Linux Audio

Check our new training course

Loading...
Note: File does not exist in v6.8.
   1/*
   2 * at91_udc -- driver for at91-series USB peripheral controller
   3 *
   4 * Copyright (C) 2004 by Thomas Rathbone
   5 * Copyright (C) 2005 by HP Labs
   6 * Copyright (C) 2005 by David Brownell
   7 *
   8 * This program is free software; you can redistribute it and/or modify
   9 * it under the terms of the GNU General Public License as published by
  10 * the Free Software Foundation; either version 2 of the License, or
  11 * (at your option) any later version.
  12 */
  13
  14#undef	VERBOSE_DEBUG
  15#undef	PACKET_TRACE
  16
  17#include <linux/kernel.h>
  18#include <linux/module.h>
  19#include <linux/platform_device.h>
  20#include <linux/delay.h>
  21#include <linux/ioport.h>
  22#include <linux/slab.h>
  23#include <linux/errno.h>
  24#include <linux/init.h>
  25#include <linux/list.h>
  26#include <linux/interrupt.h>
  27#include <linux/proc_fs.h>
  28#include <linux/prefetch.h>
  29#include <linux/clk.h>
  30#include <linux/usb/ch9.h>
  31#include <linux/usb/gadget.h>
  32#include <linux/of.h>
  33#include <linux/of_gpio.h>
  34
  35#include <asm/byteorder.h>
  36#include <mach/hardware.h>
  37#include <asm/io.h>
  38#include <asm/irq.h>
  39#include <asm/gpio.h>
  40
  41#include <mach/board.h>
  42#include <mach/cpu.h>
  43#include <mach/at91sam9261_matrix.h>
  44#include <mach/at91_matrix.h>
  45
  46#include "at91_udc.h"
  47
  48
  49/*
  50 * This controller is simple and PIO-only.  It's used in many AT91-series
  51 * full speed USB controllers, including the at91rm9200 (arm920T, with MMU),
  52 * at91sam926x (arm926ejs, with MMU), and several no-mmu versions.
  53 *
  54 * This driver expects the board has been wired with two GPIOs suppporting
  55 * a VBUS sensing IRQ, and a D+ pullup.  (They may be omitted, but the
  56 * testing hasn't covered such cases.)
  57 *
  58 * The pullup is most important (so it's integrated on sam926x parts).  It
  59 * provides software control over whether the host enumerates the device.
  60 *
  61 * The VBUS sensing helps during enumeration, and allows both USB clocks
  62 * (and the transceiver) to stay gated off until they're necessary, saving
  63 * power.  During USB suspend, the 48 MHz clock is gated off in hardware;
  64 * it may also be gated off by software during some Linux sleep states.
  65 */
  66
  67#define	DRIVER_VERSION	"3 May 2006"
  68
  69static const char driver_name [] = "at91_udc";
  70static const char ep0name[] = "ep0";
  71
  72#define VBUS_POLL_TIMEOUT	msecs_to_jiffies(1000)
  73
  74#define at91_udp_read(udc, reg) \
  75	__raw_readl((udc)->udp_baseaddr + (reg))
  76#define at91_udp_write(udc, reg, val) \
  77	__raw_writel((val), (udc)->udp_baseaddr + (reg))
  78
  79/*-------------------------------------------------------------------------*/
  80
  81#ifdef CONFIG_USB_GADGET_DEBUG_FILES
  82
  83#include <linux/seq_file.h>
  84
  85static const char debug_filename[] = "driver/udc";
  86
  87#define FOURBITS "%s%s%s%s"
  88#define EIGHTBITS FOURBITS FOURBITS
  89
  90static void proc_ep_show(struct seq_file *s, struct at91_ep *ep)
  91{
  92	static char		*types[] = {
  93		"control", "out-iso", "out-bulk", "out-int",
  94		"BOGUS",   "in-iso",  "in-bulk",  "in-int"};
  95
  96	u32			csr;
  97	struct at91_request	*req;
  98	unsigned long	flags;
  99	struct at91_udc	*udc = ep->udc;
 100
 101	spin_lock_irqsave(&udc->lock, flags);
 102
 103	csr = __raw_readl(ep->creg);
 104
 105	/* NOTE:  not collecting per-endpoint irq statistics... */
 106
 107	seq_printf(s, "\n");
 108	seq_printf(s, "%s, maxpacket %d %s%s %s%s\n",
 109			ep->ep.name, ep->ep.maxpacket,
 110			ep->is_in ? "in" : "out",
 111			ep->is_iso ? " iso" : "",
 112			ep->is_pingpong
 113				? (ep->fifo_bank ? "pong" : "ping")
 114				: "",
 115			ep->stopped ? " stopped" : "");
 116	seq_printf(s, "csr %08x rxbytes=%d %s %s %s" EIGHTBITS "\n",
 117		csr,
 118		(csr & 0x07ff0000) >> 16,
 119		(csr & (1 << 15)) ? "enabled" : "disabled",
 120		(csr & (1 << 11)) ? "DATA1" : "DATA0",
 121		types[(csr & 0x700) >> 8],
 122
 123		/* iff type is control then print current direction */
 124		(!(csr & 0x700))
 125			? ((csr & (1 << 7)) ? " IN" : " OUT")
 126			: "",
 127		(csr & (1 << 6)) ? " rxdatabk1" : "",
 128		(csr & (1 << 5)) ? " forcestall" : "",
 129		(csr & (1 << 4)) ? " txpktrdy" : "",
 130
 131		(csr & (1 << 3)) ? " stallsent" : "",
 132		(csr & (1 << 2)) ? " rxsetup" : "",
 133		(csr & (1 << 1)) ? " rxdatabk0" : "",
 134		(csr & (1 << 0)) ? " txcomp" : "");
 135	if (list_empty (&ep->queue))
 136		seq_printf(s, "\t(queue empty)\n");
 137
 138	else list_for_each_entry (req, &ep->queue, queue) {
 139		unsigned	length = req->req.actual;
 140
 141		seq_printf(s, "\treq %p len %d/%d buf %p\n",
 142				&req->req, length,
 143				req->req.length, req->req.buf);
 144	}
 145	spin_unlock_irqrestore(&udc->lock, flags);
 146}
 147
 148static void proc_irq_show(struct seq_file *s, const char *label, u32 mask)
 149{
 150	int i;
 151
 152	seq_printf(s, "%s %04x:%s%s" FOURBITS, label, mask,
 153		(mask & (1 << 13)) ? " wakeup" : "",
 154		(mask & (1 << 12)) ? " endbusres" : "",
 155
 156		(mask & (1 << 11)) ? " sofint" : "",
 157		(mask & (1 << 10)) ? " extrsm" : "",
 158		(mask & (1 << 9)) ? " rxrsm" : "",
 159		(mask & (1 << 8)) ? " rxsusp" : "");
 160	for (i = 0; i < 8; i++) {
 161		if (mask & (1 << i))
 162			seq_printf(s, " ep%d", i);
 163	}
 164	seq_printf(s, "\n");
 165}
 166
 167static int proc_udc_show(struct seq_file *s, void *unused)
 168{
 169	struct at91_udc	*udc = s->private;
 170	struct at91_ep	*ep;
 171	u32		tmp;
 172
 173	seq_printf(s, "%s: version %s\n", driver_name, DRIVER_VERSION);
 174
 175	seq_printf(s, "vbus %s, pullup %s, %s powered%s, gadget %s\n\n",
 176		udc->vbus ? "present" : "off",
 177		udc->enabled
 178			? (udc->vbus ? "active" : "enabled")
 179			: "disabled",
 180		udc->selfpowered ? "self" : "VBUS",
 181		udc->suspended ? ", suspended" : "",
 182		udc->driver ? udc->driver->driver.name : "(none)");
 183
 184	/* don't access registers when interface isn't clocked */
 185	if (!udc->clocked) {
 186		seq_printf(s, "(not clocked)\n");
 187		return 0;
 188	}
 189
 190	tmp = at91_udp_read(udc, AT91_UDP_FRM_NUM);
 191	seq_printf(s, "frame %05x:%s%s frame=%d\n", tmp,
 192		(tmp & AT91_UDP_FRM_OK) ? " ok" : "",
 193		(tmp & AT91_UDP_FRM_ERR) ? " err" : "",
 194		(tmp & AT91_UDP_NUM));
 195
 196	tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 197	seq_printf(s, "glbstate %02x:%s" FOURBITS "\n", tmp,
 198		(tmp & AT91_UDP_RMWUPE) ? " rmwupe" : "",
 199		(tmp & AT91_UDP_RSMINPR) ? " rsminpr" : "",
 200		(tmp & AT91_UDP_ESR) ? " esr" : "",
 201		(tmp & AT91_UDP_CONFG) ? " confg" : "",
 202		(tmp & AT91_UDP_FADDEN) ? " fadden" : "");
 203
 204	tmp = at91_udp_read(udc, AT91_UDP_FADDR);
 205	seq_printf(s, "faddr   %03x:%s fadd=%d\n", tmp,
 206		(tmp & AT91_UDP_FEN) ? " fen" : "",
 207		(tmp & AT91_UDP_FADD));
 208
 209	proc_irq_show(s, "imr   ", at91_udp_read(udc, AT91_UDP_IMR));
 210	proc_irq_show(s, "isr   ", at91_udp_read(udc, AT91_UDP_ISR));
 211
 212	if (udc->enabled && udc->vbus) {
 213		proc_ep_show(s, &udc->ep[0]);
 214		list_for_each_entry (ep, &udc->gadget.ep_list, ep.ep_list) {
 215			if (ep->ep.desc)
 216				proc_ep_show(s, ep);
 217		}
 218	}
 219	return 0;
 220}
 221
 222static int proc_udc_open(struct inode *inode, struct file *file)
 223{
 224	return single_open(file, proc_udc_show, PDE(inode)->data);
 225}
 226
 227static const struct file_operations proc_ops = {
 228	.owner		= THIS_MODULE,
 229	.open		= proc_udc_open,
 230	.read		= seq_read,
 231	.llseek		= seq_lseek,
 232	.release	= single_release,
 233};
 234
 235static void create_debug_file(struct at91_udc *udc)
 236{
 237	udc->pde = proc_create_data(debug_filename, 0, NULL, &proc_ops, udc);
 238}
 239
 240static void remove_debug_file(struct at91_udc *udc)
 241{
 242	if (udc->pde)
 243		remove_proc_entry(debug_filename, NULL);
 244}
 245
 246#else
 247
 248static inline void create_debug_file(struct at91_udc *udc) {}
 249static inline void remove_debug_file(struct at91_udc *udc) {}
 250
 251#endif
 252
 253
 254/*-------------------------------------------------------------------------*/
 255
 256static void done(struct at91_ep *ep, struct at91_request *req, int status)
 257{
 258	unsigned	stopped = ep->stopped;
 259	struct at91_udc	*udc = ep->udc;
 260
 261	list_del_init(&req->queue);
 262	if (req->req.status == -EINPROGRESS)
 263		req->req.status = status;
 264	else
 265		status = req->req.status;
 266	if (status && status != -ESHUTDOWN)
 267		VDBG("%s done %p, status %d\n", ep->ep.name, req, status);
 268
 269	ep->stopped = 1;
 270	spin_unlock(&udc->lock);
 271	req->req.complete(&ep->ep, &req->req);
 272	spin_lock(&udc->lock);
 273	ep->stopped = stopped;
 274
 275	/* ep0 is always ready; other endpoints need a non-empty queue */
 276	if (list_empty(&ep->queue) && ep->int_mask != (1 << 0))
 277		at91_udp_write(udc, AT91_UDP_IDR, ep->int_mask);
 278}
 279
 280/*-------------------------------------------------------------------------*/
 281
 282/* bits indicating OUT fifo has data ready */
 283#define	RX_DATA_READY	(AT91_UDP_RX_DATA_BK0 | AT91_UDP_RX_DATA_BK1)
 284
 285/*
 286 * Endpoint FIFO CSR bits have a mix of bits, making it unsafe to just write
 287 * back most of the value you just read (because of side effects, including
 288 * bits that may change after reading and before writing).
 289 *
 290 * Except when changing a specific bit, always write values which:
 291 *  - clear SET_FX bits (setting them could change something)
 292 *  - set CLR_FX bits (clearing them could change something)
 293 *
 294 * There are also state bits like FORCESTALL, EPEDS, DIR, and EPTYPE
 295 * that shouldn't normally be changed.
 296 *
 297 * NOTE at91sam9260 docs mention synch between UDPCK and MCK clock domains,
 298 * implying a need to wait for one write to complete (test relevant bits)
 299 * before starting the next write.  This shouldn't be an issue given how
 300 * infrequently we write, except maybe for write-then-read idioms.
 301 */
 302#define	SET_FX	(AT91_UDP_TXPKTRDY)
 303#define	CLR_FX	(RX_DATA_READY | AT91_UDP_RXSETUP \
 304		| AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)
 305
 306/* pull OUT packet data from the endpoint's fifo */
 307static int read_fifo (struct at91_ep *ep, struct at91_request *req)
 308{
 309	u32 __iomem	*creg = ep->creg;
 310	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 311	u32		csr;
 312	u8		*buf;
 313	unsigned int	count, bufferspace, is_done;
 314
 315	buf = req->req.buf + req->req.actual;
 316	bufferspace = req->req.length - req->req.actual;
 317
 318	/*
 319	 * there might be nothing to read if ep_queue() calls us,
 320	 * or if we already emptied both pingpong buffers
 321	 */
 322rescan:
 323	csr = __raw_readl(creg);
 324	if ((csr & RX_DATA_READY) == 0)
 325		return 0;
 326
 327	count = (csr & AT91_UDP_RXBYTECNT) >> 16;
 328	if (count > ep->ep.maxpacket)
 329		count = ep->ep.maxpacket;
 330	if (count > bufferspace) {
 331		DBG("%s buffer overflow\n", ep->ep.name);
 332		req->req.status = -EOVERFLOW;
 333		count = bufferspace;
 334	}
 335	__raw_readsb(dreg, buf, count);
 336
 337	/* release and swap pingpong mem bank */
 338	csr |= CLR_FX;
 339	if (ep->is_pingpong) {
 340		if (ep->fifo_bank == 0) {
 341			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 342			ep->fifo_bank = 1;
 343		} else {
 344			csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK1);
 345			ep->fifo_bank = 0;
 346		}
 347	} else
 348		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
 349	__raw_writel(csr, creg);
 350
 351	req->req.actual += count;
 352	is_done = (count < ep->ep.maxpacket);
 353	if (count == bufferspace)
 354		is_done = 1;
 355
 356	PACKET("%s %p out/%d%s\n", ep->ep.name, &req->req, count,
 357			is_done ? " (done)" : "");
 358
 359	/*
 360	 * avoid extra trips through IRQ logic for packets already in
 361	 * the fifo ... maybe preventing an extra (expensive) OUT-NAK
 362	 */
 363	if (is_done)
 364		done(ep, req, 0);
 365	else if (ep->is_pingpong) {
 366		/*
 367		 * One dummy read to delay the code because of a HW glitch:
 368		 * CSR returns bad RXCOUNT when read too soon after updating
 369		 * RX_DATA_BK flags.
 370		 */
 371		csr = __raw_readl(creg);
 372
 373		bufferspace -= count;
 374		buf += count;
 375		goto rescan;
 376	}
 377
 378	return is_done;
 379}
 380
 381/* load fifo for an IN packet */
 382static int write_fifo(struct at91_ep *ep, struct at91_request *req)
 383{
 384	u32 __iomem	*creg = ep->creg;
 385	u32		csr = __raw_readl(creg);
 386	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
 387	unsigned	total, count, is_last;
 388	u8		*buf;
 389
 390	/*
 391	 * TODO: allow for writing two packets to the fifo ... that'll
 392	 * reduce the amount of IN-NAKing, but probably won't affect
 393	 * throughput much.  (Unlike preventing OUT-NAKing!)
 394	 */
 395
 396	/*
 397	 * If ep_queue() calls us, the queue is empty and possibly in
 398	 * odd states like TXCOMP not yet cleared (we do it, saving at
 399	 * least one IRQ) or the fifo not yet being free.  Those aren't
 400	 * issues normally (IRQ handler fast path).
 401	 */
 402	if (unlikely(csr & (AT91_UDP_TXCOMP | AT91_UDP_TXPKTRDY))) {
 403		if (csr & AT91_UDP_TXCOMP) {
 404			csr |= CLR_FX;
 405			csr &= ~(SET_FX | AT91_UDP_TXCOMP);
 406			__raw_writel(csr, creg);
 407			csr = __raw_readl(creg);
 408		}
 409		if (csr & AT91_UDP_TXPKTRDY)
 410			return 0;
 411	}
 412
 413	buf = req->req.buf + req->req.actual;
 414	prefetch(buf);
 415	total = req->req.length - req->req.actual;
 416	if (ep->ep.maxpacket < total) {
 417		count = ep->ep.maxpacket;
 418		is_last = 0;
 419	} else {
 420		count = total;
 421		is_last = (count < ep->ep.maxpacket) || !req->req.zero;
 422	}
 423
 424	/*
 425	 * Write the packet, maybe it's a ZLP.
 426	 *
 427	 * NOTE:  incrementing req->actual before we receive the ACK means
 428	 * gadget driver IN bytecounts can be wrong in fault cases.  That's
 429	 * fixable with PIO drivers like this one (save "count" here, and
 430	 * do the increment later on TX irq), but not for most DMA hardware.
 431	 *
 432	 * So all gadget drivers must accept that potential error.  Some
 433	 * hardware supports precise fifo status reporting, letting them
 434	 * recover when the actual bytecount matters (e.g. for USB Test
 435	 * and Measurement Class devices).
 436	 */
 437	__raw_writesb(dreg, buf, count);
 438	csr &= ~SET_FX;
 439	csr |= CLR_FX | AT91_UDP_TXPKTRDY;
 440	__raw_writel(csr, creg);
 441	req->req.actual += count;
 442
 443	PACKET("%s %p in/%d%s\n", ep->ep.name, &req->req, count,
 444			is_last ? " (done)" : "");
 445	if (is_last)
 446		done(ep, req, 0);
 447	return is_last;
 448}
 449
 450static void nuke(struct at91_ep *ep, int status)
 451{
 452	struct at91_request *req;
 453
 454	/* terminate any request in the queue */
 455	ep->stopped = 1;
 456	if (list_empty(&ep->queue))
 457		return;
 458
 459	VDBG("%s %s\n", __func__, ep->ep.name);
 460	while (!list_empty(&ep->queue)) {
 461		req = list_entry(ep->queue.next, struct at91_request, queue);
 462		done(ep, req, status);
 463	}
 464}
 465
 466/*-------------------------------------------------------------------------*/
 467
 468static int at91_ep_enable(struct usb_ep *_ep,
 469				const struct usb_endpoint_descriptor *desc)
 470{
 471	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 472	struct at91_udc	*udc = ep->udc;
 473	u16		maxpacket;
 474	u32		tmp;
 475	unsigned long	flags;
 476
 477	if (!_ep || !ep
 478			|| !desc || _ep->name == ep0name
 479			|| desc->bDescriptorType != USB_DT_ENDPOINT
 480			|| (maxpacket = usb_endpoint_maxp(desc)) == 0
 481			|| maxpacket > ep->maxpacket) {
 482		DBG("bad ep or descriptor\n");
 483		return -EINVAL;
 484	}
 485
 486	if (!udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 487		DBG("bogus device state\n");
 488		return -ESHUTDOWN;
 489	}
 490
 491	tmp = usb_endpoint_type(desc);
 492	switch (tmp) {
 493	case USB_ENDPOINT_XFER_CONTROL:
 494		DBG("only one control endpoint\n");
 495		return -EINVAL;
 496	case USB_ENDPOINT_XFER_INT:
 497		if (maxpacket > 64)
 498			goto bogus_max;
 499		break;
 500	case USB_ENDPOINT_XFER_BULK:
 501		switch (maxpacket) {
 502		case 8:
 503		case 16:
 504		case 32:
 505		case 64:
 506			goto ok;
 507		}
 508bogus_max:
 509		DBG("bogus maxpacket %d\n", maxpacket);
 510		return -EINVAL;
 511	case USB_ENDPOINT_XFER_ISOC:
 512		if (!ep->is_pingpong) {
 513			DBG("iso requires double buffering\n");
 514			return -EINVAL;
 515		}
 516		break;
 517	}
 518
 519ok:
 520	spin_lock_irqsave(&udc->lock, flags);
 521
 522	/* initialize endpoint to match this descriptor */
 523	ep->is_in = usb_endpoint_dir_in(desc);
 524	ep->is_iso = (tmp == USB_ENDPOINT_XFER_ISOC);
 525	ep->stopped = 0;
 526	if (ep->is_in)
 527		tmp |= 0x04;
 528	tmp <<= 8;
 529	tmp |= AT91_UDP_EPEDS;
 530	__raw_writel(tmp, ep->creg);
 531
 532	ep->ep.maxpacket = maxpacket;
 533
 534	/*
 535	 * reset/init endpoint fifo.  NOTE:  leaves fifo_bank alone,
 536	 * since endpoint resets don't reset hw pingpong state.
 537	 */
 538	at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 539	at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 540
 541	spin_unlock_irqrestore(&udc->lock, flags);
 542	return 0;
 543}
 544
 545static int at91_ep_disable (struct usb_ep * _ep)
 546{
 547	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 548	struct at91_udc	*udc = ep->udc;
 549	unsigned long	flags;
 550
 551	if (ep == &ep->udc->ep[0])
 552		return -EINVAL;
 553
 554	spin_lock_irqsave(&udc->lock, flags);
 555
 556	nuke(ep, -ESHUTDOWN);
 557
 558	/* restore the endpoint's pristine config */
 559	ep->ep.desc = NULL;
 560	ep->ep.maxpacket = ep->maxpacket;
 561
 562	/* reset fifos and endpoint */
 563	if (ep->udc->clocked) {
 564		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 565		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 566		__raw_writel(0, ep->creg);
 567	}
 568
 569	spin_unlock_irqrestore(&udc->lock, flags);
 570	return 0;
 571}
 572
 573/*
 574 * this is a PIO-only driver, so there's nothing
 575 * interesting for request or buffer allocation.
 576 */
 577
 578static struct usb_request *
 579at91_ep_alloc_request(struct usb_ep *_ep, gfp_t gfp_flags)
 580{
 581	struct at91_request *req;
 582
 583	req = kzalloc(sizeof (struct at91_request), gfp_flags);
 584	if (!req)
 585		return NULL;
 586
 587	INIT_LIST_HEAD(&req->queue);
 588	return &req->req;
 589}
 590
 591static void at91_ep_free_request(struct usb_ep *_ep, struct usb_request *_req)
 592{
 593	struct at91_request *req;
 594
 595	req = container_of(_req, struct at91_request, req);
 596	BUG_ON(!list_empty(&req->queue));
 597	kfree(req);
 598}
 599
 600static int at91_ep_queue(struct usb_ep *_ep,
 601			struct usb_request *_req, gfp_t gfp_flags)
 602{
 603	struct at91_request	*req;
 604	struct at91_ep		*ep;
 605	struct at91_udc		*udc;
 606	int			status;
 607	unsigned long		flags;
 608
 609	req = container_of(_req, struct at91_request, req);
 610	ep = container_of(_ep, struct at91_ep, ep);
 611
 612	if (!_req || !_req->complete
 613			|| !_req->buf || !list_empty(&req->queue)) {
 614		DBG("invalid request\n");
 615		return -EINVAL;
 616	}
 617
 618	if (!_ep || (!ep->ep.desc && ep->ep.name != ep0name)) {
 619		DBG("invalid ep\n");
 620		return -EINVAL;
 621	}
 622
 623	udc = ep->udc;
 624
 625	if (!udc || !udc->driver || udc->gadget.speed == USB_SPEED_UNKNOWN) {
 626		DBG("invalid device\n");
 627		return -EINVAL;
 628	}
 629
 630	_req->status = -EINPROGRESS;
 631	_req->actual = 0;
 632
 633	spin_lock_irqsave(&udc->lock, flags);
 634
 635	/* try to kickstart any empty and idle queue */
 636	if (list_empty(&ep->queue) && !ep->stopped) {
 637		int	is_ep0;
 638
 639		/*
 640		 * If this control request has a non-empty DATA stage, this
 641		 * will start that stage.  It works just like a non-control
 642		 * request (until the status stage starts, maybe early).
 643		 *
 644		 * If the data stage is empty, then this starts a successful
 645		 * IN/STATUS stage.  (Unsuccessful ones use set_halt.)
 646		 */
 647		is_ep0 = (ep->ep.name == ep0name);
 648		if (is_ep0) {
 649			u32	tmp;
 650
 651			if (!udc->req_pending) {
 652				status = -EINVAL;
 653				goto done;
 654			}
 655
 656			/*
 657			 * defer changing CONFG until after the gadget driver
 658			 * reconfigures the endpoints.
 659			 */
 660			if (udc->wait_for_config_ack) {
 661				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 662				tmp ^= AT91_UDP_CONFG;
 663				VDBG("toggle config\n");
 664				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
 665			}
 666			if (req->req.length == 0) {
 667ep0_in_status:
 668				PACKET("ep0 in/status\n");
 669				status = 0;
 670				tmp = __raw_readl(ep->creg);
 671				tmp &= ~SET_FX;
 672				tmp |= CLR_FX | AT91_UDP_TXPKTRDY;
 673				__raw_writel(tmp, ep->creg);
 674				udc->req_pending = 0;
 675				goto done;
 676			}
 677		}
 678
 679		if (ep->is_in)
 680			status = write_fifo(ep, req);
 681		else {
 682			status = read_fifo(ep, req);
 683
 684			/* IN/STATUS stage is otherwise triggered by irq */
 685			if (status && is_ep0)
 686				goto ep0_in_status;
 687		}
 688	} else
 689		status = 0;
 690
 691	if (req && !status) {
 692		list_add_tail (&req->queue, &ep->queue);
 693		at91_udp_write(udc, AT91_UDP_IER, ep->int_mask);
 694	}
 695done:
 696	spin_unlock_irqrestore(&udc->lock, flags);
 697	return (status < 0) ? status : 0;
 698}
 699
 700static int at91_ep_dequeue(struct usb_ep *_ep, struct usb_request *_req)
 701{
 702	struct at91_ep		*ep;
 703	struct at91_request	*req;
 704	unsigned long		flags;
 705	struct at91_udc		*udc;
 706
 707	ep = container_of(_ep, struct at91_ep, ep);
 708	if (!_ep || ep->ep.name == ep0name)
 709		return -EINVAL;
 710
 711	udc = ep->udc;
 712
 713	spin_lock_irqsave(&udc->lock, flags);
 714
 715	/* make sure it's actually queued on this endpoint */
 716	list_for_each_entry (req, &ep->queue, queue) {
 717		if (&req->req == _req)
 718			break;
 719	}
 720	if (&req->req != _req) {
 721		spin_unlock_irqrestore(&udc->lock, flags);
 722		return -EINVAL;
 723	}
 724
 725	done(ep, req, -ECONNRESET);
 726	spin_unlock_irqrestore(&udc->lock, flags);
 727	return 0;
 728}
 729
 730static int at91_ep_set_halt(struct usb_ep *_ep, int value)
 731{
 732	struct at91_ep	*ep = container_of(_ep, struct at91_ep, ep);
 733	struct at91_udc	*udc = ep->udc;
 734	u32 __iomem	*creg;
 735	u32		csr;
 736	unsigned long	flags;
 737	int		status = 0;
 738
 739	if (!_ep || ep->is_iso || !ep->udc->clocked)
 740		return -EINVAL;
 741
 742	creg = ep->creg;
 743	spin_lock_irqsave(&udc->lock, flags);
 744
 745	csr = __raw_readl(creg);
 746
 747	/*
 748	 * fail with still-busy IN endpoints, ensuring correct sequencing
 749	 * of data tx then stall.  note that the fifo rx bytecount isn't
 750	 * completely accurate as a tx bytecount.
 751	 */
 752	if (ep->is_in && (!list_empty(&ep->queue) || (csr >> 16) != 0))
 753		status = -EAGAIN;
 754	else {
 755		csr |= CLR_FX;
 756		csr &= ~SET_FX;
 757		if (value) {
 758			csr |= AT91_UDP_FORCESTALL;
 759			VDBG("halt %s\n", ep->ep.name);
 760		} else {
 761			at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
 762			at91_udp_write(udc, AT91_UDP_RST_EP, 0);
 763			csr &= ~AT91_UDP_FORCESTALL;
 764		}
 765		__raw_writel(csr, creg);
 766	}
 767
 768	spin_unlock_irqrestore(&udc->lock, flags);
 769	return status;
 770}
 771
 772static const struct usb_ep_ops at91_ep_ops = {
 773	.enable		= at91_ep_enable,
 774	.disable	= at91_ep_disable,
 775	.alloc_request	= at91_ep_alloc_request,
 776	.free_request	= at91_ep_free_request,
 777	.queue		= at91_ep_queue,
 778	.dequeue	= at91_ep_dequeue,
 779	.set_halt	= at91_ep_set_halt,
 780	/* there's only imprecise fifo status reporting */
 781};
 782
 783/*-------------------------------------------------------------------------*/
 784
 785static int at91_get_frame(struct usb_gadget *gadget)
 786{
 787	struct at91_udc *udc = to_udc(gadget);
 788
 789	if (!to_udc(gadget)->clocked)
 790		return -EINVAL;
 791	return at91_udp_read(udc, AT91_UDP_FRM_NUM) & AT91_UDP_NUM;
 792}
 793
 794static int at91_wakeup(struct usb_gadget *gadget)
 795{
 796	struct at91_udc	*udc = to_udc(gadget);
 797	u32		glbstate;
 798	int		status = -EINVAL;
 799	unsigned long	flags;
 800
 801	DBG("%s\n", __func__ );
 802	spin_lock_irqsave(&udc->lock, flags);
 803
 804	if (!udc->clocked || !udc->suspended)
 805		goto done;
 806
 807	/* NOTE:  some "early versions" handle ESR differently ... */
 808
 809	glbstate = at91_udp_read(udc, AT91_UDP_GLB_STAT);
 810	if (!(glbstate & AT91_UDP_ESR))
 811		goto done;
 812	glbstate |= AT91_UDP_ESR;
 813	at91_udp_write(udc, AT91_UDP_GLB_STAT, glbstate);
 814
 815done:
 816	spin_unlock_irqrestore(&udc->lock, flags);
 817	return status;
 818}
 819
 820/* reinit == restore initial software state */
 821static void udc_reinit(struct at91_udc *udc)
 822{
 823	u32 i;
 824
 825	INIT_LIST_HEAD(&udc->gadget.ep_list);
 826	INIT_LIST_HEAD(&udc->gadget.ep0->ep_list);
 827
 828	for (i = 0; i < NUM_ENDPOINTS; i++) {
 829		struct at91_ep *ep = &udc->ep[i];
 830
 831		if (i != 0)
 832			list_add_tail(&ep->ep.ep_list, &udc->gadget.ep_list);
 833		ep->ep.desc = NULL;
 834		ep->stopped = 0;
 835		ep->fifo_bank = 0;
 836		ep->ep.maxpacket = ep->maxpacket;
 837		ep->creg = (void __iomem *) udc->udp_baseaddr + AT91_UDP_CSR(i);
 838		/* initialize one queue per endpoint */
 839		INIT_LIST_HEAD(&ep->queue);
 840	}
 841}
 842
 843static void stop_activity(struct at91_udc *udc)
 844{
 845	struct usb_gadget_driver *driver = udc->driver;
 846	int i;
 847
 848	if (udc->gadget.speed == USB_SPEED_UNKNOWN)
 849		driver = NULL;
 850	udc->gadget.speed = USB_SPEED_UNKNOWN;
 851	udc->suspended = 0;
 852
 853	for (i = 0; i < NUM_ENDPOINTS; i++) {
 854		struct at91_ep *ep = &udc->ep[i];
 855		ep->stopped = 1;
 856		nuke(ep, -ESHUTDOWN);
 857	}
 858	if (driver) {
 859		spin_unlock(&udc->lock);
 860		driver->disconnect(&udc->gadget);
 861		spin_lock(&udc->lock);
 862	}
 863
 864	udc_reinit(udc);
 865}
 866
 867static void clk_on(struct at91_udc *udc)
 868{
 869	if (udc->clocked)
 870		return;
 871	udc->clocked = 1;
 872	clk_enable(udc->iclk);
 873	clk_enable(udc->fclk);
 874}
 875
 876static void clk_off(struct at91_udc *udc)
 877{
 878	if (!udc->clocked)
 879		return;
 880	udc->clocked = 0;
 881	udc->gadget.speed = USB_SPEED_UNKNOWN;
 882	clk_disable(udc->fclk);
 883	clk_disable(udc->iclk);
 884}
 885
 886/*
 887 * activate/deactivate link with host; minimize power usage for
 888 * inactive links by cutting clocks and transceiver power.
 889 */
 890static void pullup(struct at91_udc *udc, int is_on)
 891{
 892	int	active = !udc->board.pullup_active_low;
 893
 894	if (!udc->enabled || !udc->vbus)
 895		is_on = 0;
 896	DBG("%sactive\n", is_on ? "" : "in");
 897
 898	if (is_on) {
 899		clk_on(udc);
 900		at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
 901		at91_udp_write(udc, AT91_UDP_TXVC, 0);
 902		if (cpu_is_at91rm9200())
 903			gpio_set_value(udc->board.pullup_pin, active);
 904		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 905			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 906
 907			txvc |= AT91_UDP_TXVC_PUON;
 908			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 909		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 910			u32	usbpucr;
 911
 912			usbpucr = at91_matrix_read(AT91_MATRIX_USBPUCR);
 913			usbpucr |= AT91_MATRIX_USBPUCR_PUON;
 914			at91_matrix_write(AT91_MATRIX_USBPUCR, usbpucr);
 915		}
 916	} else {
 917		stop_activity(udc);
 918		at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
 919		at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
 920		if (cpu_is_at91rm9200())
 921			gpio_set_value(udc->board.pullup_pin, !active);
 922		else if (cpu_is_at91sam9260() || cpu_is_at91sam9263() || cpu_is_at91sam9g20()) {
 923			u32	txvc = at91_udp_read(udc, AT91_UDP_TXVC);
 924
 925			txvc &= ~AT91_UDP_TXVC_PUON;
 926			at91_udp_write(udc, AT91_UDP_TXVC, txvc);
 927		} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
 928			u32	usbpucr;
 929
 930			usbpucr = at91_matrix_read(AT91_MATRIX_USBPUCR);
 931			usbpucr &= ~AT91_MATRIX_USBPUCR_PUON;
 932			at91_matrix_write(AT91_MATRIX_USBPUCR, usbpucr);
 933		}
 934		clk_off(udc);
 935	}
 936}
 937
 938/* vbus is here!  turn everything on that's ready */
 939static int at91_vbus_session(struct usb_gadget *gadget, int is_active)
 940{
 941	struct at91_udc	*udc = to_udc(gadget);
 942	unsigned long	flags;
 943
 944	/* VDBG("vbus %s\n", is_active ? "on" : "off"); */
 945	spin_lock_irqsave(&udc->lock, flags);
 946	udc->vbus = (is_active != 0);
 947	if (udc->driver)
 948		pullup(udc, is_active);
 949	else
 950		pullup(udc, 0);
 951	spin_unlock_irqrestore(&udc->lock, flags);
 952	return 0;
 953}
 954
 955static int at91_pullup(struct usb_gadget *gadget, int is_on)
 956{
 957	struct at91_udc	*udc = to_udc(gadget);
 958	unsigned long	flags;
 959
 960	spin_lock_irqsave(&udc->lock, flags);
 961	udc->enabled = is_on = !!is_on;
 962	pullup(udc, is_on);
 963	spin_unlock_irqrestore(&udc->lock, flags);
 964	return 0;
 965}
 966
 967static int at91_set_selfpowered(struct usb_gadget *gadget, int is_on)
 968{
 969	struct at91_udc	*udc = to_udc(gadget);
 970	unsigned long	flags;
 971
 972	spin_lock_irqsave(&udc->lock, flags);
 973	udc->selfpowered = (is_on != 0);
 974	spin_unlock_irqrestore(&udc->lock, flags);
 975	return 0;
 976}
 977
 978static int at91_start(struct usb_gadget *gadget,
 979		struct usb_gadget_driver *driver);
 980static int at91_stop(struct usb_gadget *gadget,
 981		struct usb_gadget_driver *driver);
 982static const struct usb_gadget_ops at91_udc_ops = {
 983	.get_frame		= at91_get_frame,
 984	.wakeup			= at91_wakeup,
 985	.set_selfpowered	= at91_set_selfpowered,
 986	.vbus_session		= at91_vbus_session,
 987	.pullup			= at91_pullup,
 988	.udc_start		= at91_start,
 989	.udc_stop		= at91_stop,
 990
 991	/*
 992	 * VBUS-powered devices may also also want to support bigger
 993	 * power budgets after an appropriate SET_CONFIGURATION.
 994	 */
 995	/* .vbus_power		= at91_vbus_power, */
 996};
 997
 998/*-------------------------------------------------------------------------*/
 999
1000static int handle_ep(struct at91_ep *ep)
1001{
1002	struct at91_request	*req;
1003	u32 __iomem		*creg = ep->creg;
1004	u32			csr = __raw_readl(creg);
1005
1006	if (!list_empty(&ep->queue))
1007		req = list_entry(ep->queue.next,
1008			struct at91_request, queue);
1009	else
1010		req = NULL;
1011
1012	if (ep->is_in) {
1013		if (csr & (AT91_UDP_STALLSENT | AT91_UDP_TXCOMP)) {
1014			csr |= CLR_FX;
1015			csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_TXCOMP);
1016			__raw_writel(csr, creg);
1017		}
1018		if (req)
1019			return write_fifo(ep, req);
1020
1021	} else {
1022		if (csr & AT91_UDP_STALLSENT) {
1023			/* STALLSENT bit == ISOERR */
1024			if (ep->is_iso && req)
1025				req->req.status = -EILSEQ;
1026			csr |= CLR_FX;
1027			csr &= ~(SET_FX | AT91_UDP_STALLSENT);
1028			__raw_writel(csr, creg);
1029			csr = __raw_readl(creg);
1030		}
1031		if (req && (csr & RX_DATA_READY))
1032			return read_fifo(ep, req);
1033	}
1034	return 0;
1035}
1036
1037union setup {
1038	u8			raw[8];
1039	struct usb_ctrlrequest	r;
1040};
1041
1042static void handle_setup(struct at91_udc *udc, struct at91_ep *ep, u32 csr)
1043{
1044	u32 __iomem	*creg = ep->creg;
1045	u8 __iomem	*dreg = ep->creg + (AT91_UDP_FDR(0) - AT91_UDP_CSR(0));
1046	unsigned	rxcount, i = 0;
1047	u32		tmp;
1048	union setup	pkt;
1049	int		status = 0;
1050
1051	/* read and ack SETUP; hard-fail for bogus packets */
1052	rxcount = (csr & AT91_UDP_RXBYTECNT) >> 16;
1053	if (likely(rxcount == 8)) {
1054		while (rxcount--)
1055			pkt.raw[i++] = __raw_readb(dreg);
1056		if (pkt.r.bRequestType & USB_DIR_IN) {
1057			csr |= AT91_UDP_DIR;
1058			ep->is_in = 1;
1059		} else {
1060			csr &= ~AT91_UDP_DIR;
1061			ep->is_in = 0;
1062		}
1063	} else {
1064		/* REVISIT this happens sometimes under load; why?? */
1065		ERR("SETUP len %d, csr %08x\n", rxcount, csr);
1066		status = -EINVAL;
1067	}
1068	csr |= CLR_FX;
1069	csr &= ~(SET_FX | AT91_UDP_RXSETUP);
1070	__raw_writel(csr, creg);
1071	udc->wait_for_addr_ack = 0;
1072	udc->wait_for_config_ack = 0;
1073	ep->stopped = 0;
1074	if (unlikely(status != 0))
1075		goto stall;
1076
1077#define w_index		le16_to_cpu(pkt.r.wIndex)
1078#define w_value		le16_to_cpu(pkt.r.wValue)
1079#define w_length	le16_to_cpu(pkt.r.wLength)
1080
1081	VDBG("SETUP %02x.%02x v%04x i%04x l%04x\n",
1082			pkt.r.bRequestType, pkt.r.bRequest,
1083			w_value, w_index, w_length);
1084
1085	/*
1086	 * A few standard requests get handled here, ones that touch
1087	 * hardware ... notably for device and endpoint features.
1088	 */
1089	udc->req_pending = 1;
1090	csr = __raw_readl(creg);
1091	csr |= CLR_FX;
1092	csr &= ~SET_FX;
1093	switch ((pkt.r.bRequestType << 8) | pkt.r.bRequest) {
1094
1095	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1096			| USB_REQ_SET_ADDRESS:
1097		__raw_writel(csr | AT91_UDP_TXPKTRDY, creg);
1098		udc->addr = w_value;
1099		udc->wait_for_addr_ack = 1;
1100		udc->req_pending = 0;
1101		/* FADDR is set later, when we ack host STATUS */
1102		return;
1103
1104	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1105			| USB_REQ_SET_CONFIGURATION:
1106		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_CONFG;
1107		if (pkt.r.wValue)
1108			udc->wait_for_config_ack = (tmp == 0);
1109		else
1110			udc->wait_for_config_ack = (tmp != 0);
1111		if (udc->wait_for_config_ack)
1112			VDBG("wait for config\n");
1113		/* CONFG is toggled later, if gadget driver succeeds */
1114		break;
1115
1116	/*
1117	 * Hosts may set or clear remote wakeup status, and
1118	 * devices may report they're VBUS powered.
1119	 */
1120	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1121			| USB_REQ_GET_STATUS:
1122		tmp = (udc->selfpowered << USB_DEVICE_SELF_POWERED);
1123		if (at91_udp_read(udc, AT91_UDP_GLB_STAT) & AT91_UDP_ESR)
1124			tmp |= (1 << USB_DEVICE_REMOTE_WAKEUP);
1125		PACKET("get device status\n");
1126		__raw_writeb(tmp, dreg);
1127		__raw_writeb(0, dreg);
1128		goto write_in;
1129		/* then STATUS starts later, automatically */
1130	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1131			| USB_REQ_SET_FEATURE:
1132		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1133			goto stall;
1134		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1135		tmp |= AT91_UDP_ESR;
1136		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1137		goto succeed;
1138	case ((USB_TYPE_STANDARD|USB_RECIP_DEVICE) << 8)
1139			| USB_REQ_CLEAR_FEATURE:
1140		if (w_value != USB_DEVICE_REMOTE_WAKEUP)
1141			goto stall;
1142		tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1143		tmp &= ~AT91_UDP_ESR;
1144		at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1145		goto succeed;
1146
1147	/*
1148	 * Interfaces have no feature settings; this is pretty useless.
1149	 * we won't even insist the interface exists...
1150	 */
1151	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1152			| USB_REQ_GET_STATUS:
1153		PACKET("get interface status\n");
1154		__raw_writeb(0, dreg);
1155		__raw_writeb(0, dreg);
1156		goto write_in;
1157		/* then STATUS starts later, automatically */
1158	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1159			| USB_REQ_SET_FEATURE:
1160	case ((USB_TYPE_STANDARD|USB_RECIP_INTERFACE) << 8)
1161			| USB_REQ_CLEAR_FEATURE:
1162		goto stall;
1163
1164	/*
1165	 * Hosts may clear bulk/intr endpoint halt after the gadget
1166	 * driver sets it (not widely used); or set it (for testing)
1167	 */
1168	case ((USB_DIR_IN|USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1169			| USB_REQ_GET_STATUS:
1170		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1171		ep = &udc->ep[tmp];
1172		if (tmp >= NUM_ENDPOINTS || (tmp && !ep->ep.desc))
1173			goto stall;
1174
1175		if (tmp) {
1176			if ((w_index & USB_DIR_IN)) {
1177				if (!ep->is_in)
1178					goto stall;
1179			} else if (ep->is_in)
1180				goto stall;
1181		}
1182		PACKET("get %s status\n", ep->ep.name);
1183		if (__raw_readl(ep->creg) & AT91_UDP_FORCESTALL)
1184			tmp = (1 << USB_ENDPOINT_HALT);
1185		else
1186			tmp = 0;
1187		__raw_writeb(tmp, dreg);
1188		__raw_writeb(0, dreg);
1189		goto write_in;
1190		/* then STATUS starts later, automatically */
1191	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1192			| USB_REQ_SET_FEATURE:
1193		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1194		ep = &udc->ep[tmp];
1195		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1196			goto stall;
1197		if (!ep->ep.desc || ep->is_iso)
1198			goto stall;
1199		if ((w_index & USB_DIR_IN)) {
1200			if (!ep->is_in)
1201				goto stall;
1202		} else if (ep->is_in)
1203			goto stall;
1204
1205		tmp = __raw_readl(ep->creg);
1206		tmp &= ~SET_FX;
1207		tmp |= CLR_FX | AT91_UDP_FORCESTALL;
1208		__raw_writel(tmp, ep->creg);
1209		goto succeed;
1210	case ((USB_TYPE_STANDARD|USB_RECIP_ENDPOINT) << 8)
1211			| USB_REQ_CLEAR_FEATURE:
1212		tmp = w_index & USB_ENDPOINT_NUMBER_MASK;
1213		ep = &udc->ep[tmp];
1214		if (w_value != USB_ENDPOINT_HALT || tmp >= NUM_ENDPOINTS)
1215			goto stall;
1216		if (tmp == 0)
1217			goto succeed;
1218		if (!ep->ep.desc || ep->is_iso)
1219			goto stall;
1220		if ((w_index & USB_DIR_IN)) {
1221			if (!ep->is_in)
1222				goto stall;
1223		} else if (ep->is_in)
1224			goto stall;
1225
1226		at91_udp_write(udc, AT91_UDP_RST_EP, ep->int_mask);
1227		at91_udp_write(udc, AT91_UDP_RST_EP, 0);
1228		tmp = __raw_readl(ep->creg);
1229		tmp |= CLR_FX;
1230		tmp &= ~(SET_FX | AT91_UDP_FORCESTALL);
1231		__raw_writel(tmp, ep->creg);
1232		if (!list_empty(&ep->queue))
1233			handle_ep(ep);
1234		goto succeed;
1235	}
1236
1237#undef w_value
1238#undef w_index
1239#undef w_length
1240
1241	/* pass request up to the gadget driver */
1242	if (udc->driver) {
1243		spin_unlock(&udc->lock);
1244		status = udc->driver->setup(&udc->gadget, &pkt.r);
1245		spin_lock(&udc->lock);
1246	}
1247	else
1248		status = -ENODEV;
1249	if (status < 0) {
1250stall:
1251		VDBG("req %02x.%02x protocol STALL; stat %d\n",
1252				pkt.r.bRequestType, pkt.r.bRequest, status);
1253		csr |= AT91_UDP_FORCESTALL;
1254		__raw_writel(csr, creg);
1255		udc->req_pending = 0;
1256	}
1257	return;
1258
1259succeed:
1260	/* immediate successful (IN) STATUS after zero length DATA */
1261	PACKET("ep0 in/status\n");
1262write_in:
1263	csr |= AT91_UDP_TXPKTRDY;
1264	__raw_writel(csr, creg);
1265	udc->req_pending = 0;
1266}
1267
1268static void handle_ep0(struct at91_udc *udc)
1269{
1270	struct at91_ep		*ep0 = &udc->ep[0];
1271	u32 __iomem		*creg = ep0->creg;
1272	u32			csr = __raw_readl(creg);
1273	struct at91_request	*req;
1274
1275	if (unlikely(csr & AT91_UDP_STALLSENT)) {
1276		nuke(ep0, -EPROTO);
1277		udc->req_pending = 0;
1278		csr |= CLR_FX;
1279		csr &= ~(SET_FX | AT91_UDP_STALLSENT | AT91_UDP_FORCESTALL);
1280		__raw_writel(csr, creg);
1281		VDBG("ep0 stalled\n");
1282		csr = __raw_readl(creg);
1283	}
1284	if (csr & AT91_UDP_RXSETUP) {
1285		nuke(ep0, 0);
1286		udc->req_pending = 0;
1287		handle_setup(udc, ep0, csr);
1288		return;
1289	}
1290
1291	if (list_empty(&ep0->queue))
1292		req = NULL;
1293	else
1294		req = list_entry(ep0->queue.next, struct at91_request, queue);
1295
1296	/* host ACKed an IN packet that we sent */
1297	if (csr & AT91_UDP_TXCOMP) {
1298		csr |= CLR_FX;
1299		csr &= ~(SET_FX | AT91_UDP_TXCOMP);
1300
1301		/* write more IN DATA? */
1302		if (req && ep0->is_in) {
1303			if (handle_ep(ep0))
1304				udc->req_pending = 0;
1305
1306		/*
1307		 * Ack after:
1308		 *  - last IN DATA packet (including GET_STATUS)
1309		 *  - IN/STATUS for OUT DATA
1310		 *  - IN/STATUS for any zero-length DATA stage
1311		 * except for the IN DATA case, the host should send
1312		 * an OUT status later, which we'll ack.
1313		 */
1314		} else {
1315			udc->req_pending = 0;
1316			__raw_writel(csr, creg);
1317
1318			/*
1319			 * SET_ADDRESS takes effect only after the STATUS
1320			 * (to the original address) gets acked.
1321			 */
1322			if (udc->wait_for_addr_ack) {
1323				u32	tmp;
1324
1325				at91_udp_write(udc, AT91_UDP_FADDR,
1326						AT91_UDP_FEN | udc->addr);
1327				tmp = at91_udp_read(udc, AT91_UDP_GLB_STAT);
1328				tmp &= ~AT91_UDP_FADDEN;
1329				if (udc->addr)
1330					tmp |= AT91_UDP_FADDEN;
1331				at91_udp_write(udc, AT91_UDP_GLB_STAT, tmp);
1332
1333				udc->wait_for_addr_ack = 0;
1334				VDBG("address %d\n", udc->addr);
1335			}
1336		}
1337	}
1338
1339	/* OUT packet arrived ... */
1340	else if (csr & AT91_UDP_RX_DATA_BK0) {
1341		csr |= CLR_FX;
1342		csr &= ~(SET_FX | AT91_UDP_RX_DATA_BK0);
1343
1344		/* OUT DATA stage */
1345		if (!ep0->is_in) {
1346			if (req) {
1347				if (handle_ep(ep0)) {
1348					/* send IN/STATUS */
1349					PACKET("ep0 in/status\n");
1350					csr = __raw_readl(creg);
1351					csr &= ~SET_FX;
1352					csr |= CLR_FX | AT91_UDP_TXPKTRDY;
1353					__raw_writel(csr, creg);
1354					udc->req_pending = 0;
1355				}
1356			} else if (udc->req_pending) {
1357				/*
1358				 * AT91 hardware has a hard time with this
1359				 * "deferred response" mode for control-OUT
1360				 * transfers.  (For control-IN it's fine.)
1361				 *
1362				 * The normal solution leaves OUT data in the
1363				 * fifo until the gadget driver is ready.
1364				 * We couldn't do that here without disabling
1365				 * the IRQ that tells about SETUP packets,
1366				 * e.g. when the host gets impatient...
1367				 *
1368				 * Working around it by copying into a buffer
1369				 * would almost be a non-deferred response,
1370				 * except that it wouldn't permit reliable
1371				 * stalling of the request.  Instead, demand
1372				 * that gadget drivers not use this mode.
1373				 */
1374				DBG("no control-OUT deferred responses!\n");
1375				__raw_writel(csr | AT91_UDP_FORCESTALL, creg);
1376				udc->req_pending = 0;
1377			}
1378
1379		/* STATUS stage for control-IN; ack.  */
1380		} else {
1381			PACKET("ep0 out/status ACK\n");
1382			__raw_writel(csr, creg);
1383
1384			/* "early" status stage */
1385			if (req)
1386				done(ep0, req, 0);
1387		}
1388	}
1389}
1390
1391static irqreturn_t at91_udc_irq (int irq, void *_udc)
1392{
1393	struct at91_udc		*udc = _udc;
1394	u32			rescans = 5;
1395	int			disable_clock = 0;
1396	unsigned long		flags;
1397
1398	spin_lock_irqsave(&udc->lock, flags);
1399
1400	if (!udc->clocked) {
1401		clk_on(udc);
1402		disable_clock = 1;
1403	}
1404
1405	while (rescans--) {
1406		u32 status;
1407
1408		status = at91_udp_read(udc, AT91_UDP_ISR)
1409			& at91_udp_read(udc, AT91_UDP_IMR);
1410		if (!status)
1411			break;
1412
1413		/* USB reset irq:  not maskable */
1414		if (status & AT91_UDP_ENDBUSRES) {
1415			at91_udp_write(udc, AT91_UDP_IDR, ~MINIMUS_INTERRUPTUS);
1416			at91_udp_write(udc, AT91_UDP_IER, MINIMUS_INTERRUPTUS);
1417			/* Atmel code clears this irq twice */
1418			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1419			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_ENDBUSRES);
1420			VDBG("end bus reset\n");
1421			udc->addr = 0;
1422			stop_activity(udc);
1423
1424			/* enable ep0 */
1425			at91_udp_write(udc, AT91_UDP_CSR(0),
1426					AT91_UDP_EPEDS | AT91_UDP_EPTYPE_CTRL);
1427			udc->gadget.speed = USB_SPEED_FULL;
1428			udc->suspended = 0;
1429			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_EP(0));
1430
1431			/*
1432			 * NOTE:  this driver keeps clocks off unless the
1433			 * USB host is present.  That saves power, but for
1434			 * boards that don't support VBUS detection, both
1435			 * clocks need to be active most of the time.
1436			 */
1437
1438		/* host initiated suspend (3+ms bus idle) */
1439		} else if (status & AT91_UDP_RXSUSP) {
1440			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXSUSP);
1441			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXRSM);
1442			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXSUSP);
1443			/* VDBG("bus suspend\n"); */
1444			if (udc->suspended)
1445				continue;
1446			udc->suspended = 1;
1447
1448			/*
1449			 * NOTE:  when suspending a VBUS-powered device, the
1450			 * gadget driver should switch into slow clock mode
1451			 * and then into standby to avoid drawing more than
1452			 * 500uA power (2500uA for some high-power configs).
1453			 */
1454			if (udc->driver && udc->driver->suspend) {
1455				spin_unlock(&udc->lock);
1456				udc->driver->suspend(&udc->gadget);
1457				spin_lock(&udc->lock);
1458			}
1459
1460		/* host initiated resume */
1461		} else if (status & AT91_UDP_RXRSM) {
1462			at91_udp_write(udc, AT91_UDP_IDR, AT91_UDP_RXRSM);
1463			at91_udp_write(udc, AT91_UDP_IER, AT91_UDP_RXSUSP);
1464			at91_udp_write(udc, AT91_UDP_ICR, AT91_UDP_RXRSM);
1465			/* VDBG("bus resume\n"); */
1466			if (!udc->suspended)
1467				continue;
1468			udc->suspended = 0;
1469
1470			/*
1471			 * NOTE:  for a VBUS-powered device, the gadget driver
1472			 * would normally want to switch out of slow clock
1473			 * mode into normal mode.
1474			 */
1475			if (udc->driver && udc->driver->resume) {
1476				spin_unlock(&udc->lock);
1477				udc->driver->resume(&udc->gadget);
1478				spin_lock(&udc->lock);
1479			}
1480
1481		/* endpoint IRQs are cleared by handling them */
1482		} else {
1483			int		i;
1484			unsigned	mask = 1;
1485			struct at91_ep	*ep = &udc->ep[1];
1486
1487			if (status & mask)
1488				handle_ep0(udc);
1489			for (i = 1; i < NUM_ENDPOINTS; i++) {
1490				mask <<= 1;
1491				if (status & mask)
1492					handle_ep(ep);
1493				ep++;
1494			}
1495		}
1496	}
1497
1498	if (disable_clock)
1499		clk_off(udc);
1500
1501	spin_unlock_irqrestore(&udc->lock, flags);
1502
1503	return IRQ_HANDLED;
1504}
1505
1506/*-------------------------------------------------------------------------*/
1507
1508static void nop_release(struct device *dev)
1509{
1510	/* nothing to free */
1511}
1512
1513static struct at91_udc controller = {
1514	.gadget = {
1515		.ops	= &at91_udc_ops,
1516		.ep0	= &controller.ep[0].ep,
1517		.name	= driver_name,
1518		.dev	= {
1519			.init_name = "gadget",
1520			.release = nop_release,
1521		}
1522	},
1523	.ep[0] = {
1524		.ep = {
1525			.name	= ep0name,
1526			.ops	= &at91_ep_ops,
1527		},
1528		.udc		= &controller,
1529		.maxpacket	= 8,
1530		.int_mask	= 1 << 0,
1531	},
1532	.ep[1] = {
1533		.ep = {
1534			.name	= "ep1",
1535			.ops	= &at91_ep_ops,
1536		},
1537		.udc		= &controller,
1538		.is_pingpong	= 1,
1539		.maxpacket	= 64,
1540		.int_mask	= 1 << 1,
1541	},
1542	.ep[2] = {
1543		.ep = {
1544			.name	= "ep2",
1545			.ops	= &at91_ep_ops,
1546		},
1547		.udc		= &controller,
1548		.is_pingpong	= 1,
1549		.maxpacket	= 64,
1550		.int_mask	= 1 << 2,
1551	},
1552	.ep[3] = {
1553		.ep = {
1554			/* could actually do bulk too */
1555			.name	= "ep3-int",
1556			.ops	= &at91_ep_ops,
1557		},
1558		.udc		= &controller,
1559		.maxpacket	= 8,
1560		.int_mask	= 1 << 3,
1561	},
1562	.ep[4] = {
1563		.ep = {
1564			.name	= "ep4",
1565			.ops	= &at91_ep_ops,
1566		},
1567		.udc		= &controller,
1568		.is_pingpong	= 1,
1569		.maxpacket	= 256,
1570		.int_mask	= 1 << 4,
1571	},
1572	.ep[5] = {
1573		.ep = {
1574			.name	= "ep5",
1575			.ops	= &at91_ep_ops,
1576		},
1577		.udc		= &controller,
1578		.is_pingpong	= 1,
1579		.maxpacket	= 256,
1580		.int_mask	= 1 << 5,
1581	},
1582	/* ep6 and ep7 are also reserved (custom silicon might use them) */
1583};
1584
1585static void at91_vbus_update(struct at91_udc *udc, unsigned value)
1586{
1587	value ^= udc->board.vbus_active_low;
1588	if (value != udc->vbus)
1589		at91_vbus_session(&udc->gadget, value);
1590}
1591
1592static irqreturn_t at91_vbus_irq(int irq, void *_udc)
1593{
1594	struct at91_udc	*udc = _udc;
1595
1596	/* vbus needs at least brief debouncing */
1597	udelay(10);
1598	at91_vbus_update(udc, gpio_get_value(udc->board.vbus_pin));
1599
1600	return IRQ_HANDLED;
1601}
1602
1603static void at91_vbus_timer_work(struct work_struct *work)
1604{
1605	struct at91_udc *udc = container_of(work, struct at91_udc,
1606					    vbus_timer_work);
1607
1608	at91_vbus_update(udc, gpio_get_value_cansleep(udc->board.vbus_pin));
1609
1610	if (!timer_pending(&udc->vbus_timer))
1611		mod_timer(&udc->vbus_timer, jiffies + VBUS_POLL_TIMEOUT);
1612}
1613
1614static void at91_vbus_timer(unsigned long data)
1615{
1616	struct at91_udc *udc = (struct at91_udc *)data;
1617
1618	/*
1619	 * If we are polling vbus it is likely that the gpio is on an
1620	 * bus such as i2c or spi which may sleep, so schedule some work
1621	 * to read the vbus gpio
1622	 */
1623	if (!work_pending(&udc->vbus_timer_work))
1624		schedule_work(&udc->vbus_timer_work);
1625}
1626
1627static int at91_start(struct usb_gadget *gadget,
1628		struct usb_gadget_driver *driver)
1629{
1630	struct at91_udc	*udc;
1631
1632	udc = container_of(gadget, struct at91_udc, gadget);
1633	udc->driver = driver;
1634	udc->gadget.dev.driver = &driver->driver;
1635	udc->enabled = 1;
1636	udc->selfpowered = 1;
1637
1638	DBG("bound to %s\n", driver->driver.name);
1639	return 0;
1640}
1641
1642static int at91_stop(struct usb_gadget *gadget,
1643		struct usb_gadget_driver *driver)
1644{
1645	struct at91_udc *udc;
1646	unsigned long	flags;
1647
1648	udc = container_of(gadget, struct at91_udc, gadget);
1649	spin_lock_irqsave(&udc->lock, flags);
1650	udc->enabled = 0;
1651	at91_udp_write(udc, AT91_UDP_IDR, ~0);
1652	spin_unlock_irqrestore(&udc->lock, flags);
1653
1654	udc->gadget.dev.driver = NULL;
1655	udc->driver = NULL;
1656
1657	DBG("unbound from %s\n", driver->driver.name);
1658	return 0;
1659}
1660
1661/*-------------------------------------------------------------------------*/
1662
1663static void at91udc_shutdown(struct platform_device *dev)
1664{
1665	struct at91_udc *udc = platform_get_drvdata(dev);
1666	unsigned long	flags;
1667
1668	/* force disconnect on reboot */
1669	spin_lock_irqsave(&udc->lock, flags);
1670	pullup(platform_get_drvdata(dev), 0);
1671	spin_unlock_irqrestore(&udc->lock, flags);
1672}
1673
1674static void __devinit at91udc_of_init(struct at91_udc *udc,
1675				     struct device_node *np)
1676{
1677	struct at91_udc_data *board = &udc->board;
1678	u32 val;
1679	enum of_gpio_flags flags;
1680
1681	if (of_property_read_u32(np, "atmel,vbus-polled", &val) == 0)
1682		board->vbus_polled = 1;
1683
1684	board->vbus_pin = of_get_named_gpio_flags(np, "atmel,vbus-gpio", 0,
1685						  &flags);
1686	board->vbus_active_low = (flags & OF_GPIO_ACTIVE_LOW) ? 1 : 0;
1687
1688	board->pullup_pin = of_get_named_gpio_flags(np, "atmel,pullup-gpio", 0,
1689						  &flags);
1690
1691	board->pullup_active_low = (flags & OF_GPIO_ACTIVE_LOW) ? 1 : 0;
1692}
1693
1694static int __devinit at91udc_probe(struct platform_device *pdev)
1695{
1696	struct device	*dev = &pdev->dev;
1697	struct at91_udc	*udc;
1698	int		retval;
1699	struct resource	*res;
1700
1701	if (!dev->platform_data) {
1702		/* small (so we copy it) but critical! */
1703		DBG("missing platform_data\n");
1704		return -ENODEV;
1705	}
1706
1707	if (pdev->num_resources != 2) {
1708		DBG("invalid num_resources\n");
1709		return -ENODEV;
1710	}
1711	if ((pdev->resource[0].flags != IORESOURCE_MEM)
1712			|| (pdev->resource[1].flags != IORESOURCE_IRQ)) {
1713		DBG("invalid resource type\n");
1714		return -ENODEV;
1715	}
1716
1717	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1718	if (!res)
1719		return -ENXIO;
1720
1721	if (!request_mem_region(res->start, resource_size(res), driver_name)) {
1722		DBG("someone's using UDC memory\n");
1723		return -EBUSY;
1724	}
1725
1726	/* init software state */
1727	udc = &controller;
1728	udc->gadget.dev.parent = dev;
1729	if (pdev->dev.of_node)
1730		at91udc_of_init(udc, pdev->dev.of_node);
1731	else
1732		memcpy(&udc->board, dev->platform_data,
1733		       sizeof(struct at91_udc_data));
1734	udc->pdev = pdev;
1735	udc->enabled = 0;
1736	spin_lock_init(&udc->lock);
1737
1738	/* rm9200 needs manual D+ pullup; off by default */
1739	if (cpu_is_at91rm9200()) {
1740		if (gpio_is_valid(udc->board.pullup_pin)) {
1741			DBG("no D+ pullup?\n");
1742			retval = -ENODEV;
1743			goto fail0;
1744		}
1745		retval = gpio_request(udc->board.pullup_pin, "udc_pullup");
1746		if (retval) {
1747			DBG("D+ pullup is busy\n");
1748			goto fail0;
1749		}
1750		gpio_direction_output(udc->board.pullup_pin,
1751				udc->board.pullup_active_low);
1752	}
1753
1754	/* newer chips have more FIFO memory than rm9200 */
1755	if (cpu_is_at91sam9260() || cpu_is_at91sam9g20()) {
1756		udc->ep[0].maxpacket = 64;
1757		udc->ep[3].maxpacket = 64;
1758		udc->ep[4].maxpacket = 512;
1759		udc->ep[5].maxpacket = 512;
1760	} else if (cpu_is_at91sam9261() || cpu_is_at91sam9g10()) {
1761		udc->ep[3].maxpacket = 64;
1762	} else if (cpu_is_at91sam9263()) {
1763		udc->ep[0].maxpacket = 64;
1764		udc->ep[3].maxpacket = 64;
1765	}
1766
1767	udc->udp_baseaddr = ioremap(res->start, resource_size(res));
1768	if (!udc->udp_baseaddr) {
1769		retval = -ENOMEM;
1770		goto fail0a;
1771	}
1772
1773	udc_reinit(udc);
1774
1775	/* get interface and function clocks */
1776	udc->iclk = clk_get(dev, "udc_clk");
1777	udc->fclk = clk_get(dev, "udpck");
1778	if (IS_ERR(udc->iclk) || IS_ERR(udc->fclk)) {
1779		DBG("clocks missing\n");
1780		retval = -ENODEV;
1781		/* NOTE: we "know" here that refcounts on these are NOPs */
1782		goto fail0b;
1783	}
1784
1785	retval = device_register(&udc->gadget.dev);
1786	if (retval < 0) {
1787		put_device(&udc->gadget.dev);
1788		goto fail0b;
1789	}
1790
1791	/* don't do anything until we have both gadget driver and VBUS */
1792	clk_enable(udc->iclk);
1793	at91_udp_write(udc, AT91_UDP_TXVC, AT91_UDP_TXVC_TXVDIS);
1794	at91_udp_write(udc, AT91_UDP_IDR, 0xffffffff);
1795	/* Clear all pending interrupts - UDP may be used by bootloader. */
1796	at91_udp_write(udc, AT91_UDP_ICR, 0xffffffff);
1797	clk_disable(udc->iclk);
1798
1799	/* request UDC and maybe VBUS irqs */
1800	udc->udp_irq = platform_get_irq(pdev, 0);
1801	retval = request_irq(udc->udp_irq, at91_udc_irq,
1802			0, driver_name, udc);
1803	if (retval < 0) {
1804		DBG("request irq %d failed\n", udc->udp_irq);
1805		goto fail1;
1806	}
1807	if (gpio_is_valid(udc->board.vbus_pin)) {
1808		retval = gpio_request(udc->board.vbus_pin, "udc_vbus");
1809		if (retval < 0) {
1810			DBG("request vbus pin failed\n");
1811			goto fail2;
1812		}
1813		gpio_direction_input(udc->board.vbus_pin);
1814
1815		/*
1816		 * Get the initial state of VBUS - we cannot expect
1817		 * a pending interrupt.
1818		 */
1819		udc->vbus = gpio_get_value_cansleep(udc->board.vbus_pin) ^
1820			udc->board.vbus_active_low;
1821
1822		if (udc->board.vbus_polled) {
1823			INIT_WORK(&udc->vbus_timer_work, at91_vbus_timer_work);
1824			setup_timer(&udc->vbus_timer, at91_vbus_timer,
1825				    (unsigned long)udc);
1826			mod_timer(&udc->vbus_timer,
1827				  jiffies + VBUS_POLL_TIMEOUT);
1828		} else {
1829			if (request_irq(gpio_to_irq(udc->board.vbus_pin),
1830					at91_vbus_irq, 0, driver_name, udc)) {
1831				DBG("request vbus irq %d failed\n",
1832				    udc->board.vbus_pin);
1833				retval = -EBUSY;
1834				goto fail3;
1835			}
1836		}
1837	} else {
1838		DBG("no VBUS detection, assuming always-on\n");
1839		udc->vbus = 1;
1840	}
1841	retval = usb_add_gadget_udc(dev, &udc->gadget);
1842	if (retval)
1843		goto fail4;
1844	dev_set_drvdata(dev, udc);
1845	device_init_wakeup(dev, 1);
1846	create_debug_file(udc);
1847
1848	INFO("%s version %s\n", driver_name, DRIVER_VERSION);
1849	return 0;
1850fail4:
1851	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled)
1852		free_irq(gpio_to_irq(udc->board.vbus_pin), udc);
1853fail3:
1854	if (gpio_is_valid(udc->board.vbus_pin))
1855		gpio_free(udc->board.vbus_pin);
1856fail2:
1857	free_irq(udc->udp_irq, udc);
1858fail1:
1859	device_unregister(&udc->gadget.dev);
1860fail0b:
1861	iounmap(udc->udp_baseaddr);
1862fail0a:
1863	if (cpu_is_at91rm9200())
1864		gpio_free(udc->board.pullup_pin);
1865fail0:
1866	release_mem_region(res->start, resource_size(res));
1867	DBG("%s probe failed, %d\n", driver_name, retval);
1868	return retval;
1869}
1870
1871static int __exit at91udc_remove(struct platform_device *pdev)
1872{
1873	struct at91_udc *udc = platform_get_drvdata(pdev);
1874	struct resource *res;
1875	unsigned long	flags;
1876
1877	DBG("remove\n");
1878
1879	usb_del_gadget_udc(&udc->gadget);
1880	if (udc->driver)
1881		return -EBUSY;
1882
1883	spin_lock_irqsave(&udc->lock, flags);
1884	pullup(udc, 0);
1885	spin_unlock_irqrestore(&udc->lock, flags);
1886
1887	device_init_wakeup(&pdev->dev, 0);
1888	remove_debug_file(udc);
1889	if (gpio_is_valid(udc->board.vbus_pin)) {
1890		free_irq(gpio_to_irq(udc->board.vbus_pin), udc);
1891		gpio_free(udc->board.vbus_pin);
1892	}
1893	free_irq(udc->udp_irq, udc);
1894	device_unregister(&udc->gadget.dev);
1895
1896	iounmap(udc->udp_baseaddr);
1897
1898	if (cpu_is_at91rm9200())
1899		gpio_free(udc->board.pullup_pin);
1900
1901	res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1902	release_mem_region(res->start, resource_size(res));
1903
1904	clk_put(udc->iclk);
1905	clk_put(udc->fclk);
1906
1907	return 0;
1908}
1909
1910#ifdef CONFIG_PM
1911static int at91udc_suspend(struct platform_device *pdev, pm_message_t mesg)
1912{
1913	struct at91_udc *udc = platform_get_drvdata(pdev);
1914	int		wake = udc->driver && device_may_wakeup(&pdev->dev);
1915	unsigned long	flags;
1916
1917	/* Unless we can act normally to the host (letting it wake us up
1918	 * whenever it has work for us) force disconnect.  Wakeup requires
1919	 * PLLB for USB events (signaling for reset, wakeup, or incoming
1920	 * tokens) and VBUS irqs (on systems which support them).
1921	 */
1922	if ((!udc->suspended && udc->addr)
1923			|| !wake
1924			|| at91_suspend_entering_slow_clock()) {
1925		spin_lock_irqsave(&udc->lock, flags);
1926		pullup(udc, 0);
1927		wake = 0;
1928		spin_unlock_irqrestore(&udc->lock, flags);
1929	} else
1930		enable_irq_wake(udc->udp_irq);
1931
1932	udc->active_suspend = wake;
1933	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled && wake)
1934		enable_irq_wake(udc->board.vbus_pin);
1935	return 0;
1936}
1937
1938static int at91udc_resume(struct platform_device *pdev)
1939{
1940	struct at91_udc *udc = platform_get_drvdata(pdev);
1941	unsigned long	flags;
1942
1943	if (gpio_is_valid(udc->board.vbus_pin) && !udc->board.vbus_polled &&
1944	    udc->active_suspend)
1945		disable_irq_wake(udc->board.vbus_pin);
1946
1947	/* maybe reconnect to host; if so, clocks on */
1948	if (udc->active_suspend)
1949		disable_irq_wake(udc->udp_irq);
1950	else {
1951		spin_lock_irqsave(&udc->lock, flags);
1952		pullup(udc, 1);
1953		spin_unlock_irqrestore(&udc->lock, flags);
1954	}
1955	return 0;
1956}
1957#else
1958#define	at91udc_suspend	NULL
1959#define	at91udc_resume	NULL
1960#endif
1961
1962#if defined(CONFIG_OF)
1963static const struct of_device_id at91_udc_dt_ids[] = {
1964	{ .compatible = "atmel,at91rm9200-udc" },
1965	{ /* sentinel */ }
1966};
1967
1968MODULE_DEVICE_TABLE(of, at91_udc_dt_ids);
1969#endif
1970
1971static struct platform_driver at91_udc_driver = {
1972	.remove		= __exit_p(at91udc_remove),
1973	.shutdown	= at91udc_shutdown,
1974	.suspend	= at91udc_suspend,
1975	.resume		= at91udc_resume,
1976	.driver		= {
1977		.name	= (char *) driver_name,
1978		.owner	= THIS_MODULE,
1979		.of_match_table	= of_match_ptr(at91_udc_dt_ids),
1980	},
1981};
1982
1983static int __init udc_init_module(void)
1984{
1985	return platform_driver_probe(&at91_udc_driver, at91udc_probe);
1986}
1987module_init(udc_init_module);
1988
1989static void __exit udc_exit_module(void)
1990{
1991	platform_driver_unregister(&at91_udc_driver);
1992}
1993module_exit(udc_exit_module);
1994
1995MODULE_DESCRIPTION("AT91 udc driver");
1996MODULE_AUTHOR("Thomas Rathbone, David Brownell");
1997MODULE_LICENSE("GPL");
1998MODULE_ALIAS("platform:at91_udc");