (xhci->devs[udev->slot_id]->eps[ep_index].ring != NULL)
1778			xhci_warn(xhci, "xHCI %s called with disabled ep %p\n",
1779				  __func__, ep);
1780		return 0;
1781	}
1782
1783	ctrl_ctx->drop_flags |= cpu_to_le32(drop_flag);
1784	new_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags);
1785
1786	ctrl_ctx->add_flags &= cpu_to_le32(~drop_flag);
1787	new_add_flags = le32_to_cpu(ctrl_ctx->add_flags);
1788
1789	xhci_debugfs_remove_endpoint(xhci, xhci->devs[udev->slot_id], ep_index);
1790
1791	xhci_endpoint_zero(xhci, xhci->devs[udev->slot_id], ep);
1792
1793	if (xhci->quirks & XHCI_MTK_HOST)
1794		xhci_mtk_drop_ep_quirk(hcd, udev, ep);
1795
1796	xhci_dbg(xhci, "drop ep 0x%x, slot id %d, new drop flags = %#x, new add flags = %#x\n",
1797			(unsigned int) ep->desc.bEndpointAddress,
1798			udev->slot_id,
1799			(unsigned int) new_drop_flags,
1800			(unsigned int) new_add_flags);
1801	return 0;
1802}
1803
1804/* Add an endpoint to a new possible bandwidth configuration for this device.
1805 * Only one call to this function is allowed per endpoint before
1806 * check_bandwidth() or reset_bandwidth() must be called.
1807 * A call to xhci_drop_endpoint() followed by a call to xhci_add_endpoint() will
1808 * add the endpoint to the schedule with possibly new parameters denoted by a
1809 * different endpoint descriptor in usb_host_endpoint.
1810 * A call to xhci_add_endpoint() followed by a call to xhci_drop_endpoint() is
1811 * not allowed.
1812 *
1813 * The USB core will not allow URBs to be queued to an endpoint until the
1814 * configuration or alt setting is installed in the device, so there's no need
1815 * for mutual exclusion to protect the xhci->devs[slot_id] structure.
1816 */
1817static int xhci_add_endpoint(struct usb_hcd *hcd, struct usb_device *udev,
1818		struct usb_host_endpoint *ep)
1819{
1820	struct xhci_hcd *xhci;
1821	struct xhci_container_ctx *in_ctx;
1822	unsigned int ep_index;
1823	struct xhci_input_control_ctx *ctrl_ctx;
1824	struct xhci_ep_ctx *ep_ctx;
1825	u32 added_ctxs;
1826	u32 new_add_flags, new_drop_flags;
1827	struct xhci_virt_device *virt_dev;
1828	int ret = 0;
1829
1830	ret = xhci_check_args(hcd, udev, ep, 1, true, __func__);
1831	if (ret <= 0) {
1832		/* So we won't queue a reset ep command for a root hub */
1833		ep->hcpriv = NULL;
1834		return ret;
1835	}
1836	xhci = hcd_to_xhci(hcd);
1837	if (xhci->xhc_state & XHCI_STATE_DYING)
1838		return -ENODEV;
1839
1840	added_ctxs = xhci_get_endpoint_flag(&ep->desc);
1841	if (added_ctxs == SLOT_FLAG || added_ctxs == EP0_FLAG) {
1842		/* FIXME when we have to issue an evaluate endpoint command to
1843		 * deal with ep0 max packet size changing once we get the
1844		 * descriptors
1845		 */
1846		xhci_dbg(xhci, "xHCI %s - can't add slot or ep 0 %#x\n",
1847				__func__, added_ctxs);
1848		return 0;
1849	}
1850
1851	virt_dev = xhci->devs[udev->slot_id];
1852	in_ctx = virt_dev->in_ctx;
1853	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
1854	if (!ctrl_ctx) {
1855		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1856				__func__);
1857		return 0;
1858	}
1859
1860	ep_index = xhci_get_endpoint_index(&ep->desc);
1861	/* If this endpoint is already in use, and the upper layers are trying
1862	 * to add it again without dropping it, reject the addition.
1863	 */
1864	if (virt_dev->eps[ep_index].ring &&
1865			!(le32_to_cpu(ctrl_ctx->drop_flags) & added_ctxs)) {
1866		xhci_warn(xhci, "Trying to add endpoint 0x%x "
1867				"without dropping it.\n",
1868				(unsigned int) ep->desc.bEndpointAddress);
1869		return -EINVAL;
1870	}
1871
1872	/* If the HCD has already noted the endpoint is enabled,
1873	 * ignore this request.
1874	 */
1875	if (le32_to_cpu(ctrl_ctx->add_flags) & added_ctxs) {
1876		xhci_warn(xhci, "xHCI %s called with enabled ep %p\n",
1877				__func__, ep);
1878		return 0;
1879	}
1880
1881	/*
1882	 * Configuration and alternate setting changes must be done in
1883	 * process context, not interrupt context (or so documenation
1884	 * for usb_set_interface() and usb_set_configuration() claim).
1885	 */
1886	if (xhci_endpoint_init(xhci, virt_dev, udev, ep, GFP_NOIO) < 0) {
1887		dev_dbg(&udev->dev, "%s - could not initialize ep %#x\n",
1888				__func__, ep->desc.bEndpointAddress);
1889		return -ENOMEM;
1890	}
1891
1892	if (xhci->quirks & XHCI_MTK_HOST) {
1893		ret = xhci_mtk_add_ep_quirk(hcd, udev, ep);
1894		if (ret < 0) {
1895			xhci_ring_free(xhci, virt_dev->eps[ep_index].new_ring);
1896			virt_dev->eps[ep_index].new_ring = NULL;
1897			return ret;
1898		}
1899	}
1900
1901	ctrl_ctx->add_flags |= cpu_to_le32(added_ctxs);
1902	new_add_flags = le32_to_cpu(ctrl_ctx->add_flags);
1903
1904	/* If xhci_endpoint_disable() was called for this endpoint, but the
1905	 * xHC hasn't been notified yet through the check_bandwidth() call,
1906	 * this re-adds a new state for the endpoint from the new endpoint
1907	 * descriptors.  We must drop and re-add this endpoint, so we leave the
1908	 * drop flags alone.
1909	 */
1910	new_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags);
1911
1912	/* Store the usb_device pointer for later use */
1913	ep->hcpriv = udev;
1914
1915	ep_ctx = xhci_get_ep_ctx(xhci, virt_dev->in_ctx, ep_index);
1916	trace_xhci_add_endpoint(ep_ctx);
1917
1918	xhci_debugfs_create_endpoint(xhci, virt_dev, ep_index);
1919
1920	xhci_dbg(xhci, "add ep 0x%x, slot id %d, new drop flags = %#x, new add flags = %#x\n",
1921			(unsigned int) ep->desc.bEndpointAddress,
1922			udev->slot_id,
1923			(unsigned int) new_drop_flags,
1924			(unsigned int) new_add_flags);
1925	return 0;
1926}
1927
1928static void xhci_zero_in_ctx(struct xhci_hcd *xhci, struct xhci_virt_device *virt_dev)
1929{
1930	struct xhci_input_control_ctx *ctrl_ctx;
1931	struct xhci_ep_ctx *ep_ctx;
1932	struct xhci_slot_ctx *slot_ctx;
1933	int i;
1934
1935	ctrl_ctx = xhci_get_input_control_ctx(virt_dev->in_ctx);
1936	if (!ctrl_ctx) {
1937		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
1938				__func__);
1939		return;
1940	}
1941
1942	/* When a device's add flag and drop flag are zero, any subsequent
1943	 * configure endpoint command will leave that endpoint's state
1944	 * untouched.  Make sure we don't leave any old state in the input
1945	 * endpoint contexts.
1946	 */
1947	ctrl_ctx->drop_flags = 0;
1948	ctrl_ctx->add_flags = 0;
1949	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
1950	slot_ctx->dev_info &= cpu_to_le32(~LAST_CTX_MASK);
1951	/* Endpoint 0 is always valid */
1952	slot_ctx->dev_info |= cpu_to_le32(LAST_CTX(1));
1953	for (i = 1; i < 31; i++) {
1954		ep_ctx = xhci_get_ep_ctx(xhci, virt_dev->in_ctx, i);
1955		ep_ctx->ep_info = 0;
1956		ep_ctx->ep_info2 = 0;
1957		ep_ctx->deq = 0;
1958		ep_ctx->tx_info = 0;
1959	}
1960}
1961
1962static int xhci_configure_endpoint_result(struct xhci_hcd *xhci,
1963		struct usb_device *udev, u32 *cmd_status)
1964{
1965	int ret;
1966
1967	switch (*cmd_status) {
1968	case COMP_COMMAND_ABORTED:
1969	case COMP_COMMAND_RING_STOPPED:
1970		xhci_warn(xhci, "Timeout while waiting for configure endpoint command\n");
1971		ret = -ETIME;
1972		break;
1973	case COMP_RESOURCE_ERROR:
1974		dev_warn(&udev->dev,
1975			 "Not enough host controller resources for new device state.\n");
1976		ret = -ENOMEM;
1977		/* FIXME: can we allocate more resources for the HC? */
1978		break;
1979	case COMP_BANDWIDTH_ERROR:
1980	case COMP_SECONDARY_BANDWIDTH_ERROR:
1981		dev_warn(&udev->dev,
1982			 "Not enough bandwidth for new device state.\n");
1983		ret = -ENOSPC;
1984		/* FIXME: can we go back to the old state? */
1985		break;
1986	case COMP_TRB_ERROR:
1987		/* the HCD set up something wrong */
1988		dev_warn(&udev->dev, "ERROR: Endpoint drop flag = 0, "
1989				"add flag = 1, "
1990				"and endpoint is not disabled.\n");
1991		ret = -EINVAL;
1992		break;
1993	case COMP_INCOMPATIBLE_DEVICE_ERROR:
1994		dev_warn(&udev->dev,
1995			 "ERROR: Incompatible device for endpoint configure command.\n");
1996		ret = -ENODEV;
1997		break;
1998	case COMP_SUCCESS:
1999		xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
2000				"Successful Endpoint Configure command");
2001		ret = 0;
2002		break;
2003	default:
2004		xhci_err(xhci, "ERROR: unexpected command completion code 0x%x.\n",
2005				*cmd_status);
2006		ret = -EINVAL;
2007		break;
2008	}
2009	return ret;
2010}
2011
2012static int xhci_evaluate_context_result(struct xhci_hcd *xhci,
2013		struct usb_device *udev, u32 *cmd_status)
2014{
2015	int ret;
 
2016
2017	switch (*cmd_status) {
2018	case COMP_COMMAND_ABORTED:
2019	case COMP_COMMAND_RING_STOPPED:
2020		xhci_warn(xhci, "Timeout while waiting for evaluate context command\n");
2021		ret = -ETIME;
2022		break;
2023	case COMP_PARAMETER_ERROR:
2024		dev_warn(&udev->dev,
2025			 "WARN: xHCI driver setup invalid evaluate context command.\n");
2026		ret = -EINVAL;
2027		break;
2028	case COMP_SLOT_NOT_ENABLED_ERROR:
2029		dev_warn(&udev->dev,
2030			"WARN: slot not enabled for evaluate context command.\n");
2031		ret = -EINVAL;
2032		break;
2033	case COMP_CONTEXT_STATE_ERROR:
2034		dev_warn(&udev->dev,
2035			"WARN: invalid context state for evaluate context command.\n");
 
2036		ret = -EINVAL;
2037		break;
2038	case COMP_INCOMPATIBLE_DEVICE_ERROR:
2039		dev_warn(&udev->dev,
2040			"ERROR: Incompatible device for evaluate context command.\n");
2041		ret = -ENODEV;
2042		break;
2043	case COMP_MAX_EXIT_LATENCY_TOO_LARGE_ERROR:
2044		/* Max Exit Latency too large error */
2045		dev_warn(&udev->dev, "WARN: Max Exit Latency too large\n");
2046		ret = -EINVAL;
2047		break;
2048	case COMP_SUCCESS:
2049		xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
2050				"Successful evaluate context command");
2051		ret = 0;
2052		break;
2053	default:
2054		xhci_err(xhci, "ERROR: unexpected command completion code 0x%x.\n",
2055			*cmd_status);
2056		ret = -EINVAL;
2057		break;
2058	}
2059	return ret;
2060}
2061
2062static u32 xhci_count_num_new_endpoints(struct xhci_hcd *xhci,
2063		struct xhci_input_control_ctx *ctrl_ctx)
2064{
2065	u32 valid_add_flags;
2066	u32 valid_drop_flags;
2067
2068	/* Ignore the slot flag (bit 0), and the default control endpoint flag
2069	 * (bit 1).  The default control endpoint is added during the Address
2070	 * Device command and is never removed until the slot is disabled.
2071	 */
2072	valid_add_flags = le32_to_cpu(ctrl_ctx->add_flags) >> 2;
2073	valid_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags) >> 2;
2074
2075	/* Use hweight32 to count the number of ones in the add flags, or
2076	 * number of endpoints added.  Don't count endpoints that are changed
2077	 * (both added and dropped).
2078	 */
2079	return hweight32(valid_add_flags) -
2080		hweight32(valid_add_flags & valid_drop_flags);
2081}
2082
2083static unsigned int xhci_count_num_dropped_endpoints(struct xhci_hcd *xhci,
2084		struct xhci_input_control_ctx *ctrl_ctx)
2085{
2086	u32 valid_add_flags;
2087	u32 valid_drop_flags;
2088
2089	valid_add_flags = le32_to_cpu(ctrl_ctx->add_flags) >> 2;
2090	valid_drop_flags = le32_to_cpu(ctrl_ctx->drop_flags) >> 2;
2091
2092	return hweight32(valid_drop_flags) -
2093		hweight32(valid_add_flags & valid_drop_flags);
2094}
2095
2096/*
2097 * We need to reserve the new number of endpoints before the configure endpoint
2098 * command completes.  We can't subtract the dropped endpoints from the number
2099 * of active endpoints until the command completes because we can oversubscribe
2100 * the host in this case:
2101 *
2102 *  - the first configure endpoint command drops more endpoints than it adds
2103 *  - a second configure endpoint command that adds more endpoints is queued
2104 *  - the first configure endpoint command fails, so the config is unchanged
2105 *  - the second command may succeed, even though there isn't enough resources
2106 *
2107 * Must be called with xhci->lock held.
2108 */
2109static int xhci_reserve_host_resources(struct xhci_hcd *xhci,
2110		struct xhci_input_control_ctx *ctrl_ctx)
2111{
2112	u32 added_eps;
2113
2114	added_eps = xhci_count_num_new_endpoints(xhci, ctrl_ctx);
2115	if (xhci->num_active_eps + added_eps > xhci->limit_active_eps) {
2116		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2117				"Not enough ep ctxs: "
2118				"%u active, need to add %u, limit is %u.",
2119				xhci->num_active_eps, added_eps,
2120				xhci->limit_active_eps);
2121		return -ENOMEM;
2122	}
2123	xhci->num_active_eps += added_eps;
2124	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2125			"Adding %u ep ctxs, %u now active.", added_eps,
2126			xhci->num_active_eps);
2127	return 0;
2128}
2129
2130/*
2131 * The configure endpoint was failed by the xHC for some other reason, so we
2132 * need to revert the resources that failed configuration would have used.
2133 *
2134 * Must be called with xhci->lock held.
2135 */
2136static void xhci_free_host_resources(struct xhci_hcd *xhci,
2137		struct xhci_input_control_ctx *ctrl_ctx)
2138{
2139	u32 num_failed_eps;
2140
2141	num_failed_eps = xhci_count_num_new_endpoints(xhci, ctrl_ctx);
2142	xhci->num_active_eps -= num_failed_eps;
2143	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2144			"Removing %u failed ep ctxs, %u now active.",
2145			num_failed_eps,
2146			xhci->num_active_eps);
2147}
2148
2149/*
2150 * Now that the command has completed, clean up the active endpoint count by
2151 * subtracting out the endpoints that were dropped (but not changed).
2152 *
2153 * Must be called with xhci->lock held.
2154 */
2155static void xhci_finish_resource_reservation(struct xhci_hcd *xhci,
2156		struct xhci_input_control_ctx *ctrl_ctx)
2157{
2158	u32 num_dropped_eps;
2159
2160	num_dropped_eps = xhci_count_num_dropped_endpoints(xhci, ctrl_ctx);
2161	xhci->num_active_eps -= num_dropped_eps;
2162	if (num_dropped_eps)
2163		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2164				"Removing %u dropped ep ctxs, %u now active.",
2165				num_dropped_eps,
2166				xhci->num_active_eps);
2167}
2168
2169static unsigned int xhci_get_block_size(struct usb_device *udev)
2170{
2171	switch (udev->speed) {
2172	case USB_SPEED_LOW:
2173	case USB_SPEED_FULL:
2174		return FS_BLOCK;
2175	case USB_SPEED_HIGH:
2176		return HS_BLOCK;
2177	case USB_SPEED_SUPER:
2178	case USB_SPEED_SUPER_PLUS:
2179		return SS_BLOCK;
2180	case USB_SPEED_UNKNOWN:
2181	case USB_SPEED_WIRELESS:
2182	default:
2183		/* Should never happen */
2184		return 1;
2185	}
2186}
2187
2188static unsigned int
2189xhci_get_largest_overhead(struct xhci_interval_bw *interval_bw)
2190{
2191	if (interval_bw->overhead[LS_OVERHEAD_TYPE])
2192		return LS_OVERHEAD;
2193	if (interval_bw->overhead[FS_OVERHEAD_TYPE])
2194		return FS_OVERHEAD;
2195	return HS_OVERHEAD;
2196}
2197
2198/* If we are changing a LS/FS device under a HS hub,
2199 * make sure (if we are activating a new TT) that the HS bus has enough
2200 * bandwidth for this new TT.
2201 */
2202static int xhci_check_tt_bw_table(struct xhci_hcd *xhci,
2203		struct xhci_virt_device *virt_dev,
2204		int old_active_eps)
2205{
2206	struct xhci_interval_bw_table *bw_table;
2207	struct xhci_tt_bw_info *tt_info;
2208
2209	/* Find the bandwidth table for the root port this TT is attached to. */
2210	bw_table = &xhci->rh_bw[virt_dev->real_port - 1].bw_table;
2211	tt_info = virt_dev->tt_info;
2212	/* If this TT already had active endpoints, the bandwidth for this TT
2213	 * has already been added.  Removing all periodic endpoints (and thus
2214	 * making the TT enactive) will only decrease the bandwidth used.
2215	 */
2216	if (old_active_eps)
2217		return 0;
2218	if (old_active_eps == 0 && tt_info->active_eps != 0) {
2219		if (bw_table->bw_used + TT_HS_OVERHEAD > HS_BW_LIMIT)
2220			return -ENOMEM;
2221		return 0;
2222	}
2223	/* Not sure why we would have no new active endpoints...
2224	 *
2225	 * Maybe because of an Evaluate Context change for a hub update or a
2226	 * control endpoint 0 max packet size change?
2227	 * FIXME: skip the bandwidth calculation in that case.
2228	 */
2229	return 0;
2230}
2231
2232static int xhci_check_ss_bw(struct xhci_hcd *xhci,
2233		struct xhci_virt_device *virt_dev)
2234{
2235	unsigned int bw_reserved;
2236
2237	bw_reserved = DIV_ROUND_UP(SS_BW_RESERVED*SS_BW_LIMIT_IN, 100);
2238	if (virt_dev->bw_table->ss_bw_in > (SS_BW_LIMIT_IN - bw_reserved))
2239		return -ENOMEM;
2240
2241	bw_reserved = DIV_ROUND_UP(SS_BW_RESERVED*SS_BW_LIMIT_OUT, 100);
2242	if (virt_dev->bw_table->ss_bw_out > (SS_BW_LIMIT_OUT - bw_reserved))
2243		return -ENOMEM;
2244
2245	return 0;
2246}
2247
2248/*
2249 * This algorithm is a very conservative estimate of the worst-case scheduling
2250 * scenario for any one interval.  The hardware dynamically schedules the
2251 * packets, so we can't tell which microframe could be the limiting factor in
2252 * the bandwidth scheduling.  This only takes into account periodic endpoints.
2253 *
2254 * Obviously, we can't solve an NP complete problem to find the minimum worst
2255 * case scenario.  Instead, we come up with an estimate that is no less than
2256 * the worst case bandwidth used for any one microframe, but may be an
2257 * over-estimate.
2258 *
2259 * We walk the requirements for each endpoint by interval, starting with the
2260 * smallest interval, and place packets in the schedule where there is only one
2261 * possible way to schedule packets for that interval.  In order to simplify
2262 * this algorithm, we record the largest max packet size for each interval, and
2263 * assume all packets will be that size.
2264 *
2265 * For interval 0, we obviously must schedule all packets for each interval.
2266 * The bandwidth for interval 0 is just the amount of data to be transmitted
2267 * (the sum of all max ESIT payload sizes, plus any overhead per packet times
2268 * the number of packets).
2269 *
2270 * For interval 1, we have two possible microframes to schedule those packets
2271 * in.  For this algorithm, if we can schedule the same number of packets for
2272 * each possible scheduling opportunity (each microframe), we will do so.  The
2273 * remaining number of packets will be saved to be transmitted in the gaps in
2274 * the next interval's scheduling sequence.
2275 *
2276 * As we move those remaining packets to be scheduled with interval 2 packets,
2277 * we have to double the number of remaining packets to transmit.  This is
2278 * because the intervals are actually powers of 2, and we would be transmitting
2279 * the previous interval's packets twice in this interval.  We also have to be
2280 * sure that when we look at the largest max packet size for this interval, we
2281 * also look at the largest max packet size for the remaining packets and take
2282 * the greater of the two.
2283 *
2284 * The algorithm continues to evenly distribute packets in each scheduling
2285 * opportunity, and push the remaining packets out, until we get to the last
2286 * interval.  Then those packets and their associated overhead are just added
2287 * to the bandwidth used.
2288 */
2289static int xhci_check_bw_table(struct xhci_hcd *xhci,
2290		struct xhci_virt_device *virt_dev,
2291		int old_active_eps)
2292{
2293	unsigned int bw_reserved;
2294	unsigned int max_bandwidth;
2295	unsigned int bw_used;
2296	unsigned int block_size;
2297	struct xhci_interval_bw_table *bw_table;
2298	unsigned int packet_size = 0;
2299	unsigned int overhead = 0;
2300	unsigned int packets_transmitted = 0;
2301	unsigned int packets_remaining = 0;
2302	unsigned int i;
2303
2304	if (virt_dev->udev->speed >= USB_SPEED_SUPER)
2305		return xhci_check_ss_bw(xhci, virt_dev);
2306
2307	if (virt_dev->udev->speed == USB_SPEED_HIGH) {
2308		max_bandwidth = HS_BW_LIMIT;
2309		/* Convert percent of bus BW reserved to blocks reserved */
2310		bw_reserved = DIV_ROUND_UP(HS_BW_RESERVED * max_bandwidth, 100);
2311	} else {
2312		max_bandwidth = FS_BW_LIMIT;
2313		bw_reserved = DIV_ROUND_UP(FS_BW_RESERVED * max_bandwidth, 100);
2314	}
2315
2316	bw_table = virt_dev->bw_table;
2317	/* We need to translate the max packet size and max ESIT payloads into
2318	 * the units the hardware uses.
2319	 */
2320	block_size = xhci_get_block_size(virt_dev->udev);
2321
2322	/* If we are manipulating a LS/FS device under a HS hub, double check
2323	 * that the HS bus has enough bandwidth if we are activing a new TT.
2324	 */
2325	if (virt_dev->tt_info) {
2326		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2327				"Recalculating BW for rootport %u",
2328				virt_dev->real_port);
2329		if (xhci_check_tt_bw_table(xhci, virt_dev, old_active_eps)) {
2330			xhci_warn(xhci, "Not enough bandwidth on HS bus for "
2331					"newly activated TT.\n");
2332			return -ENOMEM;
2333		}
2334		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2335				"Recalculating BW for TT slot %u port %u",
2336				virt_dev->tt_info->slot_id,
2337				virt_dev->tt_info->ttport);
2338	} else {
2339		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2340				"Recalculating BW for rootport %u",
2341				virt_dev->real_port);
2342	}
2343
2344	/* Add in how much bandwidth will be used for interval zero, or the
2345	 * rounded max ESIT payload + number of packets * largest overhead.
2346	 */
2347	bw_used = DIV_ROUND_UP(bw_table->interval0_esit_payload, block_size) +
2348		bw_table->interval_bw[0].num_packets *
2349		xhci_get_largest_overhead(&bw_table->interval_bw[0]);
2350
2351	for (i = 1; i < XHCI_MAX_INTERVAL; i++) {
2352		unsigned int bw_added;
2353		unsigned int largest_mps;
2354		unsigned int interval_overhead;
2355
2356		/*
2357		 * How many packets could we transmit in this interval?
2358		 * If packets didn't fit in the previous interval, we will need
2359		 * to transmit that many packets twice within this interval.
2360		 */
2361		packets_remaining = 2 * packets_remaining +
2362			bw_table->interval_bw[i].num_packets;
2363
2364		/* Find the largest max packet size of this or the previous
2365		 * interval.
2366		 */
2367		if (list_empty(&bw_table->interval_bw[i].endpoints))
2368			largest_mps = 0;
2369		else {
2370			struct xhci_virt_ep *virt_ep;
2371			struct list_head *ep_entry;
2372
2373			ep_entry = bw_table->interval_bw[i].endpoints.next;
2374			virt_ep = list_entry(ep_entry,
2375					struct xhci_virt_ep, bw_endpoint_list);
2376			/* Convert to blocks, rounding up */
2377			largest_mps = DIV_ROUND_UP(
2378					virt_ep->bw_info.max_packet_size,
2379					block_size);
2380		}
2381		if (largest_mps > packet_size)
2382			packet_size = largest_mps;
2383
2384		/* Use the larger overhead of this or the previous interval. */
2385		interval_overhead = xhci_get_largest_overhead(
2386				&bw_table->interval_bw[i]);
2387		if (interval_overhead > overhead)
2388			overhead = interval_overhead;
2389
2390		/* How many packets can we evenly distribute across
2391		 * (1 << (i + 1)) possible scheduling opportunities?
2392		 */
2393		packets_transmitted = packets_remaining >> (i + 1);
2394
2395		/* Add in the bandwidth used for those scheduled packets */
2396		bw_added = packets_transmitted * (overhead + packet_size);
2397
2398		/* How many packets do we have remaining to transmit? */
2399		packets_remaining = packets_remaining % (1 << (i + 1));
2400
2401		/* What largest max packet size should those packets have? */
2402		/* If we've transmitted all packets, don't carry over the
2403		 * largest packet size.
2404		 */
2405		if (packets_remaining == 0) {
2406			packet_size = 0;
2407			overhead = 0;
2408		} else if (packets_transmitted > 0) {
2409			/* Otherwise if we do have remaining packets, and we've
2410			 * scheduled some packets in this interval, take the
2411			 * largest max packet size from endpoints with this
2412			 * interval.
2413			 */
2414			packet_size = largest_mps;
2415			overhead = interval_overhead;
2416		}
2417		/* Otherwise carry over packet_size and overhead from the last
2418		 * time we had a remainder.
2419		 */
2420		bw_used += bw_added;
2421		if (bw_used > max_bandwidth) {
2422			xhci_warn(xhci, "Not enough bandwidth. "
2423					"Proposed: %u, Max: %u\n",
2424				bw_used, max_bandwidth);
2425			return -ENOMEM;
2426		}
2427	}
2428	/*
2429	 * Ok, we know we have some packets left over after even-handedly
2430	 * scheduling interval 15.  We don't know which microframes they will
2431	 * fit into, so we over-schedule and say they will be scheduled every
2432	 * microframe.
2433	 */
2434	if (packets_remaining > 0)
2435		bw_used += overhead + packet_size;
2436
2437	if (!virt_dev->tt_info && virt_dev->udev->speed == USB_SPEED_HIGH) {
2438		unsigned int port_index = virt_dev->real_port - 1;
2439
2440		/* OK, we're manipulating a HS device attached to a
2441		 * root port bandwidth domain.  Include the number of active TTs
2442		 * in the bandwidth used.
2443		 */
2444		bw_used += TT_HS_OVERHEAD *
2445			xhci->rh_bw[port_index].num_active_tts;
2446	}
2447
2448	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
2449		"Final bandwidth: %u, Limit: %u, Reserved: %u, "
2450		"Available: %u " "percent",
2451		bw_used, max_bandwidth, bw_reserved,
2452		(max_bandwidth - bw_used - bw_reserved) * 100 /
2453		max_bandwidth);
2454
2455	bw_used += bw_reserved;
2456	if (bw_used > max_bandwidth) {
2457		xhci_warn(xhci, "Not enough bandwidth. Proposed: %u, Max: %u\n",
2458				bw_used, max_bandwidth);
2459		return -ENOMEM;
2460	}
2461
2462	bw_table->bw_used = bw_used;
2463	return 0;
2464}
2465
2466static bool xhci_is_async_ep(unsigned int ep_type)
2467{
2468	return (ep_type != ISOC_OUT_EP && ep_type != INT_OUT_EP &&
2469					ep_type != ISOC_IN_EP &&
2470					ep_type != INT_IN_EP);
2471}
2472
2473static bool xhci_is_sync_in_ep(unsigned int ep_type)
2474{
2475	return (ep_type == ISOC_IN_EP || ep_type == INT_IN_EP);
2476}
2477
2478static unsigned int xhci_get_ss_bw_consumed(struct xhci_bw_info *ep_bw)
2479{
2480	unsigned int mps = DIV_ROUND_UP(ep_bw->max_packet_size, SS_BLOCK);
2481
2482	if (ep_bw->ep_interval == 0)
2483		return SS_OVERHEAD_BURST +
2484			(ep_bw->mult * ep_bw->num_packets *
2485					(SS_OVERHEAD + mps));
2486	return DIV_ROUND_UP(ep_bw->mult * ep_bw->num_packets *
2487				(SS_OVERHEAD + mps + SS_OVERHEAD_BURST),
2488				1 << ep_bw->ep_interval);
2489
2490}
2491
2492static void xhci_drop_ep_from_interval_table(struct xhci_hcd *xhci,
2493		struct xhci_bw_info *ep_bw,
2494		struct xhci_interval_bw_table *bw_table,
2495		struct usb_device *udev,
2496		struct xhci_virt_ep *virt_ep,
2497		struct xhci_tt_bw_info *tt_info)
2498{
2499	struct xhci_interval_bw	*interval_bw;
2500	int normalized_interval;
2501
2502	if (xhci_is_async_ep(ep_bw->type))
2503		return;
2504
2505	if (udev->speed >= USB_SPEED_SUPER) {
2506		if (xhci_is_sync_in_ep(ep_bw->type))
2507			xhci->devs[udev->slot_id]->bw_table->ss_bw_in -=
2508				xhci_get_ss_bw_consumed(ep_bw);
2509		else
2510			xhci->devs[udev->slot_id]->bw_table->ss_bw_out -=
2511				xhci_get_ss_bw_consumed(ep_bw);
2512		return;
2513	}
2514
2515	/* SuperSpeed endpoints never get added to intervals in the table, so
2516	 * this check is only valid for HS/FS/LS devices.
2517	 */
2518	if (list_empty(&virt_ep->bw_endpoint_list))
2519		return;
2520	/* For LS/FS devices, we need to translate the interval expressed in
2521	 * microframes to frames.
2522	 */
2523	if (udev->speed == USB_SPEED_HIGH)
2524		normalized_interval = ep_bw->ep_interval;
2525	else
2526		normalized_interval = ep_bw->ep_interval - 3;
2527
2528	if (normalized_interval == 0)
2529		bw_table->interval0_esit_payload -= ep_bw->max_esit_payload;
2530	interval_bw = &bw_table->interval_bw[normalized_interval];
2531	interval_bw->num_packets -= ep_bw->num_packets;
2532	switch (udev->speed) {
2533	case USB_SPEED_LOW:
2534		interval_bw->overhead[LS_OVERHEAD_TYPE] -= 1;
2535		break;
2536	case USB_SPEED_FULL:
2537		interval_bw->overhead[FS_OVERHEAD_TYPE] -= 1;
2538		break;
2539	case USB_SPEED_HIGH:
2540		interval_bw->overhead[HS_OVERHEAD_TYPE] -= 1;
2541		break;
2542	case USB_SPEED_SUPER:
2543	case USB_SPEED_SUPER_PLUS:
2544	case USB_SPEED_UNKNOWN:
2545	case USB_SPEED_WIRELESS:
2546		/* Should never happen because only LS/FS/HS endpoints will get
2547		 * added to the endpoint list.
2548		 */
2549		return;
2550	}
2551	if (tt_info)
2552		tt_info->active_eps -= 1;
2553	list_del_init(&virt_ep->bw_endpoint_list);
2554}
2555
2556static void xhci_add_ep_to_interval_table(struct xhci_hcd *xhci,
2557		struct xhci_bw_info *ep_bw,
2558		struct xhci_interval_bw_table *bw_table,
2559		struct usb_device *udev,
2560		struct xhci_virt_ep *virt_ep,
2561		struct xhci_tt_bw_info *tt_info)
2562{
2563	struct xhci_interval_bw	*interval_bw;
2564	struct xhci_virt_ep *smaller_ep;
2565	int normalized_interval;
2566
2567	if (xhci_is_async_ep(ep_bw->type))
2568		return;
2569
2570	if (udev->speed == USB_SPEED_SUPER) {
2571		if (xhci_is_sync_in_ep(ep_bw->type))
2572			xhci->devs[udev->slot_id]->bw_table->ss_bw_in +=
2573				xhci_get_ss_bw_consumed(ep_bw);
2574		else
2575			xhci->devs[udev->slot_id]->bw_table->ss_bw_out +=
2576				xhci_get_ss_bw_consumed(ep_bw);
2577		return;
2578	}
2579
2580	/* For LS/FS devices, we need to translate the interval expressed in
2581	 * microframes to frames.
2582	 */
2583	if (udev->speed == USB_SPEED_HIGH)
2584		normalized_interval = ep_bw->ep_interval;
2585	else
2586		normalized_interval = ep_bw->ep_interval - 3;
2587
2588	if (normalized_interval == 0)
2589		bw_table->interval0_esit_payload += ep_bw->max_esit_payload;
2590	interval_bw = &bw_table->interval_bw[normalized_interval];
2591	interval_bw->num_packets += ep_bw->num_packets;
2592	switch (udev->speed) {
2593	case USB_SPEED_LOW:
2594		interval_bw->overhead[LS_OVERHEAD_TYPE] += 1;
2595		break;
2596	case USB_SPEED_FULL:
2597		interval_bw->overhead[FS_OVERHEAD_TYPE] += 1;
2598		break;
2599	case USB_SPEED_HIGH:
2600		interval_bw->overhead[HS_OVERHEAD_TYPE] += 1;
2601		break;
2602	case USB_SPEED_SUPER:
2603	case USB_SPEED_SUPER_PLUS:
2604	case USB_SPEED_UNKNOWN:
2605	case USB_SPEED_WIRELESS:
2606		/* Should never happen because only LS/FS/HS endpoints will get
2607		 * added to the endpoint list.
2608		 */
2609		return;
2610	}
2611
2612	if (tt_info)
2613		tt_info->active_eps += 1;
2614	/* Insert the endpoint into the list, largest max packet size first. */
2615	list_for_each_entry(smaller_ep, &interval_bw->endpoints,
2616			bw_endpoint_list) {
2617		if (ep_bw->max_packet_size >=
2618				smaller_ep->bw_info.max_packet_size) {
2619			/* Add the new ep before the smaller endpoint */
2620			list_add_tail(&virt_ep->bw_endpoint_list,
2621					&smaller_ep->bw_endpoint_list);
2622			return;
2623		}
2624	}
2625	/* Add the new endpoint at the end of the list. */
2626	list_add_tail(&virt_ep->bw_endpoint_list,
2627			&interval_bw->endpoints);
2628}
2629
2630void xhci_update_tt_active_eps(struct xhci_hcd *xhci,
2631		struct xhci_virt_device *virt_dev,
2632		int old_active_eps)
2633{
2634	struct xhci_root_port_bw_info *rh_bw_info;
2635	if (!virt_dev->tt_info)
2636		return;
2637
2638	rh_bw_info = &xhci->rh_bw[virt_dev->real_port - 1];
2639	if (old_active_eps == 0 &&
2640				virt_dev->tt_info->active_eps != 0) {
2641		rh_bw_info->num_active_tts += 1;
2642		rh_bw_info->bw_table.bw_used += TT_HS_OVERHEAD;
2643	} else if (old_active_eps != 0 &&
2644				virt_dev->tt_info->active_eps == 0) {
2645		rh_bw_info->num_active_tts -= 1;
2646		rh_bw_info->bw_table.bw_used -= TT_HS_OVERHEAD;
2647	}
2648}
2649
2650static int xhci_reserve_bandwidth(struct xhci_hcd *xhci,
2651		struct xhci_virt_device *virt_dev,
2652		struct xhci_container_ctx *in_ctx)
2653{
2654	struct xhci_bw_info ep_bw_info[31];
2655	int i;
2656	struct xhci_input_control_ctx *ctrl_ctx;
2657	int old_active_eps = 0;
2658
2659	if (virt_dev->tt_info)
2660		old_active_eps = virt_dev->tt_info->active_eps;
2661
2662	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
2663	if (!ctrl_ctx) {
2664		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2665				__func__);
2666		return -ENOMEM;
2667	}
2668
2669	for (i = 0; i < 31; i++) {
2670		if (!EP_IS_ADDED(ctrl_ctx, i) && !EP_IS_DROPPED(ctrl_ctx, i))
2671			continue;
2672
2673		/* Make a copy of the BW info in case we need to revert this */
2674		memcpy(&ep_bw_info[i], &virt_dev->eps[i].bw_info,
2675				sizeof(ep_bw_info[i]));
2676		/* Drop the endpoint from the interval table if the endpoint is
2677		 * being dropped or changed.
2678		 */
2679		if (EP_IS_DROPPED(ctrl_ctx, i))
2680			xhci_drop_ep_from_interval_table(xhci,
2681					&virt_dev->eps[i].bw_info,
2682					virt_dev->bw_table,
2683					virt_dev->udev,
2684					&virt_dev->eps[i],
2685					virt_dev->tt_info);
2686	}
2687	/* Overwrite the information stored in the endpoints' bw_info */
2688	xhci_update_bw_info(xhci, virt_dev->in_ctx, ctrl_ctx, virt_dev);
2689	for (i = 0; i < 31; i++) {
2690		/* Add any changed or added endpoints to the interval table */
2691		if (EP_IS_ADDED(ctrl_ctx, i))
2692			xhci_add_ep_to_interval_table(xhci,
2693					&virt_dev->eps[i].bw_info,
2694					virt_dev->bw_table,
2695					virt_dev->udev,
2696					&virt_dev->eps[i],
2697					virt_dev->tt_info);
2698	}
2699
2700	if (!xhci_check_bw_table(xhci, virt_dev, old_active_eps)) {
2701		/* Ok, this fits in the bandwidth we have.
2702		 * Update the number of active TTs.
2703		 */
2704		xhci_update_tt_active_eps(xhci, virt_dev, old_active_eps);
2705		return 0;
2706	}
2707
2708	/* We don't have enough bandwidth for this, revert the stored info. */
2709	for (i = 0; i < 31; i++) {
2710		if (!EP_IS_ADDED(ctrl_ctx, i) && !EP_IS_DROPPED(ctrl_ctx, i))
2711			continue;
2712
2713		/* Drop the new copies of any added or changed endpoints from
2714		 * the interval table.
2715		 */
2716		if (EP_IS_ADDED(ctrl_ctx, i)) {
2717			xhci_drop_ep_from_interval_table(xhci,
2718					&virt_dev->eps[i].bw_info,
2719					virt_dev->bw_table,
2720					virt_dev->udev,
2721					&virt_dev->eps[i],
2722					virt_dev->tt_info);
2723		}
2724		/* Revert the endpoint back to its old information */
2725		memcpy(&virt_dev->eps[i].bw_info, &ep_bw_info[i],
2726				sizeof(ep_bw_info[i]));
2727		/* Add any changed or dropped endpoints back into the table */
2728		if (EP_IS_DROPPED(ctrl_ctx, i))
2729			xhci_add_ep_to_interval_table(xhci,
2730					&virt_dev->eps[i].bw_info,
2731					virt_dev->bw_table,
2732					virt_dev->udev,
2733					&virt_dev->eps[i],
2734					virt_dev->tt_info);
2735	}
2736	return -ENOMEM;
2737}
2738
2739
2740/* Issue a configure endpoint command or evaluate context command
2741 * and wait for it to finish.
2742 */
2743static int xhci_configure_endpoint(struct xhci_hcd *xhci,
2744		struct usb_device *udev,
2745		struct xhci_command *command,
2746		bool ctx_change, bool must_succeed)
2747{
2748	int ret;
2749	unsigned long flags;
2750	struct xhci_input_control_ctx *ctrl_ctx;
2751	struct xhci_virt_device *virt_dev;
2752	struct xhci_slot_ctx *slot_ctx;
2753
2754	if (!command)
2755		return -EINVAL;
2756
2757	spin_lock_irqsave(&xhci->lock, flags);
2758
2759	if (xhci->xhc_state & XHCI_STATE_DYING) {
2760		spin_unlock_irqrestore(&xhci->lock, flags);
2761		return -ESHUTDOWN;
2762	}
2763
2764	virt_dev = xhci->devs[udev->slot_id];
2765
2766	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
2767	if (!ctrl_ctx) {
2768		spin_unlock_irqrestore(&xhci->lock, flags);
2769		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2770				__func__);
2771		return -ENOMEM;
2772	}
2773
2774	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK) &&
2775			xhci_reserve_host_resources(xhci, ctrl_ctx)) {
2776		spin_unlock_irqrestore(&xhci->lock, flags);
2777		xhci_warn(xhci, "Not enough host resources, "
2778				"active endpoint contexts = %u\n",
2779				xhci->num_active_eps);
2780		return -ENOMEM;
2781	}
2782	if ((xhci->quirks & XHCI_SW_BW_CHECKING) &&
2783	    xhci_reserve_bandwidth(xhci, virt_dev, command->in_ctx)) {
2784		if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK))
2785			xhci_free_host_resources(xhci, ctrl_ctx);
2786		spin_unlock_irqrestore(&xhci->lock, flags);
2787		xhci_warn(xhci, "Not enough bandwidth\n");
2788		return -ENOMEM;
2789	}
2790
2791	slot_ctx = xhci_get_slot_ctx(xhci, command->in_ctx);
2792
2793	trace_xhci_configure_endpoint_ctrl_ctx(ctrl_ctx);
2794	trace_xhci_configure_endpoint(slot_ctx);
2795
2796	if (!ctx_change)
2797		ret = xhci_queue_configure_endpoint(xhci, command,
2798				command->in_ctx->dma,
2799				udev->slot_id, must_succeed);
2800	else
2801		ret = xhci_queue_evaluate_context(xhci, command,
2802				command->in_ctx->dma,
2803				udev->slot_id, must_succeed);
2804	if (ret < 0) {
2805		if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK))
2806			xhci_free_host_resources(xhci, ctrl_ctx);
2807		spin_unlock_irqrestore(&xhci->lock, flags);
2808		xhci_dbg_trace(xhci,  trace_xhci_dbg_context_change,
2809				"FIXME allocate a new ring segment");
2810		return -ENOMEM;
2811	}
2812	xhci_ring_cmd_db(xhci);
2813	spin_unlock_irqrestore(&xhci->lock, flags);
2814
2815	/* Wait for the configure endpoint command to complete */
2816	wait_for_completion(command->completion);
2817
2818	if (!ctx_change)
2819		ret = xhci_configure_endpoint_result(xhci, udev,
2820						     &command->status);
2821	else
2822		ret = xhci_evaluate_context_result(xhci, udev,
2823						   &command->status);
2824
2825	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
2826		spin_lock_irqsave(&xhci->lock, flags);
2827		/* If the command failed, remove the reserved resources.
2828		 * Otherwise, clean up the estimate to include dropped eps.
2829		 */
2830		if (ret)
2831			xhci_free_host_resources(xhci, ctrl_ctx);
2832		else
2833			xhci_finish_resource_reservation(xhci, ctrl_ctx);
2834		spin_unlock_irqrestore(&xhci->lock, flags);
2835	}
2836	return ret;
2837}
2838
2839static void xhci_check_bw_drop_ep_streams(struct xhci_hcd *xhci,
2840	struct xhci_virt_device *vdev, int i)
2841{
2842	struct xhci_virt_ep *ep = &vdev->eps[i];
2843
2844	if (ep->ep_state & EP_HAS_STREAMS) {
2845		xhci_warn(xhci, "WARN: endpoint 0x%02x has streams on set_interface, freeing streams.\n",
2846				xhci_get_endpoint_address(i));
2847		xhci_free_stream_info(xhci, ep->stream_info);
2848		ep->stream_info = NULL;
2849		ep->ep_state &= ~EP_HAS_STREAMS;
2850	}
2851}
2852
2853/* Called after one or more calls to xhci_add_endpoint() or
2854 * xhci_drop_endpoint().  If this call fails, the USB core is expected
2855 * to call xhci_reset_bandwidth().
2856 *
2857 * Since we are in the middle of changing either configuration or
2858 * installing a new alt setting, the USB core won't allow URBs to be
2859 * enqueued for any endpoint on the old config or interface.  Nothing
2860 * else should be touching the xhci->devs[slot_id] structure, so we
2861 * don't need to take the xhci->lock for manipulating that.
2862 */
2863static int xhci_check_bandwidth(struct usb_hcd *hcd, struct usb_device *udev)
2864{
2865	int i;
2866	int ret = 0;
2867	struct xhci_hcd *xhci;
2868	struct xhci_virt_device	*virt_dev;
2869	struct xhci_input_control_ctx *ctrl_ctx;
2870	struct xhci_slot_ctx *slot_ctx;
2871	struct xhci_command *command;
2872
2873	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
2874	if (ret <= 0)
2875		return ret;
2876	xhci = hcd_to_xhci(hcd);
2877	if ((xhci->xhc_state & XHCI_STATE_DYING) ||
2878		(xhci->xhc_state & XHCI_STATE_REMOVING))
2879		return -ENODEV;
2880
2881	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
2882	virt_dev = xhci->devs[udev->slot_id];
2883
2884	command = xhci_alloc_command(xhci, true, GFP_KERNEL);
2885	if (!command)
2886		return -ENOMEM;
2887
2888	command->in_ctx = virt_dev->in_ctx;
2889
2890	/* See section 4.6.6 - A0 = 1; A1 = D0 = D1 = 0 */
2891	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
2892	if (!ctrl_ctx) {
2893		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
2894				__func__);
2895		ret = -ENOMEM;
2896		goto command_cleanup;
2897	}
2898	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
2899	ctrl_ctx->add_flags &= cpu_to_le32(~EP0_FLAG);
2900	ctrl_ctx->drop_flags &= cpu_to_le32(~(SLOT_FLAG | EP0_FLAG));
2901
2902	/* Don't issue the command if there's no endpoints to update. */
2903	if (ctrl_ctx->add_flags == cpu_to_le32(SLOT_FLAG) &&
2904	    ctrl_ctx->drop_flags == 0) {
2905		ret = 0;
2906		goto command_cleanup;
2907	}
2908	/* Fix up Context Entries field. Minimum value is EP0 == BIT(1). */
2909	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
2910	for (i = 31; i >= 1; i--) {
2911		__le32 le32 = cpu_to_le32(BIT(i));
2912
2913		if ((virt_dev->eps[i-1].ring && !(ctrl_ctx->drop_flags & le32))
2914		    || (ctrl_ctx->add_flags & le32) || i == 1) {
2915			slot_ctx->dev_info &= cpu_to_le32(~LAST_CTX_MASK);
2916			slot_ctx->dev_info |= cpu_to_le32(LAST_CTX(i));
2917			break;
2918		}
2919	}
 
 
 
2920
2921	ret = xhci_configure_endpoint(xhci, udev, command,
2922			false, false);
2923	if (ret)
2924		/* Callee should call reset_bandwidth() */
2925		goto command_cleanup;
2926
 
 
 
 
2927	/* Free any rings that were dropped, but not changed. */
2928	for (i = 1; i < 31; i++) {
2929		if ((le32_to_cpu(ctrl_ctx->drop_flags) & (1 << (i + 1))) &&
2930		    !(le32_to_cpu(ctrl_ctx->add_flags) & (1 << (i + 1)))) {
2931			xhci_free_endpoint_ring(xhci, virt_dev, i);
2932			xhci_check_bw_drop_ep_streams(xhci, virt_dev, i);
2933		}
2934	}
2935	xhci_zero_in_ctx(xhci, virt_dev);
2936	/*
2937	 * Install any rings for completely new endpoints or changed endpoints,
2938	 * and free any old rings from changed endpoints.
2939	 */
2940	for (i = 1; i < 31; i++) {
2941		if (!virt_dev->eps[i].new_ring)
2942			continue;
2943		/* Only free the old ring if it exists.
2944		 * It may not if this is the first add of an endpoint.
2945		 */
2946		if (virt_dev->eps[i].ring) {
2947			xhci_free_endpoint_ring(xhci, virt_dev, i);
2948		}
2949		xhci_check_bw_drop_ep_streams(xhci, virt_dev, i);
2950		virt_dev->eps[i].ring = virt_dev->eps[i].new_ring;
2951		virt_dev->eps[i].new_ring = NULL;
2952	}
2953command_cleanup:
2954	kfree(command->completion);
2955	kfree(command);
2956
2957	return ret;
2958}
2959
2960static void xhci_reset_bandwidth(struct usb_hcd *hcd, struct usb_device *udev)
2961{
2962	struct xhci_hcd *xhci;
2963	struct xhci_virt_device	*virt_dev;
2964	int i, ret;
2965
2966	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
2967	if (ret <= 0)
2968		return;
2969	xhci = hcd_to_xhci(hcd);
2970
2971	xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
2972	virt_dev = xhci->devs[udev->slot_id];
2973	/* Free any rings allocated for added endpoints */
2974	for (i = 0; i < 31; i++) {
2975		if (virt_dev->eps[i].new_ring) {
2976			xhci_debugfs_remove_endpoint(xhci, virt_dev, i);
2977			xhci_ring_free(xhci, virt_dev->eps[i].new_ring);
2978			virt_dev->eps[i].new_ring = NULL;
2979		}
2980	}
2981	xhci_zero_in_ctx(xhci, virt_dev);
2982}
2983
2984static void xhci_setup_input_ctx_for_config_ep(struct xhci_hcd *xhci,
2985		struct xhci_container_ctx *in_ctx,
2986		struct xhci_container_ctx *out_ctx,
2987		struct xhci_input_control_ctx *ctrl_ctx,
2988		u32 add_flags, u32 drop_flags)
2989{
2990	ctrl_ctx->add_flags = cpu_to_le32(add_flags);
2991	ctrl_ctx->drop_flags = cpu_to_le32(drop_flags);
2992	xhci_slot_copy(xhci, in_ctx, out_ctx);
2993	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
 
 
 
2994}
2995
2996static void xhci_setup_input_ctx_for_quirk(struct xhci_hcd *xhci,
2997		unsigned int slot_id, unsigned int ep_index,
2998		struct xhci_dequeue_state *deq_state)
2999{
3000	struct xhci_input_control_ctx *ctrl_ctx;
3001	struct xhci_container_ctx *in_ctx;
3002	struct xhci_ep_ctx *ep_ctx;
3003	u32 added_ctxs;
3004	dma_addr_t addr;
3005
3006	in_ctx = xhci->devs[slot_id]->in_ctx;
3007	ctrl_ctx = xhci_get_input_control_ctx(in_ctx);
3008	if (!ctrl_ctx) {
3009		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3010				__func__);
3011		return;
3012	}
3013
3014	xhci_endpoint_copy(xhci, xhci->devs[slot_id]->in_ctx,
3015			xhci->devs[slot_id]->out_ctx, ep_index);
3016	ep_ctx = xhci_get_ep_ctx(xhci, in_ctx, ep_index);
3017	addr = xhci_trb_virt_to_dma(deq_state->new_deq_seg,
3018			deq_state->new_deq_ptr);
3019	if (addr == 0) {
3020		xhci_warn(xhci, "WARN Cannot submit config ep after "
3021				"reset ep command\n");
3022		xhci_warn(xhci, "WARN deq seg = %p, deq ptr = %p\n",
3023				deq_state->new_deq_seg,
3024				deq_state->new_deq_ptr);
3025		return;
3026	}
3027	ep_ctx->deq = cpu_to_le64(addr | deq_state->new_cycle_state);
3028
3029	added_ctxs = xhci_get_endpoint_flag_from_index(ep_index);
3030	xhci_setup_input_ctx_for_config_ep(xhci, xhci->devs[slot_id]->in_ctx,
3031			xhci->devs[slot_id]->out_ctx, ctrl_ctx,
3032			added_ctxs, added_ctxs);
3033}
3034
3035void xhci_cleanup_stalled_ring(struct xhci_hcd *xhci, unsigned int slot_id,
3036			       unsigned int ep_index, unsigned int stream_id,
3037			       struct xhci_td *td)
3038{
3039	struct xhci_dequeue_state deq_state;
 
 
3040
3041	xhci_dbg_trace(xhci, trace_xhci_dbg_reset_ep,
3042			"Cleaning up stalled endpoint ring");
 
3043	/* We need to move the HW's dequeue pointer past this TD,
3044	 * or it will attempt to resend it on the next doorbell ring.
3045	 */
3046	xhci_find_new_dequeue_state(xhci, slot_id, ep_index, stream_id, td,
3047				    &deq_state);
3048
3049	if (!deq_state.new_deq_ptr || !deq_state.new_deq_seg)
3050		return;
3051
3052	/* HW with the reset endpoint quirk will use the saved dequeue state to
3053	 * issue a configure endpoint command later.
3054	 */
3055	if (!(xhci->quirks & XHCI_RESET_EP_QUIRK)) {
3056		xhci_dbg_trace(xhci, trace_xhci_dbg_reset_ep,
3057				"Queueing new dequeue state");
3058		xhci_queue_new_dequeue_state(xhci, slot_id,
3059				ep_index, &deq_state);
3060	} else {
3061		/* Better hope no one uses the input context between now and the
3062		 * reset endpoint completion!
3063		 * XXX: No idea how this hardware will react when stream rings
3064		 * are enabled.
3065		 */
3066		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3067				"Setting up input context for "
3068				"configure endpoint command");
3069		xhci_setup_input_ctx_for_quirk(xhci, slot_id,
3070				ep_index, &deq_state);
3071	}
3072}
3073
3074static void xhci_endpoint_disable(struct usb_hcd *hcd,
3075				  struct usb_host_endpoint *host_ep)
3076{
3077	struct xhci_hcd		*xhci;
3078	struct xhci_virt_device	*vdev;
3079	struct xhci_virt_ep	*ep;
3080	struct usb_device	*udev;
3081	unsigned long		flags;
3082	unsigned int		ep_index;
3083
3084	xhci = hcd_to_xhci(hcd);
3085rescan:
3086	spin_lock_irqsave(&xhci->lock, flags);
3087
3088	udev = (struct usb_device *)host_ep->hcpriv;
3089	if (!udev || !udev->slot_id)
3090		goto done;
3091
3092	vdev = xhci->devs[udev->slot_id];
3093	if (!vdev)
3094		goto done;
3095
3096	ep_index = xhci_get_endpoint_index(&host_ep->desc);
3097	ep = &vdev->eps[ep_index];
3098	if (!ep)
3099		goto done;
3100
3101	/* wait for hub_tt_work to finish clearing hub TT */
3102	if (ep->ep_state & EP_CLEARING_TT) {
3103		spin_unlock_irqrestore(&xhci->lock, flags);
3104		schedule_timeout_uninterruptible(1);
3105		goto rescan;
3106	}
3107
3108	if (ep->ep_state)
3109		xhci_dbg(xhci, "endpoint disable with ep_state 0x%x\n",
3110			 ep->ep_state);
3111done:
3112	host_ep->hcpriv = NULL;
3113	spin_unlock_irqrestore(&xhci->lock, flags);
3114}
3115
3116/*
3117 * Called after usb core issues a clear halt control message.
3118 * The host side of the halt should already be cleared by a reset endpoint
3119 * command issued when the STALL event was received.
3120 *
3121 * The reset endpoint command may only be issued to endpoints in the halted
3122 * state. For software that wishes to reset the data toggle or sequence number
3123 * of an endpoint that isn't in the halted state this function will issue a
3124 * configure endpoint command with the Drop and Add bits set for the target
3125 * endpoint. Refer to the additional note in xhci spcification section 4.6.8.
3126 */
3127
3128static void xhci_endpoint_reset(struct usb_hcd *hcd,
3129		struct usb_host_endpoint *host_ep)
3130{
3131	struct xhci_hcd *xhci;
3132	struct usb_device *udev;
3133	struct xhci_virt_device *vdev;
3134	struct xhci_virt_ep *ep;
3135	struct xhci_input_control_ctx *ctrl_ctx;
3136	struct xhci_command *stop_cmd, *cfg_cmd;
3137	unsigned int ep_index;
3138	unsigned long flags;
3139	u32 ep_flag;
3140	int err;
3141
3142	xhci = hcd_to_xhci(hcd);
3143	if (!host_ep->hcpriv)
3144		return;
3145	udev = (struct usb_device *) host_ep->hcpriv;
3146	vdev = xhci->devs[udev->slot_id];
3147
3148	/*
3149	 * vdev may be lost due to xHC restore error and re-initialization
3150	 * during S3/S4 resume. A new vdev will be allocated later by
3151	 * xhci_discover_or_reset_device()
 
 
 
3152	 */
3153	if (!udev->slot_id || !vdev)
3154		return;
3155	ep_index = xhci_get_endpoint_index(&host_ep->desc);
3156	ep = &vdev->eps[ep_index];
3157	if (!ep)
3158		return;
3159
3160	/* Bail out if toggle is already being cleared by a endpoint reset */
3161	if (ep->ep_state & EP_HARD_CLEAR_TOGGLE) {
3162		ep->ep_state &= ~EP_HARD_CLEAR_TOGGLE;
3163		return;
3164	}
3165	/* Only interrupt and bulk ep's use data toggle, USB2 spec 5.5.4-> */
3166	if (usb_endpoint_xfer_control(&host_ep->desc) ||
3167	    usb_endpoint_xfer_isoc(&host_ep->desc))
3168		return;
3169
3170	ep_flag = xhci_get_endpoint_flag(&host_ep->desc);
3171
3172	if (ep_flag == SLOT_FLAG || ep_flag == EP0_FLAG)
3173		return;
3174
3175	stop_cmd = xhci_alloc_command(xhci, true, GFP_NOWAIT);
3176	if (!stop_cmd)
3177		return;
3178
3179	cfg_cmd = xhci_alloc_command_with_ctx(xhci, true, GFP_NOWAIT);
3180	if (!cfg_cmd)
3181		goto cleanup;
3182
3183	spin_lock_irqsave(&xhci->lock, flags);
3184
3185	/* block queuing new trbs and ringing ep doorbell */
3186	ep->ep_state |= EP_SOFT_CLEAR_TOGGLE;
3187
3188	/*
3189	 * Make sure endpoint ring is empty before resetting the toggle/seq.
3190	 * Driver is required to synchronously cancel all transfer request.
3191	 * Stop the endpoint to force xHC to update the output context
3192	 */
3193
3194	if (!list_empty(&ep->ring->td_list)) {
3195		dev_err(&udev->dev, "EP not empty, refuse reset\n");
3196		spin_unlock_irqrestore(&xhci->lock, flags);
3197		xhci_free_command(xhci, cfg_cmd);
3198		goto cleanup;
3199	}
3200
3201	err = xhci_queue_stop_endpoint(xhci, stop_cmd, udev->slot_id,
3202					ep_index, 0);
3203	if (err < 0) {
3204		spin_unlock_irqrestore(&xhci->lock, flags);
3205		xhci_free_command(xhci, cfg_cmd);
3206		xhci_dbg(xhci, "%s: Failed to queue stop ep command, %d ",
3207				__func__, err);
3208		goto cleanup;
3209	}
3210
3211	xhci_ring_cmd_db(xhci);
3212	spin_unlock_irqrestore(&xhci->lock, flags);
3213
3214	wait_for_completion(stop_cmd->completion);
3215
3216	spin_lock_irqsave(&xhci->lock, flags);
3217
3218	/* config ep command clears toggle if add and drop ep flags are set */
3219	ctrl_ctx = xhci_get_input_control_ctx(cfg_cmd->in_ctx);
3220	xhci_setup_input_ctx_for_config_ep(xhci, cfg_cmd->in_ctx, vdev->out_ctx,
3221					   ctrl_ctx, ep_flag, ep_flag);
3222	xhci_endpoint_copy(xhci, cfg_cmd->in_ctx, vdev->out_ctx, ep_index);
3223
3224	err = xhci_queue_configure_endpoint(xhci, cfg_cmd, cfg_cmd->in_ctx->dma,
3225				      udev->slot_id, false);
3226	if (err < 0) {
3227		spin_unlock_irqrestore(&xhci->lock, flags);
3228		xhci_free_command(xhci, cfg_cmd);
3229		xhci_dbg(xhci, "%s: Failed to queue config ep command, %d ",
3230				__func__, err);
3231		goto cleanup;
3232	}
3233
3234	xhci_ring_cmd_db(xhci);
3235	spin_unlock_irqrestore(&xhci->lock, flags);
3236
3237	wait_for_completion(cfg_cmd->completion);
3238
3239	xhci_free_command(xhci, cfg_cmd);
3240cleanup:
3241	xhci_free_command(xhci, stop_cmd);
3242	if (ep->ep_state & EP_SOFT_CLEAR_TOGGLE)
3243		ep->ep_state &= ~EP_SOFT_CLEAR_TOGGLE;
3244}
3245
3246static int xhci_check_streams_endpoint(struct xhci_hcd *xhci,
3247		struct usb_device *udev, struct usb_host_endpoint *ep,
3248		unsigned int slot_id)
3249{
3250	int ret;
3251	unsigned int ep_index;
3252	unsigned int ep_state;
3253
3254	if (!ep)
3255		return -EINVAL;
3256	ret = xhci_check_args(xhci_to_hcd(xhci), udev, ep, 1, true, __func__);
3257	if (ret <= 0)
3258		return -EINVAL;
3259	if (usb_ss_max_streams(&ep->ss_ep_comp) == 0) {
3260		xhci_warn(xhci, "WARN: SuperSpeed Endpoint Companion"
3261				" descriptor for ep 0x%x does not support streams\n",
3262				ep->desc.bEndpointAddress);
3263		return -EINVAL;
3264	}
3265
3266	ep_index = xhci_get_endpoint_index(&ep->desc);
3267	ep_state = xhci->devs[slot_id]->eps[ep_index].ep_state;
3268	if (ep_state & EP_HAS_STREAMS ||
3269			ep_state & EP_GETTING_STREAMS) {
3270		xhci_warn(xhci, "WARN: SuperSpeed bulk endpoint 0x%x "
3271				"already has streams set up.\n",
3272				ep->desc.bEndpointAddress);
3273		xhci_warn(xhci, "Send email to xHCI maintainer and ask for "
3274				"dynamic stream context array reallocation.\n");
3275		return -EINVAL;
3276	}
3277	if (!list_empty(&xhci->devs[slot_id]->eps[ep_index].ring->td_list)) {
3278		xhci_warn(xhci, "Cannot setup streams for SuperSpeed bulk "
3279				"endpoint 0x%x; URBs are pending.\n",
3280				ep->desc.bEndpointAddress);
3281		return -EINVAL;
3282	}
3283	return 0;
3284}
3285
3286static void xhci_calculate_streams_entries(struct xhci_hcd *xhci,
3287		unsigned int *num_streams, unsigned int *num_stream_ctxs)
3288{
3289	unsigned int max_streams;
3290
3291	/* The stream context array size must be a power of two */
3292	*num_stream_ctxs = roundup_pow_of_two(*num_streams);
3293	/*
3294	 * Find out how many primary stream array entries the host controller
3295	 * supports.  Later we may use secondary stream arrays (similar to 2nd
3296	 * level page entries), but that's an optional feature for xHCI host
3297	 * controllers. xHCs must support at least 4 stream IDs.
3298	 */
3299	max_streams = HCC_MAX_PSA(xhci->hcc_params);
3300	if (*num_stream_ctxs > max_streams) {
3301		xhci_dbg(xhci, "xHCI HW only supports %u stream ctx entries.\n",
3302				max_streams);
3303		*num_stream_ctxs = max_streams;
3304		*num_streams = max_streams;
3305	}
3306}
3307
3308/* Returns an error code if one of the endpoint already has streams.
3309 * This does not change any data structures, it only checks and gathers
3310 * information.
3311 */
3312static int xhci_calculate_streams_and_bitmask(struct xhci_hcd *xhci,
3313		struct usb_device *udev,
3314		struct usb_host_endpoint **eps, unsigned int num_eps,
3315		unsigned int *num_streams, u32 *changed_ep_bitmask)
3316{
3317	unsigned int max_streams;
3318	unsigned int endpoint_flag;
3319	int i;
3320	int ret;
3321
3322	for (i = 0; i < num_eps; i++) {
3323		ret = xhci_check_streams_endpoint(xhci, udev,
3324				eps[i], udev->slot_id);
3325		if (ret < 0)
3326			return ret;
3327
3328		max_streams = usb_ss_max_streams(&eps[i]->ss_ep_comp);
3329		if (max_streams < (*num_streams - 1)) {
3330			xhci_dbg(xhci, "Ep 0x%x only supports %u stream IDs.\n",
3331					eps[i]->desc.bEndpointAddress,
3332					max_streams);
3333			*num_streams = max_streams+1;
3334		}
3335
3336		endpoint_flag = xhci_get_endpoint_flag(&eps[i]->desc);
3337		if (*changed_ep_bitmask & endpoint_flag)
3338			return -EINVAL;
3339		*changed_ep_bitmask |= endpoint_flag;
3340	}
3341	return 0;
3342}
3343
3344static u32 xhci_calculate_no_streams_bitmask(struct xhci_hcd *xhci,
3345		struct usb_device *udev,
3346		struct usb_host_endpoint **eps, unsigned int num_eps)
3347{
3348	u32 changed_ep_bitmask = 0;
3349	unsigned int slot_id;
3350	unsigned int ep_index;
3351	unsigned int ep_state;
3352	int i;
3353
3354	slot_id = udev->slot_id;
3355	if (!xhci->devs[slot_id])
3356		return 0;
3357
3358	for (i = 0; i < num_eps; i++) {
3359		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3360		ep_state = xhci->devs[slot_id]->eps[ep_index].ep_state;
3361		/* Are streams already being freed for the endpoint? */
3362		if (ep_state & EP_GETTING_NO_STREAMS) {
3363			xhci_warn(xhci, "WARN Can't disable streams for "
3364					"endpoint 0x%x, "
3365					"streams are being disabled already\n",
3366					eps[i]->desc.bEndpointAddress);
3367			return 0;
3368		}
3369		/* Are there actually any streams to free? */
3370		if (!(ep_state & EP_HAS_STREAMS) &&
3371				!(ep_state & EP_GETTING_STREAMS)) {
3372			xhci_warn(xhci, "WARN Can't disable streams for "
3373					"endpoint 0x%x, "
3374					"streams are already disabled!\n",
3375					eps[i]->desc.bEndpointAddress);
3376			xhci_warn(xhci, "WARN xhci_free_streams() called "
3377					"with non-streams endpoint\n");
3378			return 0;
3379		}
3380		changed_ep_bitmask |= xhci_get_endpoint_flag(&eps[i]->desc);
3381	}
3382	return changed_ep_bitmask;
3383}
3384
3385/*
3386 * The USB device drivers use this function (through the HCD interface in USB
3387 * core) to prepare a set of bulk endpoints to use streams.  Streams are used to
3388 * coordinate mass storage command queueing across multiple endpoints (basically
3389 * a stream ID == a task ID).
3390 *
3391 * Setting up streams involves allocating the same size stream context array
3392 * for each endpoint and issuing a configure endpoint command for all endpoints.
3393 *
3394 * Don't allow the call to succeed if one endpoint only supports one stream
3395 * (which means it doesn't support streams at all).
3396 *
3397 * Drivers may get less stream IDs than they asked for, if the host controller
3398 * hardware or endpoints claim they can't support the number of requested
3399 * stream IDs.
3400 */
3401static int xhci_alloc_streams(struct usb_hcd *hcd, struct usb_device *udev,
3402		struct usb_host_endpoint **eps, unsigned int num_eps,
3403		unsigned int num_streams, gfp_t mem_flags)
3404{
3405	int i, ret;
3406	struct xhci_hcd *xhci;
3407	struct xhci_virt_device *vdev;
3408	struct xhci_command *config_cmd;
3409	struct xhci_input_control_ctx *ctrl_ctx;
3410	unsigned int ep_index;
3411	unsigned int num_stream_ctxs;
3412	unsigned int max_packet;
3413	unsigned long flags;
3414	u32 changed_ep_bitmask = 0;
3415
3416	if (!eps)
3417		return -EINVAL;
3418
3419	/* Add one to the number of streams requested to account for
3420	 * stream 0 that is reserved for xHCI usage.
3421	 */
3422	num_streams += 1;
3423	xhci = hcd_to_xhci(hcd);
3424	xhci_dbg(xhci, "Driver wants %u stream IDs (including stream 0).\n",
3425			num_streams);
3426
3427	/* MaxPSASize value 0 (2 streams) means streams are not supported */
3428	if ((xhci->quirks & XHCI_BROKEN_STREAMS) ||
3429			HCC_MAX_PSA(xhci->hcc_params) < 4) {
3430		xhci_dbg(xhci, "xHCI controller does not support streams.\n");
3431		return -ENOSYS;
3432	}
3433
3434	config_cmd = xhci_alloc_command_with_ctx(xhci, true, mem_flags);
3435	if (!config_cmd)
 
3436		return -ENOMEM;
3437
3438	ctrl_ctx = xhci_get_input_control_ctx(config_cmd->in_ctx);
3439	if (!ctrl_ctx) {
3440		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3441				__func__);
3442		xhci_free_command(xhci, config_cmd);
3443		return -ENOMEM;
3444	}
3445
3446	/* Check to make sure all endpoints are not already configured for
3447	 * streams.  While we're at it, find the maximum number of streams that
3448	 * all the endpoints will support and check for duplicate endpoints.
3449	 */
3450	spin_lock_irqsave(&xhci->lock, flags);
3451	ret = xhci_calculate_streams_and_bitmask(xhci, udev, eps,
3452			num_eps, &num_streams, &changed_ep_bitmask);
3453	if (ret < 0) {
3454		xhci_free_command(xhci, config_cmd);
3455		spin_unlock_irqrestore(&xhci->lock, flags);
3456		return ret;
3457	}
3458	if (num_streams <= 1) {
3459		xhci_warn(xhci, "WARN: endpoints can't handle "
3460				"more than one stream.\n");
3461		xhci_free_command(xhci, config_cmd);
3462		spin_unlock_irqrestore(&xhci->lock, flags);
3463		return -EINVAL;
3464	}
3465	vdev = xhci->devs[udev->slot_id];
3466	/* Mark each endpoint as being in transition, so
3467	 * xhci_urb_enqueue() will reject all URBs.
3468	 */
3469	for (i = 0; i < num_eps; i++) {
3470		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3471		vdev->eps[ep_index].ep_state |= EP_GETTING_STREAMS;
3472	}
3473	spin_unlock_irqrestore(&xhci->lock, flags);
3474
3475	/* Setup internal data structures and allocate HW data structures for
3476	 * streams (but don't install the HW structures in the input context
3477	 * until we're sure all memory allocation succeeded).
3478	 */
3479	xhci_calculate_streams_entries(xhci, &num_streams, &num_stream_ctxs);
3480	xhci_dbg(xhci, "Need %u stream ctx entries for %u stream IDs.\n",
3481			num_stream_ctxs, num_streams);
3482
3483	for (i = 0; i < num_eps; i++) {
3484		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3485		max_packet = usb_endpoint_maxp(&eps[i]->desc);
3486		vdev->eps[ep_index].stream_info = xhci_alloc_stream_info(xhci,
3487				num_stream_ctxs,
3488				num_streams,
3489				max_packet, mem_flags);
3490		if (!vdev->eps[ep_index].stream_info)
3491			goto cleanup;
3492		/* Set maxPstreams in endpoint context and update deq ptr to
3493		 * point to stream context array. FIXME
3494		 */
3495	}
3496
3497	/* Set up the input context for a configure endpoint command. */
3498	for (i = 0; i < num_eps; i++) {
3499		struct xhci_ep_ctx *ep_ctx;
3500
3501		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3502		ep_ctx = xhci_get_ep_ctx(xhci, config_cmd->in_ctx, ep_index);
3503
3504		xhci_endpoint_copy(xhci, config_cmd->in_ctx,
3505				vdev->out_ctx, ep_index);
3506		xhci_setup_streams_ep_input_ctx(xhci, ep_ctx,
3507				vdev->eps[ep_index].stream_info);
3508	}
3509	/* Tell the HW to drop its old copy of the endpoint context info
3510	 * and add the updated copy from the input context.
3511	 */
3512	xhci_setup_input_ctx_for_config_ep(xhci, config_cmd->in_ctx,
3513			vdev->out_ctx, ctrl_ctx,
3514			changed_ep_bitmask, changed_ep_bitmask);
3515
3516	/* Issue and wait for the configure endpoint command */
3517	ret = xhci_configure_endpoint(xhci, udev, config_cmd,
3518			false, false);
3519
3520	/* xHC rejected the configure endpoint command for some reason, so we
3521	 * leave the old ring intact and free our internal streams data
3522	 * structure.
3523	 */
3524	if (ret < 0)
3525		goto cleanup;
3526
3527	spin_lock_irqsave(&xhci->lock, flags);
3528	for (i = 0; i < num_eps; i++) {
3529		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3530		vdev->eps[ep_index].ep_state &= ~EP_GETTING_STREAMS;
3531		xhci_dbg(xhci, "Slot %u ep ctx %u now has streams.\n",
3532			 udev->slot_id, ep_index);
3533		vdev->eps[ep_index].ep_state |= EP_HAS_STREAMS;
3534	}
3535	xhci_free_command(xhci, config_cmd);
3536	spin_unlock_irqrestore(&xhci->lock, flags);
3537
3538	/* Subtract 1 for stream 0, which drivers can't use */
3539	return num_streams - 1;
3540
3541cleanup:
3542	/* If it didn't work, free the streams! */
3543	for (i = 0; i < num_eps; i++) {
3544		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3545		xhci_free_stream_info(xhci, vdev->eps[ep_index].stream_info);
3546		vdev->eps[ep_index].stream_info = NULL;
3547		/* FIXME Unset maxPstreams in endpoint context and
3548		 * update deq ptr to point to normal string ring.
3549		 */
3550		vdev->eps[ep_index].ep_state &= ~EP_GETTING_STREAMS;
3551		vdev->eps[ep_index].ep_state &= ~EP_HAS_STREAMS;
3552		xhci_endpoint_zero(xhci, vdev, eps[i]);
3553	}
3554	xhci_free_command(xhci, config_cmd);
3555	return -ENOMEM;
3556}
3557
3558/* Transition the endpoint from using streams to being a "normal" endpoint
3559 * without streams.
3560 *
3561 * Modify the endpoint context state, submit a configure endpoint command,
3562 * and free all endpoint rings for streams if that completes successfully.
3563 */
3564static int xhci_free_streams(struct usb_hcd *hcd, struct usb_device *udev,
3565		struct usb_host_endpoint **eps, unsigned int num_eps,
3566		gfp_t mem_flags)
3567{
3568	int i, ret;
3569	struct xhci_hcd *xhci;
3570	struct xhci_virt_device *vdev;
3571	struct xhci_command *command;
3572	struct xhci_input_control_ctx *ctrl_ctx;
3573	unsigned int ep_index;
3574	unsigned long flags;
3575	u32 changed_ep_bitmask;
3576
3577	xhci = hcd_to_xhci(hcd);
3578	vdev = xhci->devs[udev->slot_id];
3579
3580	/* Set up a configure endpoint command to remove the streams rings */
3581	spin_lock_irqsave(&xhci->lock, flags);
3582	changed_ep_bitmask = xhci_calculate_no_streams_bitmask(xhci,
3583			udev, eps, num_eps);
3584	if (changed_ep_bitmask == 0) {
3585		spin_unlock_irqrestore(&xhci->lock, flags);
3586		return -EINVAL;
3587	}
3588
3589	/* Use the xhci_command structure from the first endpoint.  We may have
3590	 * allocated too many, but the driver may call xhci_free_streams() for
3591	 * each endpoint it grouped into one call to xhci_alloc_streams().
3592	 */
3593	ep_index = xhci_get_endpoint_index(&eps[0]->desc);
3594	command = vdev->eps[ep_index].stream_info->free_streams_command;
3595	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
3596	if (!ctrl_ctx) {
3597		spin_unlock_irqrestore(&xhci->lock, flags);
3598		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
3599				__func__);
3600		return -EINVAL;
3601	}
3602
3603	for (i = 0; i < num_eps; i++) {
3604		struct xhci_ep_ctx *ep_ctx;
3605
3606		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3607		ep_ctx = xhci_get_ep_ctx(xhci, command->in_ctx, ep_index);
3608		xhci->devs[udev->slot_id]->eps[ep_index].ep_state |=
3609			EP_GETTING_NO_STREAMS;
3610
3611		xhci_endpoint_copy(xhci, command->in_ctx,
3612				vdev->out_ctx, ep_index);
3613		xhci_setup_no_streams_ep_input_ctx(ep_ctx,
3614				&vdev->eps[ep_index]);
3615	}
3616	xhci_setup_input_ctx_for_config_ep(xhci, command->in_ctx,
3617			vdev->out_ctx, ctrl_ctx,
3618			changed_ep_bitmask, changed_ep_bitmask);
3619	spin_unlock_irqrestore(&xhci->lock, flags);
3620
3621	/* Issue and wait for the configure endpoint command,
3622	 * which must succeed.
3623	 */
3624	ret = xhci_configure_endpoint(xhci, udev, command,
3625			false, true);
3626
3627	/* xHC rejected the configure endpoint command for some reason, so we
3628	 * leave the streams rings intact.
3629	 */
3630	if (ret < 0)
3631		return ret;
3632
3633	spin_lock_irqsave(&xhci->lock, flags);
3634	for (i = 0; i < num_eps; i++) {
3635		ep_index = xhci_get_endpoint_index(&eps[i]->desc);
3636		xhci_free_stream_info(xhci, vdev->eps[ep_index].stream_info);
3637		vdev->eps[ep_index].stream_info = NULL;
3638		/* FIXME Unset maxPstreams in endpoint context and
3639		 * update deq ptr to point to normal string ring.
3640		 */
3641		vdev->eps[ep_index].ep_state &= ~EP_GETTING_NO_STREAMS;
3642		vdev->eps[ep_index].ep_state &= ~EP_HAS_STREAMS;
3643	}
3644	spin_unlock_irqrestore(&xhci->lock, flags);
3645
3646	return 0;
3647}
3648
3649/*
3650 * Deletes endpoint resources for endpoints that were active before a Reset
3651 * Device command, or a Disable Slot command.  The Reset Device command leaves
3652 * the control endpoint intact, whereas the Disable Slot command deletes it.
3653 *
3654 * Must be called with xhci->lock held.
3655 */
3656void xhci_free_device_endpoint_resources(struct xhci_hcd *xhci,
3657	struct xhci_virt_device *virt_dev, bool drop_control_ep)
3658{
3659	int i;
3660	unsigned int num_dropped_eps = 0;
3661	unsigned int drop_flags = 0;
3662
3663	for (i = (drop_control_ep ? 0 : 1); i < 31; i++) {
3664		if (virt_dev->eps[i].ring) {
3665			drop_flags |= 1 << i;
3666			num_dropped_eps++;
3667		}
3668	}
3669	xhci->num_active_eps -= num_dropped_eps;
3670	if (num_dropped_eps)
3671		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3672				"Dropped %u ep ctxs, flags = 0x%x, "
3673				"%u now active.",
3674				num_dropped_eps, drop_flags,
3675				xhci->num_active_eps);
3676}
3677
3678/*
3679 * This submits a Reset Device Command, which will set the device state to 0,
3680 * set the device address to 0, and disable all the endpoints except the default
3681 * control endpoint.  The USB core should come back and call
3682 * xhci_address_device(), and then re-set up the configuration.  If this is
3683 * called because of a usb_reset_and_verify_device(), then the old alternate
3684 * settings will be re-installed through the normal bandwidth allocation
3685 * functions.
3686 *
3687 * Wait for the Reset Device command to finish.  Remove all structures
3688 * associated with the endpoints that were disabled.  Clear the input device
3689 * structure? Reset the control endpoint 0 max packet size?
3690 *
3691 * If the virt_dev to be reset does not exist or does not match the udev,
3692 * it means the device is lost, possibly due to the xHC restore error and
3693 * re-initialization during S3/S4. In this case, call xhci_alloc_dev() to
3694 * re-allocate the device.
3695 */
3696static int xhci_discover_or_reset_device(struct usb_hcd *hcd,
3697		struct usb_device *udev)
3698{
3699	int ret, i;
3700	unsigned long flags;
3701	struct xhci_hcd *xhci;
3702	unsigned int slot_id;
3703	struct xhci_virt_device *virt_dev;
3704	struct xhci_command *reset_device_cmd;
 
3705	struct xhci_slot_ctx *slot_ctx;
3706	int old_active_eps = 0;
3707
3708	ret = xhci_check_args(hcd, udev, NULL, 0, false, __func__);
3709	if (ret <= 0)
3710		return ret;
3711	xhci = hcd_to_xhci(hcd);
3712	slot_id = udev->slot_id;
3713	virt_dev = xhci->devs[slot_id];
3714	if (!virt_dev) {
3715		xhci_dbg(xhci, "The device to be reset with slot ID %u does "
3716				"not exist. Re-allocate the device\n", slot_id);
3717		ret = xhci_alloc_dev(hcd, udev);
3718		if (ret == 1)
3719			return 0;
3720		else
3721			return -EINVAL;
3722	}
3723
3724	if (virt_dev->tt_info)
3725		old_active_eps = virt_dev->tt_info->active_eps;
3726
3727	if (virt_dev->udev != udev) {
3728		/* If the virt_dev and the udev does not match, this virt_dev
3729		 * may belong to another udev.
3730		 * Re-allocate the device.
3731		 */
3732		xhci_dbg(xhci, "The device to be reset with slot ID %u does "
3733				"not match the udev. Re-allocate the device\n",
3734				slot_id);
3735		ret = xhci_alloc_dev(hcd, udev);
3736		if (ret == 1)
3737			return 0;
3738		else
3739			return -EINVAL;
3740	}
3741
3742	/* If device is not setup, there is no point in resetting it */
3743	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
3744	if (GET_SLOT_STATE(le32_to_cpu(slot_ctx->dev_state)) ==
3745						SLOT_STATE_DISABLED)
3746		return 0;
3747
3748	trace_xhci_discover_or_reset_device(slot_ctx);
3749
3750	xhci_dbg(xhci, "Resetting device with slot ID %u\n", slot_id);
3751	/* Allocate the command structure that holds the struct completion.
3752	 * Assume we're in process context, since the normal device reset
3753	 * process has to wait for the device anyway.  Storage devices are
3754	 * reset as part of error handling, so use GFP_NOIO instead of
3755	 * GFP_KERNEL.
3756	 */
3757	reset_device_cmd = xhci_alloc_command(xhci, true, GFP_NOIO);
3758	if (!reset_device_cmd) {
3759		xhci_dbg(xhci, "Couldn't allocate command structure.\n");
3760		return -ENOMEM;
3761	}
3762
3763	/* Attempt to submit the Reset Device command to the command ring */
3764	spin_lock_irqsave(&xhci->lock, flags);
3765
3766	ret = xhci_queue_reset_device(xhci, reset_device_cmd, slot_id);
3767	if (ret) {
3768		xhci_dbg(xhci, "FIXME: allocate a command ring segment\n");
3769		spin_unlock_irqrestore(&xhci->lock, flags);
3770		goto command_cleanup;
3771	}
3772	xhci_ring_cmd_db(xhci);
3773	spin_unlock_irqrestore(&xhci->lock, flags);
3774
3775	/* Wait for the Reset Device command to finish */
3776	wait_for_completion(reset_device_cmd->completion);
3777
3778	/* The Reset Device command can't fail, according to the 0.95/0.96 spec,
3779	 * unless we tried to reset a slot ID that wasn't enabled,
3780	 * or the device wasn't in the addressed or configured state.
3781	 */
3782	ret = reset_device_cmd->status;
3783	switch (ret) {
3784	case COMP_COMMAND_ABORTED:
3785	case COMP_COMMAND_RING_STOPPED:
3786		xhci_warn(xhci, "Timeout waiting for reset device command\n");
3787		ret = -ETIME;
3788		goto command_cleanup;
3789	case COMP_SLOT_NOT_ENABLED_ERROR: /* 0.95 completion for bad slot ID */
3790	case COMP_CONTEXT_STATE_ERROR: /* 0.96 completion code for same thing */
3791		xhci_dbg(xhci, "Can't reset device (slot ID %u) in %s state\n",
3792				slot_id,
3793				xhci_get_slot_state(xhci, virt_dev->out_ctx));
3794		xhci_dbg(xhci, "Not freeing device rings.\n");
3795		/* Don't treat this as an error.  May change my mind later. */
3796		ret = 0;
3797		goto command_cleanup;
3798	case COMP_SUCCESS:
3799		xhci_dbg(xhci, "Successful reset device command.\n");
3800		break;
3801	default:
3802		if (xhci_is_vendor_info_code(xhci, ret))
3803			break;
3804		xhci_warn(xhci, "Unknown completion code %u for "
3805				"reset device command.\n", ret);
3806		ret = -EINVAL;
3807		goto command_cleanup;
3808	}
3809
3810	/* Free up host controller endpoint resources */
3811	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
3812		spin_lock_irqsave(&xhci->lock, flags);
3813		/* Don't delete the default control endpoint resources */
3814		xhci_free_device_endpoint_resources(xhci, virt_dev, false);
3815		spin_unlock_irqrestore(&xhci->lock, flags);
3816	}
3817
3818	/* Everything but endpoint 0 is disabled, so free the rings. */
3819	for (i = 1; i < 31; i++) {
 
3820		struct xhci_virt_ep *ep = &virt_dev->eps[i];
3821
3822		if (ep->ep_state & EP_HAS_STREAMS) {
3823			xhci_warn(xhci, "WARN: endpoint 0x%02x has streams on device reset, freeing streams.\n",
3824					xhci_get_endpoint_address(i));
3825			xhci_free_stream_info(xhci, ep->stream_info);
3826			ep->stream_info = NULL;
3827			ep->ep_state &= ~EP_HAS_STREAMS;
3828		}
3829
3830		if (ep->ring) {
3831			xhci_debugfs_remove_endpoint(xhci, virt_dev, i);
3832			xhci_free_endpoint_ring(xhci, virt_dev, i);
3833		}
3834		if (!list_empty(&virt_dev->eps[i].bw_endpoint_list))
3835			xhci_drop_ep_from_interval_table(xhci,
3836					&virt_dev->eps[i].bw_info,
3837					virt_dev->bw_table,
3838					udev,
3839					&virt_dev->eps[i],
3840					virt_dev->tt_info);
3841		xhci_clear_endpoint_bw_info(&virt_dev->eps[i].bw_info);
3842	}
3843	/* If necessary, update the number of active TTs on this root port */
3844	xhci_update_tt_active_eps(xhci, virt_dev, old_active_eps);
3845	virt_dev->flags = 0;
 
 
3846	ret = 0;
3847
3848command_cleanup:
3849	xhci_free_command(xhci, reset_device_cmd);
3850	return ret;
3851}
3852
3853/*
3854 * At this point, the struct usb_device is about to go away, the device has
3855 * disconnected, and all traffic has been stopped and the endpoints have been
3856 * disabled.  Free any HC data structures associated with that device.
3857 */
3858static void xhci_free_dev(struct usb_hcd *hcd, struct usb_device *udev)
3859{
3860	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
3861	struct xhci_virt_device *virt_dev;
3862	struct xhci_slot_ctx *slot_ctx;
 
3863	int i, ret;
 
 
 
 
 
3864
3865#ifndef CONFIG_USB_DEFAULT_PERSIST
3866	/*
3867	 * We called pm_runtime_get_noresume when the device was attached.
3868	 * Decrement the counter here to allow controller to runtime suspend
3869	 * if no devices remain.
3870	 */
3871	if (xhci->quirks & XHCI_RESET_ON_RESUME)
3872		pm_runtime_put_noidle(hcd->self.controller);
3873#endif
3874
3875	ret = xhci_check_args(hcd, udev, NULL, 0, true, __func__);
3876	/* If the host is halted due to driver unload, we still need to free the
3877	 * device.
3878	 */
3879	if (ret <= 0 && ret != -ENODEV)
 
3880		return;
 
3881
3882	virt_dev = xhci->devs[udev->slot_id];
3883	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
3884	trace_xhci_free_dev(slot_ctx);
3885
3886	/* Stop any wayward timer functions (which may grab the lock) */
3887	for (i = 0; i < 31; i++) {
3888		virt_dev->eps[i].ep_state &= ~EP_STOP_CMD_PENDING;
3889		del_timer_sync(&virt_dev->eps[i].stop_cmd_timer);
3890	}
3891	virt_dev->udev = NULL;
3892	ret = xhci_disable_slot(xhci, udev->slot_id);
3893	if (ret)
3894		xhci_free_virt_device(xhci, udev->slot_id);
3895}
3896
3897int xhci_disable_slot(struct xhci_hcd *xhci, u32 slot_id)
3898{
3899	struct xhci_command *command;
3900	unsigned long flags;
3901	u32 state;
3902	int ret = 0;
3903
3904	command = xhci_alloc_command(xhci, false, GFP_KERNEL);
3905	if (!command)
3906		return -ENOMEM;
3907
3908	xhci_debugfs_remove_slot(xhci, slot_id);
3909
3910	spin_lock_irqsave(&xhci->lock, flags);
3911	/* Don't disable the slot if the host controller is dead. */
3912	state = readl(&xhci->op_regs->status);
3913	if (state == 0xffffffff || (xhci->xhc_state & XHCI_STATE_DYING) ||
3914			(xhci->xhc_state & XHCI_STATE_HALTED)) {
 
3915		spin_unlock_irqrestore(&xhci->lock, flags);
3916		kfree(command);
3917		return -ENODEV;
3918	}
3919
3920	ret = xhci_queue_slot_control(xhci, command, TRB_DISABLE_SLOT,
3921				slot_id);
3922	if (ret) {
3923		spin_unlock_irqrestore(&xhci->lock, flags);
3924		kfree(command);
3925		return ret;
3926	}
3927	xhci_ring_cmd_db(xhci);
3928	spin_unlock_irqrestore(&xhci->lock, flags);
3929	return ret;
 
 
 
 
3930}
3931
3932/*
3933 * Checks if we have enough host controller resources for the default control
3934 * endpoint.
3935 *
3936 * Must be called with xhci->lock held.
3937 */
3938static int xhci_reserve_host_control_ep_resources(struct xhci_hcd *xhci)
3939{
3940	if (xhci->num_active_eps + 1 > xhci->limit_active_eps) {
3941		xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3942				"Not enough ep ctxs: "
3943				"%u active, need to add 1, limit is %u.",
3944				xhci->num_active_eps, xhci->limit_active_eps);
3945		return -ENOMEM;
3946	}
3947	xhci->num_active_eps += 1;
3948	xhci_dbg_trace(xhci, trace_xhci_dbg_quirks,
3949			"Adding 1 ep ctx, %u now active.",
3950			xhci->num_active_eps);
3951	return 0;
3952}
3953
3954
3955/*
3956 * Returns 0 if the xHC ran out of device slots, the Enable Slot command
3957 * timed out, or allocating memory failed.  Returns 1 on success.
3958 */
3959int xhci_alloc_dev(struct usb_hcd *hcd, struct usb_device *udev)
3960{
3961	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
3962	struct xhci_virt_device *vdev;
3963	struct xhci_slot_ctx *slot_ctx;
3964	unsigned long flags;
3965	int ret, slot_id;
3966	struct xhci_command *command;
3967
3968	command = xhci_alloc_command(xhci, true, GFP_KERNEL);
3969	if (!command)
3970		return 0;
3971
 
 
3972	spin_lock_irqsave(&xhci->lock, flags);
 
3973	ret = xhci_queue_slot_control(xhci, command, TRB_ENABLE_SLOT, 0);
3974	if (ret) {
3975		spin_unlock_irqrestore(&xhci->lock, flags);
 
3976		xhci_dbg(xhci, "FIXME: allocate a command ring segment\n");
3977		xhci_free_command(xhci, command);
3978		return 0;
3979	}
3980	xhci_ring_cmd_db(xhci);
3981	spin_unlock_irqrestore(&xhci->lock, flags);
3982
3983	wait_for_completion(command->completion);
3984	slot_id = command->slot_id;
 
3985
3986	if (!slot_id || command->status != COMP_SUCCESS) {
3987		xhci_err(xhci, "Error while assigning device slot ID\n");
3988		xhci_err(xhci, "Max number of devices this xHCI host supports is %u.\n",
3989				HCS_MAX_SLOTS(
3990					readl(&xhci->cap_regs->hcs_params1)));
3991		xhci_free_command(xhci, command);
3992		return 0;
3993	}
3994
3995	xhci_free_command(xhci, command);
3996
3997	if ((xhci->quirks & XHCI_EP_LIMIT_QUIRK)) {
3998		spin_lock_irqsave(&xhci->lock, flags);
3999		ret = xhci_reserve_host_control_ep_resources(xhci);
4000		if (ret) {
4001			spin_unlock_irqrestore(&xhci->lock, flags);
4002			xhci_warn(xhci, "Not enough host resources, "
4003					"active endpoint contexts = %u\n",
4004					xhci->num_active_eps);
4005			goto disable_slot;
4006		}
4007		spin_unlock_irqrestore(&xhci->lock, flags);
4008	}
4009	/* Use GFP_NOIO, since this function can be called from
4010	 * xhci_discover_or_reset_device(), which may be called as part of
4011	 * mass storage driver error handling.
4012	 */
4013	if (!xhci_alloc_virt_device(xhci, slot_id, udev, GFP_NOIO)) {
4014		xhci_warn(xhci, "Could not allocate xHCI USB device data structures\n");
4015		goto disable_slot;
4016	}
4017	vdev = xhci->devs[slot_id];
4018	slot_ctx = xhci_get_slot_ctx(xhci, vdev->out_ctx);
4019	trace_xhci_alloc_dev(slot_ctx);
4020
4021	udev->slot_id = slot_id;
4022
4023	xhci_debugfs_create_slot(xhci, slot_id);
4024
4025#ifndef CONFIG_USB_DEFAULT_PERSIST
4026	/*
4027	 * If resetting upon resume, we can't put the controller into runtime
4028	 * suspend if there is a device attached.
4029	 */
4030	if (xhci->quirks & XHCI_RESET_ON_RESUME)
4031		pm_runtime_get_noresume(hcd->self.controller);
4032#endif
4033
 
 
4034	/* Is this a LS or FS device under a HS hub? */
4035	/* Hub or peripherial? */
4036	return 1;
4037
4038disable_slot:
4039	ret = xhci_disable_slot(xhci, udev->slot_id);
4040	if (ret)
4041		xhci_free_virt_device(xhci, udev->slot_id);
4042
 
 
 
 
4043	return 0;
4044}
4045
4046/*
4047 * Issue an Address Device command and optionally send a corresponding
4048 * SetAddress request to the device.
4049 */
4050static int xhci_setup_device(struct usb_hcd *hcd, struct usb_device *udev,
4051			     enum xhci_setup_dev setup)
4052{
4053	const char *act = setup == SETUP_CONTEXT_ONLY ? "context" : "address";
4054	unsigned long flags;
4055	struct xhci_virt_device *virt_dev;
4056	int ret = 0;
4057	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4058	struct xhci_slot_ctx *slot_ctx;
4059	struct xhci_input_control_ctx *ctrl_ctx;
4060	u64 temp_64;
4061	struct xhci_command *command = NULL;
4062
4063	mutex_lock(&xhci->mutex);
4064
4065	if (xhci->xhc_state) {	/* dying, removing or halted */
4066		ret = -ESHUTDOWN;
4067		goto out;
4068	}
4069
4070	if (!udev->slot_id) {
4071		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4072				"Bad Slot ID %d", udev->slot_id);
4073		ret = -EINVAL;
4074		goto out;
4075	}
4076
4077	virt_dev = xhci->devs[udev->slot_id];
4078
4079	if (WARN_ON(!virt_dev)) {
4080		/*
4081		 * In plug/unplug torture test with an NEC controller,
4082		 * a zero-dereference was observed once due to virt_dev = 0.
4083		 * Print useful debug rather than crash if it is observed again!
4084		 */
4085		xhci_warn(xhci, "Virt dev invalid for slot_id 0x%x!\n",
4086			udev->slot_id);
4087		ret = -EINVAL;
4088		goto out;
4089	}
4090	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
4091	trace_xhci_setup_device_slot(slot_ctx);
4092
4093	if (setup == SETUP_CONTEXT_ONLY) {
 
4094		if (GET_SLOT_STATE(le32_to_cpu(slot_ctx->dev_state)) ==
4095		    SLOT_STATE_DEFAULT) {
4096			xhci_dbg(xhci, "Slot already in default state\n");
4097			goto out;
4098		}
4099	}
4100
4101	command = xhci_alloc_command(xhci, true, GFP_KERNEL);
4102	if (!command) {
4103		ret = -ENOMEM;
4104		goto out;
4105	}
4106
4107	command->in_ctx = virt_dev->in_ctx;
 
4108
4109	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->in_ctx);
4110	ctrl_ctx = xhci_get_input_control_ctx(virt_dev->in_ctx);
4111	if (!ctrl_ctx) {
4112		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
4113				__func__);
4114		ret = -EINVAL;
4115		goto out;
4116	}
4117	/*
4118	 * If this is the first Set Address since device plug-in or
4119	 * virt_device realloaction after a resume with an xHCI power loss,
4120	 * then set up the slot context.
4121	 */
4122	if (!slot_ctx->dev_info)
4123		xhci_setup_addressable_virt_dev(xhci, udev);
4124	/* Otherwise, update the control endpoint ring enqueue pointer. */
4125	else
4126		xhci_copy_ep0_dequeue_into_input_ctx(xhci, udev);
4127	ctrl_ctx->add_flags = cpu_to_le32(SLOT_FLAG | EP0_FLAG);
4128	ctrl_ctx->drop_flags = 0;
4129
 
 
4130	trace_xhci_address_ctx(xhci, virt_dev->in_ctx,
4131				le32_to_cpu(slot_ctx->dev_info) >> 27);
4132
4133	trace_xhci_address_ctrl_ctx(ctrl_ctx);
4134	spin_lock_irqsave(&xhci->lock, flags);
4135	trace_xhci_setup_device(virt_dev);
4136	ret = xhci_queue_address_device(xhci, command, virt_dev->in_ctx->dma,
4137					udev->slot_id, setup);
4138	if (ret) {
4139		spin_unlock_irqrestore(&xhci->lock, flags);
4140		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4141				"FIXME: allocate a command ring segment");
4142		goto out;
4143	}
4144	xhci_ring_cmd_db(xhci);
4145	spin_unlock_irqrestore(&xhci->lock, flags);
4146
4147	/* ctrl tx can take up to 5 sec; XXX: need more time for xHC? */
4148	wait_for_completion(command->completion);
4149
4150	/* FIXME: From section 4.3.4: "Software shall be responsible for timing
4151	 * the SetAddress() "recovery interval" required by USB and aborting the
4152	 * command on a timeout.
4153	 */
4154	switch (command->status) {
4155	case COMP_COMMAND_ABORTED:
4156	case COMP_COMMAND_RING_STOPPED:
4157		xhci_warn(xhci, "Timeout while waiting for setup device command\n");
4158		ret = -ETIME;
4159		break;
4160	case COMP_CONTEXT_STATE_ERROR:
4161	case COMP_SLOT_NOT_ENABLED_ERROR:
4162		xhci_err(xhci, "Setup ERROR: setup %s command for slot %d.\n",
4163			 act, udev->slot_id);
4164		ret = -EINVAL;
4165		break;
4166	case COMP_USB_TRANSACTION_ERROR:
4167		dev_warn(&udev->dev, "Device not responding to setup %s.\n", act);
4168
4169		mutex_unlock(&xhci->mutex);
4170		ret = xhci_disable_slot(xhci, udev->slot_id);
4171		if (!ret)
4172			xhci_alloc_dev(hcd, udev);
4173		kfree(command->completion);
4174		kfree(command);
4175		return -EPROTO;
4176	case COMP_INCOMPATIBLE_DEVICE_ERROR:
4177		dev_warn(&udev->dev,
4178			 "ERROR: Incompatible device for setup %s command\n", act);
4179		ret = -ENODEV;
4180		break;
4181	case COMP_SUCCESS:
4182		xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4183			       "Successful setup %s command", act);
4184		break;
4185	default:
4186		xhci_err(xhci,
4187			 "ERROR: unexpected setup %s command completion code 0x%x.\n",
4188			 act, command->status);
 
 
4189		trace_xhci_address_ctx(xhci, virt_dev->out_ctx, 1);
4190		ret = -EINVAL;
4191		break;
4192	}
4193	if (ret)
4194		goto out;
4195	temp_64 = xhci_read_64(xhci, &xhci->op_regs->dcbaa_ptr);
4196	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4197			"Op regs DCBAA ptr = %#016llx", temp_64);
4198	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4199		"Slot ID %d dcbaa entry @%p = %#016llx",
4200		udev->slot_id,
4201		&xhci->dcbaa->dev_context_ptrs[udev->slot_id],
4202		(unsigned long long)
4203		le64_to_cpu(xhci->dcbaa->dev_context_ptrs[udev->slot_id]));
4204	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4205			"Output Context DMA address = %#08llx",
4206			(unsigned long long)virt_dev->out_ctx->dma);
 
 
4207	trace_xhci_address_ctx(xhci, virt_dev->in_ctx,
4208				le32_to_cpu(slot_ctx->dev_info) >> 27);
 
 
4209	/*
4210	 * USB core uses address 1 for the roothubs, so we add one to the
4211	 * address given back to us by the HC.
4212	 */
 
4213	trace_xhci_address_ctx(xhci, virt_dev->out_ctx,
4214				le32_to_cpu(slot_ctx->dev_info) >> 27);
4215	/* Zero the input context control for later use */
4216	ctrl_ctx->add_flags = 0;
4217	ctrl_ctx->drop_flags = 0;
4218	slot_ctx = xhci_get_slot_ctx(xhci, virt_dev->out_ctx);
4219	udev->devaddr = (u8)(le32_to_cpu(slot_ctx->dev_state) & DEV_ADDR_MASK);
4220
4221	xhci_dbg_trace(xhci, trace_xhci_dbg_address,
4222		       "Internal device address = %d",
4223		       le32_to_cpu(slot_ctx->dev_state) & DEV_ADDR_MASK);
4224out:
4225	mutex_unlock(&xhci->mutex);
4226	if (command) {
4227		kfree(command->completion);
4228		kfree(command);
4229	}
4230	return ret;
4231}
4232
4233static int xhci_address_device(struct usb_hcd *hcd, struct usb_device *udev)
4234{
4235	return xhci_setup_device(hcd, udev, SETUP_CONTEXT_ADDRESS);
4236}
4237
4238static int xhci_enable_device(struct usb_hcd *hcd, struct usb_device *udev)
4239{
4240	return xhci_setup_device(hcd, udev, SETUP_CONTEXT_ONLY);
4241}
4242
4243/*
4244 * Transfer the port index into real index in the HW port status
4245 * registers. Caculate offset between the port's PORTSC register
4246 * and port status base. Divide the number of per port register
4247 * to get the real index. The raw port number bases 1.
4248 */
4249int xhci_find_raw_port_number(struct usb_hcd *hcd, int port1)
4250{
4251	struct xhci_hub *rhub;
 
 
 
 
 
 
 
 
4252
4253	rhub = xhci_get_rhub(hcd);
4254	return rhub->ports[port1 - 1]->hw_portnum + 1;
4255}
4256
4257/*
4258 * Issue an Evaluate Context command to change the Maximum Exit Latency in the
4259 * slot context.  If that succeeds, store the new MEL in the xhci_virt_device.
4260 */
4261static int __maybe_unused xhci_change_max_exit_latency(struct xhci_hcd *xhci,
4262			struct usb_device *udev, u16 max_exit_latency)
4263{
4264	struct xhci_virt_device *virt_dev;
4265	struct xhci_command *command;
4266	struct xhci_input_control_ctx *ctrl_ctx;
4267	struct xhci_slot_ctx *slot_ctx;
4268	unsigned long flags;
4269	int ret;
4270
4271	spin_lock_irqsave(&xhci->lock, flags);
4272
4273	virt_dev = xhci->devs[udev->slot_id];
4274
4275	/*
4276	 * virt_dev might not exists yet if xHC resumed from hibernate (S4) and
4277	 * xHC was re-initialized. Exit latency will be set later after
4278	 * hub_port_finish_reset() is done and xhci->devs[] are re-allocated
4279	 */
4280
4281	if (!virt_dev || max_exit_latency == virt_dev->current_mel) {
4282		spin_unlock_irqrestore(&xhci->lock, flags);
4283		return 0;
4284	}
4285
4286	/* Attempt to issue an Evaluate Context command to change the MEL. */
4287	command = xhci->lpm_command;
4288	ctrl_ctx = xhci_get_input_control_ctx(command->in_ctx);
4289	if (!ctrl_ctx) {
4290		spin_unlock_irqrestore(&xhci->lock, flags);
4291		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
4292				__func__);
4293		return -ENOMEM;
4294	}
4295
4296	xhci_slot_copy(xhci, command->in_ctx, virt_dev->out_ctx);
4297	spin_unlock_irqrestore(&xhci->lock, flags);
4298
4299	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
4300	slot_ctx = xhci_get_slot_ctx(xhci, command->in_ctx);
4301	slot_ctx->dev_info2 &= cpu_to_le32(~((u32) MAX_EXIT));
4302	slot_ctx->dev_info2 |= cpu_to_le32(max_exit_latency);
4303	slot_ctx->dev_state = 0;
4304
4305	xhci_dbg_trace(xhci, trace_xhci_dbg_context_change,
4306			"Set up evaluate context for LPM MEL change.");
 
 
4307
4308	/* Issue and wait for the evaluate context command. */
4309	ret = xhci_configure_endpoint(xhci, udev, command,
4310			true, true);
 
 
4311
4312	if (!ret) {
4313		spin_lock_irqsave(&xhci->lock, flags);
4314		virt_dev->current_mel = max_exit_latency;
4315		spin_unlock_irqrestore(&xhci->lock, flags);
4316	}
4317	return ret;
4318}
4319
4320#ifdef CONFIG_PM
4321
4322/* BESL to HIRD Encoding array for USB2 LPM */
4323static int xhci_besl_encoding[16] = {125, 150, 200, 300, 400, 500, 1000, 2000,
4324	3000, 4000, 5000, 6000, 7000, 8000, 9000, 10000};
4325
4326/* Calculate HIRD/BESL for USB2 PORTPMSC*/
4327static int xhci_calculate_hird_besl(struct xhci_hcd *xhci,
4328					struct usb_device *udev)
4329{
4330	int u2del, besl, besl_host;
4331	int besl_device = 0;
4332	u32 field;
4333
4334	u2del = HCS_U2_LATENCY(xhci->hcs_params3);
4335	field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4336
4337	if (field & USB_BESL_SUPPORT) {
4338		for (besl_host = 0; besl_host < 16; besl_host++) {
4339			if (xhci_besl_encoding[besl_host] >= u2del)
4340				break;
4341		}
4342		/* Use baseline BESL value as default */
4343		if (field & USB_BESL_BASELINE_VALID)
4344			besl_device = USB_GET_BESL_BASELINE(field);
4345		else if (field & USB_BESL_DEEP_VALID)
4346			besl_device = USB_GET_BESL_DEEP(field);
4347	} else {
4348		if (u2del <= 50)
4349			besl_host = 0;
4350		else
4351			besl_host = (u2del - 51) / 75 + 1;
4352	}
4353
4354	besl = besl_host + besl_device;
4355	if (besl > 15)
4356		besl = 15;
4357
4358	return besl;
4359}
4360
4361/* Calculate BESLD, L1 timeout and HIRDM for USB2 PORTHLPMC */
4362static int xhci_calculate_usb2_hw_lpm_params(struct usb_device *udev)
4363{
4364	u32 field;
4365	int l1;
4366	int besld = 0;
4367	int hirdm = 0;
4368
4369	field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4370
4371	/* xHCI l1 is set in steps of 256us, xHCI 1.0 section 5.4.11.2 */
4372	l1 = udev->l1_params.timeout / 256;
4373
4374	/* device has preferred BESLD */
4375	if (field & USB_BESL_DEEP_VALID) {
4376		besld = USB_GET_BESL_DEEP(field);
4377		hirdm = 1;
4378	}
4379
4380	return PORT_BESLD(besld) | PORT_L1_TIMEOUT(l1) | PORT_HIRDM(hirdm);
4381}
4382
4383static int xhci_set_usb2_hardware_lpm(struct usb_hcd *hcd,
4384			struct usb_device *udev, int enable)
4385{
4386	struct xhci_hcd	*xhci = hcd_to_xhci(hcd);
4387	struct xhci_port **ports;
4388	__le32 __iomem	*pm_addr, *hlpm_addr;
4389	u32		pm_val, hlpm_val, field;
4390	unsigned int	port_num;
4391	unsigned long	flags;
4392	int		hird, exit_latency;
4393	int		ret;
4394
4395	if (xhci->quirks & XHCI_HW_LPM_DISABLE)
4396		return -EPERM;
4397
4398	if (hcd->speed >= HCD_USB3 || !xhci->hw_lpm_support ||
4399			!udev->lpm_capable)
4400		return -EPERM;
4401
4402	if (!udev->parent || udev->parent->parent ||
4403			udev->descriptor.bDeviceClass == USB_CLASS_HUB)
4404		return -EPERM;
4405
4406	if (udev->usb2_hw_lpm_capable != 1)
4407		return -EPERM;
4408
4409	spin_lock_irqsave(&xhci->lock, flags);
4410
4411	ports = xhci->usb2_rhub.ports;
4412	port_num = udev->portnum - 1;
4413	pm_addr = ports[port_num]->addr + PORTPMSC;
4414	pm_val = readl(pm_addr);
4415	hlpm_addr = ports[port_num]->addr + PORTHLPMC;
 
4416
4417	xhci_dbg(xhci, "%s port %d USB2 hardware LPM\n",
4418			enable ? "enable" : "disable", port_num + 1);
4419
4420	if (enable) {
4421		/* Host supports BESL timeout instead of HIRD */
4422		if (udev->usb2_hw_lpm_besl_capable) {
4423			/* if device doesn't have a preferred BESL value use a
4424			 * default one which works with mixed HIRD and BESL
4425			 * systems. See XHCI_DEFAULT_BESL definition in xhci.h
4426			 */
4427			field = le32_to_cpu(udev->bos->ext_cap->bmAttributes);
4428			if ((field & USB_BESL_SUPPORT) &&
4429			    (field & USB_BESL_BASELINE_VALID))
4430				hird = USB_GET_BESL_BASELINE(field);
4431			else
4432				hird = udev->l1_params.besl;
4433
4434			exit_latency = xhci_besl_encoding[hird];
4435			spin_unlock_irqrestore(&xhci->lock, flags);
4436
4437			/* USB 3.0 code dedicate one xhci->lpm_command->in_ctx
4438			 * input context for link powermanagement evaluate
4439			 * context commands. It is protected by hcd->bandwidth
4440			 * mutex and is shared by all devices. We need to set
4441			 * the max ext latency in USB 2 BESL LPM as well, so
4442			 * use the same mutex and xhci_change_max_exit_latency()
4443			 */
4444			mutex_lock(hcd->bandwidth_mutex);
4445			ret = xhci_change_max_exit_latency(xhci, udev,
4446							   exit_latency);
4447			mutex_unlock(hcd->bandwidth_mutex);
4448
4449			if (ret < 0)
4450				return ret;
4451			spin_lock_irqsave(&xhci->lock, flags);
4452
4453			hlpm_val = xhci_calculate_usb2_hw_lpm_params(udev);
4454			writel(hlpm_val, hlpm_addr);
4455			/* flush write */
4456			readl(hlpm_addr);
4457		} else {
4458			hird = xhci_calculate_hird_besl(xhci, udev);
4459		}
4460
4461		pm_val &= ~PORT_HIRD_MASK;
4462		pm_val |= PORT_HIRD(hird) | PORT_RWE | PORT_L1DS(udev->slot_id);
4463		writel(pm_val, pm_addr);
4464		pm_val = readl(pm_addr);
4465		pm_val |= PORT_HLE;
4466		writel(pm_val, pm_addr);
4467		/* flush write */
4468		readl(pm_addr);
4469	} else {
4470		pm_val &= ~(PORT_HLE | PORT_RWE | PORT_HIRD_MASK | PORT_L1DS_MASK);
4471		writel(pm_val, pm_addr);
4472		/* flush write */
4473		readl(pm_addr);
4474		if (udev->usb2_hw_lpm_besl_capable) {
4475			spin_unlock_irqrestore(&xhci->lock, flags);
4476			mutex_lock(hcd->bandwidth_mutex);
4477			xhci_change_max_exit_latency(xhci, udev, 0);
4478			mutex_unlock(hcd->bandwidth_mutex);
4479			readl_poll_timeout(ports[port_num]->addr, pm_val,
4480					   (pm_val & PORT_PLS_MASK) == XDEV_U0,
4481					   100, 10000);
4482			return 0;
4483		}
4484	}
4485
4486	spin_unlock_irqrestore(&xhci->lock, flags);
4487	return 0;
4488}
4489
4490/* check if a usb2 port supports a given extened capability protocol
4491 * only USB2 ports extended protocol capability values are cached.
4492 * Return 1 if capability is supported
4493 */
4494static int xhci_check_usb2_port_capability(struct xhci_hcd *xhci, int port,
4495					   unsigned capability)
4496{
4497	u32 port_offset, port_count;
4498	int i;
4499
4500	for (i = 0; i < xhci->num_ext_caps; i++) {
4501		if (xhci->ext_caps[i] & capability) {
4502			/* port offsets starts at 1 */
4503			port_offset = XHCI_EXT_PORT_OFF(xhci->ext_caps[i]) - 1;
4504			port_count = XHCI_EXT_PORT_COUNT(xhci->ext_caps[i]);
4505			if (port >= port_offset &&
4506			    port < port_offset + port_count)
4507				return 1;
4508		}
4509	}
4510	return 0;
4511}
4512
4513static int xhci_update_device(struct usb_hcd *hcd, struct usb_device *udev)
4514{
4515	struct xhci_hcd	*xhci = hcd_to_xhci(hcd);
4516	int		portnum = udev->portnum - 1;
4517
4518	if (hcd->speed >= HCD_USB3 || !udev->lpm_capable)
 
4519		return 0;
4520
4521	/* we only support lpm for non-hub device connected to root hub yet */
4522	if (!udev->parent || udev->parent->parent ||
4523			udev->descriptor.bDeviceClass == USB_CLASS_HUB)
4524		return 0;
4525
4526	if (xhci->hw_lpm_support == 1 &&
4527			xhci_check_usb2_port_capability(
4528				xhci, portnum, XHCI_HLC)) {
4529		udev->usb2_hw_lpm_capable = 1;
4530		udev->l1_params.timeout = XHCI_L1_TIMEOUT;
4531		udev->l1_params.besl = XHCI_DEFAULT_BESL;
4532		if (xhci_check_usb2_port_capability(xhci, portnum,
4533					XHCI_BLC))
4534			udev->usb2_hw_lpm_besl_capable = 1;
4535	}
4536
4537	return 0;
4538}
4539
4540/*---------------------- USB 3.0 Link PM functions ------------------------*/
4541
4542/* Service interval in nanoseconds = 2^(bInterval - 1) * 125us * 1000ns / 1us */
4543static unsigned long long xhci_service_interval_to_ns(
4544		struct usb_endpoint_descriptor *desc)
4545{
4546	return (1ULL << (desc->bInterval - 1)) * 125 * 1000;
4547}
4548
4549static u16 xhci_get_timeout_no_hub_lpm(struct usb_device *udev,
4550		enum usb3_link_state state)
4551{
4552	unsigned long long sel;
4553	unsigned long long pel;
4554	unsigned int max_sel_pel;
4555	char *state_name;
4556
4557	switch (state) {
4558	case USB3_LPM_U1:
4559		/* Convert SEL and PEL stored in nanoseconds to microseconds */
4560		sel = DIV_ROUND_UP(udev->u1_params.sel, 1000);
4561		pel = DIV_ROUND_UP(udev->u1_params.pel, 1000);
4562		max_sel_pel = USB3_LPM_MAX_U1_SEL_PEL;
4563		state_name = "U1";
4564		break;
4565	case USB3_LPM_U2:
4566		sel = DIV_ROUND_UP(udev->u2_params.sel, 1000);
4567		pel = DIV_ROUND_UP(udev->u2_params.pel, 1000);
4568		max_sel_pel = USB3_LPM_MAX_U2_SEL_PEL;
4569		state_name = "U2";
4570		break;
4571	default:
4572		dev_warn(&udev->dev, "%s: Can't get timeout for non-U1 or U2 state.\n",
4573				__func__);
4574		return USB3_LPM_DISABLED;
4575	}
4576
4577	if (sel <= max_sel_pel && pel <= max_sel_pel)
4578		return USB3_LPM_DEVICE_INITIATED;
4579
4580	if (sel > max_sel_pel)
4581		dev_dbg(&udev->dev, "Device-initiated %s disabled "
4582				"due to long SEL %llu ms\n",
4583				state_name, sel);
4584	else
4585		dev_dbg(&udev->dev, "Device-initiated %s disabled "
4586				"due to long PEL %llu ms\n",
4587				state_name, pel);
4588	return USB3_LPM_DISABLED;
4589}
4590
4591/* The U1 timeout should be the maximum of the following values:
4592 *  - For control endpoints, U1 system exit latency (SEL) * 3
4593 *  - For bulk endpoints, U1 SEL * 5
4594 *  - For interrupt endpoints:
4595 *    - Notification EPs, U1 SEL * 3
4596 *    - Periodic EPs, max(105% of bInterval, U1 SEL * 2)
4597 *  - For isochronous endpoints, max(105% of bInterval, U1 SEL * 2)
4598 */
4599static unsigned long long xhci_calculate_intel_u1_timeout(
4600		struct usb_device *udev,
4601		struct usb_endpoint_descriptor *desc)
4602{
4603	unsigned long long timeout_ns;
4604	int ep_type;
4605	int intr_type;
4606
4607	ep_type = usb_endpoint_type(desc);
4608	switch (ep_type) {
4609	case USB_ENDPOINT_XFER_CONTROL:
4610		timeout_ns = udev->u1_params.sel * 3;
4611		break;
4612	case USB_ENDPOINT_XFER_BULK:
4613		timeout_ns = udev->u1_params.sel * 5;
4614		break;
4615	case USB_ENDPOINT_XFER_INT:
4616		intr_type = usb_endpoint_interrupt_type(desc);
4617		if (intr_type == USB_ENDPOINT_INTR_NOTIFICATION) {
4618			timeout_ns = udev->u1_params.sel * 3;
4619			break;
4620		}
4621		/* Otherwise the calculation is the same as isoc eps */
4622		fallthrough;
4623	case USB_ENDPOINT_XFER_ISOC:
4624		timeout_ns = xhci_service_interval_to_ns(desc);
4625		timeout_ns = DIV_ROUND_UP_ULL(timeout_ns * 105, 100);
4626		if (timeout_ns < udev->u1_params.sel * 2)
4627			timeout_ns = udev->u1_params.sel * 2;
4628		break;
4629	default:
4630		return 0;
4631	}
4632
4633	return timeout_ns;
4634}
4635
4636/* Returns the hub-encoded U1 timeout value. */
4637static u16 xhci_calculate_u1_timeout(struct xhci_hcd *xhci,
4638		struct usb_device *udev,
4639		struct usb_endpoint_descriptor *desc)
4640{
4641	unsigned long long timeout_ns;
4642
4643	/* Prevent U1 if service interval is shorter than U1 exit latency */
4644	if (usb_endpoint_xfer_int(desc) || usb_endpoint_xfer_isoc(desc)) {
4645		if (xhci_service_interval_to_ns(desc) <= udev->u1_params.mel) {
4646			dev_dbg(&udev->dev, "Disable U1, ESIT shorter than exit latency\n");
4647			return USB3_LPM_DISABLED;
4648		}
4649	}
4650
4651	if (xhci->quirks & XHCI_INTEL_HOST)
4652		timeout_ns = xhci_calculate_intel_u1_timeout(udev, desc);
4653	else
4654		timeout_ns = udev->u1_params.sel;
4655
4656	/* The U1 timeout is encoded in 1us intervals.
4657	 * Don't return a timeout of zero, because that's USB3_LPM_DISABLED.
4658	 */
4659	if (timeout_ns == USB3_LPM_DISABLED)
4660		timeout_ns = 1;
4661	else
4662		timeout_ns = DIV_ROUND_UP_ULL(timeout_ns, 1000);
4663
4664	/* If the necessary timeout value is bigger than what we can set in the
4665	 * USB 3.0 hub, we have to disable hub-initiated U1.
4666	 */
4667	if (timeout_ns <= USB3_LPM_U1_MAX_TIMEOUT)
4668		return timeout_ns;
4669	dev_dbg(&udev->dev, "Hub-initiated U1 disabled "
4670			"due to long timeout %llu ms\n", timeout_ns);
4671	return xhci_get_timeout_no_hub_lpm(udev, USB3_LPM_U1);
4672}
4673
4674/* The U2 timeout should be the maximum of:
4675 *  - 10 ms (to avoid the bandwidth impact on the scheduler)
4676 *  - largest bInterval of any active periodic endpoint (to avoid going
4677 *    into lower power link states between intervals).
4678 *  - the U2 Exit Latency of the device
4679 */
4680static unsigned long long xhci_calculate_intel_u2_timeout(
4681		struct usb_device *udev,
4682		struct usb_endpoint_descriptor *desc)
4683{
4684	unsigned long long timeout_ns;
4685	unsigned long long u2_del_ns;
4686
4687	timeout_ns = 10 * 1000 * 1000;
4688
4689	if ((usb_endpoint_xfer_int(desc) || usb_endpoint_xfer_isoc(desc)) &&
4690			(xhci_service_interval_to_ns(desc) > timeout_ns))
4691		timeout_ns = xhci_service_interval_to_ns(desc);
4692
4693	u2_del_ns = le16_to_cpu(udev->bos->ss_cap->bU2DevExitLat) * 1000ULL;
4694	if (u2_del_ns > timeout_ns)
4695		timeout_ns = u2_del_ns;
4696
4697	return timeout_ns;
4698}
4699
4700/* Returns the hub-encoded U2 timeout value. */
4701static u16 xhci_calculate_u2_timeout(struct xhci_hcd *xhci,
4702		struct usb_device *udev,
4703		struct usb_endpoint_descriptor *desc)
4704{
4705	unsigned long long timeout_ns;
4706
4707	/* Prevent U2 if service interval is shorter than U2 exit latency */
4708	if (usb_endpoint_xfer_int(desc) || usb_endpoint_xfer_isoc(desc)) {
4709		if (xhci_service_interval_to_ns(desc) <= udev->u2_params.mel) {
4710			dev_dbg(&udev->dev, "Disable U2, ESIT shorter than exit latency\n");
4711			return USB3_LPM_DISABLED;
4712		}
4713	}
4714
4715	if (xhci->quirks & XHCI_INTEL_HOST)
4716		timeout_ns = xhci_calculate_intel_u2_timeout(udev, desc);
4717	else
4718		timeout_ns = udev->u2_params.sel;
4719
4720	/* The U2 timeout is encoded in 256us intervals */
4721	timeout_ns = DIV_ROUND_UP_ULL(timeout_ns, 256 * 1000);
4722	/* If the necessary timeout value is bigger than what we can set in the
4723	 * USB 3.0 hub, we have to disable hub-initiated U2.
4724	 */
4725	if (timeout_ns <= USB3_LPM_U2_MAX_TIMEOUT)
4726		return timeout_ns;
4727	dev_dbg(&udev->dev, "Hub-initiated U2 disabled "
4728			"due to long timeout %llu ms\n", timeout_ns);
4729	return xhci_get_timeout_no_hub_lpm(udev, USB3_LPM_U2);
4730}
4731
4732static u16 xhci_call_host_update_timeout_for_endpoint(struct xhci_hcd *xhci,
4733		struct usb_device *udev,
4734		struct usb_endpoint_descriptor *desc,
4735		enum usb3_link_state state,
4736		u16 *timeout)
4737{
4738	if (state == USB3_LPM_U1)
4739		return xhci_calculate_u1_timeout(xhci, udev, desc);
4740	else if (state == USB3_LPM_U2)
4741		return xhci_calculate_u2_timeout(xhci, udev, desc);
4742
4743	return USB3_LPM_DISABLED;
4744}
4745
4746static int xhci_update_timeout_for_endpoint(struct xhci_hcd *xhci,
4747		struct usb_device *udev,
4748		struct usb_endpoint_descriptor *desc,
4749		enum usb3_link_state state,
4750		u16 *timeout)
4751{
4752	u16 alt_timeout;
4753
4754	alt_timeout = xhci_call_host_update_timeout_for_endpoint(xhci, udev,
4755		desc, state, timeout);
4756
4757	/* If we found we can't enable hub-initiated LPM, and
4758	 * the U1 or U2 exit latency was too high to allow
4759	 * device-initiated LPM as well, then we will disable LPM
4760	 * for this device, so stop searching any further.
4761	 */
4762	if (alt_timeout == USB3_LPM_DISABLED) {
 
4763		*timeout = alt_timeout;
4764		return -E2BIG;
4765	}
4766	if (alt_timeout > *timeout)
4767		*timeout = alt_timeout;
4768	return 0;
4769}
4770
4771static int xhci_update_timeout_for_interface(struct xhci_hcd *xhci,
4772		struct usb_device *udev,
4773		struct usb_host_interface *alt,
4774		enum usb3_link_state state,
4775		u16 *timeout)
4776{
4777	int j;
4778
4779	for (j = 0; j < alt->desc.bNumEndpoints; j++) {
4780		if (xhci_update_timeout_for_endpoint(xhci, udev,
4781					&alt->endpoint[j].desc, state, timeout))
4782			return -E2BIG;
4783		continue;
4784	}
4785	return 0;
4786}
4787
4788static int xhci_check_intel_tier_policy(struct usb_device *udev,
4789		enum usb3_link_state state)
4790{
4791	struct usb_device *parent;
4792	unsigned int num_hubs;
4793
4794	if (state == USB3_LPM_U2)
4795		return 0;
4796
4797	/* Don't enable U1 if the device is on a 2nd tier hub or lower. */
4798	for (parent = udev->parent, num_hubs = 0; parent->parent;
4799			parent = parent->parent)
4800		num_hubs++;
4801
4802	if (num_hubs < 2)
4803		return 0;
4804
4805	dev_dbg(&udev->dev, "Disabling U1 link state for device"
4806			" below second-tier hub.\n");
4807	dev_dbg(&udev->dev, "Plug device into first-tier hub "
4808			"to decrease power consumption.\n");
4809	return -E2BIG;
4810}
4811
4812static int xhci_check_tier_policy(struct xhci_hcd *xhci,
4813		struct usb_device *udev,
4814		enum usb3_link_state state)
4815{
4816	if (xhci->quirks & XHCI_INTEL_HOST)
4817		return xhci_check_intel_tier_policy(udev, state);
4818	else
4819		return 0;
4820}
4821
4822/* Returns the U1 or U2 timeout that should be enabled.
4823 * If the tier check or timeout setting functions return with a non-zero exit
4824 * code, that means the timeout value has been finalized and we shouldn't look
4825 * at any more endpoints.
4826 */
4827static u16 xhci_calculate_lpm_timeout(struct usb_hcd *hcd,
4828			struct usb_device *udev, enum usb3_link_state state)
4829{
4830	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
4831	struct usb_host_config *config;
4832	char *state_name;
4833	int i;
4834	u16 timeout = USB3_LPM_DISABLED;
4835
4836	if (state == USB3_LPM_U1)
4837		state_name = "U1";
4838	else if (state == USB3_LPM_U2)
4839		state_name = "U2";
4840	else {
4841		dev_warn(&udev->dev, "Can't enable unknown link state %i\n",
4842				state);
4843		return timeout;
4844	}
4845
4846	if (xhci_check_tier_policy(xhci, udev, state) < 0)
4847		return timeout;
4848
4849	/* Gather some information about the currently installed configuration
4850	 * and alternate interface settings.
4851	 */
4852	if (xhci_update_timeout_for_endpoint(xhci, udev, &udev->ep0.desc,
4853			state, &timeout))
4854		return timeout;
4855
4856	config = udev->actconfig;
4857	if (!config)
4858		return timeout;
4859
4860	for (i = 0; i < config->desc.bNumInterfaces; i++) {
4861		struct usb_driver *driver;
4862		struct usb_interface *intf = config->interface[i];
4863
4864		if (!intf)
4865			continue;
4866
4867		/* Check if any currently bound drivers want hub-initiated LPM
4868		 * disabled.
4869		 */
4870		if (intf->dev.driver) {
4871			driver = to_usb_driver(intf->dev.driver);
4872			if (driver && driver->disable_hub_initiated_lpm) {
4873				dev_dbg(&udev->dev, "Hub-initiated %s disabled at request of driver %s\n",
4874					state_name, driver->name);
4875				timeout = xhci_get_timeout_no_hub_lpm(udev,
4876								      state);
4877				if (timeout == USB3_LPM_DISABLED)
4878					return timeout;
4879			}
4880		}
4881
4882		/* Not sure how this could happen... */
4883		if (!intf->cur_altsetting)
4884			continue;
4885
4886		if (xhci_update_timeout_for_interface(xhci, udev,
4887					intf->cur_altsetting,
4888					state, &timeout))
4889			return timeout;
4890	}
4891	return timeout;
4892}
4893
4894static int calculate_max_exit_latency(struct usb_device *udev,
4895		enum usb3_link_state state_changed,
4896		u16 hub_encoded_timeout)
4897{
4898	unsigned long long u1_mel_us = 0;
4899	unsigned long long u2_mel_us = 0;
4900	unsigned long long mel_us = 0;
4901	bool disabling_u1;
4902	bool disabling_u2;
4903	bool enabling_u1;
4904	bool enabling_u2;
4905
4906	disabling_u1 = (state_changed == USB3_LPM_U1 &&
4907			hub_encoded_timeout == USB3_LPM_DISABLED);
4908	disabling_u2 = (state_changed == USB3_LPM_U2 &&
4909			hub_encoded_timeout == USB3_LPM_DISABLED);
4910
4911	enabling_u1 = (state_changed == USB3_LPM_U1 &&
4912			hub_encoded_timeout != USB3_LPM_DISABLED);
4913	enabling_u2 = (state_changed == USB3_LPM_U2 &&
4914			hub_encoded_timeout != USB3_LPM_DISABLED);
4915
4916	/* If U1 was already enabled and we're not disabling it,
4917	 * or we're going to enable U1, account for the U1 max exit latency.
4918	 */
4919	if ((udev->u1_params.timeout != USB3_LPM_DISABLED && !disabling_u1) ||
4920			enabling_u1)
4921		u1_mel_us = DIV_ROUND_UP(udev->u1_params.mel, 1000);
4922	if ((udev->u2_params.timeout != USB3_LPM_DISABLED && !disabling_u2) ||
4923			enabling_u2)
4924		u2_mel_us = DIV_ROUND_UP(udev->u2_params.mel, 1000);
4925
4926	if (u1_mel_us > u2_mel_us)
4927		mel_us = u1_mel_us;
4928	else
4929		mel_us = u2_mel_us;
4930	/* xHCI host controller max exit latency field is only 16 bits wide. */
4931	if (mel_us > MAX_EXIT) {
4932		dev_warn(&udev->dev, "Link PM max exit latency of %lluus "
4933				"is too big.\n", mel_us);
4934		return -E2BIG;
4935	}
4936	return mel_us;
4937}
4938
4939/* Returns the USB3 hub-encoded value for the U1/U2 timeout. */
4940static int xhci_enable_usb3_lpm_timeout(struct usb_hcd *hcd,
4941			struct usb_device *udev, enum usb3_link_state state)
4942{
4943	struct xhci_hcd	*xhci;
4944	u16 hub_encoded_timeout;
4945	int mel;
4946	int ret;
4947
4948	xhci = hcd_to_xhci(hcd);
4949	/* The LPM timeout values are pretty host-controller specific, so don't
4950	 * enable hub-initiated timeouts unless the vendor has provided
4951	 * information about their timeout algorithm.
4952	 */
4953	if (!xhci || !(xhci->quirks & XHCI_LPM_SUPPORT) ||
4954			!xhci->devs[udev->slot_id])
4955		return USB3_LPM_DISABLED;
4956
4957	hub_encoded_timeout = xhci_calculate_lpm_timeout(hcd, udev, state);
4958	mel = calculate_max_exit_latency(udev, state, hub_encoded_timeout);
4959	if (mel < 0) {
4960		/* Max Exit Latency is too big, disable LPM. */
4961		hub_encoded_timeout = USB3_LPM_DISABLED;
4962		mel = 0;
4963	}
4964
4965	ret = xhci_change_max_exit_latency(xhci, udev, mel);
4966	if (ret)
4967		return ret;
4968	return hub_encoded_timeout;
4969}
4970
4971static int xhci_disable_usb3_lpm_timeout(struct usb_hcd *hcd,
4972			struct usb_device *udev, enum usb3_link_state state)
4973{
4974	struct xhci_hcd	*xhci;
4975	u16 mel;
4976
4977	xhci = hcd_to_xhci(hcd);
4978	if (!xhci || !(xhci->quirks & XHCI_LPM_SUPPORT) ||
4979			!xhci->devs[udev->slot_id])
4980		return 0;
4981
4982	mel = calculate_max_exit_latency(udev, state, USB3_LPM_DISABLED);
4983	return xhci_change_max_exit_latency(xhci, udev, mel);
4984}
4985#else /* CONFIG_PM */
4986
4987static int xhci_set_usb2_hardware_lpm(struct usb_hcd *hcd,
4988				struct usb_device *udev, int enable)
4989{
4990	return 0;
4991}
4992
4993static int xhci_update_device(struct usb_hcd *hcd, struct usb_device *udev)
4994{
4995	return 0;
4996}
4997
4998static int xhci_enable_usb3_lpm_timeout(struct usb_hcd *hcd,
4999			struct usb_device *udev, enum usb3_link_state state)
5000{
5001	return USB3_LPM_DISABLED;
5002}
5003
5004static int xhci_disable_usb3_lpm_timeout(struct usb_hcd *hcd,
5005			struct usb_device *udev, enum usb3_link_state state)
5006{
5007	return 0;
5008}
5009#endif	/* CONFIG_PM */
5010
5011/*-------------------------------------------------------------------------*/
5012
5013/* Once a hub descriptor is fetched for a device, we need to update the xHC's
5014 * internal data structures for the device.
5015 */
5016static int xhci_update_hub_device(struct usb_hcd *hcd, struct usb_device *hdev,
5017			struct usb_tt *tt, gfp_t mem_flags)
5018{
5019	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
5020	struct xhci_virt_device *vdev;
5021	struct xhci_command *config_cmd;
5022	struct xhci_input_control_ctx *ctrl_ctx;
5023	struct xhci_slot_ctx *slot_ctx;
5024	unsigned long flags;
5025	unsigned think_time;
5026	int ret;
5027
5028	/* Ignore root hubs */
5029	if (!hdev->parent)
5030		return 0;
5031
5032	vdev = xhci->devs[hdev->slot_id];
5033	if (!vdev) {
5034		xhci_warn(xhci, "Cannot update hub desc for unknown device.\n");
5035		return -EINVAL;
5036	}
5037
5038	config_cmd = xhci_alloc_command_with_ctx(xhci, true, mem_flags);
5039	if (!config_cmd)
5040		return -ENOMEM;
5041
5042	ctrl_ctx = xhci_get_input_control_ctx(config_cmd->in_ctx);
5043	if (!ctrl_ctx) {
5044		xhci_warn(xhci, "%s: Could not get input context, bad type.\n",
5045				__func__);
5046		xhci_free_command(xhci, config_cmd);
5047		return -ENOMEM;
5048	}
5049
5050	spin_lock_irqsave(&xhci->lock, flags);
5051	if (hdev->speed == USB_SPEED_HIGH &&
5052			xhci_alloc_tt_info(xhci, vdev, hdev, tt, GFP_ATOMIC)) {
5053		xhci_dbg(xhci, "Could not allocate xHCI TT structure.\n");
5054		xhci_free_command(xhci, config_cmd);
5055		spin_unlock_irqrestore(&xhci->lock, flags);
5056		return -ENOMEM;
5057	}
5058
5059	xhci_slot_copy(xhci, config_cmd->in_ctx, vdev->out_ctx);
5060	ctrl_ctx->add_flags |= cpu_to_le32(SLOT_FLAG);
5061	slot_ctx = xhci_get_slot_ctx(xhci, config_cmd->in_ctx);
5062	slot_ctx->dev_info |= cpu_to_le32(DEV_HUB);
5063	/*
5064	 * refer to section 6.2.2: MTT should be 0 for full speed hub,
5065	 * but it may be already set to 1 when setup an xHCI virtual
5066	 * device, so clear it anyway.
5067	 */
5068	if (tt->multi)
5069		slot_ctx->dev_info |= cpu_to_le32(DEV_MTT);
5070	else if (hdev->speed == USB_SPEED_FULL)
5071		slot_ctx->dev_info &= cpu_to_le32(~DEV_MTT);
5072
5073	if (xhci->hci_version > 0x95) {
5074		xhci_dbg(xhci, "xHCI version %x needs hub "
5075				"TT think time and number of ports\n",
5076				(unsigned int) xhci->hci_version);
5077		slot_ctx->dev_info2 |= cpu_to_le32(XHCI_MAX_PORTS(hdev->maxchild));
5078		/* Set TT think time - convert from ns to FS bit times.
5079		 * 0 = 8 FS bit times, 1 = 16 FS bit times,
5080		 * 2 = 24 FS bit times, 3 = 32 FS bit times.
5081		 *
5082		 * xHCI 1.0: this field shall be 0 if the device is not a
5083		 * High-spped hub.
5084		 */
5085		think_time = tt->think_time;
5086		if (think_time != 0)
5087			think_time = (think_time / 666) - 1;
5088		if (xhci->hci_version < 0x100 || hdev->speed == USB_SPEED_HIGH)
5089			slot_ctx->tt_info |=
5090				cpu_to_le32(TT_THINK_TIME(think_time));
5091	} else {
5092		xhci_dbg(xhci, "xHCI version %x doesn't need hub "
5093				"TT think time or number of ports\n",
5094				(unsigned int) xhci->hci_version);
5095	}
5096	slot_ctx->dev_state = 0;
5097	spin_unlock_irqrestore(&xhci->lock, flags);
5098
5099	xhci_dbg(xhci, "Set up %s for hub device.\n",
5100			(xhci->hci_version > 0x95) ?
5101			"configure endpoint" : "evaluate context");
 
 
5102
5103	/* Issue and wait for the configure endpoint or
5104	 * evaluate context command.
5105	 */
5106	if (xhci->hci_version > 0x95)
5107		ret = xhci_configure_endpoint(xhci, hdev, config_cmd,
5108				false, false);
5109	else
5110		ret = xhci_configure_endpoint(xhci, hdev, config_cmd,
5111				true, false);
5112
 
 
 
5113	xhci_free_command(xhci, config_cmd);
5114	return ret;
5115}
5116
5117static int xhci_get_frame(struct usb_hcd *hcd)
5118{
5119	struct xhci_hcd *xhci = hcd_to_xhci(hcd);
5120	/* EHCI mods by the periodic size.  Why? */
5121	return readl(&xhci->run_regs->microframe_index) >> 3;
5122}
5123
5124int xhci_gen_setup(struct usb_hcd *hcd, xhci_get_quirks_t get_quirks)
5125{
5126	struct xhci_hcd		*xhci;
5127	/*
5128	 * TODO: Check with DWC3 clients for sysdev according to
5129	 * quirks
5130	 */
5131	struct device		*dev = hcd->self.sysdev;
5132	unsigned int		minor_rev;
5133	int			retval;
5134
5135	/* Accept arbitrarily long scatter-gather lists */
5136	hcd->self.sg_tablesize = ~0;
5137
5138	/* support to build packet from discontinuous buffers */
5139	hcd->self.no_sg_constraint = 1;
5140
5141	/* XHCI controllers don't stop the ep queue on short packets :| */
5142	hcd->self.no_stop_on_short = 1;
5143
5144	xhci = hcd_to_xhci(hcd);
5145
5146	if (usb_hcd_is_primary_hcd(hcd)) {
5147		xhci->main_hcd = hcd;
5148		xhci->usb2_rhub.hcd = hcd;
5149		/* Mark the first roothub as being USB 2.0.
5150		 * The xHCI driver will register the USB 3.0 roothub.
5151		 */
5152		hcd->speed = HCD_USB2;
5153		hcd->self.root_hub->speed = USB_SPEED_HIGH;
5154		/*
5155		 * USB 2.0 roothub under xHCI has an integrated TT,
5156		 * (rate matching hub) as opposed to having an OHCI/UHCI
5157		 * companion controller.
5158		 */
5159		hcd->has_tt = 1;
5160	} else {
5161		/*
5162		 * Early xHCI 1.1 spec did not mention USB 3.1 capable hosts
5163		 * should return 0x31 for sbrn, or that the minor revision
5164		 * is a two digit BCD containig minor and sub-minor numbers.
5165		 * This was later clarified in xHCI 1.2.
5166		 *
5167		 * Some USB 3.1 capable hosts therefore have sbrn 0x30, and
5168		 * minor revision set to 0x1 instead of 0x10.
5169		 */
5170		if (xhci->usb3_rhub.min_rev == 0x1)
5171			minor_rev = 1;
5172		else
5173			minor_rev = xhci->usb3_rhub.min_rev / 0x10;
5174
5175		switch (minor_rev) {
5176		case 2:
5177			hcd->speed = HCD_USB32;
5178			hcd->self.root_hub->speed = USB_SPEED_SUPER_PLUS;
5179			hcd->self.root_hub->rx_lanes = 2;
5180			hcd->self.root_hub->tx_lanes = 2;
5181			break;
5182		case 1:
5183			hcd->speed = HCD_USB31;
5184			hcd->self.root_hub->speed = USB_SPEED_SUPER_PLUS;
5185			break;
5186		}
5187		xhci_info(xhci, "Host supports USB 3.%x %sSuperSpeed\n",
5188			  minor_rev,
5189			  minor_rev ? "Enhanced " : "");
5190
5191		xhci->usb3_rhub.hcd = hcd;
5192		/* xHCI private pointer was set in xhci_pci_probe for the second
5193		 * registered roothub.
5194		 */
5195		return 0;
5196	}
5197
5198	mutex_init(&xhci->mutex);
5199	xhci->cap_regs = hcd->regs;
5200	xhci->op_regs = hcd->regs +
5201		HC_LENGTH(readl(&xhci->cap_regs->hc_capbase));
5202	xhci->run_regs = hcd->regs +
5203		(readl(&xhci->cap_regs->run_regs_off) & RTSOFF_MASK);
5204	/* Cache read-only capability registers */
5205	xhci->hcs_params1 = readl(&xhci->cap_regs->hcs_params1);
5206	xhci->hcs_params2 = readl(&xhci->cap_regs->hcs_params2);
5207	xhci->hcs_params3 = readl(&xhci->cap_regs->hcs_params3);
5208	xhci->hcc_params = readl(&xhci->cap_regs->hc_capbase);
5209	xhci->hci_version = HC_VERSION(xhci->hcc_params);
5210	xhci->hcc_params = readl(&xhci->cap_regs->hcc_params);
5211	if (xhci->hci_version > 0x100)
5212		xhci->hcc_params2 = readl(&xhci->cap_regs->hcc_params2);
 
5213
5214	xhci->quirks |= quirks;
5215
5216	get_quirks(dev, xhci);
5217
5218	/* In xhci controllers which follow xhci 1.0 spec gives a spurious
5219	 * success event after a short transfer. This quirk will ignore such
5220	 * spurious event.
5221	 */
5222	if (xhci->hci_version > 0x96)
5223		xhci->quirks |= XHCI_SPURIOUS_SUCCESS;
5224
5225	/* Make sure the HC is halted. */
5226	retval = xhci_halt(xhci);
5227	if (retval)
5228		return retval;
5229
5230	xhci_zero_64b_regs(xhci);
5231
5232	xhci_dbg(xhci, "Resetting HCD\n");
5233	/* Reset the internal HC memory state and registers. */
5234	retval = xhci_reset(xhci);
5235	if (retval)
5236		return retval;
5237	xhci_dbg(xhci, "Reset complete\n");
5238
5239	/*
5240	 * On some xHCI controllers (e.g. R-Car SoCs), the AC64 bit (bit 0)
5241	 * of HCCPARAMS1 is set to 1. However, the xHCs don't support 64-bit
5242	 * address memory pointers actually. So, this driver clears the AC64
5243	 * bit of xhci->hcc_params to call dma_set_coherent_mask(dev,
5244	 * DMA_BIT_MASK(32)) in this xhci_gen_setup().
5245	 */
5246	if (xhci->quirks & XHCI_NO_64BIT_SUPPORT)
5247		xhci->hcc_params &= ~BIT(0);
5248
5249	/* Set dma_mask and coherent_dma_mask to 64-bits,
5250	 * if xHC supports 64-bit addressing */
5251	if (HCC_64BIT_ADDR(xhci->hcc_params) &&
5252			!dma_set_mask(dev, DMA_BIT_MASK(64))) {
5253		xhci_dbg(xhci, "Enabling 64-bit DMA addresses.\n");
5254		dma_set_coherent_mask(dev, DMA_BIT_MASK(64));
5255	} else {
5256		/*
5257		 * This is to avoid error in cases where a 32-bit USB
5258		 * controller is used on a 64-bit capable system.
5259		 */
5260		retval = dma_set_mask(dev, DMA_BIT_MASK(32));
5261		if (retval)
5262			return retval;
5263		xhci_dbg(xhci, "Enabling 32-bit DMA addresses.\n");
5264		dma_set_coherent_mask(dev, DMA_BIT_MASK(32));
5265	}
5266
5267	xhci_dbg(xhci, "Calling HCD init\n");
5268	/* Initialize HCD and host controller data structures. */
5269	retval = xhci_init(hcd);
5270	if (retval)
5271		return retval;
5272	xhci_dbg(xhci, "Called HCD init\n");
5273
5274	xhci_info(xhci, "hcc params 0x%08x hci version 0x%x quirks 0x%016llx\n",
5275		  xhci->hcc_params, xhci->hci_version, xhci->quirks);
5276
5277	return 0;
5278}
5279EXPORT_SYMBOL_GPL(xhci_gen_setup);
5280
5281static void xhci_clear_tt_buffer_complete(struct usb_hcd *hcd,
5282		struct usb_host_endpoint *ep)
5283{
5284	struct xhci_hcd *xhci;
5285	struct usb_device *udev;
5286	unsigned int slot_id;
5287	unsigned int ep_index;
5288	unsigned long flags;
5289
5290	xhci = hcd_to_xhci(hcd);
5291
5292	spin_lock_irqsave(&xhci->lock, flags);
5293	udev = (struct usb_device *)ep->hcpriv;
5294	slot_id = udev->slot_id;
5295	ep_index = xhci_get_endpoint_index(&ep->desc);
5296
5297	xhci->devs[slot_id]->eps[ep_index].ep_state &= ~EP_CLEARING_TT;
5298	xhci_ring_doorbell_for_active_rings(xhci, slot_id, ep_index);
5299	spin_unlock_irqrestore(&xhci->lock, flags);
5300}
5301
5302static const struct hc_driver xhci_hc_driver = {
5303	.description =		"xhci-hcd",
5304	.product_desc =		"xHCI Host Controller",
5305	.hcd_priv_size =	sizeof(struct xhci_hcd),
5306
5307	/*
5308	 * generic hardware linkage
5309	 */
5310	.irq =			xhci_irq,
5311	.flags =		HCD_MEMORY | HCD_DMA | HCD_USB3 | HCD_SHARED |
5312				HCD_BH,
5313
5314	/*
5315	 * basic lifecycle operations
5316	 */
5317	.reset =		NULL, /* set in xhci_init_driver() */
5318	.start =		xhci_run,
5319	.stop =			xhci_stop,
5320	.shutdown =		xhci_shutdown,
5321
5322	/*
5323	 * managing i/o requests and associated device resources
5324	 */
5325	.map_urb_for_dma =      xhci_map_urb_for_dma,
5326	.urb_enqueue =		xhci_urb_enqueue,
5327	.urb_dequeue =		xhci_urb_dequeue,
5328	.alloc_dev =		xhci_alloc_dev,
5329	.free_dev =		xhci_free_dev,
5330	.alloc_streams =	xhci_alloc_streams,
5331	.free_streams =		xhci_free_streams,
5332	.add_endpoint =		xhci_add_endpoint,
5333	.drop_endpoint =	xhci_drop_endpoint,
5334	.endpoint_disable =	xhci_endpoint_disable,
5335	.endpoint_reset =	xhci_endpoint_reset,
5336	.check_bandwidth =	xhci_check_bandwidth,
5337	.reset_bandwidth =	xhci_reset_bandwidth,
5338	.address_device =	xhci_address_device,
5339	.enable_device =	xhci_enable_device,
5340	.update_hub_device =	xhci_update_hub_device,
5341	.reset_device =		xhci_discover_or_reset_device,
5342
5343	/*
5344	 * scheduling support
5345	 */
5346	.get_frame_number =	xhci_get_frame,
5347
5348	/*
5349	 * root hub support
5350	 */
5351	.hub_control =		xhci_hub_control,
5352	.hub_status_data =	xhci_hub_status_data,
5353	.bus_suspend =		xhci_bus_suspend,
5354	.bus_resume =		xhci_bus_resume,
5355	.get_resuming_ports =	xhci_get_resuming_ports,
5356
5357	/*
5358	 * call back when device connected and addressed
5359	 */
5360	.update_device =        xhci_update_device,
5361	.set_usb2_hw_lpm =	xhci_set_usb2_hardware_lpm,
5362	.enable_usb3_lpm_timeout =	xhci_enable_usb3_lpm_timeout,
5363	.disable_usb3_lpm_timeout =	xhci_disable_usb3_lpm_timeout,
5364	.find_raw_port_number =	xhci_find_raw_port_number,
5365	.clear_tt_buffer_complete = xhci_clear_tt_buffer_complete,
5366};
5367
5368void xhci_init_driver(struct hc_driver *drv,
5369		      const struct xhci_driver_overrides *over)
5370{
5371	BUG_ON(!over);
5372
5373	/* Copy the generic table to drv then apply the overrides */
5374	*drv = xhci_hc_driver;
5375
5376	if (over) {
5377		drv->hcd_priv_size += over->extra_priv_size;
5378		if (over->reset)
5379			drv->reset = over->reset;
5380		if (over->start)
5381			drv->start = over->start;
5382	}
5383}
5384EXPORT_SYMBOL_GPL(xhci_init_driver);
5385
5386MODULE_DESCRIPTION(DRIVER_DESC);
5387MODULE_AUTHOR(DRIVER_AUTHOR);
5388MODULE_LICENSE("GPL");
5389
5390static int __init xhci_hcd_init(void)
5391{
5392	/*
5393	 * Check the compiler generated sizes of structures that must be laid
5394	 * out in specific ways for hardware access.
5395	 */
5396	BUILD_BUG_ON(sizeof(struct xhci_doorbell_array) != 256*32/8);
5397	BUILD_BUG_ON(sizeof(struct xhci_slot_ctx) != 8*32/8);
5398	BUILD_BUG_ON(sizeof(struct xhci_ep_ctx) != 8*32/8);
5399	/* xhci_device_control has eight fields, and also
5400	 * embeds one xhci_slot_ctx and 31 xhci_ep_ctx
5401	 */
5402	BUILD_BUG_ON(sizeof(struct xhci_stream_ctx) != 4*32/8);
5403	BUILD_BUG_ON(sizeof(union xhci_trb) != 4*32/8);
5404	BUILD_BUG_ON(sizeof(struct xhci_erst_entry) != 4*32/8);
5405	BUILD_BUG_ON(sizeof(struct xhci_cap_regs) != 8*32/8);
5406	BUILD_BUG_ON(sizeof(struct xhci_intr_reg) != 8*32/8);
5407	/* xhci_run_regs has eight fields and embeds 128 xhci_intr_regs */
5408	BUILD_BUG_ON(sizeof(struct xhci_run_regs) != (8+8*128)*32/8);
5409
5410	if (usb_disabled())
5411		return -ENODEV;
5412
5413	xhci_debugfs_create_root();
5414
5415	return 0;
5416}
5417
5418/*
5419 * If an init function is provided, an exit function must also be provided
5420 * to allow module unload.
5421 */
5422static void __exit xhci_hcd_fini(void)
5423{
5424	xhci_debugfs_remove_root();
5425}
5426
5427module_init(xhci_hcd_init);
5428module_exit(xhci_hcd_fini);