Re: [PATCH RESEND v2] usb: gadget: Add UDC driver for Broadcom USB3.0 device controller IP BDC

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Felipe,

Can you please provide your feedback? Let me know if any changes are
needed for v3.

Thanks
Ashwini

On Fri, Oct 31, 2014 at 1:14 PM, Ashwini Pahuja <ashwini.linux@xxxxxxxxx> wrote:
> This patch adds a UDC driver for Broadcom's USB3.0 Peripheral core
> named BDC. BDC is capable of supporting all transfer types control,
> bulk, Int and isoch on each endpoint.
>
> Signed-off-by: Ashwini Pahuja <ashwini.linux@xxxxxxxxx>
> ---
> Changes for v2:
> - Includes all the feedback provided by Felipe on the v1.
> - Removed unnecessary out of memory messages.
> - Added usb_gadget_giveback_request.
> - udc_stop: removed unnecessary driver argument.
> - Removed unused defines.
> - Renamed upsc to uspc.
> ---
>  drivers/usb/gadget/udc/Kconfig        |    2 +
>  drivers/usb/gadget/udc/Makefile       |    1 +
>  drivers/usb/gadget/udc/bdc/Kconfig    |   21 +
>  drivers/usb/gadget/udc/bdc/Makefile   |    3 +
>  drivers/usb/gadget/udc/bdc/bdc.h      |  490 ++++++++
>  drivers/usb/gadget/udc/bdc/bdc_cmd.c  |  371 ++++++
>  drivers/usb/gadget/udc/bdc/bdc_cmd.h  |   29 +
>  drivers/usb/gadget/udc/bdc/bdc_core.c |  527 +++++++++
>  drivers/usb/gadget/udc/bdc/bdc_dbg.c  |  231 ++++
>  drivers/usb/gadget/udc/bdc/bdc_dbg.h  |   26 +
>  drivers/usb/gadget/udc/bdc/bdc_ep.c   | 2019 +++++++++++++++++++++++++++++++++
>  drivers/usb/gadget/udc/bdc/bdc_ep.h   |   22 +
>  drivers/usb/gadget/udc/bdc/bdc_pci.c  |  132 +++
>  drivers/usb/gadget/udc/bdc/bdc_udc.c  |  588 ++++++++++
>  14 files changed, 4462 insertions(+), 0 deletions(-)
>  create mode 100644 drivers/usb/gadget/udc/bdc/Kconfig
>  create mode 100644 drivers/usb/gadget/udc/bdc/Makefile
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc.h
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_cmd.c
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_cmd.h
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_core.c
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_dbg.c
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_dbg.h
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_ep.c
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_ep.h
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_pci.c
>  create mode 100644 drivers/usb/gadget/udc/bdc/bdc_udc.c
>
> diff --git a/drivers/usb/gadget/udc/Kconfig b/drivers/usb/gadget/udc/Kconfig
> index 217365d..b8e213e 100644
> --- a/drivers/usb/gadget/udc/Kconfig
> +++ b/drivers/usb/gadget/udc/Kconfig
> @@ -241,6 +241,8 @@ config USB_M66592
>            dynamically linked module called "m66592_udc" and force all
>            gadget drivers to also be dynamically linked.
>
> +source "drivers/usb/gadget/udc/bdc/Kconfig"
> +
>  #
>  # Controllers available only in discrete form (and all PCI controllers)
>  #
> diff --git a/drivers/usb/gadget/udc/Makefile b/drivers/usb/gadget/udc/Makefile
> index a7f4491..fba2049 100644
> --- a/drivers/usb/gadget/udc/Makefile
> +++ b/drivers/usb/gadget/udc/Makefile
> @@ -30,3 +30,4 @@ obj-$(CONFIG_USB_FOTG210_UDC) += fotg210-udc.o
>  obj-$(CONFIG_USB_MV_U3D)       += mv_u3d_core.o
>  obj-$(CONFIG_USB_GR_UDC)       += gr_udc.o
>  obj-$(CONFIG_USB_GADGET_XILINX)        += udc-xilinx.o
> +obj-$(CONFIG_USB_BDC_UDC)      += bdc/
> diff --git a/drivers/usb/gadget/udc/bdc/Kconfig b/drivers/usb/gadget/udc/bdc/Kconfig
> new file mode 100644
> index 0000000..0d7b8c9
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/Kconfig
> @@ -0,0 +1,21 @@
> +config USB_BDC_UDC
> +       tristate "Broadcom USB3.0 device controller IP driver(BDC)"
> +       depends on USB_GADGET && HAS_DMA
> +
> +       help
> +       BDC is Broadcom's USB3.0 device controller IP. If your SOC has a BDC IP
> +       then select this driver.
> +
> +       Say "y" here to link the driver statically, or "m" to build a dynamically
> +       linked module called "bdc".
> +
> +if USB_BDC_UDC
> +
> +comment "Platform Support"
> +config USB_BDC_PCI
> +       tristate "BDC support for PCIe based platforms"
> +       depends on PCI
> +       default USB_BDC_UDC
> +       help
> +               Enable support for platforms which have BDC connected through PCIe, such as Lego3 FPGA platform.
> +endif
> diff --git a/drivers/usb/gadget/udc/bdc/Makefile b/drivers/usb/gadget/udc/bdc/Makefile
> new file mode 100644
> index 0000000..66383d3
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/Makefile
> @@ -0,0 +1,3 @@
> +obj-$(CONFIG_USB_BDC_UDC)      += bdc.o
> +bdc-y  := bdc_core.o bdc_cmd.o bdc_ep.o bdc_udc.o bdc_dbg.o
> +obj-$(CONFIG_USB_BDC_PCI)      += bdc_pci.o
> diff --git a/drivers/usb/gadget/udc/bdc/bdc.h b/drivers/usb/gadget/udc/bdc/bdc.h
> new file mode 100644
> index 0000000..dc18a20
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc.h
> @@ -0,0 +1,490 @@
> +/*
> + * bdc.h - header for the BRCM BDC USB3.0 device controller
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +
> +#ifndef        __LINUX_BDC_H__
> +#define        __LINUX_BDC_H__
> +
> +#include <linux/kernel.h>
> +#include <linux/usb.h>
> +#include <linux/device.h>
> +#include <linux/spinlock.h>
> +#include <linux/list.h>
> +#include <linux/dma-mapping.h>
> +#include <linux/mm.h>
> +#include <linux/debugfs.h>
> +#include <linux/usb/ch9.h>
> +#include <linux/usb/gadget.h>
> +#include <asm/unaligned.h>
> +
> +#define BRCM_BDC_NAME "bdc_usb3"
> +#define BRCM_BDC_DESC "BDC device controller driver"
> +
> +#define DMA_ADDR_INVALID        (~(dma_addr_t)0)
> +
> +/* BDC command operation timeout in usec*/
> +#define BDC_CMD_TIMEOUT        1000
> +/* BDC controller operation timeout in usec*/
> +#define BDC_COP_TIMEOUT        500
> +
> +/*
> + * Maximum size of ep0 response buffer for ch9 requests,
> + * the set_sel request uses 6 so far, the max.
> +*/
> +#define EP0_RESPONSE_BUFF  6
> +/* Start with SS as default */
> +#define EP0_MAX_PKT_SIZE 512
> +
> +/* 64 entries in a SRR */
> +#define NUM_SR_ENTRIES 64
> +
> +/* Num of bds per table */
> +#define NUM_BDS_PER_TABLE      32
> +
> +/* Num of tables in bd list for control,bulk and Int ep */
> +#define NUM_TABLES     2
> +
> +/* Num of tables in bd list for Isoch ep */
> +#define NUM_TABLES_ISOCH       6
> +
> +/* U1 Timeout default: 248usec */
> +#define U1_TIMEOUT     0xf8
> +
> +/* Interrupt coalescence in usec */
> +#define        INT_CLS 500
> +
> +/* Register offsets */
> +/* Configuration and Capability registers */
> +#define BDC_BDCCFG0    0x00
> +#define BDC_BDCCFG1    0x04
> +#define BDC_BDCCAP0    0x08
> +#define BDC_BDCCAP1    0x0c
> +#define BDC_CMDPAR0    0x10
> +#define BDC_CMDPAR1    0x14
> +#define BDC_CMDPAR2    0x18
> +#define BDC_CMDSC      0x1c
> +#define BDC_USPC       0x20
> +#define BDC_USPPMS     0x28
> +#define BDC_USPPM2     0x2c
> +#define BDC_SPBBAL     0x38
> +#define BDC_SPBBAH     0x3c
> +#define BDC_BDCSC      0x40
> +#define BDC_XSFNTF     0x4c
> +
> +#define BDC_DVCSA      0x50
> +#define BDC_DVCSB      0x54
> +#define BDC_EPSTS0(n)  (0x60 + (n * 0x10))
> +#define BDC_EPSTS1(n)  (0x64 + (n * 0x10))
> +#define BDC_EPSTS2(n)  (0x68 + (n * 0x10))
> +#define BDC_EPSTS3(n)  (0x6c + (n * 0x10))
> +#define BDC_EPSTS4(n)  (0x70 + (n * 0x10))
> +#define BDC_EPSTS5(n)  (0x74 + (n * 0x10))
> +#define BDC_EPSTS6(n)  (0x78 + (n * 0x10))
> +#define BDC_EPSTS7(n)  (0x7c + (n * 0x10))
> +#define BDC_SRRBAL(n)  (0x200 + (n * 0x10))
> +#define BDC_SRRBAH(n)  (0x204 + (n * 0x10))
> +#define BDC_SRRINT(n)  (0x208 + (n * 0x10))
> +#define BDC_INTCTLS(n) (0x20c + (n * 0x10))
> +
> +/* Extended capability regs */
> +#define BDC_FSCNOC     0xcd4
> +#define BDC_FSCNIC     0xce4
> +#define NUM_NCS(p)     (p >> 28)
> +
> +/* Register bit fields and Masks */
> +/* BDC Configuration 0 */
> +#define BDC_PGS(p)     (((p) & (0x7 << 8)) >> 8)
> +#define BDC_SPB(p)     (p & 0x7)
> +
> +/* BDC Capability1 */
> +#define BDC_P64                (1 << 0)
> +
> +/* BDC Command register */
> +#define BDC_CMD_FH     0xe
> +#define BDC_CMD_DNC    0x6
> +#define BDC_CMD_EPO    0x4
> +#define BDC_CMD_BLA    0x3
> +#define BDC_CMD_EPC    0x2
> +#define BDC_CMD_DVC    0x1
> +#define BDC_CMD_CWS            (0x1 << 5)
> +#define BDC_CMD_CST(p)         (((p) & (0xf << 6))>>6)
> +#define BDC_CMD_EPN(p)         ((p & 0x1f) << 10)
> +#define BDC_SUB_CMD_ADD                (0x1 << 17)
> +#define BDC_SUB_CMD_FWK                (0x4 << 17)
> +/* Reset sequence number */
> +#define BDC_CMD_EPO_RST_SN     (0x1 << 16)
> +#define BDC_CMD_EP0_XSD                (0x1 << 16)
> +#define BDC_SUB_CMD_ADD_EP     (0x1 << 17)
> +#define BDC_SUB_CMD_DRP_EP     (0x2 << 17)
> +#define BDC_SUB_CMD_EP_STP     (0x2 << 17)
> +#define BDC_SUB_CMD_EP_STL     (0x4 << 17)
> +#define BDC_SUB_CMD_EP_RST     (0x1 << 17)
> +#define BDC_CMD_SRD            (1 << 27)
> +
> +/* CMD completion status */
> +#define BDC_CMDS_SUCC  0x1
> +#define BDC_CMDS_PARA  0x3
> +#define BDC_CMDS_STAT  0x4
> +#define BDC_CMDS_FAIL  0x5
> +#define BDC_CMDS_INTL  0x6
> +#define BDC_CMDS_BUSY  0xf
> +
> +/* CMDSC Param 2 shifts */
> +#define EPT_SHIFT      22
> +#define MP_SHIFT       10
> +#define MB_SHIFT       6
> +#define EPM_SHIFT      4
> +
> +/* BDC USPSC */
> +#define BDC_VBC                (1 << 31)
> +#define BDC_PRC                (1 << 30)
> +#define BDC_PCE                (1 << 29)
> +#define BDC_CFC                (1 << 28)
> +#define BDC_PCC                (1 << 27)
> +#define BDC_PSC                (1 << 26)
> +#define BDC_VBS                (1 << 25)
> +#define BDC_PRS                (1 << 24)
> +#define BDC_PCS                (1 << 23)
> +#define BDC_PSP(p)     (((p) & (0x7 << 20))>>20)
> +#define BDC_SCN                (1 << 8)
> +#define BDC_SDC                (1 << 7)
> +#define BDC_SWS                (1 << 4)
> +
> +#define BDC_USPSC_RW   (BDC_SCN|BDC_SDC|BDC_SWS|0xf)
> +#define BDC_PSP(p)     (((p) & (0x7 << 20))>>20)
> +
> +#define BDC_SPEED_FS   0x1
> +#define BDC_SPEED_LS   0x2
> +#define BDC_SPEED_HS   0x3
> +#define BDC_SPEED_SS   0x4
> +
> +#define BDC_PST(p)     (p & 0xf)
> +#define BDC_PST_MASK   0xf
> +
> +/* USPPMS */
> +#define BDC_U2E                (0x1 << 31)
> +#define BDC_U1E                (0x1 << 30)
> +#define BDC_U2A                (0x1 << 29)
> +#define BDC_PORT_W1S   (0x1 << 17)
> +#define BDC_U1T(p)     ((p) & 0xff)
> +#define BDC_U2T(p)     (((p) & 0xff) << 8)
> +#define BDC_U1T_MASK   0xff
> +
> +/* USBPM2 */
> +/* Hardware LPM Enable */
> +#define BDC_HLE                (1 << 16)
> +
> +/* BDC Status and Control */
> +#define BDC_COP_RST    (1 << 29)
> +#define BDC_COP_RUN    (2 << 29)
> +#define BDC_COP_STP    (4 << 29)
> +
> +#define BDC_COP_MASK (BDC_COP_RST|BDC_COP_RUN|BDC_COP_STP)
> +
> +#define BDC_COS                (1 << 28)
> +#define BDC_CSTS(p)    (((p) & (0x7 << 20)) >> 20)
> +#define BDC_MASK_MCW   (1 << 7)
> +#define BDC_GIE                (1 << 1)
> +#define BDC_GIP                (1 << 0)
> +
> +#define BDC_HLT        1
> +#define BDC_NOR        2
> +#define BDC_OIP        7
> +
> +/* Buffer descriptor and Status report bit fields and masks */
> +#define BD_TYPE_BITMASK        (0xf)
> +#define BD_CHAIN       0xf
> +
> +#define BD_TFS_SHIFT   4
> +#define BD_SOT         (1 << 26)
> +#define BD_EOT         (1 << 27)
> +#define BD_ISP         (1 << 29)
> +#define BD_IOC         (1 << 30)
> +#define BD_SBF         (1 << 31)
> +
> +#define BD_INTR_TARGET(p)      (((p) & 0x1f) << 27)
> +
> +#define BDC_SRR_RWS            (1 << 4)
> +#define BDC_SRR_RST            (1 << 3)
> +#define BDC_SRR_ISR            (1 << 2)
> +#define BDC_SRR_IE             (1 << 1)
> +#define BDC_SRR_IP             (1 << 0)
> +#define BDC_SRR_EPI(p) (((p) & (0xff << 24)) >> 24)
> +#define BDC_SRR_DPI(p) (((p) & (0xff << 16)) >> 16)
> +#define BDC_SRR_DPI_MASK       0x00ff0000
> +
> +#define MARK_CHAIN_BD  (BD_CHAIN|BD_EOT|BD_SOT)
> +
> +/* Control transfer BD specific fields */
> +#define BD_DIR_IN              (1 << 25)
> +
> +#define BDC_PTC_MASK   0xf0000000
> +
> +/* status report defines */
> +#define SR_XSF         0
> +#define SR_USPC                4
> +#define SR_BD_LEN(p)    (p & 0xffffff)
> +
> +#define XSF_SUCC       0x1
> +#define XSF_SHORT      0x3
> +#define XSF_BABB       0x4
> +#define XSF_SETUP_RECV 0x6
> +#define XSF_DATA_START 0x7
> +#define XSF_STATUS_START 0x8
> +
> +#define XSF_STS(p) (((p) >> 28) & 0xf)
> +
> +/* Transfer BD fields */
> +#define BD_LEN(p) ((p) & 0x1ffff)
> +#define BD_LTF         (1 << 25)
> +#define BD_TYPE_DS     0x1
> +#define BD_TYPE_SS     0x2
> +
> +#define BDC_EP_ENABLED     (1 << 0)
> +#define BDC_EP_STALL       (1 << 1)
> +#define BDC_EP_STOP        (1 << 2)
> +
> +/* One BD can transfer max 65536 bytes */
> +#define BD_MAX_BUFF_SIZE       (1 << 16)
> +/* Maximum bytes in one XFR, Refer to BDC spec */
> +#define MAX_XFR_LEN            16777215
> +
> +/* defines for Force Header command */
> +#define DEV_NOTF_TYPE 6
> +#define FWK_SUBTYPE  1
> +#define TRA_PACKET   4
> +
> +#define to_bdc_ep(e)           container_of(e, struct bdc_ep, usb_ep)
> +#define to_bdc_req(r)          container_of(r, struct bdc_req, usb_req)
> +#define gadget_to_bdc(g)       container_of(g, struct bdc, gadget)
> +
> +/* FUNCTION WAKE DEV NOTIFICATION interval, USB3 spec table 8.13 */
> +#define BDC_TNOTIFY 2500 /*in ms*/
> +/* Devstatus bitfields */
> +#define REMOTE_WAKEUP_ISSUED   (1 << 16)
> +#define DEVICE_SUSPENDED       (1 << 17)
> +#define FUNC_WAKE_ISSUED       (1 << 18)
> +#define REMOTE_WAKE_ENABLE     (1 << USB_DEVICE_REMOTE_WAKEUP)
> +
> +/* On disconnect, preserve these bits and clear rest */
> +#define DEVSTATUS_CLEAR                (1 << USB_DEVICE_SELF_POWERED)
> +/* Hardware and software Data structures */
> +
> +/* Endpoint bd: buffer descriptor */
> +struct bdc_bd {
> +       __le32 offset[4];
> +};
> +
> +/* Status report in Status report ring(srr) */
> +struct bdc_sr {
> +       __le32 offset[4];
> +};
> +
> +/* bd_table: contigous bd's in a table */
> +struct bd_table {
> +       struct bdc_bd *start_bd;
> +       /* dma address of start bd of table*/
> +       dma_addr_t dma;
> +};
> +
> +/*
> + * Each endpoint has a bdl(buffer descriptor list), bdl consists of 1 or more bd
> + * table's chained to each other through a chain bd, every table has equal
> + * number of bds. the software uses bdi(bd index) to refer to particular bd in
> + * the list.
> + */
> +struct bd_list {
> +       /* Array of bd table pointers*/
> +       struct bd_table **bd_table_array;
> +       /* How many tables chained to each other */
> +       int num_tabs;
> +       /* Max_bdi = num_tabs * num_bds_table - 1 */
> +       int max_bdi;
> +       /* current enq bdi from sw point of view */
> +       int eqp_bdi;
> +       /* current deq bdi from sw point of view */
> +       int hwd_bdi;
> +       /* numbers of bds per table */
> +       int num_bds_table;
> +};
> +
> +struct bdc_req;
> +
> +/* Representation of a transfer, one transfer can have multiple bd's */
> +struct bd_transfer {
> +       struct bdc_req *req;
> +       /* start bd index */
> +       int start_bdi;
> +       /* this will be the next hw dqp when this transfer completes */
> +       int next_hwd_bdi;
> +       /* number of bds in this transfer */
> +       int num_bds;
> +};
> +
> +/*
> + * Representation of a gadget request, every gadget request is contained
> + * by 1 bd_transfer.
> + */
> +struct bdc_req {
> +       struct usb_request      usb_req;
> +       struct list_head        queue;
> +       struct bdc_ep           *ep;
> +       /* only one Transfer per request */
> +       struct bd_transfer bd_xfr;
> +       int     epnum;
> +};
> +
> +/* scratchpad buffer needed by bdc hardware */
> +struct bdc_scratchpad {
> +       dma_addr_t sp_dma;
> +       void *buff;
> +       u32 size;
> +};
> +
> +/* endpoint representation */
> +struct bdc_ep {
> +       struct usb_ep   usb_ep;
> +       struct list_head queue;
> +       struct bdc *bdc;
> +       u8  ep_type;
> +       u8  dir;
> +       u8  ep_num;
> +       const struct usb_ss_ep_comp_descriptor  *comp_desc;
> +       const struct usb_endpoint_descriptor    *desc;
> +       unsigned int flags;
> +       char name[20];
> +       /* endpoint bd list*/
> +       struct bd_list bd_list;
> +       /*
> +        * HW generates extra event for multi bd tranfers, this flag helps in
> +        * ignoring the extra event
> +        */
> +       bool ignore_next_sr;
> +};
> +
> +/* bdc cmmand parameter structure */
> +struct bdc_cmd_params {
> +       u32     param2;
> +       u32     param1;
> +       u32     param0;
> +};
> +
> +/* status report ring(srr), currently one srr is supported for entire system */
> +struct srr {
> +       struct bdc_sr *sr_bds;
> +       u16     eqp_index;
> +       u16     dqp_index;
> +       dma_addr_t      dma_addr;
> +};
> +
> +/* EP0 states */
> +enum bdc_ep0_state {
> +       WAIT_FOR_SETUP = 0,
> +       WAIT_FOR_DATA_START,
> +       WAIT_FOR_DATA_XMIT,
> +       WAIT_FOR_STATUS_START,
> +       WAIT_FOR_STATUS_XMIT,
> +       STATUS_PENDING
> +};
> +
> +/* Link states */
> +enum bdc_link_state {
> +       BDC_LINK_STATE_U0       = 0x00,
> +       BDC_LINK_STATE_U3       = 0x03,
> +       BDC_LINK_STATE_RX_DET   = 0x05,
> +       BDC_LINK_STATE_RESUME   = 0x0f
> +};
> +
> +/* representation of bdc */
> +struct bdc {
> +       struct usb_gadget       gadget;
> +       struct usb_gadget_driver        *gadget_driver;
> +       struct device   *dev;
> +       /* device lock */
> +       spinlock_t      lock;
> +
> +       /* num of endpoints for a particular instantiation of IP */
> +       unsigned int num_eps;
> +       /*
> +        * Array of ep's, it uses the same index covention as bdc hw i.e.
> +        * 1 for ep0, 2 for 1out,3 for 1in ....
> +        */
> +       struct bdc_ep           **bdc_ep_array;
> +       void __iomem            *regs;
> +       struct bdc_scratchpad   scratchpad;
> +       u32     sp_buff_size;
> +       /* current driver supports 1 status ring */
> +       struct srr      srr;
> +       /* Last received setup packet */
> +       struct  usb_ctrlrequest setup_pkt;
> +       struct  bdc_req ep0_req;
> +       struct  bdc_req status_req;
> +       enum    bdc_ep0_state ep0_state;
> +       bool    delayed_status;
> +       bool    zlp_needed;
> +       bool    reinit;
> +       bool    pullup;
> +       /* Bits 0-15 are standard and 16-31 for proprietary information */
> +       u32     devstatus;
> +       int     irq;
> +       void    *mem;
> +       u32     dev_addr;
> +       /* DMA pools */
> +       struct dma_pool *bd_table_pool;
> +       u8              test_mode;
> +       /* array of callbacks for various status report handlers */
> +       void (*sr_handler[2])(struct bdc *, struct bdc_sr *);
> +       /* ep0 callback handlers */
> +       void (*sr_xsf_ep0[3])(struct bdc *, struct bdc_sr *);
> +       /* ep0 response buffer for ch9 requests like GET_STATUS and SET_SEL */
> +       unsigned char           ep0_response_buff[EP0_RESPONSE_BUFF];
> +       /*
> +        * Timer to check if host resumed transfer after bdc sent Func wake
> +        * notification  packet after a remote wakeup. if not, then resend the
> +        * Func Wake packet every 2.5 secs. Refer to USB3 spec section 8.5.6.4
> +        */
> +       struct delayed_work     func_wake_notify;
> +};
> +
> +static inline u32 bdc_readl(void __iomem *base, u32 offset)
> +{
> +       return readl(base + offset);
> +}
> +
> +static inline void bdc_writel(void __iomem *base, u32 offset, u32 value)
> +{
> +       writel(value, base + offset);
> +}
> +
> +/* Buffer descriptor list operations */
> +void bdc_notify_xfr(struct bdc *, u32);
> +void bdc_softconn(struct bdc *);
> +void bdc_softdisconn(struct bdc *);
> +int bdc_run(struct bdc *);
> +int bdc_stop(struct bdc *);
> +int bdc_reset(struct bdc *);
> +int bdc_udc_init(struct bdc *);
> +void bdc_udc_exit(struct bdc *);
> +int bdc_reinit(struct bdc *);
> +
> +/* Status report handlers */
> +/* Upstream port status change sr */
> +void bdc_sr_uspc(struct bdc *, struct bdc_sr *);
> +/* transfer sr */
> +void bdc_sr_xsf(struct bdc *, struct bdc_sr *);
> +/* EP0 XSF handlers */
> +void bdc_xsf_ep0_setup_recv(struct bdc *, struct bdc_sr *);
> +void bdc_xsf_ep0_data_start(struct bdc *, struct bdc_sr *);
> +void bdc_xsf_ep0_status_start(struct bdc *, struct bdc_sr *);
> +
> +#endif /* __LINUX_BDC_H__ */
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_cmd.c b/drivers/usb/gadget/udc/bdc/bdc_cmd.c
> new file mode 100644
> index 0000000..43657ca
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_cmd.c
> @@ -0,0 +1,371 @@
> +/*
> + * bdc_cmd.c - BRCM BDC USB3.0 device controller
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#include <linux/scatterlist.h>
> +#include <linux/slab.h>
> +
> +#include "bdc.h"
> +#include "bdc_cmd.h"
> +#include "bdc_dbg.h"
> +
> +/* Issues a cmd to cmd processor and waits for cmd completion */
> +static int bdc_issue_cmd(struct bdc *bdc, u32 cmd_sc, u32 param0,
> +                                                       u32 param1, u32 param2)
> +{
> +       u32 timeout = BDC_CMD_TIMEOUT;
> +       u32 cmd_status;
> +       u32 temp;
> +
> +       bdc_writel(bdc->regs, BDC_CMDPAR0, param0);
> +       bdc_writel(bdc->regs, BDC_CMDPAR1, param1);
> +       bdc_writel(bdc->regs, BDC_CMDPAR2, param2);
> +
> +       /* Issue the cmd */
> +       /* Make sure the cmd params are written before asking HW to exec cmd */
> +       wmb();
> +       bdc_writel(bdc->regs, BDC_CMDSC, cmd_sc | BDC_CMD_CWS | BDC_CMD_SRD);
> +       do {
> +               temp = bdc_readl(bdc->regs, BDC_CMDSC);
> +               dev_dbg_ratelimited(bdc->dev, "cmdsc=%x", temp);
> +               cmd_status =  BDC_CMD_CST(temp);
> +               if (cmd_status != BDC_CMDS_BUSY)  {
> +                       dev_dbg(bdc->dev,
> +                               "command completed cmd_sts:%x\n", cmd_status);
> +                       return cmd_status;
> +               }
> +               udelay(1);
> +       } while (timeout--);
> +
> +       dev_err(bdc->dev,
> +               "command operation timedout cmd_status=%d\n", cmd_status);
> +
> +       return cmd_status;
> +}
> +
> +/* Submits cmd and analyze the return value of bdc_issue_cmd */
> +static int bdc_submit_cmd(struct bdc *bdc, u32 cmd_sc,
> +                                       u32 param0, u32 param1, u32 param2)
> +{
> +       u32 temp, cmd_status;
> +       int reset_bdc = 0;
> +       int ret;
> +
> +       temp = bdc_readl(bdc->regs, BDC_CMDSC);
> +       dev_dbg(bdc->dev,
> +               "%s:CMDSC:%08x cmdsc:%08x param0=%08x param1=%08x param2=%08x\n",
> +                __func__, temp, cmd_sc, param0, param1, param2);
> +
> +       cmd_status = BDC_CMD_CST(temp);
> +       if (cmd_status  ==  BDC_CMDS_BUSY) {
> +               dev_err(bdc->dev, "command processor busy: %x\n", cmd_status);
> +               return -EBUSY;
> +       }
> +       ret = bdc_issue_cmd(bdc, cmd_sc, param0, param1, param2);
> +       switch (ret) {
> +       case BDC_CMDS_SUCC:
> +               dev_dbg(bdc->dev, "command completed successfully\n");
> +               ret = 0;
> +               break;
> +
> +       case BDC_CMDS_PARA:
> +               dev_err(bdc->dev, "command parameter error\n");
> +               ret = -EINVAL;
> +               break;
> +
> +       case BDC_CMDS_STAT:
> +               dev_err(bdc->dev, "Invalid device/ep state\n");
> +               ret = -EINVAL;
> +               break;
> +
> +       case BDC_CMDS_FAIL:
> +               dev_err(bdc->dev, "Command failed?\n");
> +               ret = -EAGAIN;
> +               break;
> +
> +       case BDC_CMDS_INTL:
> +               dev_err(bdc->dev, "BDC Internal error\n");
> +               reset_bdc = 1;
> +               ret = -ECONNRESET;
> +               break;
> +
> +       case BDC_CMDS_BUSY:
> +               dev_err(bdc->dev,
> +                       "command timedout waited for %dusec\n",
> +                       BDC_CMD_TIMEOUT);
> +               reset_bdc = 1;
> +               ret = -ECONNRESET;
> +               break;
> +       default:
> +               dev_dbg(bdc->dev, "Unknown command completion code:%x\n", ret);
> +       }
> +
> +       return ret;
> +}
> +
> +/* Deconfigure the endpoint from HW */
> +int bdc_dconfig_ep(struct bdc *bdc, struct bdc_ep *ep)
> +{
> +       u32 cmd_sc;
> +
> +       cmd_sc = BDC_SUB_CMD_DRP_EP|BDC_CMD_EPN(ep->ep_num)|BDC_CMD_EPC;
> +       dev_dbg(bdc->dev, "%s ep->ep_num =%d cmd_sc=%x\n", __func__,
> +                                                       ep->ep_num, cmd_sc);
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, 0, 0, 0);
> +}
> +
> +/* Reinitalize the bdlist after config ep command */
> +static void ep_bd_list_reinit(struct bdc_ep *ep)
> +{
> +       struct bdc *bdc = ep->bdc;
> +       struct bdc_bd *bd;
> +
> +       ep->bd_list.eqp_bdi = 0;
> +       ep->bd_list.hwd_bdi = 0;
> +       bd = ep->bd_list.bd_table_array[0]->start_bd;
> +       dev_dbg(bdc->dev, "%s ep:%p bd:%p\n", __func__, ep, bd);
> +       memset(bd, 0, sizeof(struct bdc_bd));
> +       bd->offset[3] |= cpu_to_le32(BD_SBF);
> +}
> +
> +/* Configure an endpoint */
> +int bdc_config_ep(struct bdc *bdc, struct bdc_ep *ep)
> +{
> +       const struct usb_ss_ep_comp_descriptor *comp_desc;
> +       const struct usb_endpoint_descriptor    *desc;
> +       u32 param0, param1, param2, cmd_sc;
> +       u32 mps, mbs, mul, si;
> +       int ret;
> +
> +       desc = ep->desc;
> +       comp_desc = ep->comp_desc;
> +       cmd_sc = mul = mbs = param2 = 0;
> +       param0 = cpu_to_le32(lower_32_bits(ep->bd_list.bd_table_array[0]->dma));
> +       param1 = cpu_to_le32(upper_32_bits(ep->bd_list.bd_table_array[0]->dma));
> +
> +       dev_dbg(bdc->dev, "%s: param0=%08x param1=%08x", __func__,
> +                                                       param0, param1);
> +       si = desc->bInterval;
> +       si = clamp_val(si, 1, 16) - 1;
> +
> +       mps = usb_endpoint_maxp(desc);
> +       mps &= 0x7ff;
> +       param2 |= mps << MP_SHIFT;
> +       param2 |= usb_endpoint_type(desc) << EPT_SHIFT;
> +
> +       switch (bdc->gadget.speed) {
> +       case USB_SPEED_SUPER:
> +               if (usb_endpoint_xfer_int(desc) ||
> +                                       usb_endpoint_xfer_isoc(desc)) {
> +                       param2 |= si;
> +                       if (usb_endpoint_xfer_isoc(desc) && comp_desc)
> +                                       mul = comp_desc->bmAttributes;
> +
> +               }
> +               param2 |= mul << EPM_SHIFT;
> +               if (comp_desc)
> +                       mbs = comp_desc->bMaxBurst;
> +               param2 |= mbs << MB_SHIFT;
> +               break;
> +
> +       case USB_SPEED_HIGH:
> +               if (usb_endpoint_xfer_isoc(desc) ||
> +                                       usb_endpoint_xfer_int(desc)) {
> +                       param2 |= si;
> +
> +                       mbs = (usb_endpoint_maxp(desc) & 0x1800) >> 11;
> +                       param2 |= mbs << MB_SHIFT;
> +               }
> +               break;
> +
> +       case USB_SPEED_FULL:
> +       case USB_SPEED_LOW:
> +               /* the hardware accepts SI in 125usec range */
> +               if (usb_endpoint_xfer_isoc(desc))
> +                       si += 3;
> +
> +               /*
> +                * FS Int endpoints can have si of 1-255ms but the controller
> +                * accepts 2^bInterval*125usec, so convert ms to nearest power
> +                * of 2
> +                */
> +               if (usb_endpoint_xfer_int(desc))
> +                       si = fls(desc->bInterval * 8) - 1;
> +
> +               param2 |= si;
> +               break;
> +       default:
> +               dev_err(bdc->dev, "UNKNOWN speed ERR\n");
> +               return -EINVAL;
> +       }
> +
> +       cmd_sc |= BDC_CMD_EPC|BDC_CMD_EPN(ep->ep_num)|BDC_SUB_CMD_ADD_EP;
> +
> +       dev_dbg(bdc->dev, "cmd_sc=%x param2=%08x\n", cmd_sc, param2);
> +       ret = bdc_submit_cmd(bdc, cmd_sc, param0, param1, param2);
> +       if (ret) {
> +               dev_err(bdc->dev, "command failed :%x\n", ret);
> +               return ret;
> +       }
> +       ep_bd_list_reinit(ep);
> +
> +       return ret;
> +}
> +
> +/*
> + * Change the HW deq pointer, if this command is successful, HW will start
> + * fetching the next bd from address dma_addr.
> + */
> +int bdc_ep_bla(struct bdc *bdc, struct bdc_ep *ep, dma_addr_t dma_addr)
> +{
> +       u32 param0, param1;
> +       u32 cmd_sc = 0;
> +
> +       dev_dbg(bdc->dev, "%s: add=%08llx\n", __func__,
> +                               (unsigned long long)(dma_addr));
> +       param0 = cpu_to_le32(lower_32_bits(dma_addr));
> +       param1 = cpu_to_le32(upper_32_bits(dma_addr));
> +       cmd_sc |= BDC_CMD_EPN(ep->ep_num)|BDC_CMD_BLA;
> +       dev_dbg(bdc->dev, "cmd_sc=%x\n", cmd_sc);
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, param0, param1, 0);
> +}
> +
> +/* Set the address sent bu Host in SET_ADD request */
> +int bdc_address_device(struct bdc *bdc, u32 add)
> +{
> +       u32 cmd_sc = 0;
> +       u32 param2;
> +
> +       dev_dbg(bdc->dev, "%s: add=%d\n", __func__, add);
> +       cmd_sc |=  BDC_SUB_CMD_ADD|BDC_CMD_DVC;
> +       param2 = add & 0x7f;
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, 0, 0, param2);
> +}
> +
> +/* Send a Function Wake notification packet using FH command */
> +int bdc_function_wake_fh(struct bdc *bdc, u8 intf)
> +{
> +       u32 param0, param1;
> +       u32 cmd_sc = 0;
> +
> +       param0 = param1 = 0;
> +       dev_dbg(bdc->dev, "%s intf=%d\n", __func__, intf);
> +       cmd_sc  |=  BDC_CMD_FH;
> +       param0 |= TRA_PACKET;
> +       param0 |= (bdc->dev_addr << 25);
> +       param1 |= DEV_NOTF_TYPE;
> +       param1 |= (FWK_SUBTYPE<<4);
> +       dev_dbg(bdc->dev, "param0=%08x param1=%08x\n", param0, param1);
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, param0, param1, 0);
> +}
> +
> +/* Send a Function Wake notification packet using DNC command */
> +int bdc_function_wake(struct bdc *bdc, u8 intf)
> +{
> +       u32 cmd_sc = 0;
> +       u32 param2 = 0;
> +
> +       dev_dbg(bdc->dev, "%s intf=%d", __func__, intf);
> +       param2 |= intf;
> +       cmd_sc |= BDC_SUB_CMD_FWK|BDC_CMD_DNC;
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, 0, 0, param2);
> +}
> +
> +/* Stall the endpoint */
> +int bdc_ep_set_stall(struct bdc *bdc, int epnum)
> +{
> +       u32 cmd_sc = 0;
> +
> +       dev_dbg(bdc->dev, "%s epnum=%d\n", __func__, epnum);
> +       /* issue a stall endpoint command */
> +       cmd_sc |=  BDC_SUB_CMD_EP_STL | BDC_CMD_EPN(epnum) | BDC_CMD_EPO;
> +
> +       return bdc_submit_cmd(bdc, cmd_sc, 0, 0, 0);
> +}
> +
> +/* resets the endpoint, called when host sends CLEAR_FEATURE(HALT) */
> +int bdc_ep_clear_stall(struct bdc *bdc, int epnum)
> +{
> +       struct bdc_ep *ep;
> +       u32 cmd_sc = 0;
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s: epnum=%d\n", __func__, epnum);
> +       ep = bdc->bdc_ep_array[epnum];
> +       /*
> +        * If we are not in stalled then stall Endpoint and issue clear stall,
> +        * his will reset the seq number for non EP0.
> +        */
> +       if (epnum != 1) {
> +               /* if the endpoint it not stallled */
> +               if (!(ep->flags & BDC_EP_STALL)) {
> +                       ret = bdc_ep_set_stall(bdc, epnum);
> +                               if (ret)
> +                                       return ret;
> +               }
> +       }
> +       /* Preserve the seq number for ep0 only */
> +       if (epnum != 1)
> +               cmd_sc |= BDC_CMD_EPO_RST_SN;
> +
> +       /* issue a reset endpoint command */
> +       cmd_sc |=  BDC_SUB_CMD_EP_RST | BDC_CMD_EPN(epnum) | BDC_CMD_EPO;
> +
> +       ret = bdc_submit_cmd(bdc, cmd_sc, 0, 0, 0);
> +       if (ret) {
> +               dev_err(bdc->dev, "command failed:%x\n", ret);
> +               return ret;
> +       }
> +       bdc_notify_xfr(bdc, epnum);
> +
> +       return ret;
> +}
> +
> +/* Stop the endpoint, called when software wants to dequeue some request */
> +int bdc_stop_ep(struct bdc *bdc, int epnum)
> +{
> +       struct bdc_ep *ep;
> +       u32 cmd_sc = 0;
> +       int ret;
> +
> +       ep = bdc->bdc_ep_array[epnum];
> +       dev_dbg(bdc->dev, "%s: ep:%s ep->flags:%08x\n", __func__,
> +                                               ep->name, ep->flags);
> +       /* Endpoint has to be in running state to execute stop ep command */
> +       if (!(ep->flags & BDC_EP_ENABLED)) {
> +               dev_err(bdc->dev, "stop endpoint called for disabled ep\n");
> +               return   -EINVAL;
> +       }
> +       if ((ep->flags & BDC_EP_STALL) || (ep->flags & BDC_EP_STOP))
> +               return 0;
> +
> +       /* issue a stop endpoint command */
> +       cmd_sc |= BDC_CMD_EP0_XSD | BDC_SUB_CMD_EP_STP
> +                               | BDC_CMD_EPN(epnum) | BDC_CMD_EPO;
> +
> +       ret = bdc_submit_cmd(bdc, cmd_sc, 0, 0, 0);
> +       if (ret) {
> +               dev_err(bdc->dev,
> +                       "stop endpoint command didn't complete:%d ep:%s\n",
> +                       ret, ep->name);
> +               return ret;
> +       }
> +       ep->flags |= BDC_EP_STOP;
> +       bdc_dump_epsts(bdc);
> +
> +       return ret;
> +}
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_cmd.h b/drivers/usb/gadget/udc/bdc/bdc_cmd.h
> new file mode 100644
> index 0000000..61d0e3b
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_cmd.h
> @@ -0,0 +1,29 @@
> +/*
> + * bdc_cmd.h - header for the BDC debug functions
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#ifndef __LINUX_BDC_CMD_H__
> +#define __LINUX_BDC_CMD_H__
> +
> +/* Command operations */
> +int bdc_address_device(struct bdc *, u32);
> +int bdc_config_ep(struct bdc *, struct bdc_ep *);
> +int bdc_dconfig_ep(struct bdc *, struct bdc_ep *);
> +int bdc_stop_ep(struct bdc *, int);
> +int bdc_ep_set_stall(struct bdc *, int);
> +int bdc_ep_clear_stall(struct bdc *, int);
> +int bdc_ep_set_halt(struct bdc_ep *, u32 , int);
> +int bdc_ep_bla(struct bdc *, struct bdc_ep *, dma_addr_t);
> +int bdc_function_wake(struct bdc*, u8);
> +int bdc_function_wake_fh(struct bdc*, u8);
> +
> +#endif /* __LINUX_BDC_CMD_H__ */
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_core.c b/drivers/usb/gadget/udc/bdc/bdc_core.c
> new file mode 100644
> index 0000000..ef989ab
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_core.c
> @@ -0,0 +1,527 @@
> +/*
> + * bdc_core.c - BRCM BDC USB3.0 device controller core operations
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#include <linux/module.h>
> +#include <linux/kernel.h>
> +#include <linux/slab.h>
> +#include <linux/spinlock.h>
> +#include <linux/platform_device.h>
> +#include <linux/interrupt.h>
> +#include <linux/ioport.h>
> +#include <linux/io.h>
> +#include <linux/list.h>
> +#include <linux/delay.h>
> +#include <linux/dma-mapping.h>
> +#include <linux/dmapool.h>
> +#include <linux/of.h>
> +#include <linux/moduleparam.h>
> +#include <linux/usb/ch9.h>
> +#include <linux/usb/gadget.h>
> +
> +#include "bdc.h"
> +#include "bdc_dbg.h"
> +
> +/* Poll till controller status is not OIP */
> +static int poll_oip(struct bdc *bdc, int usec)
> +{
> +       u32 status;
> +       /* Poll till STS!= OIP */
> +       while (usec) {
> +               status = bdc_readl(bdc->regs, BDC_BDCSC);
> +               if (BDC_CSTS(status) != BDC_OIP) {
> +                       dev_dbg(bdc->dev,
> +                               "poll_oip complete status=%d",
> +                               BDC_CSTS(status));
> +                       return 0;
> +               }
> +               udelay(10);
> +               usec -= 10;
> +       }
> +       dev_err(bdc->dev, "Err: operation timedout BDCSC: 0x%08x\n", status);
> +
> +       return -ETIMEDOUT;
> +}
> +
> +/* Stop the BDC controller */
> +int bdc_stop(struct bdc *bdc)
> +{
> +       int ret;
> +       u32 temp;
> +
> +       dev_dbg(bdc->dev, "%s ()\n\n", __func__);
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       /* Check if BDC is already halted */
> +       if (BDC_CSTS(temp) == BDC_HLT) {
> +               dev_dbg(bdc->dev, "BDC already halted\n");
> +               return 0;
> +       }
> +       temp &= ~BDC_COP_MASK;
> +       temp |= BDC_COS|BDC_COP_STP;
> +       bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +
> +       ret = poll_oip(bdc, BDC_COP_TIMEOUT);
> +       if (ret)
> +               dev_err(bdc->dev, "bdc stop operation failed");
> +
> +       return ret;
> +}
> +
> +/* Issue a reset to BDC controller */
> +int bdc_reset(struct bdc *bdc)
> +{
> +       u32 temp;
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       /* First halt the controller */
> +       ret = bdc_stop(bdc);
> +       if (ret)
> +               return ret;
> +
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       temp &= ~BDC_COP_MASK;
> +       temp |= BDC_COS|BDC_COP_RST;
> +       bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +       ret = poll_oip(bdc, BDC_COP_TIMEOUT);
> +       if (ret)
> +               dev_err(bdc->dev, "bdc reset operation failed");
> +
> +       return ret;
> +}
> +
> +/* Run the BDC controller */
> +int bdc_run(struct bdc *bdc)
> +{
> +       u32 temp;
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       /* if BDC is already in running state then do not do anything */
> +       if (BDC_CSTS(temp) == BDC_NOR) {
> +               dev_warn(bdc->dev, "bdc is already in running state\n");
> +               return 0;
> +       }
> +       temp &= ~BDC_COP_MASK;
> +       temp |= BDC_COP_RUN;
> +       temp |= BDC_COS;
> +       bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +       ret = poll_oip(bdc, BDC_COP_TIMEOUT);
> +       if (ret) {
> +               dev_err(bdc->dev, "bdc run operation failed:%d", ret);
> +               return ret;
> +       }
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       if (BDC_CSTS(temp) != BDC_NOR) {
> +               dev_err(bdc->dev, "bdc not in normal mode after RUN op :%d\n",
> +                                                               BDC_CSTS(temp));
> +               return -ESHUTDOWN;
> +       }
> +
> +       return 0;
> +}
> +
> +/*
> + * Present the termination to the host, typically called from upstream port
> + * event with Vbus present =1
> + */
> +void bdc_softconn(struct bdc *bdc)
> +{
> +       u32 uspc;
> +
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       uspc &= ~BDC_PST_MASK;
> +       uspc |= BDC_LINK_STATE_RX_DET;
> +       uspc |= BDC_SWS;
> +       dev_dbg(bdc->dev, "%s () uspc=%08x\n", __func__, uspc);
> +       bdc_writel(bdc->regs, BDC_USPC, uspc);
> +}
> +
> +/* Remove the termination */
> +void bdc_softdisconn(struct bdc *bdc)
> +{
> +       u32 uspc;
> +
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       uspc |= BDC_SDC;
> +       uspc &= ~BDC_SCN;
> +       dev_dbg(bdc->dev, "%s () uspc=%x\n", __func__, uspc);
> +       bdc_writel(bdc->regs, BDC_USPC, uspc);
> +}
> +
> +/* Set up the scratchpad buffer array and scratchpad buffers, if needed. */
> +static int scratchpad_setup(struct bdc *bdc)
> +{
> +       int sp_buff_size;
> +
> +       sp_buff_size = BDC_SPB(bdc_readl(bdc->regs, BDC_BDCCFG0));
> +       dev_dbg(bdc->dev, "%s() sp_buff_size=%d\n", __func__, sp_buff_size);
> +       if (!sp_buff_size) {
> +               dev_dbg(bdc->dev, "Scratchpad buffer not needed\n");
> +               return 0;
> +       }
> +       /* Refer to BDC spec, Table 4 for description of SPB */
> +       sp_buff_size = 1 << (sp_buff_size + 5);
> +       dev_dbg(bdc->dev, "Allocating %d bytes for scratchpad\n", sp_buff_size);
> +       bdc->scratchpad.buff  =  dma_zalloc_coherent(bdc->dev, sp_buff_size,
> +                                       &bdc->scratchpad.sp_dma, GFP_KERNEL);
> +
> +       if (!bdc->scratchpad.buff)
> +               goto fail;
> +
> +       bdc->sp_buff_size = sp_buff_size;
> +       bdc->scratchpad.size = sp_buff_size;
> +       bdc_writel(bdc->regs,
> +                       BDC_SPBBAL,
> +                       cpu_to_le32(lower_32_bits(bdc->scratchpad.sp_dma)));
> +       bdc_writel(bdc->regs,
> +                       BDC_SPBBAH,
> +                       cpu_to_le32(upper_32_bits(bdc->scratchpad.sp_dma)));
> +       return 0;
> +
> +fail:
> +       bdc->scratchpad.buff = NULL;
> +
> +       return -ENOMEM;
> +}
> +
> +/* Allocate the status report ring */
> +static int setup_srr(struct bdc *bdc, int interrupter)
> +{
> +       dev_dbg(bdc->dev, "%s() NUM_SR_ENTRIES:%d\n", __func__, NUM_SR_ENTRIES);
> +       /* Reset the SRR */
> +       bdc_writel(bdc->regs, BDC_SRRINT(0), BDC_SRR_RWS | BDC_SRR_RST);
> +       bdc->srr.dqp_index = 0;
> +       /* allocate the status report descriptors */
> +       bdc->srr.sr_bds = dma_zalloc_coherent(
> +                                       bdc->dev,
> +                                       NUM_SR_ENTRIES * sizeof(struct bdc_bd),
> +                                       &bdc->srr.dma_addr,
> +                                       GFP_KERNEL);
> +       if (!bdc->srr.sr_bds)
> +               return -ENOMEM;
> +
> +       return 0;
> +}
> +
> +/* Initialize the HW regs and internal data structures */
> +static void bdc_mem_init(struct bdc *bdc, bool reinit)
> +{
> +       u8 size = 0;
> +       u32 temp;
> +       u32 usb2_pm;
> +
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       bdc->ep0_state = WAIT_FOR_SETUP;
> +       bdc->dev_addr = 0;
> +       bdc->srr.eqp_index = 0;
> +       bdc->srr.dqp_index = 0;
> +       bdc->zlp_needed = false;
> +       bdc->delayed_status = false;
> +
> +       bdc_writel(bdc->regs, BDC_SPBBAL, bdc->scratchpad.sp_dma);
> +       /* Init the SRR */
> +       temp = BDC_SRR_RWS | BDC_SRR_RST;
> +       /* Reset the SRR */
> +       bdc_writel(bdc->regs, BDC_SRRINT(0), temp);
> +       dev_dbg(bdc->dev, "bdc->srr.sr_bds =%p\n", bdc->srr.sr_bds);
> +       temp = lower_32_bits(bdc->srr.dma_addr);
> +       size = fls(NUM_SR_ENTRIES) - 2;
> +       temp |= size;
> +       dev_dbg(bdc->dev, "SRRBAL[0]=%08x NUM_SR_ENTRIES:%d size:%d\n",
> +                                               temp, NUM_SR_ENTRIES, size);
> +       /* Write the dma addresses into regs*/
> +       bdc_writel(bdc->regs,
> +                       BDC_SRRBAL(0),
> +                       cpu_to_le32(lower_32_bits(temp)));
> +       bdc_writel(bdc->regs,
> +                       BDC_SRRBAH(0),
> +                       cpu_to_le32(upper_32_bits(bdc->srr.dma_addr)));
> +
> +       temp = bdc_readl(bdc->regs, BDC_SRRINT(0));
> +       temp |= BDC_SRR_IE;
> +       temp &= ~(BDC_SRR_RST | BDC_SRR_RWS);
> +       bdc_writel(bdc->regs, BDC_SRRINT(0), temp);
> +
> +       /* Set the Interrupt Coalescence ~500 usec */
> +       temp = bdc_readl(bdc->regs, BDC_INTCTLS(0));
> +       temp &= ~0xffff;
> +       temp |= INT_CLS;
> +       bdc_writel(bdc->regs, BDC_INTCTLS(0), temp);
> +
> +       usb2_pm = bdc_readl(bdc->regs, BDC_USPPM2);
> +       dev_dbg(bdc->dev, "usb2_pm=%08x", usb2_pm);
> +       /* Enable hardware LPM Enable */
> +       usb2_pm |= BDC_HLE;
> +       bdc_writel(bdc->regs, BDC_USPPM2, usb2_pm);
> +
> +       /* readback for debug */
> +       usb2_pm = bdc_readl(bdc->regs, BDC_USPPM2);
> +       dev_dbg(bdc->dev, "usb2_pm=%08x\n", usb2_pm);
> +
> +       /* Disable any unwanted SR's on SRR */
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       /* We don't want Microframe counter wrap SR */
> +       temp |= BDC_MASK_MCW;
> +       bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +
> +       /*
> +        * In some error cases, driver has to reset the entire BDC controller
> +        * in that case reinit is passed as 1
> +        */
> +       if (reinit) {
> +               /* Enable interrupts */
> +               temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +               temp |= BDC_GIE;
> +               bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +               /* Init scratchpad to 0 */
> +               memset(bdc->scratchpad.buff, 0, bdc->sp_buff_size);
> +               /* Initialize SRR to 0 */
> +               memset(bdc->srr.sr_bds, 0,
> +                                       NUM_SR_ENTRIES * sizeof(struct bdc_bd));
> +       } else {
> +               /* One time initiaization only */
> +               /* Enable status report function pointers */
> +               bdc->sr_handler[0] = bdc_sr_xsf;
> +               bdc->sr_handler[1] = bdc_sr_uspc;
> +
> +               /* EP0 status report function pointers */
> +               bdc->sr_xsf_ep0[0] = bdc_xsf_ep0_setup_recv;
> +               bdc->sr_xsf_ep0[1] = bdc_xsf_ep0_data_start;
> +               bdc->sr_xsf_ep0[2] = bdc_xsf_ep0_status_start;
> +       }
> +}
> +
> +/* Free the dynamic memory */
> +static void bdc_mem_free(struct bdc *bdc)
> +{
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       /* Free SRR */
> +       if (bdc->srr.sr_bds)
> +               dma_free_coherent(bdc->dev,
> +                                       NUM_SR_ENTRIES * sizeof(struct bdc_bd),
> +                                       bdc->srr.sr_bds, bdc->srr.dma_addr);
> +
> +       /* Free scratchpad */
> +       if (bdc->scratchpad.buff)
> +               dma_free_coherent(bdc->dev, bdc->sp_buff_size,
> +                               bdc->scratchpad.buff, bdc->scratchpad.sp_dma);
> +
> +       /* Destroy the dma pools */
> +       if (bdc->bd_table_pool)
> +               dma_pool_destroy(bdc->bd_table_pool);
> +
> +       /* Free the bdc_ep array */
> +       kfree(bdc->bdc_ep_array);
> +
> +       bdc->srr.sr_bds = NULL;
> +       bdc->scratchpad.buff = NULL;
> +       bdc->bd_table_pool = NULL;
> +       bdc->bdc_ep_array = NULL;
> +}
> +
> +/*
> + * bdc reinit gives a controller reset and reinitialize the registers,
> + * called from disconnect/bus reset scenario's, to ensure proper HW cleanup
> + */
> +int bdc_reinit(struct bdc *bdc)
> +{
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       ret = bdc_stop(bdc);
> +       if (ret)
> +               goto out;
> +
> +       ret = bdc_reset(bdc);
> +       if (ret)
> +               goto out;
> +
> +       /* the reinit flag is 1 */
> +       bdc_mem_init(bdc, true);
> +       ret = bdc_run(bdc);
> +out:
> +       bdc->reinit = false;
> +
> +       return ret;
> +}
> +
> +/* Allocate all the dyanmic memory */
> +static int bdc_mem_alloc(struct bdc *bdc)
> +{
> +       u32 page_size;
> +       unsigned int num_ieps, num_oeps;
> +
> +       dev_dbg(bdc->dev,
> +               "%s() NUM_BDS_PER_TABLE:%d\n", __func__,
> +               NUM_BDS_PER_TABLE);
> +       page_size = BDC_PGS(bdc_readl(bdc->regs, BDC_BDCCFG0));
> +       /* page size is 2^pgs KB */
> +       page_size = 1 << page_size;
> +       /* KB */
> +       page_size <<= 10;
> +       dev_dbg(bdc->dev, "page_size=%d\n", page_size);
> +
> +       /* Create a pool of bd tables */
> +       bdc->bd_table_pool =
> +           dma_pool_create("BDC BD tables", bdc->dev, NUM_BDS_PER_TABLE * 16,
> +                                                               16, page_size);
> +
> +       if (!bdc->bd_table_pool)
> +               goto fail;
> +
> +       if (scratchpad_setup(bdc))
> +               goto fail;
> +
> +       /* read from regs */
> +       num_ieps = NUM_NCS(bdc_readl(bdc->regs, BDC_FSCNIC));
> +       num_oeps = NUM_NCS(bdc_readl(bdc->regs, BDC_FSCNOC));
> +       /* +2: 1 for ep0 and the other is rsvd i.e. bdc_ep[0] is rsvd */
> +       bdc->num_eps = num_ieps + num_oeps + 2;
> +       dev_dbg(bdc->dev,
> +               "ieps:%d eops:%d num_eps:%d\n",
> +               num_ieps, num_oeps, bdc->num_eps);
> +       /* allocate array of ep pointers */
> +       bdc->bdc_ep_array = kcalloc(bdc->num_eps, sizeof(struct bdc_ep *),
> +                                                               GFP_KERNEL);
> +       if (!bdc->bdc_ep_array)
> +               goto fail;
> +
> +       dev_dbg(bdc->dev, "Allocating sr report0\n");
> +       if (setup_srr(bdc, 0))
> +               goto fail;
> +
> +       return 0;
> +fail:
> +       dev_warn(bdc->dev, "Couldn't initialize memory\n");
> +       bdc_mem_free(bdc);
> +
> +       return -ENOMEM;
> +}
> +
> +/* opposite to bdc_hw_init */
> +static void bdc_hw_exit(struct bdc *bdc)
> +{
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       bdc_mem_free(bdc);
> +}
> +
> +/* Initialize the bdc HW and memory */
> +static int bdc_hw_init(struct bdc *bdc)
> +{
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       ret = bdc_reset(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "err resetting bdc abort bdc init%d\n", ret);
> +               return ret;
> +       }
> +       ret = bdc_mem_alloc(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "Mem alloc failed, aborting\n");
> +               return -ENOMEM;
> +       }
> +       bdc_mem_init(bdc, 0);
> +       bdc_dbg_regs(bdc);
> +       dev_dbg(bdc->dev, "HW Init done\n");
> +
> +       return 0;
> +}
> +
> +static int bdc_probe(struct platform_device *pdev)
> +{
> +       struct bdc *bdc;
> +       struct resource *res;
> +       int ret = -ENOMEM;
> +       int irq;
> +       u32 temp;
> +       struct device *dev = &pdev->dev;
> +
> +       dev_dbg(dev, "%s()\n", __func__);
> +       bdc = devm_kzalloc(dev, sizeof(*bdc), GFP_KERNEL);
> +       if (!bdc)
> +               return -ENOMEM;
> +
> +       res = platform_get_resource(pdev, IORESOURCE_MEM, 0);
> +       bdc->regs = devm_ioremap_resource(dev, res);
> +       if (IS_ERR(bdc->regs)) {
> +               dev_err(dev, "ioremap error\n");
> +               return -ENOMEM;
> +       }
> +       irq = platform_get_irq(pdev, 0);
> +       if (irq < 0) {
> +               dev_err(dev, "platform_get_irq failed:%d\n", irq);
> +               return irq;
> +       }
> +       spin_lock_init(&bdc->lock);
> +       platform_set_drvdata(pdev, bdc);
> +       bdc->irq = irq;
> +       bdc->dev = dev;
> +       dev_dbg(bdc->dev, "bdc->regs: %p irq=%d\n", bdc->regs, bdc->irq);
> +
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       if ((temp & BDC_P64) &&
> +                       !dma_set_mask_and_coherent(dev, DMA_BIT_MASK(64))) {
> +               dev_dbg(bdc->dev, "Using 64-bit address\n");
> +       } else {
> +               ret = dma_set_mask_and_coherent(&pdev->dev, DMA_BIT_MASK(32));
> +               if (ret) {
> +                       dev_err(bdc->dev, "No suitable DMA config available, abort\n");
> +                       return -ENOTSUPP;
> +               }
> +               dev_dbg(bdc->dev, "Using 32-bit address\n");
> +       }
> +       ret = bdc_hw_init(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "BDC init failure:%d\n", ret);
> +               return ret;
> +       }
> +       ret = bdc_udc_init(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "BDC Gadget init failure:%d\n", ret);
> +               goto cleanup;
> +       }
> +       return 0;
> +
> +cleanup:
> +       bdc_hw_exit(bdc);
> +
> +       return ret;
> +}
> +
> +static int bdc_remove(struct platform_device *pdev)
> +{
> +       struct bdc *bdc;
> +
> +       bdc  = platform_get_drvdata(pdev);
> +       dev_dbg(bdc->dev, "%s ()\n", __func__);
> +       bdc_udc_exit(bdc);
> +       bdc_hw_exit(bdc);
> +
> +       return 0;
> +}
> +
> +static struct platform_driver bdc_driver = {
> +       .driver         = {
> +               .name   = BRCM_BDC_NAME,
> +               .owner  = THIS_MODULE
> +       },
> +       .probe          = bdc_probe,
> +       .remove         = bdc_remove,
> +};
> +
> +module_platform_driver(bdc_driver);
> +MODULE_AUTHOR("Ashwini Pahuja <ashwini.linux@xxxxxxxxx>");
> +MODULE_LICENSE("GPL");
> +MODULE_DESCRIPTION(BRCM_BDC_DESC);
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_dbg.c b/drivers/usb/gadget/udc/bdc/bdc_dbg.c
> new file mode 100644
> index 0000000..ab109b2
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_dbg.c
> @@ -0,0 +1,231 @@
> +/*
> + * bdc_dbg.c - BRCM BDC USB3.0 device controller debug functions
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +
> +#include "bdc.h"
> +#include "bdc_dbg.h"
> +
> +void bdc_dbg_regs(struct bdc *bdc)
> +{
> +       u32 temp;
> +
> +       dev_dbg(bdc->dev, "bdc->regs:%p\n", bdc->regs);
> +       temp = bdc_readl(bdc->regs, BDC_BDCCFG0);
> +       dev_dbg(bdc->dev, "bdccfg0:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_BDCCFG1);
> +       dev_dbg(bdc->dev, "bdccfg1:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_BDCCAP0);
> +       dev_dbg(bdc->dev, "bdccap0:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_BDCCAP1);
> +       dev_dbg(bdc->dev, "bdccap1:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_USPC);
> +       dev_dbg(bdc->dev, "uspc:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_DVCSA);
> +       dev_dbg(bdc->dev, "dvcsa:0x%08x\n", temp);
> +       temp = bdc_readl(bdc->regs, BDC_DVCSB);
> +       dev_dbg(bdc->dev, "dvcsb:0x%x08\n", temp);
> +}
> +
> +void bdc_dump_epsts(struct bdc *bdc)
> +{
> +       u32 temp;
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS0(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS0:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS1(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS1:0x%x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS2(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS2:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS3(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS3:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS4(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS4:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS5(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS5:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS6(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS6:0x%08x\n", temp);
> +
> +       temp = bdc_readl(bdc->regs, BDC_EPSTS7(0));
> +       dev_vdbg(bdc->dev, "BDC_EPSTS7:0x%08x\n", temp);
> +}
> +
> +void bdc_dbg_uspc(struct bdc *bdc, u32 uspc)
> +{
> +       u32 temp1, temp2;
> +
> +       temp1 = bdc_readl(bdc->regs, BDC_USPPM2);
> +       temp2 = bdc_readl(bdc->regs, BDC_USPPMS);
> +       dev_dbg(bdc->dev,
> +               "uspc=%08x usppm2=%08x usppms=%08x\n",
> +               uspc, temp1, temp2);
> +       switch (BDC_PST(uspc)) {
> +       case 0:
> +               dev_dbg(bdc->dev, "PST=%x Enabled\n", BDC_PST(uspc));
> +               break;
> +
> +       case 2:
> +               dev_dbg(bdc->dev, "PST=%x L1 Suspend\n", BDC_PST(uspc));
> +               break;
> +
> +       case 3:
> +               dev_dbg(bdc->dev, "PST=%x L2 Suspend\n", BDC_PST(uspc));
> +               break;
> +
> +       case 5:
> +               dev_dbg(bdc->dev, "PST=%x Disabled\n", BDC_PST(uspc));
> +               break;
> +
> +       case 9:
> +               dev_dbg(bdc->dev, "PST=%x USB20 Reset\n", BDC_PST(uspc));
> +               break;
> +
> +       case 0xFF:
> +               dev_dbg(bdc->dev, "PST=%x Resume\n", BDC_PST(uspc));
> +               break;
> +       }
> +
> +       switch (BDC_PSP(uspc)) {
> +       case 0:
> +               dev_dbg(bdc->dev, "PSP=%x Not connected\n", BDC_PSP(uspc));
> +               break;
> +
> +       case 1:
> +               dev_dbg(bdc->dev, "PSP=%x connected FS\n", BDC_PSP(uspc));
> +               break;
> +
> +       case 2:
> +               dev_dbg(bdc->dev, "PSP=%x connected LS\n", BDC_PSP(uspc));
> +               break;
> +
> +       case 3:
> +               dev_dbg(bdc->dev, "PSP=%x connected HS\n", BDC_PSP(uspc));
> +               break;
> +
> +       case 4:
> +               dev_dbg(bdc->dev, "PSP=%x connected SS\n", BDC_PSP(uspc));
> +               break;
> +
> +       default:
> +               dev_dbg(bdc->dev, "PSP=%x unknown\n", BDC_PSP(uspc));
> +               break;
> +       }
> +
> +       if (uspc & BDC_PCS)
> +               dev_dbg(bdc->dev, "PCS=1 Connected to DSP\n");
> +       else
> +               dev_dbg(bdc->dev, "PCS=0 Not Connected to DSP\n");
> +
> +       if (uspc & BDC_PRS)
> +               dev_dbg(bdc->dev, "PRS=1 Warm USB20 reset in progress\n");
> +       else
> +               dev_dbg(bdc->dev, "PRS=0 No reset\n");
> +
> +       if (uspc & BDC_VBS)
> +               dev_dbg(bdc->dev, "VBS=1 present\n");
> +       else
> +               dev_dbg(bdc->dev, "VBS=0 no present\n");
> +
> +       if (uspc & BDC_PSC)
> +               dev_dbg(bdc->dev, "PSC=1 Port link state change\n");
> +       else
> +               dev_dbg(bdc->dev, "PSC=0 No change\n");
> +
> +       if (uspc & BDC_PCC)
> +               dev_dbg(bdc->dev, "PCC=1 Change in CCS PSP\n");
> +       else
> +               dev_dbg(bdc->dev, "PCC=0 No change\n");
> +
> +       if (uspc & BDC_CFC)
> +               dev_dbg(bdc->dev, "CFC=1 Port configuration error\n");
> +       else
> +               dev_dbg(bdc->dev, "CFC=0 No port configurastion error\n");
> +
> +
> +       if (uspc & BDC_PCE)
> +               dev_dbg(bdc->dev, "PCE=1 Port connect error\n");
> +       else
> +               dev_dbg(bdc->dev, "PCE=0 No Port connect error\n");
> +
> +       if (uspc & BDC_PRC)
> +               dev_dbg(bdc->dev, "PRC=1 Port reset completed\n");
> +       else
> +               dev_dbg(bdc->dev, "PRC=0 No change in Port reset\n");
> +
> +       if (uspc & BDC_VBC)
> +               dev_dbg(bdc->dev, "VBS=1 Change in Vbus\n");
> +       else
> +               dev_dbg(bdc->dev, "VBS=0 No change in Vbus\n");
> +}
> +
> +void bdc_dbg_srr(struct bdc *bdc, u32 srr_num)
> +{
> +       struct bdc_sr *sr;
> +       dma_addr_t addr;
> +       int i;
> +
> +       sr = bdc->srr.sr_bds;
> +       addr = bdc->srr.dma_addr;
> +       dev_vdbg(bdc->dev, "bdc_dbg_srr sr:%p dqp_index:%d\n",
> +                                               sr, bdc->srr.dqp_index);
> +       for (i = 0; i < NUM_SR_ENTRIES; i++) {
> +               sr = &bdc->srr.sr_bds[i];
> +               dev_vdbg(bdc->dev, "%llx %08x %08x %08x %08x\n",
> +                                       (unsigned long long)addr,
> +                                       le32_to_cpu(sr->offset[0]),
> +                                       le32_to_cpu(sr->offset[1]),
> +                                       le32_to_cpu(sr->offset[2]),
> +                                       le32_to_cpu(sr->offset[3]));
> +               addr += sizeof(*sr);
> +       }
> +}
> +
> +void bdc_dbg_bd_list(struct bdc *bdc, struct bdc_ep *ep)
> +{
> +       struct bd_list *bd_list = &ep->bd_list;
> +       struct bd_table *bd_table;
> +       struct bdc_bd *bd;
> +       int tbi, bdi, gbdi;
> +       dma_addr_t dma;
> +
> +       gbdi = 0;
> +       dev_vdbg(bdc->dev,
> +               "Dump bd list for %s epnum:%d\n",
> +               ep->name, ep->ep_num);
> +
> +       dev_vdbg(bdc->dev,
> +               "tabs:%d max_bdi:%d eqp_bdi:%d hwd_bdi:%d num_bds_table:%d\n",
> +               bd_list->num_tabs, bd_list->max_bdi, bd_list->eqp_bdi,
> +               bd_list->hwd_bdi, bd_list->num_bds_table);
> +
> +       for (tbi = 0; tbi < bd_list->num_tabs; tbi++) {
> +               bd_table = bd_list->bd_table_array[tbi];
> +               for (bdi = 0; bdi < bd_list->num_bds_table; bdi++) {
> +                       bd =  bd_table->start_bd + bdi;
> +                       dma = bd_table->dma + (sizeof(struct bdc_bd) * bdi);
> +                       dev_vdbg(bdc->dev,
> +                               "tbi:%2d bdi:%2d gbdi:%2d virt:%p phys:%llx %08x %08x %08x %08x\n",
> +                               tbi, bdi, gbdi++, bd, (unsigned long long)dma,
> +                               le32_to_cpu(bd->offset[0]),
> +                               le32_to_cpu(bd->offset[1]),
> +                               le32_to_cpu(bd->offset[2]),
> +                               le32_to_cpu(bd->offset[3]));
> +               }
> +               dev_vdbg(bdc->dev, "\n\n");
> +       }
> +}
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_dbg.h b/drivers/usb/gadget/udc/bdc/bdc_dbg.h
> new file mode 100644
> index 0000000..df45287
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_dbg.h
> @@ -0,0 +1,26 @@
> +/*
> + * bdc_dbg.h - header for the BDC debug functions
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#ifndef __LINUX_BDC_DBG_H__
> +#define __LINUX_BDC_DBG_H__
> +
> +#include "bdc.h"
> +
> +void bdc_dbg_bd_list(struct bdc *, struct bdc_ep*);
> +void bdc_dbg_uspc(struct bdc *, u32);
> +void bdc_dbg_srr(struct bdc *, u32);
> +void bdc_dbg_regs(struct bdc *);
> +void dump_scratchpad(struct bdc *);
> +void bdc_dump_epsts(struct bdc *);
> +
> +#endif /* __LINUX_BDC_DBG_H__ */
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_ep.c b/drivers/usb/gadget/udc/bdc/bdc_ep.c
> new file mode 100644
> index 0000000..f5adcb4
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_ep.c
> @@ -0,0 +1,2019 @@
> +/*
> + * bdc_ep.c - BRCM BDC USB3.0 device controller endpoint related functions
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * Based on drivers under drivers/usb/
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#include <linux/module.h>
> +#include <linux/pci.h>
> +#include <linux/dma-mapping.h>
> +#include <linux/kernel.h>
> +#include <linux/delay.h>
> +#include <linux/ioport.h>
> +#include <linux/sched.h>
> +#include <linux/slab.h>
> +#include <linux/errno.h>
> +#include <linux/init.h>
> +#include <linux/timer.h>
> +#include <linux/list.h>
> +#include <linux/interrupt.h>
> +#include <linux/moduleparam.h>
> +#include <linux/device.h>
> +#include <linux/usb/ch9.h>
> +#include <linux/usb/gadget.h>
> +#include <linux/usb/otg.h>
> +#include <linux/pm.h>
> +#include <linux/io.h>
> +#include <linux/irq.h>
> +#include <asm/unaligned.h>
> +#include <linux/platform_device.h>
> +#include <linux/usb/composite.h>
> +
> +#include "bdc.h"
> +#include "bdc_ep.h"
> +#include "bdc_cmd.h"
> +#include "bdc_dbg.h"
> +
> +static const char * const ep0_state_string[] =  {
> +       "WAIT_FOR_SETUP",
> +       "WAIT_FOR_DATA_START",
> +       "WAIT_FOR_DATA_XMIT",
> +       "WAIT_FOR_STATUS_START",
> +       "WAIT_FOR_STATUS_XMIT",
> +       "STATUS_PENDING"
> +};
> +
> +/* Free the bdl during ep disable */
> +static void ep_bd_list_free(struct bdc_ep *ep, u32 num_tabs)
> +{
> +       struct bd_list *bd_list = &ep->bd_list;
> +       struct bdc *bdc = ep->bdc;
> +       struct bd_table *bd_table;
> +       int index;
> +
> +       dev_dbg(bdc->dev, "%s ep:%s num_tabs:%d\n",
> +                                __func__, ep->name, num_tabs);
> +
> +       if (!bd_list->bd_table_array) {
> +               dev_dbg(bdc->dev, "%s already freed\n", ep->name);
> +               return;
> +       }
> +       for (index = 0; index < num_tabs; index++) {
> +               /*
> +                * check if the bd_table struct is allocated ?
> +                * if yes, then check if bd memory has been allocated, then
> +                * free the dma_pool and also the bd_table struct memory
> +               */
> +               bd_table = bd_list->bd_table_array[index];
> +               dev_dbg(bdc->dev, "bd_table:%p index:%d\n", bd_table, index);
> +               if (bd_table) {
> +                       if (bd_table->start_bd) {
> +                               dev_dbg(bdc->dev,
> +                                       "Free dma pool start_bd:%p dma:%llx\n",
> +                                       bd_table->start_bd,
> +                                       (unsigned long long)bd_table->dma);
> +
> +                               dma_pool_free(bdc->bd_table_pool,
> +                                               bd_table->start_bd,
> +                                               bd_table->dma);
> +                       } else {
> +                               dev_dbg(bdc->dev, "bd dma pool not allocted\n");
> +                       }
> +                       /* Free the bd_table structure */
> +                       kfree(bd_table);
> +               } else {
> +                       dev_dbg(bdc->dev, "bd_table not allocated\n");
> +               }
> +       }
> +       /* Free the bd table array */
> +       kfree(ep->bd_list.bd_table_array);
> +}
> +
> +/*
> + * chain the tables, by insteting a chain bd at the end of prev_table, pointing
> + * to next_table
> + */
> +static inline void chain_table(struct bd_table *prev_table,
> +                                       struct bd_table *next_table,
> +                                       u32 bd_p_tab)
> +{
> +       /* Chain the prev table to next table */
> +       prev_table->start_bd[bd_p_tab-1].offset[0] =
> +                               cpu_to_le32(lower_32_bits(next_table->dma));
> +
> +       prev_table->start_bd[bd_p_tab-1].offset[1] =
> +                               cpu_to_le32(upper_32_bits(next_table->dma));
> +
> +       prev_table->start_bd[bd_p_tab-1].offset[2] =
> +                               0x0;
> +
> +       prev_table->start_bd[bd_p_tab-1].offset[3] =
> +                               cpu_to_le32(MARK_CHAIN_BD);
> +}
> +
> +/* Allocate the bdl for ep, during config ep */
> +static int ep_bd_list_alloc(struct bdc_ep *ep)
> +{
> +       struct bd_table *prev_table = NULL;
> +       int index, num_tabs, bd_p_tab;
> +       struct bdc *bdc = ep->bdc;
> +       struct bd_table *bd_table;
> +       dma_addr_t dma;
> +
> +       if (usb_endpoint_xfer_isoc(ep->desc))
> +               num_tabs = NUM_TABLES_ISOCH;
> +       else
> +               num_tabs = NUM_TABLES;
> +
> +       bd_p_tab = NUM_BDS_PER_TABLE;
> +       /* if there is only 1 table in bd list then loop chain to self */
> +       dev_dbg(bdc->dev,
> +               "%s ep:%p num_tabs:%d\n",
> +               __func__, ep, num_tabs);
> +
> +       /* Allocate memory for table array */
> +       ep->bd_list.bd_table_array = kzalloc(
> +                                       num_tabs * sizeof(struct bd_table *),
> +                                       GFP_ATOMIC);
> +       if (!ep->bd_list.bd_table_array)
> +               return -ENOMEM;
> +
> +       /* Allocate memory for each table */
> +       for (index = 0; index < num_tabs; index++) {
> +               /* Allocate memory for bd_table structure */
> +               bd_table = kzalloc(sizeof(struct bd_table), GFP_ATOMIC);
> +               if (!bd_table)
> +                       goto fail;
> +
> +               bd_table->start_bd = dma_pool_alloc(bdc->bd_table_pool,
> +                                                       GFP_ATOMIC,
> +                                                       &dma);
> +               if (!bd_table->start_bd)
> +                       goto fail;
> +
> +               bd_table->dma = dma;
> +
> +               dev_dbg(bdc->dev,
> +                       "index:%d start_bd:%p dma=%08llx prev_table:%p\n",
> +                       index, bd_table->start_bd,
> +                       (unsigned long long)bd_table->dma, prev_table);
> +
> +               ep->bd_list.bd_table_array[index] = bd_table;
> +               memset(bd_table->start_bd, 0, bd_p_tab * sizeof(struct bdc_bd));
> +               if (prev_table)
> +                       chain_table(prev_table, bd_table, bd_p_tab);
> +
> +               prev_table = bd_table;
> +       }
> +       chain_table(prev_table, ep->bd_list.bd_table_array[0], bd_p_tab);
> +       /* Memory allocation is successful, now init the internal fields */
> +       ep->bd_list.num_tabs = num_tabs;
> +       ep->bd_list.max_bdi  = (num_tabs * bd_p_tab) - 1;
> +       ep->bd_list.num_tabs = num_tabs;
> +       ep->bd_list.num_bds_table = bd_p_tab;
> +       ep->bd_list.eqp_bdi = 0;
> +       ep->bd_list.hwd_bdi = 0;
> +
> +       return 0;
> +fail:
> +       /* Free the bd_table_array, bd_table struct, bd's */
> +       ep_bd_list_free(ep, num_tabs);
> +
> +       return -ENOMEM;
> +}
> +
> +/* returns how many bd's are need for this transfer */
> +static inline int bd_needed_req(struct bdc_req *req)
> +{
> +       int bd_needed = 0;
> +       int remaining;
> +
> +       /* 1 bd needed for 0 byte transfer */
> +       if (req->usb_req.length == 0)
> +               return 1;
> +
> +       /* remaining bytes after tranfering all max BD size BD's */
> +       remaining = req->usb_req.length % BD_MAX_BUFF_SIZE;
> +       if (remaining)
> +               bd_needed++;
> +
> +       /* How many maximum BUFF size BD's ? */
> +       remaining = req->usb_req.length / BD_MAX_BUFF_SIZE;
> +       bd_needed += remaining;
> +
> +       return bd_needed;
> +}
> +
> +/* returns the bd index(bdi) corresponding to bd dma address */
> +static int bd_add_to_bdi(struct bdc_ep *ep, dma_addr_t bd_dma_addr)
> +{
> +       struct bd_list *bd_list = &ep->bd_list;
> +       dma_addr_t dma_first_bd, dma_last_bd;
> +       struct bdc *bdc = ep->bdc;
> +       struct bd_table *bd_table;
> +       bool found = false;
> +       int tbi, bdi;
> +
> +       dma_first_bd = dma_last_bd = 0;
> +       dev_dbg(bdc->dev, "%s  %llx\n",
> +                       __func__, (unsigned long long)bd_dma_addr);
> +       /*
> +        * Find in which table this bd_dma_addr belongs?, go through the table
> +        * array and compare addresses of first and last address of bd of each
> +        * table
> +        */
> +       for (tbi = 0; tbi < bd_list->num_tabs; tbi++) {
> +               bd_table = bd_list->bd_table_array[tbi];
> +               dma_first_bd = bd_table->dma;
> +               dma_last_bd = bd_table->dma +
> +                                       (sizeof(struct bdc_bd) *
> +                                       (bd_list->num_bds_table - 1));
> +               dev_dbg(bdc->dev, "dma_first_bd:%llx dma_last_bd:%llx\n",
> +                                       (unsigned long long)dma_first_bd,
> +                                       (unsigned long long)dma_last_bd);
> +               if (bd_dma_addr >= dma_first_bd && bd_dma_addr <= dma_last_bd) {
> +                       found = true;
> +                       break;
> +               }
> +       }
> +       if (unlikely(!found)) {
> +               dev_err(bdc->dev, "%s FATAL err, bd not found\n", __func__);
> +               return -EINVAL;
> +       }
> +       /* Now we know the table, find the bdi */
> +       bdi = (bd_dma_addr - dma_first_bd) / sizeof(struct bdc_bd);
> +
> +       /* return the global bdi, to compare with ep eqp_bdi */
> +       return (bdi + (tbi * bd_list->num_bds_table));
> +}
> +
> +/* returns the table index(tbi) of the given bdi */
> +static int bdi_to_tbi(struct bdc_ep *ep, int bdi)
> +{
> +       int tbi;
> +
> +       tbi = bdi / ep->bd_list.num_bds_table;
> +       dev_vdbg(ep->bdc->dev,
> +               "bdi:%d num_bds_table:%d tbi:%d\n",
> +               bdi, ep->bd_list.num_bds_table, tbi);
> +
> +       return tbi;
> +}
> +
> +/* Find the bdi last bd in the transfer */
> +static inline int find_end_bdi(struct bdc_ep *ep, int next_hwd_bdi)
> +{
> +       int end_bdi;
> +
> +       end_bdi = next_hwd_bdi - 1;
> +       if (end_bdi < 0)
> +               end_bdi = ep->bd_list.max_bdi - 1;
> +        else if ((end_bdi % (ep->bd_list.num_bds_table-1)) == 0)
> +               end_bdi--;
> +
> +       return end_bdi;
> +}
> +
> +/*
> + * How many transfer bd's are available on this ep bdl, chain bds are not
> + * counted in available bds
> + */
> +static int bd_available_ep(struct bdc_ep *ep)
> +{
> +       struct bd_list *bd_list = &ep->bd_list;
> +       int available1, available2;
> +       struct bdc *bdc = ep->bdc;
> +       int chain_bd1, chain_bd2;
> +       int available_bd = 0;
> +
> +       available1 = available2 = chain_bd1 = chain_bd2 = 0;
> +       /* if empty then we have all bd's available - number of chain bd's */
> +       if (bd_list->eqp_bdi == bd_list->hwd_bdi)
> +               return bd_list->max_bdi - bd_list->num_tabs;
> +
> +       /*
> +        * Depending upon where eqp and dqp pointers are, caculate number
> +        * of avaialble bd's
> +        */
> +       if (bd_list->hwd_bdi < bd_list->eqp_bdi) {
> +               /* available bd's are from eqp..max_bds + 0..dqp - chain_bds */
> +               available1 = bd_list->max_bdi - bd_list->eqp_bdi;
> +               available2 = bd_list->hwd_bdi;
> +               chain_bd1 = available1 / bd_list->num_bds_table;
> +               chain_bd2 = available2 / bd_list->num_bds_table;
> +               dev_vdbg(bdc->dev, "chain_bd1:%d chain_bd2:%d\n",
> +                                               chain_bd1, chain_bd2);
> +               available_bd = available1 + available2 - chain_bd1 - chain_bd2;
> +       } else {
> +               /* available bd's are from eqp..dqp - number of chain bd's */
> +               available1 = bd_list->hwd_bdi -  bd_list->eqp_bdi;
> +               /* if gap between eqp and dqp is less than NUM_BDS_PER_TABLE */
> +               if ((bd_list->hwd_bdi - bd_list->eqp_bdi)
> +                                       <= bd_list->num_bds_table) {
> +                       /* If there any chain bd in between */
> +                       if (!(bdi_to_tbi(ep, bd_list->hwd_bdi)
> +                                       == bdi_to_tbi(ep, bd_list->eqp_bdi))) {
> +                               available_bd = available1 - 1;
> +                       }
> +               } else {
> +                       chain_bd1 = available1 / bd_list->num_bds_table;
> +                       available_bd = available1 - chain_bd1;
> +               }
> +       }
> +       /*
> +        * we need to keep one extra bd to check if ring is full or empty so
> +        * reduce by 1
> +        */
> +       available_bd--;
> +       dev_vdbg(bdc->dev, "available_bd:%d\n", available_bd);
> +
> +       return available_bd;
> +}
> +
> +/* Notify the hardware after queueing the bd to bdl */
> +void bdc_notify_xfr(struct bdc *bdc, u32 epnum)
> +{
> +       struct bdc_ep *ep = bdc->bdc_ep_array[epnum];
> +
> +       dev_vdbg(bdc->dev, "%s epnum:%d\n", __func__, epnum);
> +       /*
> +        * We don't have anyway to check if ep state is running,
> +        * except the software flags.
> +        */
> +       if (unlikely(ep->flags & BDC_EP_STOP))
> +               ep->flags &= ~BDC_EP_STOP;
> +
> +       bdc_writel(bdc->regs, BDC_XSFNTF, epnum);
> +}
> +
> +/* returns the bd corresponding to bdi */
> +static struct bdc_bd *bdi_to_bd(struct bdc_ep *ep, int bdi)
> +{
> +       int tbi = bdi_to_tbi(ep, bdi);
> +       int local_bdi = 0;
> +
> +       local_bdi = bdi - (tbi * ep->bd_list.num_bds_table);
> +       dev_vdbg(ep->bdc->dev,
> +               "%s bdi:%d local_bdi:%d\n",
> +                __func__, bdi, local_bdi);
> +
> +       return (ep->bd_list.bd_table_array[tbi]->start_bd + local_bdi);
> +}
> +
> +/* Advance the enqueue pointer */
> +static void ep_bdlist_eqp_adv(struct bdc_ep *ep)
> +{
> +       ep->bd_list.eqp_bdi++;
> +       /* if it's chain bd, then move to next */
> +       if (((ep->bd_list.eqp_bdi + 1) % ep->bd_list.num_bds_table) == 0)
> +               ep->bd_list.eqp_bdi++;
> +
> +       /* if the eqp is pointing to last + 1 then move back to 0 */
> +       if (ep->bd_list.eqp_bdi == (ep->bd_list.max_bdi + 1))
> +               ep->bd_list.eqp_bdi = 0;
> +}
> +
> +/* Setup the first bd for ep0 transfer */
> +static int setup_first_bd_ep0(struct bdc *bdc, struct bdc_req *req, u32 *dword3)
> +{
> +       u16 wValue;
> +       u32 req_len;
> +
> +       req->ep->dir = 0;
> +       req_len = req->usb_req.length;
> +       switch (bdc->ep0_state) {
> +       case WAIT_FOR_DATA_START:
> +               *dword3 |= BD_TYPE_DS;
> +               if (bdc->setup_pkt.bRequestType & USB_DIR_IN)
> +                       *dword3 |= BD_DIR_IN;
> +
> +               /* check if zlp will be needed */
> +               wValue = le16_to_cpu(bdc->setup_pkt.wValue);
> +               if ((wValue > req_len) &&
> +                               (req_len % bdc->gadget.ep0->maxpacket == 0)) {
> +                       dev_dbg(bdc->dev, "ZLP needed wVal:%d len:%d MaxP:%d\n",
> +                                       wValue, req_len,
> +                                       bdc->gadget.ep0->maxpacket);
> +                       bdc->zlp_needed = true;
> +               }
> +               break;
> +
> +       case WAIT_FOR_STATUS_START:
> +               *dword3 |= BD_TYPE_SS;
> +               if (!le16_to_cpu(bdc->setup_pkt.wLength) ||
> +                               !(bdc->setup_pkt.bRequestType & USB_DIR_IN))
> +                       *dword3 |= BD_DIR_IN;
> +               break;
> +       default:
> +               dev_err(bdc->dev,
> +                       "Unknown ep0 state for queueing bd ep0_state:%s\n",
> +                       ep0_state_string[bdc->ep0_state]);
> +               return -EINVAL;
> +       }
> +
> +       return 0;
> +}
> +
> +/* Setup the bd dma descriptor for a given request */
> +static int setup_bd_list_xfr(struct bdc *bdc, struct bdc_req *req, int num_bds)
> +{
> +       dma_addr_t buf_add = req->usb_req.dma;
> +       u32 maxp, tfs, dword2, dword3;
> +       struct bd_transfer *bd_xfr;
> +       struct bd_list *bd_list;
> +       struct bdc_ep *ep;
> +       struct bdc_bd *bd;
> +       int ret, bdnum;
> +       u32 req_len;
> +
> +       ep = req->ep;
> +       bd_list = &ep->bd_list;
> +       bd_xfr = &req->bd_xfr;
> +       bd_xfr->req = req;
> +       bd_xfr->start_bdi = bd_list->eqp_bdi;
> +       bd = bdi_to_bd(ep, bd_list->eqp_bdi);
> +       req_len = req->usb_req.length;
> +       maxp = usb_endpoint_maxp(ep->desc) & 0x7ff;
> +       tfs = roundup(req->usb_req.length, maxp);
> +       tfs = tfs/maxp;
> +       dev_vdbg(bdc->dev, "%s ep:%s num_bds:%d tfs:%d r_len:%d bd:%p\n",
> +                               __func__, ep->name, num_bds, tfs, req_len, bd);
> +
> +       for (bdnum = 0; bdnum < num_bds; bdnum++) {
> +               dword2 = dword3 = 0;
> +               /* First bd */
> +               if (!bdnum) {
> +                       dword3 |= BD_SOT|BD_SBF|(tfs<<BD_TFS_SHIFT);
> +                       dword2 |= BD_LTF;
> +                       /* format of first bd for ep0 is different than other */
> +                       if (ep->ep_num == 1)
> +                               ret = setup_first_bd_ep0(bdc, req, &dword3);
> +                               if (ret)
> +                                       return ret;
> +               }
> +               if (!req->ep->dir)
> +                       dword3 |= BD_ISP;
> +
> +               if (req_len > BD_MAX_BUFF_SIZE) {
> +                       dword2 |= BD_MAX_BUFF_SIZE;
> +                       req_len -= BD_MAX_BUFF_SIZE;
> +               } else {
> +                       /* this should be the last bd */
> +                       dword2 |= req_len;
> +                       dword3 |= BD_IOC;
> +                       dword3 |= BD_EOT;
> +               }
> +               /* Currently only 1 INT target is supported */
> +               dword2 |= BD_INTR_TARGET(0);
> +               bd = bdi_to_bd(ep, ep->bd_list.eqp_bdi);
> +               if (unlikely(!bd)) {
> +                       dev_err(bdc->dev, "Err bd pointing to wrong addr\n");
> +                       return -EINVAL;
> +               }
> +               /* write bd */
> +               bd->offset[0] = cpu_to_le32(lower_32_bits(buf_add));
> +               bd->offset[1] = cpu_to_le32(upper_32_bits(buf_add));
> +               bd->offset[2] = cpu_to_le32(dword2);
> +               bd->offset[3] = cpu_to_le32(dword3);
> +               /* advance eqp pointer */
> +               ep_bdlist_eqp_adv(ep);
> +               /* advance the buff pointer */
> +               buf_add += BD_MAX_BUFF_SIZE;
> +               dev_vdbg(bdc->dev, "buf_add:%08llx req_len:%d bd:%p eqp:%d\n",
> +                               (unsigned long long)buf_add, req_len, bd,
> +                                                       ep->bd_list.eqp_bdi);
> +               bd = bdi_to_bd(ep, ep->bd_list.eqp_bdi);
> +               bd->offset[3] = cpu_to_le32(BD_SBF);
> +       }
> +       /* clear the STOP BD fetch bit from the first bd of this xfr */
> +       bd = bdi_to_bd(ep, bd_xfr->start_bdi);
> +       bd->offset[3] &= cpu_to_le32(~BD_SBF);
> +       /* the new eqp will be next hw dqp */
> +       bd_xfr->num_bds  = num_bds;
> +       bd_xfr->next_hwd_bdi = ep->bd_list.eqp_bdi;
> +       /* everything is written correctly before notifying the HW */
> +       wmb();
> +
> +       return 0;
> +}
> +
> +/* Queue the xfr */
> +static int bdc_queue_xfr(struct bdc *bdc, struct bdc_req *req)
> +{
> +       int num_bds, bd_available;
> +       struct bdc_ep *ep;
> +       int ret;
> +
> +       ep = req->ep;
> +       dev_dbg(bdc->dev, "%s req:%p\n", __func__, req);
> +       dev_dbg(bdc->dev, "eqp_bdi:%d hwd_bdi:%d\n",
> +                       ep->bd_list.eqp_bdi, ep->bd_list.hwd_bdi);
> +
> +       num_bds =  bd_needed_req(req);
> +       bd_available = bd_available_ep(ep);
> +
> +       /* how many bd's are avaialble on ep */
> +       if (num_bds > bd_available)
> +               return -ENOMEM;
> +
> +       ret = setup_bd_list_xfr(bdc, req, num_bds);
> +       if (ret)
> +               return ret;
> +       list_add_tail(&req->queue, &ep->queue);
> +       bdc_dbg_bd_list(bdc, ep);
> +       bdc_notify_xfr(bdc, ep->ep_num);
> +
> +       return 0;
> +}
> +
> +/* callback to gadget layer when xfr completes */
> +static void bdc_req_complete(struct bdc_ep *ep, struct bdc_req *req,
> +                                               int status)
> +{
> +       struct bdc *bdc = ep->bdc;
> +
> +       if (req == NULL  || &req->queue == NULL || &req->usb_req == NULL)
> +               return;
> +
> +       dev_dbg(bdc->dev, "%s ep:%s status:%d\n", __func__, ep->name, status);
> +       list_del(&req->queue);
> +       req->usb_req.status = status;
> +       usb_gadget_unmap_request(&bdc->gadget, &req->usb_req, ep->dir);
> +       if (req->usb_req.complete) {
> +               spin_unlock(&bdc->lock);
> +               usb_gadget_giveback_request(&ep->usb_ep, &req->usb_req);
> +               spin_lock(&bdc->lock);
> +       }
> +}
> +
> +/* Disable the endpoint */
> +int bdc_ep_disable(struct bdc_ep *ep)
> +{
> +       struct bdc_req *req;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       ret = 0;
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s() ep->ep_num=%d\n", __func__, ep->ep_num);
> +       /* Stop the endpoint */
> +       ret = bdc_stop_ep(bdc, ep->ep_num);
> +
> +       /*
> +        * Intentionally don't check the ret value of stop, it can fail in
> +        * disconnect scenarios, continue with dconfig
> +        */
> +       /* de-queue any pending requests */
> +       while (!list_empty(&ep->queue)) {
> +               req = list_entry(ep->queue.next, struct bdc_req,
> +                               queue);
> +               bdc_req_complete(ep, req, -ESHUTDOWN);
> +       }
> +       /* deconfigure the endpoint */
> +       ret = bdc_dconfig_ep(bdc, ep);
> +       if (ret)
> +               dev_warn(bdc->dev,
> +                       "dconfig fail but continue with memory free");
> +
> +       ep->flags = 0;
> +       /* ep0 memory is not freed, but reused on next connect sr */
> +       if (ep->ep_num == 1)
> +               return 0;
> +
> +       /* Free the bdl memory */
> +       ep_bd_list_free(ep, ep->bd_list.num_tabs);
> +       ep->desc = NULL;
> +       ep->comp_desc = NULL;
> +       ep->usb_ep.desc = NULL;
> +       ep->ep_type = 0;
> +
> +       return ret;
> +}
> +
> +/* Enable the ep */
> +int bdc_ep_enable(struct bdc_ep *ep)
> +{
> +       struct bdc *bdc;
> +       int ret = 0;
> +
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s NUM_TABLES:%d %d\n",
> +                                       __func__, NUM_TABLES, NUM_TABLES_ISOCH);
> +
> +       ret = ep_bd_list_alloc(ep);
> +       if (ret) {
> +               dev_err(bdc->dev, "ep bd list allocation failed:%d\n", ret);
> +               return -ENOMEM;
> +       }
> +       bdc_dbg_bd_list(bdc, ep);
> +       /* only for ep0: config ep is called for ep0 from connect event */
> +       ep->flags |= BDC_EP_ENABLED;
> +       if (ep->ep_num == 1)
> +               return ret;
> +
> +       /* Issue a configure endpoint command */
> +       ret = bdc_config_ep(bdc, ep);
> +       if (ret)
> +               return ret;
> +
> +       ep->usb_ep.maxpacket = usb_endpoint_maxp(ep->desc);
> +       ep->usb_ep.desc = ep->desc;
> +       ep->usb_ep.comp_desc = ep->comp_desc;
> +       ep->ep_type = usb_endpoint_type(ep->desc);
> +       ep->flags |= BDC_EP_ENABLED;
> +
> +       return 0;
> +}
> +
> +/* EP0 related code */
> +
> +/* Queue a status stage BD */
> +static int ep0_queue_status_stage(struct bdc *bdc)
> +{
> +       struct bdc_req *status_req;
> +       struct bdc_ep *ep;
> +
> +       status_req = &bdc->status_req;
> +       ep = bdc->bdc_ep_array[1];
> +       status_req->ep = ep;
> +       status_req->usb_req.length = 0;
> +       status_req->usb_req.status = -EINPROGRESS;
> +       status_req->usb_req.actual = 0;
> +       status_req->usb_req.complete = NULL;
> +       bdc_queue_xfr(bdc, status_req);
> +
> +       return 0;
> +}
> +
> +/* Queue xfr on ep0 */
> +static int ep0_queue(struct bdc_ep *ep, struct bdc_req *req)
> +{
> +       struct bdc *bdc;
> +       int ret;
> +
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       req->usb_req.actual = 0;
> +       req->usb_req.status = -EINPROGRESS;
> +       req->epnum = ep->ep_num;
> +
> +       if (bdc->delayed_status) {
> +               bdc->delayed_status = false;
> +               /* if status stage was delayed? */
> +               if (bdc->ep0_state == WAIT_FOR_STATUS_START) {
> +                       /* Queue a status stage BD */
> +                       ep0_queue_status_stage(bdc);
> +                       bdc->ep0_state = WAIT_FOR_STATUS_XMIT;
> +                       return 0;
> +               }
> +       } else {
> +               /*
> +                * if delayed status is false and 0 length transfer is requested
> +                * i.e. for status stage of some setup request, then just
> +                * return from here the status stage is queued independently
> +                */
> +               if (req->usb_req.length == 0)
> +                       return 0;
> +
> +       }
> +       ret = usb_gadget_map_request(&bdc->gadget, &req->usb_req, ep->dir);
> +       if (ret) {
> +               dev_err(bdc->dev, "dma mapping failed %s\n", ep->name);
> +               return ret;
> +       }
> +
> +       return bdc_queue_xfr(bdc, req);
> +}
> +
> +/* Queue data stage */
> +static int ep0_queue_data_stage(struct bdc *bdc)
> +{
> +       struct usb_request *ep0_usb_req;
> +       struct bdc_ep *ep;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       ep0_usb_req = &bdc->ep0_req.usb_req;
> +       ep = bdc->bdc_ep_array[1];
> +       bdc->ep0_req.ep = ep;
> +       bdc->ep0_req.usb_req.complete = NULL;
> +
> +       return ep0_queue(ep, &bdc->ep0_req);
> +}
> +
> +/* Queue req on ep */
> +static int ep_queue(struct bdc_ep *ep, struct bdc_req *req)
> +{
> +       struct bdc *bdc;
> +       int ret = 0;
> +
> +       bdc = ep->bdc;
> +       if (!req || !ep || !ep->usb_ep.desc)
> +               return -EINVAL;
> +
> +       req->usb_req.actual = 0;
> +       req->usb_req.status = -EINPROGRESS;
> +       req->epnum = ep->ep_num;
> +
> +       ret = usb_gadget_map_request(&bdc->gadget, &req->usb_req, ep->dir);
> +       if (ret) {
> +               dev_err(bdc->dev, "dma mapping failed\n");
> +               return ret;
> +       }
> +
> +       return bdc_queue_xfr(bdc, req);
> +}
> +
> +/* Dequeue a request from ep */
> +static int ep_dequeue(struct bdc_ep *ep, struct bdc_req *req)
> +{
> +       int start_bdi, end_bdi, tbi, eqp_bdi, curr_hw_dqpi;
> +       bool start_pending, end_pending;
> +       bool first_remove = false;
> +       struct bdc_req *first_req;
> +       struct bdc_bd *bd_start;
> +       struct bd_table *table;
> +       dma_addr_t next_bd_dma;
> +       u64   deq_ptr_64 = 0;
> +       struct bdc  *bdc;
> +       u32    tmp_32;
> +       int ret;
> +
> +       bdc = ep->bdc;
> +       start_pending = end_pending = false;
> +       eqp_bdi = ep->bd_list.eqp_bdi - 1;
> +
> +       if (eqp_bdi < 0)
> +               eqp_bdi = ep->bd_list.max_bdi;
> +
> +       start_bdi = req->bd_xfr.start_bdi;
> +       end_bdi = find_end_bdi(ep, req->bd_xfr.next_hwd_bdi);
> +
> +       dev_dbg(bdc->dev, "%s ep:%s start:%d end:%d\n",
> +                                       __func__, ep->name, start_bdi, end_bdi);
> +       dev_dbg(bdc->dev, "ep_dequeue ep=%p ep->desc=%p\n",
> +                                               ep, (void *)ep->usb_ep.desc);
> +       /* Stop the ep to see where the HW is ? */
> +       ret = bdc_stop_ep(bdc, ep->ep_num);
> +       /* if there is an issue with stopping ep, then no need to go further */
> +       if (ret)
> +               return 0;
> +
> +       /*
> +        * After endpoint is stopped, there can be 3 cases, the request
> +        * is processed, pending or in the middle of processing
> +        */
> +
> +       /* The current hw dequeue pointer */
> +       tmp_32 = bdc_readl(bdc->regs, BDC_EPSTS0(0));
> +       deq_ptr_64 = tmp_32;
> +       tmp_32 = bdc_readl(bdc->regs, BDC_EPSTS0(1));
> +       deq_ptr_64 |= ((u64)tmp_32 << 32);
> +
> +       /* we have the dma addr of next bd that will be fetched by hardware */
> +       curr_hw_dqpi = bd_add_to_bdi(ep, deq_ptr_64);
> +       if (curr_hw_dqpi < 0)
> +               return curr_hw_dqpi;
> +
> +       /*
> +        * curr_hw_dqpi points to actual dqp of HW and HW owns bd's from
> +        * curr_hw_dqbdi..eqp_bdi.
> +        */
> +
> +       /* Check if start_bdi and end_bdi are in range of HW owned BD's */
> +       if (curr_hw_dqpi > eqp_bdi) {
> +               /* there is a wrap from last to 0 */
> +               if (start_bdi >= curr_hw_dqpi || start_bdi <= eqp_bdi) {
> +                       start_pending = true;
> +                       end_pending = true;
> +               } else if (end_bdi >= curr_hw_dqpi || end_bdi <= eqp_bdi) {
> +                               end_pending = true;
> +               }
> +       } else {
> +               if (start_bdi >= curr_hw_dqpi) {
> +                       start_pending = true;
> +                       end_pending = true;
> +               } else if (end_bdi >= curr_hw_dqpi) {
> +                       end_pending = true;
> +               }
> +       }
> +       dev_dbg(bdc->dev,
> +               "start_pending:%d end_pending:%d speed:%d\n",
> +               start_pending, end_pending, bdc->gadget.speed);
> +
> +       /* If both start till end are processes, we cannot deq req */
> +       if (!start_pending && !end_pending)
> +               return -EINVAL;
> +
> +       /*
> +        * if ep_dequeue is called after disconnect then just return
> +        * success from here
> +        */
> +       if (bdc->gadget.speed == USB_SPEED_UNKNOWN)
> +               return 0;
> +       tbi = bdi_to_tbi(ep, req->bd_xfr.next_hwd_bdi);
> +       table = ep->bd_list.bd_table_array[tbi];
> +       next_bd_dma =  table->dma +
> +                       sizeof(struct bdc_bd)*(req->bd_xfr.next_hwd_bdi -
> +                                       tbi * ep->bd_list.num_bds_table);
> +
> +       first_req = list_first_entry(&ep->queue, struct bdc_req,
> +                       queue);
> +
> +       if (req == first_req)
> +               first_remove = true;
> +
> +       /*
> +        * Due to HW limitation we need to bypadd chain bd's and issue ep_bla,
> +        * incase if start is pending this is the first request in the list
> +        * then issue ep_bla instead of marking as chain bd
> +        */
> +       if (start_pending && !first_remove) {
> +               /*
> +                * Mark the start bd as Chain bd, and point the chain
> +                * bd to next_bd_dma
> +                */
> +               bd_start = bdi_to_bd(ep, start_bdi);
> +               bd_start->offset[0] = cpu_to_le32(lower_32_bits(next_bd_dma));
> +               bd_start->offset[1] = cpu_to_le32(upper_32_bits(next_bd_dma));
> +               bd_start->offset[2] = 0x0;
> +               bd_start->offset[3] = cpu_to_le32(MARK_CHAIN_BD);
> +               bdc_dbg_bd_list(bdc, ep);
> +       } else if (end_pending) {
> +               /*
> +                * The transfer is stopped in the middle, move the
> +                * HW deq pointer to next_bd_dma
> +                */
> +               ret = bdc_ep_bla(bdc, ep, next_bd_dma);
> +               if (ret) {
> +                       dev_err(bdc->dev, "error in ep_bla:%d\n", ret);
> +                       return ret;
> +               }
> +       }
> +
> +       return 0;
> +}
> +
> +/* Halt/Clear the ep based on value */
> +static int ep_set_halt(struct bdc_ep *ep, u32 value)
> +{
> +       struct bdc *bdc;
> +       int ret;
> +
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s ep:%s value=%d\n", __func__, ep->name, value);
> +
> +       if (value) {
> +               dev_dbg(bdc->dev, "Halt\n");
> +               if (ep->ep_num == 1)
> +                       bdc->ep0_state = WAIT_FOR_SETUP;
> +
> +               ret = bdc_ep_set_stall(bdc, ep->ep_num);
> +               if (ret)
> +                       dev_err(bdc->dev, "failed to %s STALL on %s\n",
> +                               value ? "set" : "clear", ep->name);
> +               else
> +                       ep->flags |= BDC_EP_STALL;
> +       } else {
> +               /* Clear */
> +               dev_dbg(bdc->dev, "Before Clear\n");
> +               ret = bdc_ep_clear_stall(bdc, ep->ep_num);
> +               if (ret)
> +                       dev_err(bdc->dev, "failed to %s STALL on %s\n",
> +                               value ? "set" : "clear", ep->name);
> +               else
> +                       ep->flags &= ~BDC_EP_STALL;
> +               dev_dbg(bdc->dev, "After  Clear\n");
> +       }
> +
> +       return ret;
> +}
> +
> +/* Free all the ep */
> +void bdc_free_ep(struct bdc *bdc)
> +{
> +       struct bdc_ep *ep;
> +       u8      epnum;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       for (epnum = 1; epnum < bdc->num_eps; epnum++) {
> +               ep = bdc->bdc_ep_array[epnum];
> +               if (!ep)
> +                       continue;
> +
> +               /* this should happen only for ep0 */
> +               if (ep->flags & BDC_EP_ENABLED)
> +                       ep_bd_list_free(ep, ep->bd_list.num_tabs);
> +
> +               /* ep0 is not in this gadget list */
> +               if (epnum != 1)
> +                       list_del(&ep->usb_ep.ep_list);
> +
> +               kfree(ep);
> +       }
> +}
> +
> +/* USB2 spec, section 7.1.20 */
> +static int bdc_set_test_mode(struct bdc *bdc)
> +{
> +       u32 usb2_pm;
> +
> +       usb2_pm = bdc_readl(bdc->regs, BDC_USPPM2);
> +       usb2_pm &= ~BDC_PTC_MASK;
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       switch (bdc->test_mode) {
> +       case TEST_J:
> +       case TEST_K:
> +       case TEST_SE0_NAK:
> +       case TEST_PACKET:
> +       case TEST_FORCE_EN:
> +               usb2_pm |= bdc->test_mode << 28;
> +               break;
> +       default:
> +               return -EINVAL;
> +       }
> +       dev_dbg(bdc->dev, "usb2_pm=%08x", usb2_pm);
> +       bdc_writel(bdc->regs, BDC_USPPM2, usb2_pm);
> +
> +       return 0;
> +}
> +
> +/*
> + * Helper function to handle Transfer status report with status as either
> + * success or short
> + */
> +static void handle_xsr_succ_status(struct bdc *bdc, struct bdc_ep *ep,
> +                                                       struct bdc_sr *sreport)
> +{
> +       int short_bdi, start_bdi, end_bdi, max_len_bds, chain_bds;
> +       struct bd_list *bd_list = &ep->bd_list;
> +       int actual_length, length_short;
> +       struct bd_transfer *bd_xfr;
> +       struct bdc_bd *short_bd;
> +       struct bdc_req *req;
> +       u64   deq_ptr_64 = 0;
> +       int status = 0;
> +       int sr_status;
> +       u32    tmp_32;
> +
> +       dev_dbg(bdc->dev, "\n%s  ep:%p\n", __func__, ep);
> +       bdc_dbg_srr(bdc, 0);
> +       /* do not process thie sr if ignore flag is set */
> +       if (ep->ignore_next_sr) {
> +               ep->ignore_next_sr = false;
> +               return;
> +       }
> +
> +       if (unlikely(list_empty(&ep->queue))) {
> +               dev_warn(bdc->dev, "xfr srr with no BD's queued\n");
> +               return;
> +       }
> +       req = list_entry(ep->queue.next, struct bdc_req,
> +                       queue);
> +
> +       bd_xfr = &req->bd_xfr;
> +       sr_status = XSF_STS(le32_to_cpu(sreport->offset[3]));
> +
> +       /*
> +        * sr_status is short and this transfer has more than 1 bd then it needs
> +        * special handling,  this is only applicable for bulk and ctrl
> +        */
> +       if (sr_status == XSF_SHORT &&  bd_xfr->num_bds > 1) {
> +               /*
> +                * This is multi bd xfr, lets see which bd
> +                * caused short transfer and how many bytes have been
> +                * transferred so far.
> +                */
> +               tmp_32 = le32_to_cpu(sreport->offset[0]);
> +               deq_ptr_64 = tmp_32;
> +               tmp_32 = le32_to_cpu(sreport->offset[1]);
> +               deq_ptr_64 |= ((u64)tmp_32 << 32);
> +               short_bdi = bd_add_to_bdi(ep, deq_ptr_64);
> +               if (unlikely(short_bdi < 0))
> +                       dev_warn(bdc->dev, "bd doesn't exist?\n");
> +
> +               start_bdi =  bd_xfr->start_bdi;
> +               /*
> +                * We know the start_bdi and short_bdi, how many xfr
> +                * bds in between
> +                */
> +               if (start_bdi <= short_bdi) {
> +                       max_len_bds = short_bdi - start_bdi;
> +                       if (max_len_bds <= bd_list->num_bds_table) {
> +                               if (!(bdi_to_tbi(ep, start_bdi) ==
> +                                               bdi_to_tbi(ep, short_bdi)))
> +                                       max_len_bds--;
> +                       } else {
> +                               chain_bds = max_len_bds/bd_list->num_bds_table;
> +                               max_len_bds -= chain_bds;
> +                       }
> +               } else {
> +                       /* there is a wrap in the ring within a xfr */
> +                       chain_bds = (bd_list->max_bdi - start_bdi)/
> +                                                       bd_list->num_bds_table;
> +                       chain_bds += short_bdi/bd_list->num_bds_table;
> +                       max_len_bds = bd_list->max_bdi - start_bdi;
> +                       max_len_bds += short_bdi;
> +                       max_len_bds -= chain_bds;
> +               }
> +               /* max_len_bds is the number of full length bds */
> +               end_bdi = find_end_bdi(ep, bd_xfr->next_hwd_bdi);
> +               if (!(end_bdi == short_bdi))
> +                       ep->ignore_next_sr = true;
> +
> +               actual_length = max_len_bds * BD_MAX_BUFF_SIZE;
> +               short_bd = bdi_to_bd(ep, short_bdi);
> +               /* length queued */
> +               length_short = le32_to_cpu(short_bd->offset[2]) & 0x1FFFFF;
> +               /* actual length trensfered */
> +               length_short -= SR_BD_LEN(le32_to_cpu(sreport->offset[2]));
> +               actual_length += length_short;
> +               req->usb_req.actual = actual_length;
> +       } else {
> +               req->usb_req.actual = req->usb_req.length -
> +                       SR_BD_LEN(le32_to_cpu(sreport->offset[2]));
> +               dev_dbg(bdc->dev,
> +                       "len=%d actual=%d bd_xfr->next_hwd_bdi:%d\n",
> +                       req->usb_req.length, req->usb_req.actual,
> +                       bd_xfr->next_hwd_bdi);
> +       }
> +
> +       /* Update the dequeue pointer */
> +       ep->bd_list.hwd_bdi = bd_xfr->next_hwd_bdi;
> +       if (req->usb_req.actual < req->usb_req.length) {
> +               dev_dbg(bdc->dev, "short xfr on %d\n", ep->ep_num);
> +               if (req->usb_req.short_not_ok)
> +                       status = -EREMOTEIO;
> +       }
> +       bdc_req_complete(ep, bd_xfr->req, status);
> +}
> +
> +/* EP0 setup related packet handlers */
> +
> +/*
> + * Setup packet received, just store the packet and process on next DS or SS
> + * started SR
> + */
> +void bdc_xsf_ep0_setup_recv(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       struct usb_ctrlrequest *setup_pkt;
> +       u32 len;
> +
> +       dev_dbg(bdc->dev,
> +               "%s ep0_state:%s\n",
> +               __func__, ep0_state_string[bdc->ep0_state]);
> +       /* Store received setup packet */
> +       setup_pkt = &bdc->setup_pkt;
> +       memcpy(setup_pkt, &sreport->offset[0], sizeof(*setup_pkt));
> +       len = le16_to_cpu(setup_pkt->wLength);
> +       if (!len)
> +               bdc->ep0_state = WAIT_FOR_STATUS_START;
> +       else
> +               bdc->ep0_state = WAIT_FOR_DATA_START;
> +
> +
> +       dev_dbg(bdc->dev,
> +               "%s exit ep0_state:%s\n",
> +               __func__, ep0_state_string[bdc->ep0_state]);
> +}
> +
> +/* Stall ep0 */
> +static void ep0_stall(struct bdc *bdc)
> +{
> +       struct bdc_ep   *ep = bdc->bdc_ep_array[1];
> +       struct bdc_req *req;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       bdc->delayed_status = false;
> +       ep_set_halt(ep, 1);
> +
> +       /* de-queue any pendig requests */
> +       while (!list_empty(&ep->queue)) {
> +               req = list_entry(ep->queue.next, struct bdc_req,
> +                               queue);
> +               bdc_req_complete(ep, req, -ESHUTDOWN);
> +       }
> +}
> +
> +/* SET_ADD handlers */
> +static int ep0_set_address(struct bdc *bdc, struct usb_ctrlrequest *ctrl)
> +{
> +       enum usb_device_state state = bdc->gadget.state;
> +       int ret = 0;
> +       u32 addr;
> +
> +       addr = le16_to_cpu(ctrl->wValue);
> +       dev_dbg(bdc->dev,
> +               "%s addr:%d dev state:%d\n",
> +               __func__, addr, state);
> +
> +       if (addr > 127)
> +               return -EINVAL;
> +
> +       switch (state) {
> +       case USB_STATE_DEFAULT:
> +       case USB_STATE_ADDRESS:
> +               /* Issue Address device command */
> +               ret = bdc_address_device(bdc, addr);
> +               if (ret)
> +                       return ret;
> +
> +               if (addr)
> +                       usb_gadget_set_state(&bdc->gadget, USB_STATE_ADDRESS);
> +               else
> +                       usb_gadget_set_state(&bdc->gadget, USB_STATE_DEFAULT);
> +
> +               bdc->dev_addr = addr;
> +               break;
> +       default:
> +               dev_warn(bdc->dev,
> +                       "SET Address in wrong device state %d\n",
> +                       state);
> +               ret = -EINVAL;
> +       }
> +
> +       return ret;
> +}
> +
> +/* Handler for SET/CLEAR FEATURE requests for device */
> +static int ep0_handle_feature_dev(struct bdc *bdc, u16 wValue,
> +                                                       u16 wIndex, bool set)
> +{
> +       enum usb_device_state state = bdc->gadget.state;
> +       u32     usppms = 0;
> +
> +       dev_dbg(bdc->dev, "%s set:%d dev state:%d\n",
> +                                       __func__, set, state);
> +       switch (wValue) {
> +       case USB_DEVICE_REMOTE_WAKEUP:
> +               dev_dbg(bdc->dev, "USB_DEVICE_REMOTE_WAKEUP\n");
> +               if (set)
> +                       bdc->devstatus |= REMOTE_WAKE_ENABLE;
> +               else
> +                       bdc->devstatus &= ~REMOTE_WAKE_ENABLE;
> +               break;
> +
> +       case USB_DEVICE_TEST_MODE:
> +               dev_dbg(bdc->dev, "USB_DEVICE_TEST_MODE\n");
> +               if ((wIndex & 0xFF) ||
> +                               (bdc->gadget.speed != USB_SPEED_HIGH) || !set)
> +                       return -EINVAL;
> +
> +               bdc->test_mode = wIndex >> 8;
> +               break;
> +
> +       case USB_DEVICE_U1_ENABLE:
> +               dev_dbg(bdc->dev, "USB_DEVICE_U1_ENABLE\n");
> +
> +               if (bdc->gadget.speed != USB_SPEED_SUPER ||
> +                                               state != USB_STATE_CONFIGURED)
> +                       return -EINVAL;
> +
> +               usppms =  bdc_readl(bdc->regs, BDC_USPPMS);
> +               if (set) {
> +                       /* clear previous u1t */
> +                       usppms &= ~BDC_U1T(BDC_U1T_MASK);
> +                       usppms |= BDC_U1T(U1_TIMEOUT);
> +                       usppms |= BDC_U1E | BDC_PORT_W1S;
> +                       bdc->devstatus |= (1 << USB_DEV_STAT_U1_ENABLED);
> +               } else {
> +                       usppms &= ~BDC_U1E;
> +                       usppms |= BDC_PORT_W1S;
> +                       bdc->devstatus &= ~(1 << USB_DEV_STAT_U1_ENABLED);
> +               }
> +               bdc_writel(bdc->regs, BDC_USPPMS, usppms);
> +               break;
> +
> +       case USB_DEVICE_U2_ENABLE:
> +               dev_dbg(bdc->dev, "USB_DEVICE_U2_ENABLE\n");
> +
> +               if (bdc->gadget.speed != USB_SPEED_SUPER ||
> +                                               state != USB_STATE_CONFIGURED)
> +                       return -EINVAL;
> +
> +               usppms = bdc_readl(bdc->regs, BDC_USPPMS);
> +               if (set) {
> +                       usppms |= BDC_U2E;
> +                       usppms |= BDC_U2A;
> +                       bdc->devstatus |= (1 << USB_DEV_STAT_U2_ENABLED);
> +               } else {
> +                       usppms &= ~BDC_U2E;
> +                       usppms &= ~BDC_U2A;
> +                       bdc->devstatus &= ~(1 << USB_DEV_STAT_U2_ENABLED);
> +               }
> +               bdc_writel(bdc->regs, BDC_USPPMS, usppms);
> +               break;
> +
> +       case USB_DEVICE_LTM_ENABLE:
> +               dev_dbg(bdc->dev, "USB_DEVICE_LTM_ENABLE?\n");
> +               if (bdc->gadget.speed != USB_SPEED_SUPER ||
> +                                               state != USB_STATE_CONFIGURED)
> +                       return -EINVAL;
> +               break;
> +       default:
> +               dev_err(bdc->dev, "Unknown wValue:%d\n", wValue);
> +               return -EOPNOTSUPP;
> +       } /* USB_RECIP_DEVICE end */
> +
> +       return 0;
> +}
> +
> +/* SET/CLEAR FEATURE handler */
> +static int ep0_handle_feature(struct bdc *bdc,
> +                             struct usb_ctrlrequest *setup_pkt, bool set)
> +{
> +       enum usb_device_state state = bdc->gadget.state;
> +       struct bdc_ep *ep;
> +       u16 wValue;
> +       u16 wIndex;
> +       int epnum;
> +
> +       wValue = le16_to_cpu(setup_pkt->wValue);
> +       wIndex = le16_to_cpu(setup_pkt->wIndex);
> +
> +       dev_dbg(bdc->dev,
> +               "%s wValue=%d wIndex=%d devstate=%08x speed=%d set=%d",
> +               __func__, wValue, wIndex, state,
> +               bdc->gadget.speed, set);
> +
> +       switch (setup_pkt->bRequestType & USB_RECIP_MASK) {
> +       case USB_RECIP_DEVICE:
> +               return ep0_handle_feature_dev(bdc, wValue, wIndex, set);
> +       case USB_RECIP_INTERFACE:
> +               dev_dbg(bdc->dev, "USB_RECIP_INTERFACE\n");
> +               /* USB3 spec, sec 9.4.9 */
> +               if (wValue != USB_INTRF_FUNC_SUSPEND)
> +                       return -EINVAL;
> +               /* USB3 spec, Table 9-8 */
> +               if (set) {
> +                       if (wIndex & USB_INTRF_FUNC_SUSPEND_RW) {
> +                               dev_dbg(bdc->dev, "SET REMOTE_WAKEUP\n");
> +                               bdc->devstatus |= REMOTE_WAKE_ENABLE;
> +                       } else {
> +                               dev_dbg(bdc->dev, "CLEAR REMOTE_WAKEUP\n");
> +                               bdc->devstatus &= ~REMOTE_WAKE_ENABLE;
> +                       }
> +               }
> +               break;
> +
> +       case USB_RECIP_ENDPOINT:
> +               dev_dbg(bdc->dev, "USB_RECIP_ENDPOINT\n");
> +               if (wValue != USB_ENDPOINT_HALT)
> +                       return -EINVAL;
> +
> +               epnum = wIndex & USB_ENDPOINT_NUMBER_MASK;
> +               if (epnum) {
> +                       if ((wIndex & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN)
> +                               epnum = epnum * 2 + 1;
> +                       else
> +                               epnum *= 2;
> +               } else {
> +                       epnum = 1; /*EP0*/
> +               }
> +               /*
> +                * If CLEAR_FEATURE on ep0 then don't do anything as the stall
> +                * condition on ep0 has already been cleared when SETUP packet
> +                * was received.
> +                */
> +               if (epnum == 1 && !set) {
> +                       dev_dbg(bdc->dev, "ep0 stall already cleared\n");
> +                       return 0;
> +               }
> +               dev_dbg(bdc->dev, "epnum=%d\n", epnum);
> +               ep = bdc->bdc_ep_array[epnum];
> +               if (!ep)
> +                       return -EINVAL;
> +
> +               return ep_set_halt(ep, set);
> +       default:
> +               dev_err(bdc->dev, "Unknown recipient\n");
> +               return -EINVAL;
> +       }
> +
> +       return 0;
> +}
> +
> +/* GET_STATUS request handler */
> +static int ep0_handle_status(struct bdc *bdc,
> +                            struct usb_ctrlrequest *setup_pkt)
> +{
> +       enum usb_device_state state = bdc->gadget.state;
> +       struct bdc_ep *ep;
> +       u16 usb_status = 0;
> +       u32 epnum;
> +       u16 wIndex;
> +
> +       /* USB2.0 spec sec 9.4.5 */
> +       if (state == USB_STATE_DEFAULT)
> +               return -EINVAL;
> +       wIndex = le16_to_cpu(setup_pkt->wIndex);
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       usb_status = bdc->devstatus;
> +       switch (setup_pkt->bRequestType & USB_RECIP_MASK) {
> +       case USB_RECIP_DEVICE:
> +               dev_dbg(bdc->dev,
> +                       "USB_RECIP_DEVICE devstatus:%08x\n",
> +                       bdc->devstatus);
> +               /* USB3 spec, sec 9.4.5 */
> +               if (bdc->gadget.speed == USB_SPEED_SUPER)
> +                       usb_status &= ~REMOTE_WAKE_ENABLE;
> +               break;
> +
> +       case USB_RECIP_INTERFACE:
> +               dev_dbg(bdc->dev, "USB_RECIP_INTERFACE\n");
> +               if (bdc->gadget.speed == USB_SPEED_SUPER) {
> +                       /*
> +                        * This should come from func for Func remote wkup
> +                        * usb_status |=1;
> +                        */
> +                       if (bdc->devstatus & REMOTE_WAKE_ENABLE)
> +                               usb_status |= REMOTE_WAKE_ENABLE;
> +               } else {
> +                       usb_status = 0;
> +               }
> +
> +               break;
> +
> +       case USB_RECIP_ENDPOINT:
> +               dev_dbg(bdc->dev, "USB_RECIP_ENDPOINT\n");
> +               epnum = wIndex & USB_ENDPOINT_NUMBER_MASK;
> +               if (epnum) {
> +                       if ((wIndex & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN)
> +                               epnum = epnum*2 + 1;
> +                       else
> +                               epnum *= 2;
> +               } else {
> +                       epnum = 1; /* EP0 */
> +               }
> +
> +               ep = bdc->bdc_ep_array[epnum];
> +               if (!ep) {
> +                       dev_err(bdc->dev, "ISSUE, GET_STATUS for invalid EP ?");
> +                       return -EINVAL;
> +               }
> +               if (ep->flags & BDC_EP_STALL)
> +                       usb_status |= 1 << USB_ENDPOINT_HALT;
> +
> +               break;
> +       default:
> +               dev_err(bdc->dev, "Unknown recipient for get_status\n");
> +               return -EINVAL;
> +       }
> +       /* prepare a data stage for GET_STATUS */
> +       dev_dbg(bdc->dev, "usb_status=%08x\n", usb_status);
> +       *(__le16 *)bdc->ep0_response_buff = cpu_to_le16(usb_status);
> +       bdc->ep0_req.usb_req.length = 2;
> +       bdc->ep0_req.usb_req.buf = &bdc->ep0_response_buff;
> +       ep0_queue_data_stage(bdc);
> +
> +       return 0;
> +}
> +
> +static void ep0_set_sel_cmpl(struct usb_ep *_ep, struct usb_request *_req)
> +{
> +       /* ep0_set_sel_cmpl */
> +}
> +
> +/* Queue data stage to handle 6 byte SET_SEL request */
> +static int ep0_set_sel(struct bdc *bdc,
> +                            struct usb_ctrlrequest *setup_pkt)
> +{
> +       struct bdc_ep   *ep;
> +       u16     wLength;
> +       u16     wValue;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       wValue = le16_to_cpu(setup_pkt->wValue);
> +       wLength = le16_to_cpu(setup_pkt->wLength);
> +       if (unlikely(wLength != 6)) {
> +               dev_err(bdc->dev, "%s Wrong wLength:%d\n", __func__, wLength);
> +               return -EINVAL;
> +       }
> +       ep = bdc->bdc_ep_array[1];
> +       bdc->ep0_req.ep = ep;
> +       bdc->ep0_req.usb_req.length = 6;
> +       bdc->ep0_req.usb_req.buf = bdc->ep0_response_buff;
> +       bdc->ep0_req.usb_req.complete = ep0_set_sel_cmpl;
> +       ep0_queue_data_stage(bdc);
> +
> +       return 0;
> +}
> +
> +/*
> + * Queue a 0 byte bd only if wLength is more than the length and and length is
> + * a multiple of MaxPacket then queue 0 byte BD
> + */
> +static int ep0_queue_zlp(struct bdc *bdc)
> +{
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       bdc->ep0_req.ep = bdc->bdc_ep_array[1];
> +       bdc->ep0_req.usb_req.length = 0;
> +       bdc->ep0_req.usb_req.complete = NULL;
> +       bdc->ep0_state = WAIT_FOR_DATA_START;
> +       ret = bdc_queue_xfr(bdc, &bdc->ep0_req);
> +       if (ret) {
> +               dev_err(bdc->dev, "err queueing zlp :%d\n", ret);
> +               return ret;
> +       }
> +       bdc->ep0_state = WAIT_FOR_DATA_XMIT;
> +
> +       return 0;
> +}
> +
> +/* Control request handler */
> +static int handle_control_request(struct bdc *bdc)
> +{
> +       enum usb_device_state state = bdc->gadget.state;
> +       struct usb_ctrlrequest *setup_pkt;
> +       int delegate_setup = 0;
> +       int ret = 0;
> +       int config = 0;
> +
> +       setup_pkt = &bdc->setup_pkt;
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       if ((setup_pkt->bRequestType & USB_TYPE_MASK) == USB_TYPE_STANDARD) {
> +               switch (setup_pkt->bRequest) {
> +               case USB_REQ_SET_ADDRESS:
> +                       dev_dbg(bdc->dev, "USB_REQ_SET_ADDRESS\n");
> +                       ret = ep0_set_address(bdc, setup_pkt);
> +                       bdc->devstatus &= DEVSTATUS_CLEAR;
> +                       break;
> +
> +               case USB_REQ_SET_CONFIGURATION:
> +                       dev_dbg(bdc->dev, "USB_REQ_SET_CONFIGURATION\n");
> +                       if (state == USB_STATE_ADDRESS) {
> +                               usb_gadget_set_state(&bdc->gadget,
> +                                                       USB_STATE_CONFIGURED);
> +                       } else if (state == USB_STATE_CONFIGURED) {
> +                               /*
> +                                * USB2 spec sec 9.4.7, if wValue is 0 then dev
> +                                * is moved to addressed state
> +                                */
> +                               config = le16_to_cpu(setup_pkt->wValue);
> +                               if (!config)
> +                                       usb_gadget_set_state(
> +                                                       &bdc->gadget,
> +                                                       USB_STATE_ADDRESS);
> +                       }
> +                       delegate_setup = 1;
> +                       break;
> +
> +               case USB_REQ_SET_FEATURE:
> +                       dev_dbg(bdc->dev, "USB_REQ_SET_FEATURE\n");
> +                       ret = ep0_handle_feature(bdc, setup_pkt, 1);
> +                       break;
> +
> +               case USB_REQ_CLEAR_FEATURE:
> +                       dev_dbg(bdc->dev, "USB_REQ_CLEAR_FEATURE\n");
> +                       ret = ep0_handle_feature(bdc, setup_pkt, 0);
> +                       break;
> +
> +               case USB_REQ_GET_STATUS:
> +                       dev_dbg(bdc->dev, "USB_REQ_GET_STATUS\n");
> +                       ret = ep0_handle_status(bdc, setup_pkt);
> +                       break;
> +
> +               case USB_REQ_SET_SEL:
> +                       dev_dbg(bdc->dev, "USB_REQ_SET_SEL\n");
> +                       ret = ep0_set_sel(bdc, setup_pkt);
> +                       break;
> +
> +               case USB_REQ_SET_ISOCH_DELAY:
> +                       dev_warn(bdc->dev,
> +                       "USB_REQ_SET_ISOCH_DELAY not handled\n");
> +                       ret = 0;
> +                       break;
> +               default:
> +                       delegate_setup = 1;
> +                       break;
> +               }
> +       } else {
> +               delegate_setup = 1;
> +       }
> +
> +       if (delegate_setup) {
> +               spin_unlock(&bdc->lock);
> +               ret = bdc->gadget_driver->setup(&bdc->gadget, setup_pkt);
> +               spin_lock(&bdc->lock);
> +       }
> +
> +       return ret;
> +}
> +
> +/* EP0: Data stage started */
> +void bdc_xsf_ep0_data_start(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       struct bdc_ep *ep;
> +       int ret = 0;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       ep = bdc->bdc_ep_array[1];
> +       /* If ep0 was stalled, the clear it first */
> +       if (ep->flags & BDC_EP_STALL) {
> +               ret = ep_set_halt(ep, 0);
> +               if (ret)
> +                       goto err;
> +       }
> +       if (bdc->ep0_state != WAIT_FOR_DATA_START)
> +               dev_warn(bdc->dev,
> +                       "Data stage not expected ep0_state:%s\n",
> +                       ep0_state_string[bdc->ep0_state]);
> +
> +       ret = handle_control_request(bdc);
> +       if (ret == USB_GADGET_DELAYED_STATUS) {
> +               /*
> +                * The ep0 state will remain WAIT_FOR_DATA_START till
> +                * we received ep_queue on ep0
> +                */
> +               bdc->delayed_status = true;
> +               return;
> +       }
> +       if (!ret) {
> +               bdc->ep0_state = WAIT_FOR_DATA_XMIT;
> +               return;
> +       }
> +err:
> +       ep0_stall(bdc);
> +}
> +
> +/* EP0: status stage started */
> +void bdc_xsf_ep0_status_start(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       struct usb_ctrlrequest *setup_pkt;
> +       struct bdc_ep *ep;
> +       int ret = 0;
> +
> +       dev_dbg(bdc->dev,
> +               "%s ep0_state:%s",
> +               __func__, ep0_state_string[bdc->ep0_state]);
> +       ep = bdc->bdc_ep_array[1];
> +
> +       /* check if ZLP was queued? */
> +       if (bdc->zlp_needed)
> +               bdc->zlp_needed = false;
> +
> +       if (ep->flags & BDC_EP_STALL) {
> +               ret = ep_set_halt(ep, 0);
> +               if (ret)
> +                       goto err;
> +       }
> +
> +       if ((bdc->ep0_state != WAIT_FOR_STATUS_START) &&
> +                               (bdc->ep0_state != WAIT_FOR_DATA_XMIT))
> +               dev_err(bdc->dev,
> +                       "Status stage recv but ep0_state:%s\n",
> +                       ep0_state_string[bdc->ep0_state]);
> +
> +       /* check if data stage is in progress ? */
> +       if (bdc->ep0_state == WAIT_FOR_DATA_XMIT) {
> +               bdc->ep0_state = STATUS_PENDING;
> +               /* Status stage will be queued upon Data stage transmit event */
> +               dev_dbg(bdc->dev,
> +                       "status started but data  not transmitted yet\n");
> +               return;
> +       }
> +       setup_pkt = &bdc->setup_pkt;
> +
> +       /*
> +        * 2 stage setup then only process the setup, for 3 stage setup the date
> +        * stage is already handled
> +        */
> +       if (!le16_to_cpu(setup_pkt->wLength)) {
> +               ret = handle_control_request(bdc);
> +               if (ret == USB_GADGET_DELAYED_STATUS) {
> +                       bdc->delayed_status = true;
> +                       /* ep0_state will remain WAIT_FOR_STATUS_START */
> +                       return;
> +               }
> +       }
> +       if (!ret) {
> +               /* Queue a status stage BD */
> +               ep0_queue_status_stage(bdc);
> +               bdc->ep0_state = WAIT_FOR_STATUS_XMIT;
> +               return;
> +       }
> +err:
> +       ep0_stall(bdc);
> +}
> +
> +/* Helper function to update ep0 upon SR with xsf_succ or xsf_short */
> +static void ep0_xsf_complete(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       switch (bdc->ep0_state) {
> +       case WAIT_FOR_DATA_XMIT:
> +               bdc->ep0_state = WAIT_FOR_STATUS_START;
> +               break;
> +       case WAIT_FOR_STATUS_XMIT:
> +               bdc->ep0_state = WAIT_FOR_SETUP;
> +               if (bdc->test_mode) {
> +                       int ret;
> +
> +                       dev_dbg(bdc->dev, "test_mode:%d\n", bdc->test_mode);
> +                       ret = bdc_set_test_mode(bdc);
> +                       if (ret < 0) {
> +                               dev_err(bdc->dev, "Err in setting Test mode\n");
> +                               return;
> +                       }
> +                       bdc->test_mode = 0;
> +               }
> +               break;
> +       case STATUS_PENDING:
> +               bdc_xsf_ep0_status_start(bdc, sreport);
> +               break;
> +
> +       default:
> +               dev_err(bdc->dev,
> +                       "Unknown ep0_state:%s\n",
> +                       ep0_state_string[bdc->ep0_state]);
> +
> +       }
> +}
> +
> +/* xfr completion status report handler */
> +void bdc_sr_xsf(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       struct bdc_ep *ep;
> +       u32 sr_status;
> +       u8 ep_num;
> +
> +       ep_num = (le32_to_cpu(sreport->offset[3])>>4) & 0x1f;
> +       ep = bdc->bdc_ep_array[ep_num];
> +       if (!ep || !(ep->flags & BDC_EP_ENABLED)) {
> +               dev_err(bdc->dev, "xsf for ep not enabled\n");
> +               return;
> +       }
> +       /*
> +        * check if this transfer is after link went from U3->U0 due
> +        * to remote wakeup
> +        */
> +       if (bdc->devstatus & FUNC_WAKE_ISSUED) {
> +               bdc->devstatus &= ~(FUNC_WAKE_ISSUED);
> +               dev_dbg(bdc->dev, "%s clearing FUNC_WAKE_ISSUED flag\n",
> +                                                               __func__);
> +       }
> +       sr_status = XSF_STS(le32_to_cpu(sreport->offset[3]));
> +       dev_dbg_ratelimited(bdc->dev, "\n%s sr_status=%d ep:%s\n",
> +                                       __func__, sr_status, ep->name);
> +
> +       switch (sr_status) {
> +       case XSF_SUCC:
> +       case XSF_SHORT:
> +               handle_xsr_succ_status(bdc, ep, sreport);
> +               if (ep_num == 1)
> +                       ep0_xsf_complete(bdc, sreport);
> +               break;
> +
> +       case XSF_SETUP_RECV:
> +       case XSF_DATA_START:
> +       case XSF_STATUS_START:
> +               if (ep_num != 1) {
> +                       dev_err(bdc->dev,
> +                               "ep0 related packets on non ep0 endpoint");
> +                       return;
> +               }
> +               bdc->sr_xsf_ep0[sr_status - XSF_SETUP_RECV](bdc, sreport);
> +               break;
> +
> +       case XSF_BABB:
> +               if (ep_num == 1) {
> +                       dev_dbg(bdc->dev, "Babble on ep0 zlp_need:%d\n",
> +                                                       bdc->zlp_needed);
> +                       /*
> +                        * If the last completed transfer had wLength >Data Len,
> +                        * and Len is multiple of MaxPacket,then queue ZLP
> +                        */
> +                       if (bdc->zlp_needed) {
> +                               /* queue 0 length bd */
> +                               ep0_queue_zlp(bdc);
> +                               return;
> +                       }
> +               }
> +               dev_warn(bdc->dev, "Babble on ep not handled\n");
> +               break;
> +       default:
> +               dev_warn(bdc->dev, "sr status not handled:%x\n", sr_status);
> +               break;
> +       }
> +}
> +
> +static int bdc_gadget_ep_queue(struct usb_ep *_ep,
> +                               struct usb_request *_req, gfp_t gfp_flags)
> +{
> +       struct bdc_req *req;
> +       unsigned long flags;
> +       struct bdc_ep *ep;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       if (!_ep || !_ep->desc)
> +               return -ESHUTDOWN;
> +
> +       if (!_req || !_req->complete || !_req->buf)
> +               return -EINVAL;
> +
> +       ep = to_bdc_ep(_ep);
> +       req = to_bdc_req(_req);
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s ep:%p req:%p\n", __func__, ep, req);
> +       dev_dbg(bdc->dev, "queuing request %p to %s length %d zero:%d\n",
> +                               _req, ep->name, _req->length, _req->zero);
> +
> +       if (!ep->usb_ep.desc) {
> +               dev_warn(bdc->dev,
> +                       "trying to queue req %p to disabled %s\n",
> +                       _req, ep->name);
> +               return -ESHUTDOWN;
> +       }
> +
> +       if (_req->length > MAX_XFR_LEN) {
> +               dev_warn(bdc->dev,
> +                       "req length > supported MAX:%d requested:%d\n",
> +                       MAX_XFR_LEN, _req->length);
> +               return -EOPNOTSUPP;
> +       }
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       if (ep == bdc->bdc_ep_array[1])
> +               ret = ep0_queue(ep, req);
> +       else
> +               ret = ep_queue(ep, req);
> +
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static int bdc_gadget_ep_dequeue(struct usb_ep *_ep,
> +                                 struct usb_request *_req)
> +{
> +       struct bdc_req *req;
> +       unsigned long flags;
> +       struct bdc_ep *ep;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       if (!_ep || !_req)
> +               return -EINVAL;
> +
> +       ep = to_bdc_ep(_ep);
> +       req = to_bdc_req(_req);
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s ep:%s req:%p\n", __func__, ep->name, req);
> +       bdc_dbg_bd_list(bdc, ep);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       /* make sure it's still queued on this endpoint */
> +       list_for_each_entry(req, &ep->queue, queue) {
> +               if (&req->usb_req == _req)
> +                       break;
> +       }
> +       if (&req->usb_req != _req) {
> +               spin_unlock_irqrestore(&bdc->lock, flags);
> +               dev_err(bdc->dev, "usb_req !=req n");
> +               return -EINVAL;
> +       }
> +       ret = ep_dequeue(ep, req);
> +       if (ret) {
> +               ret = -EOPNOTSUPP;
> +               goto err;
> +       }
> +       bdc_req_complete(ep, req, -ECONNRESET);
> +
> +err:
> +       bdc_dbg_bd_list(bdc, ep);
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static int bdc_gadget_ep_set_halt(struct usb_ep *_ep, int value)
> +{
> +       unsigned long flags;
> +       struct bdc_ep *ep;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       ep = to_bdc_ep(_ep);
> +       bdc = ep->bdc;
> +       dev_dbg(bdc->dev, "%s ep:%s value=%d\n", __func__, ep->name, value);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       if (usb_endpoint_xfer_isoc(ep->usb_ep.desc))
> +               ret = -EINVAL;
> +       else if (!list_empty(&ep->queue))
> +               ret = -EAGAIN;
> +       else
> +               ret = ep_set_halt(ep, value);
> +
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static struct usb_request *bdc_gadget_alloc_request(struct usb_ep *_ep,
> +                                                    gfp_t gfp_flags)
> +{
> +       struct bdc_req *req;
> +       struct bdc_ep *ep;
> +
> +       req = kzalloc(sizeof(*req), gfp_flags);
> +       if (!req)
> +               return NULL;
> +
> +       ep = to_bdc_ep(_ep);
> +       req->ep = ep;
> +       req->epnum = ep->ep_num;
> +       req->usb_req.dma = DMA_ADDR_INVALID;
> +       dev_dbg(ep->bdc->dev, "%s ep:%s req:%p\n", __func__, ep->name, req);
> +
> +       return &req->usb_req;
> +}
> +
> +static void bdc_gadget_free_request(struct usb_ep *_ep,
> +                                    struct usb_request *_req)
> +{
> +       struct bdc_req *req;
> +
> +       req = to_bdc_req(_req);
> +       kfree(req);
> +}
> +
> +/* endpoint operations */
> +
> +/* configure endpoint and also allocate resources */
> +static int bdc_gadget_ep_enable(struct usb_ep *_ep,
> +                                const struct usb_endpoint_descriptor *desc)
> +{
> +       unsigned long flags;
> +       struct bdc_ep *ep;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       if (!_ep || !desc || desc->bDescriptorType != USB_DT_ENDPOINT) {
> +               pr_debug("bdc_gadget_ep_enable invalid parameters\n");
> +               return -EINVAL;
> +       }
> +
> +       if (!desc->wMaxPacketSize) {
> +               pr_debug("bdc_gadget_ep_enable missing wMaxPacketSize\n");
> +               return -EINVAL;
> +       }
> +
> +       ep = to_bdc_ep(_ep);
> +       bdc = ep->bdc;
> +
> +       /* Sanity check, upper layer will not send enable for ep0 */
> +       if (ep == bdc->bdc_ep_array[1])
> +               return -EINVAL;
> +
> +       if (!bdc->gadget_driver
> +           || bdc->gadget.speed == USB_SPEED_UNKNOWN) {
> +               return -ESHUTDOWN;
> +       }
> +
> +       dev_dbg(bdc->dev, "%s Enabling %s\n", __func__, ep->name);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       ep->desc = desc;
> +       ep->comp_desc = _ep->comp_desc;
> +       ret = bdc_ep_enable(ep);
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static int bdc_gadget_ep_disable(struct usb_ep *_ep)
> +{
> +       unsigned long flags;
> +       struct bdc_ep *ep;
> +       struct bdc *bdc;
> +       int ret;
> +
> +       if (!_ep) {
> +               pr_debug("bdc: invalid parameters\n");
> +               return -EINVAL;
> +       }
> +       ep = to_bdc_ep(_ep);
> +       bdc = ep->bdc;
> +
> +       /* Upper layer will not call this for ep0, but do a sanity check */
> +       if (ep == bdc->bdc_ep_array[1]) {
> +               dev_warn(bdc->dev, "%s called for ep0\n", __func__);
> +               return -EINVAL;
> +       }
> +       dev_dbg(bdc->dev,
> +               "%s() ep:%s ep->flags:%08x\n",
> +               __func__, ep->name, ep->flags);
> +
> +       if (!(ep->flags & BDC_EP_ENABLED)) {
> +               dev_warn(bdc->dev, "%s is already disabled\n", ep->name);
> +               return 0;
> +       }
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       ret = bdc_ep_disable(ep);
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static const struct usb_ep_ops bdc_gadget_ep_ops = {
> +       .enable = bdc_gadget_ep_enable,
> +       .disable = bdc_gadget_ep_disable,
> +       .alloc_request = bdc_gadget_alloc_request,
> +       .free_request = bdc_gadget_free_request,
> +       .queue = bdc_gadget_ep_queue,
> +       .dequeue = bdc_gadget_ep_dequeue,
> +       .set_halt = bdc_gadget_ep_set_halt
> +};
> +
> +/* dir = 1 is IN */
> +static int init_ep(struct bdc *bdc, u32 epnum, u32 dir)
> +{
> +       struct bdc_ep *ep;
> +
> +       dev_dbg(bdc->dev, "%s epnum=%d dir=%d\n", __func__, epnum, dir);
> +       ep = kzalloc(sizeof(*ep), GFP_KERNEL);
> +       if (!ep)
> +               return -ENOMEM;
> +
> +       ep->bdc = bdc;
> +       ep->dir = dir;
> +
> +       /* ep->ep_num is the index inside bdc_ep */
> +       if (epnum == 1) {
> +               ep->ep_num = 1;
> +               bdc->bdc_ep_array[ep->ep_num] = ep;
> +               snprintf(ep->name, sizeof(ep->name), "ep%d", epnum - 1);
> +               usb_ep_set_maxpacket_limit(&ep->usb_ep, EP0_MAX_PKT_SIZE);
> +               ep->comp_desc = NULL;
> +               bdc->gadget.ep0 = &ep->usb_ep;
> +       } else {
> +               if (dir)
> +                       ep->ep_num = epnum * 2 - 1;
> +               else
> +                       ep->ep_num = epnum * 2 - 2;
> +
> +               bdc->bdc_ep_array[ep->ep_num] = ep;
> +               snprintf(ep->name, sizeof(ep->name), "ep%d%s", epnum - 1,
> +                        dir & 1 ? "in" : "out");
> +
> +               usb_ep_set_maxpacket_limit(&ep->usb_ep, 1024);
> +               ep->usb_ep.max_streams = 0;
> +               list_add_tail(&ep->usb_ep.ep_list, &bdc->gadget.ep_list);
> +       }
> +       ep->usb_ep.ops = &bdc_gadget_ep_ops;
> +       ep->usb_ep.name = ep->name;
> +       ep->flags = 0;
> +       ep->ignore_next_sr = false;
> +       dev_dbg(bdc->dev, "ep=%p ep->usb_ep.name=%s epnum=%d ep->epnum=%d\n",
> +                               ep, ep->usb_ep.name, epnum, ep->ep_num);
> +
> +       INIT_LIST_HEAD(&ep->queue);
> +
> +       return 0;
> +}
> +
> +/* Init all ep */
> +int bdc_init_ep(struct bdc *bdc)
> +{
> +       u8 epnum;
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       INIT_LIST_HEAD(&bdc->gadget.ep_list);
> +       /* init ep0 */
> +       ret = init_ep(bdc, 1, 0);
> +       if (ret) {
> +               dev_err(bdc->dev, "init ep ep0 fail %d\n", ret);
> +               return ret;
> +       }
> +
> +       for (epnum = 2; epnum <= bdc->num_eps / 2; epnum++) {
> +               /* OUT */
> +               ret = init_ep(bdc, epnum, 0);
> +               if (ret) {
> +                       dev_err(bdc->dev,
> +                               "init ep failed for:%d error: %d\n",
> +                               epnum, ret);
> +                       return ret;
> +               }
> +
> +               /* IN */
> +               ret = init_ep(bdc, epnum, 1);
> +               if (ret) {
> +                       dev_err(bdc->dev,
> +                               "init ep failed for:%d error: %d\n",
> +                               epnum, ret);
> +                       return ret;
> +               }
> +       }
> +
> +       return 0;
> +}
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_ep.h b/drivers/usb/gadget/udc/bdc/bdc_ep.h
> new file mode 100644
> index 0000000..8a6b36c
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_ep.h
> @@ -0,0 +1,22 @@
> +/*
> + * bdc_ep.h - header for the BDC debug functions
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#ifndef __LINUX_BDC_EP_H__
> +#define __LINUX_BDC_EP_H__
> +
> +int bdc_init_ep(struct bdc *);
> +int bdc_ep_disable(struct bdc_ep *);
> +int bdc_ep_enable(struct bdc_ep *);
> +void bdc_free_ep(struct bdc *);
> +
> +#endif /* __LINUX_BDC_EP_H__ */
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_pci.c b/drivers/usb/gadget/udc/bdc/bdc_pci.c
> new file mode 100644
> index 0000000..0296884
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_pci.c
> @@ -0,0 +1,132 @@
> +/*
> + * bdc_pci.c - BRCM BDC USB3.0 device controller PCI interface file.
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * Based on drivers under drivers/usb/
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +
> +#include <linux/kernel.h>
> +#include <linux/module.h>
> +#include <linux/slab.h>
> +#include <linux/pci.h>
> +#include <linux/pci_ids.h>
> +#include <linux/platform_device.h>
> +
> +#include "bdc.h"
> +
> +#define BDC_PCI_PID 0x1570
> +
> +struct bdc_pci {
> +       struct device *dev;
> +       struct platform_device *bdc;
> +};
> +
> +static int bdc_setup_msi(struct pci_dev *pci)
> +{
> +       int ret;
> +
> +       ret = pci_enable_msi(pci);
> +       if (ret) {
> +               pr_err("failed to allocate MSI entry\n");
> +               return ret;
> +       }
> +
> +       return ret;
> +}
> +
> +static int bdc_pci_probe(struct pci_dev *pci, const struct pci_device_id *id)
> +{
> +       struct resource res[2];
> +       struct platform_device *bdc;
> +       struct bdc_pci *glue;
> +       int ret = -ENOMEM;
> +
> +       glue = devm_kzalloc(&pci->dev, sizeof(*glue), GFP_KERNEL);
> +       if (!glue)
> +               return -ENOMEM;
> +
> +       glue->dev = &pci->dev;
> +       ret = pci_enable_device(pci);
> +       if (ret) {
> +               dev_err(&pci->dev, "failed to enable pci device\n");
> +               return -ENODEV;
> +       }
> +       pci_set_master(pci);
> +
> +       bdc = platform_device_alloc(BRCM_BDC_NAME, PLATFORM_DEVID_AUTO);
> +       if (!bdc)
> +               return -ENOMEM;
> +
> +       memset(res, 0x00, sizeof(struct resource) * ARRAY_SIZE(res));
> +       bdc_setup_msi(pci);
> +
> +       res[0].start    = pci_resource_start(pci, 0);
> +       res[0].end      = pci_resource_end(pci, 0);
> +       res[0].name     = BRCM_BDC_NAME;
> +       res[0].flags    = IORESOURCE_MEM;
> +
> +       res[1].start    = pci->irq;
> +       res[1].name     = BRCM_BDC_NAME;
> +       res[1].flags    = IORESOURCE_IRQ;
> +
> +       ret = platform_device_add_resources(bdc, res, ARRAY_SIZE(res));
> +       if (ret) {
> +               dev_err(&pci->dev,
> +                       "couldn't add resources to bdc device\n");
> +               return ret;
> +       }
> +
> +       pci_set_drvdata(pci, glue);
> +
> +       dma_set_coherent_mask(&bdc->dev, pci->dev.coherent_dma_mask);
> +
> +       bdc->dev.dma_mask = pci->dev.dma_mask;
> +       bdc->dev.dma_parms = pci->dev.dma_parms;
> +       bdc->dev.parent = &pci->dev;
> +       glue->bdc = bdc;
> +
> +       ret = platform_device_add(bdc);
> +       if (ret) {
> +               dev_err(&pci->dev, "failed to register bdc device\n");
> +               platform_device_put(bdc);
> +               return ret;
> +       }
> +
> +       return 0;
> +}
> +
> +static void bdc_pci_remove(struct pci_dev *pci)
> +{
> +       struct bdc_pci *glue = pci_get_drvdata(pci);
> +
> +       platform_device_unregister(glue->bdc);
> +       pci_disable_msi(pci);
> +}
> +
> +static struct pci_device_id bdc_pci_id_table[] = {
> +       { PCI_DEVICE(PCI_VENDOR_ID_BROADCOM, BDC_PCI_PID), },
> +       {} /* Terminating Entry */
> +};
> +
> +MODULE_DEVICE_TABLE(pci, bdc_pci_id_table);
> +
> +static struct pci_driver bdc_pci_driver = {
> +       .name = "bdc-pci",
> +       .id_table = bdc_pci_id_table,
> +       .probe = bdc_pci_probe,
> +       .remove = bdc_pci_remove,
> +};
> +
> +MODULE_AUTHOR("Ashwini Pahuja <ashwini.linux@xxxxxxxxx>");
> +MODULE_LICENSE("GPL");
> +MODULE_DESCRIPTION("BRCM BDC USB3 PCI Glue layer");
> +module_pci_driver(bdc_pci_driver);
> diff --git a/drivers/usb/gadget/udc/bdc/bdc_udc.c b/drivers/usb/gadget/udc/bdc/bdc_udc.c
> new file mode 100644
> index 0000000..9b43cad
> --- /dev/null
> +++ b/drivers/usb/gadget/udc/bdc/bdc_udc.c
> @@ -0,0 +1,588 @@
> +/*
> + * bdc_udc.c - BRCM BDC USB3.0 device controller gagdet ops
> + *
> + * Copyright (C) 2014 Broadcom Corporation
> + *
> + * Author: Ashwini Pahuja
> + *
> + * Based on drivers under drivers/usb/gadget/udc/
> + *
> + * This program is free software; you can redistribute it and/or modify it
> + * under the terms of the GNU General Public License as published by the
> + * Free Software Foundation; either version 2 of the License, or (at your
> + * option) any later version.
> + *
> + */
> +#include <linux/module.h>
> +#include <linux/pci.h>
> +#include <linux/dma-mapping.h>
> +#include <linux/kernel.h>
> +#include <linux/delay.h>
> +#include <linux/ioport.h>
> +#include <linux/sched.h>
> +#include <linux/slab.h>
> +#include <linux/errno.h>
> +#include <linux/init.h>
> +#include <linux/timer.h>
> +#include <linux/list.h>
> +#include <linux/interrupt.h>
> +#include <linux/moduleparam.h>
> +#include <linux/device.h>
> +#include <linux/usb/ch9.h>
> +#include <linux/usb/gadget.h>
> +#include <linux/usb/otg.h>
> +#include <linux/pm.h>
> +#include <linux/io.h>
> +#include <linux/irq.h>
> +#include <asm/unaligned.h>
> +#include <linux/platform_device.h>
> +
> +#include "bdc.h"
> +#include "bdc_ep.h"
> +#include "bdc_cmd.h"
> +#include "bdc_dbg.h"
> +
> +static const struct usb_gadget_ops bdc_gadget_ops;
> +
> +static const char * const conn_speed_str[] =  {
> +       "Not connected",
> +       "Full Speed",
> +       "Low Speed",
> +       "High Speed",
> +       "Super Speed",
> +};
> +
> +/* EP0 initial descripror */
> +static struct usb_endpoint_descriptor bdc_gadget_ep0_desc = {
> +       .bLength = USB_DT_ENDPOINT_SIZE,
> +       .bDescriptorType = USB_DT_ENDPOINT,
> +       .bmAttributes = USB_ENDPOINT_XFER_CONTROL,
> +       .bEndpointAddress = 0,
> +       .wMaxPacketSize = cpu_to_le16(EP0_MAX_PKT_SIZE),
> +};
> +
> +/* Advance the srr dqp maintained by SW */
> +static void srr_dqp_index_advc(struct bdc *bdc, u32 srr_num)
> +{
> +       struct srr *srr;
> +
> +       srr = &bdc->srr;
> +       dev_dbg_ratelimited(bdc->dev, "srr->dqp_index:%d\n", srr->dqp_index);
> +       srr->dqp_index++;
> +       /* rollback to 0 if we are past the last */
> +       if (srr->dqp_index == NUM_SR_ENTRIES)
> +               srr->dqp_index = 0;
> +}
> +
> +/* connect sr */
> +static void bdc_uspc_connected(struct bdc *bdc)
> +{
> +       u32 speed, temp;
> +       u32 usppms;
> +       int ret;
> +
> +       temp = bdc_readl(bdc->regs, BDC_USPC);
> +       speed = BDC_PSP(temp);
> +       dev_dbg(bdc->dev, "%s speed=%x\n", __func__, speed);
> +       switch (speed) {
> +       case BDC_SPEED_SS:
> +               bdc_gadget_ep0_desc.wMaxPacketSize =
> +                                               cpu_to_le16(EP0_MAX_PKT_SIZE);
> +               bdc->gadget.ep0->maxpacket = EP0_MAX_PKT_SIZE;
> +               bdc->gadget.speed = USB_SPEED_SUPER;
> +               /* Enable U1T in SS mode */
> +               usppms =  bdc_readl(bdc->regs, BDC_USPPMS);
> +               usppms &= ~BDC_U1T(0xff);
> +               usppms |= BDC_U1T(U1_TIMEOUT);
> +               usppms |= BDC_PORT_W1S;
> +               bdc_writel(bdc->regs, BDC_USPPMS, usppms);
> +               break;
> +
> +       case BDC_SPEED_HS:
> +               bdc_gadget_ep0_desc.wMaxPacketSize = cpu_to_le16(64);
> +               bdc->gadget.ep0->maxpacket = 64;
> +               bdc->gadget.speed = USB_SPEED_HIGH;
> +               break;
> +
> +       case BDC_SPEED_FS:
> +               bdc_gadget_ep0_desc.wMaxPacketSize = cpu_to_le16(64);
> +               bdc->gadget.ep0->maxpacket = 64;
> +               bdc->gadget.speed = USB_SPEED_FULL;
> +               break;
> +
> +       case BDC_SPEED_LS:
> +               bdc_gadget_ep0_desc.wMaxPacketSize = cpu_to_le16(8);
> +               bdc->gadget.ep0->maxpacket = 8;
> +               bdc->gadget.speed = USB_SPEED_LOW;
> +               break;
> +       default:
> +               dev_err(bdc->dev, "UNDEFINED SPEED\n");
> +               return;
> +       }
> +       dev_dbg(bdc->dev, "connected at %s\n", conn_speed_str[speed]);
> +       /* Now we know the speed, configure ep0 */
> +       bdc->bdc_ep_array[1]->desc = &bdc_gadget_ep0_desc;
> +       ret = bdc_config_ep(bdc, bdc->bdc_ep_array[1]);
> +       if (ret)
> +               dev_err(bdc->dev, "EP0 config failed\n");
> +       bdc->bdc_ep_array[1]->usb_ep.desc = &bdc_gadget_ep0_desc;
> +       bdc->bdc_ep_array[1]->flags |= BDC_EP_ENABLED;
> +       usb_gadget_set_state(&bdc->gadget, USB_STATE_DEFAULT);
> +}
> +
> +/* device got disconnected */
> +static void bdc_uspc_disconnected(struct bdc *bdc, bool reinit)
> +{
> +       struct bdc_ep *ep;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       /*
> +        * Only stop ep0 from here, rest of the endpoints will be disabled
> +        * from gadget_disconnect
> +        */
> +       ep = bdc->bdc_ep_array[1];
> +       if (ep && (ep->flags & BDC_EP_ENABLED))
> +               /* if enabled then stop and remove requests */
> +               bdc_ep_disable(ep);
> +
> +       if (bdc->gadget_driver && bdc->gadget_driver->disconnect) {
> +               spin_unlock(&bdc->lock);
> +               bdc->gadget_driver->disconnect(&bdc->gadget);
> +               spin_lock(&bdc->lock);
> +       }
> +       /* Set Unknown speed */
> +       bdc->gadget.speed = USB_SPEED_UNKNOWN;
> +       bdc->devstatus &= DEVSTATUS_CLEAR;
> +       bdc->delayed_status = false;
> +       bdc->reinit = reinit;
> +       bdc->test_mode = false;
> +}
> +
> +/* TNotify wkaeup timer */
> +static void bdc_func_wake_timer(struct work_struct *work)
> +{
> +       struct bdc *bdc = container_of(work, struct bdc, func_wake_notify.work);
> +       unsigned long flags;
> +
> +       dev_dbg(bdc->dev, "%s\n", __func__);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       /*
> +        * Check if host has started transferring on endpoints
> +        * FUNC_WAKE_ISSUED is cleared when transfer has started after resume
> +       */
> +       if (bdc->devstatus & FUNC_WAKE_ISSUED) {
> +               dev_dbg(bdc->dev, "FUNC_WAKE_ISSUED FLAG IS STILL SET\n");
> +               /* flag is still set, so again send func wake */
> +               bdc_function_wake_fh(bdc, 0);
> +               schedule_delayed_work(&bdc->func_wake_notify,
> +                                               msecs_to_jiffies(BDC_TNOTIFY));
> +       }
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +}
> +
> +/* handler for Link state change condition */
> +static void handle_link_state_change(struct bdc *bdc, u32 uspc)
> +{
> +       u32 link_state;
> +
> +       dev_dbg(bdc->dev, "Link state change");
> +       link_state = BDC_PST(uspc);
> +       switch (link_state) {
> +       case BDC_LINK_STATE_U3:
> +               if ((bdc->gadget.speed != USB_SPEED_UNKNOWN) &&
> +                                               bdc->gadget_driver->suspend) {
> +                       dev_dbg(bdc->dev, "Entered Suspend mode\n");
> +                       spin_unlock(&bdc->lock);
> +                       bdc->devstatus |= DEVICE_SUSPENDED;
> +                       bdc->gadget_driver->suspend(&bdc->gadget);
> +                       spin_lock(&bdc->lock);
> +               }
> +               break;
> +       case BDC_LINK_STATE_U0:
> +               if (bdc->devstatus & REMOTE_WAKEUP_ISSUED) {
> +                                       bdc->devstatus &= ~REMOTE_WAKEUP_ISSUED;
> +                       if (bdc->gadget.speed == USB_SPEED_SUPER) {
> +                               bdc_function_wake_fh(bdc, 0);
> +                               bdc->devstatus |= FUNC_WAKE_ISSUED;
> +                               /*
> +                                * Start a Notification timer and check if the
> +                                * Host transferred anything on any of the EPs,
> +                                * if not then send function wake again every
> +                                * TNotification secs until host initiates
> +                                * transfer to BDC, USB3 spec Table 8.13
> +                               */
> +                               schedule_delayed_work(
> +                                               &bdc->func_wake_notify,
> +                                               msecs_to_jiffies(BDC_TNOTIFY));
> +                               dev_dbg(bdc->dev, "sched func_wake_notify\n");
> +                       }
> +               }
> +               break;
> +
> +       case BDC_LINK_STATE_RESUME:
> +               dev_dbg(bdc->dev, "Resumed from Suspend\n");
> +               if (bdc->devstatus & DEVICE_SUSPENDED) {
> +                       bdc->gadget_driver->resume(&bdc->gadget);
> +                       bdc->devstatus &= ~DEVICE_SUSPENDED;
> +               }
> +               break;
> +       default:
> +               dev_dbg(bdc->dev, "link state:%d\n", link_state);
> +       }
> +}
> +
> +/* something changes on upstream port, handle it here */
> +void bdc_sr_uspc(struct bdc *bdc, struct bdc_sr *sreport)
> +{
> +       u32 clear_flags = 0;
> +       u32 uspc;
> +       bool connected = false;
> +       bool disconn = false;
> +
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       dev_dbg(bdc->dev, "%s uspc=0x%08x\n", __func__, uspc);
> +
> +       bdc_dbg_uspc(bdc, uspc);
> +       /* Port connect changed */
> +       if (uspc & BDC_PCC) {
> +               /* Vbus not present, and not connected to Downstream port */
> +               if ((uspc & BDC_VBC) && !(uspc & BDC_VBS) && !(uspc & BDC_PCS))
> +                       disconn = true;
> +               else if ((uspc & BDC_PCS) && !BDC_PST(uspc))
> +                       connected = true;
> +       }
> +
> +       /* Change in VBus and VBus is present */
> +       if ((uspc & BDC_VBC) && (uspc & BDC_VBS)) {
> +               if (bdc->pullup) {
> +                       dev_dbg(bdc->dev, "Do a softconnect\n");
> +                       /* Attached state, do a softconnect */
> +                       bdc_softconn(bdc);
> +                       usb_gadget_set_state(&bdc->gadget, USB_STATE_POWERED);
> +               }
> +               clear_flags = BDC_VBC;
> +       } else if ((uspc & BDC_PRS) || (uspc & BDC_PRC) || disconn) {
> +               /* Hot reset, warm reset, 2.0 bus reset or disconn */
> +               dev_dbg(bdc->dev, "Port reset or disconn\n");
> +               bdc_uspc_disconnected(bdc, disconn);
> +               clear_flags = BDC_PCC|BDC_PCS|BDC_PRS|BDC_PRC;
> +       } else if ((uspc & BDC_PSC) && (uspc & BDC_PCS)) {
> +               /* Change in Link state */
> +               handle_link_state_change(bdc, uspc);
> +               clear_flags = BDC_PSC|BDC_PCS;
> +       }
> +
> +       /*
> +        * In SS we might not have PRC bit set before connection, but in 2.0
> +        * the PRC bit is set before connection, so moving this condition out
> +        * of bus reset to handle both SS/2.0 speeds.
> +        */
> +       if (connected) {
> +               /* This is the connect event for U0/L0 */
> +               dev_dbg(bdc->dev, "Connected\n");
> +               bdc_uspc_connected(bdc);
> +               bdc->devstatus &= ~(DEVICE_SUSPENDED);
> +       }
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       uspc &= (~BDC_USPSC_RW);
> +       dev_dbg(bdc->dev, "uspc=%x\n", uspc);
> +       bdc_writel(bdc->regs, BDC_USPC, clear_flags);
> +}
> +
> +/* Main interrupt handler for bdc */
> +static irqreturn_t bdc_udc_interrupt(int irq, void *_bdc)
> +{
> +       u32 eqp_index, dqp_index, sr_type, srr_int;
> +       struct bdc_sr *sreport;
> +       struct bdc *bdc = _bdc;
> +       u32 status;
> +       int ret;
> +
> +       spin_lock(&bdc->lock);
> +       status = bdc_readl(bdc->regs, BDC_BDCSC);
> +       if (!(status & BDC_GIP)) {
> +               spin_unlock(&bdc->lock);
> +               return IRQ_NONE;
> +       }
> +       srr_int = bdc_readl(bdc->regs, BDC_SRRINT(0));
> +       /* Check if the SRR IP bit it set? */
> +       if (!(srr_int & BDC_SRR_IP)) {
> +               dev_warn(bdc->dev, "Global irq pending but SRR IP is 0\n");
> +               spin_unlock(&bdc->lock);
> +               return IRQ_NONE;
> +       }
> +       eqp_index = BDC_SRR_EPI(srr_int);
> +       dqp_index = BDC_SRR_DPI(srr_int);
> +       dev_dbg_ratelimited(bdc->dev,
> +                       "\n\n%s eqp_index=%d dqp_index=%d  srr.dqp_index=%d\n",
> +                        __func__, eqp_index, dqp_index, bdc->srr.dqp_index);
> +
> +       /* check for ring empty condition */
> +       if (eqp_index == dqp_index) {
> +               dev_dbg(bdc->dev, "SRR empty?\n");
> +               spin_unlock(&bdc->lock);
> +               return IRQ_HANDLED;
> +       }
> +
> +       while (bdc->srr.dqp_index != eqp_index) {
> +               sreport = &bdc->srr.sr_bds[bdc->srr.dqp_index];
> +               /* sreport is read before using it */
> +               rmb();
> +               sr_type = le32_to_cpu(sreport->offset[3]) & BD_TYPE_BITMASK;
> +               dev_dbg_ratelimited(bdc->dev, "sr_type=%d\n", sr_type);
> +               switch (sr_type) {
> +               case SR_XSF:
> +                       bdc->sr_handler[0](bdc, sreport);
> +                       break;
> +
> +               case SR_USPC:
> +                       bdc->sr_handler[1](bdc, sreport);
> +                       break;
> +               default:
> +                       dev_warn(bdc->dev, "SR:%d not handled\n", sr_type);
> +               }
> +               /* Advance the srr dqp index */
> +               srr_dqp_index_advc(bdc, 0);
> +       }
> +       /* update the hw dequeue pointer */
> +       srr_int = bdc_readl(bdc->regs, BDC_SRRINT(0));
> +       srr_int &= ~BDC_SRR_DPI_MASK;
> +       srr_int &= ~(BDC_SRR_RWS|BDC_SRR_RST|BDC_SRR_ISR);
> +       srr_int |= ((bdc->srr.dqp_index) << 16);
> +       srr_int |= BDC_SRR_IP;
> +       bdc_writel(bdc->regs, BDC_SRRINT(0), srr_int);
> +       srr_int = bdc_readl(bdc->regs, BDC_SRRINT(0));
> +       if (bdc->reinit) {
> +               ret = bdc_reinit(bdc);
> +               if (ret)
> +                       dev_err(bdc->dev, "err in bdc reinit\n");
> +       }
> +
> +       spin_unlock(&bdc->lock);
> +
> +       return IRQ_HANDLED;
> +}
> +
> +/* Gadget ops */
> +static int bdc_udc_start(struct usb_gadget *gadget,
> +                               struct usb_gadget_driver *driver)
> +{
> +       struct bdc *bdc = gadget_to_bdc(gadget);
> +       unsigned long flags;
> +       int ret = 0;
> +
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       if (bdc->gadget_driver) {
> +               dev_err(bdc->dev, "%s is already bound to %s\n",
> +                       bdc->gadget.name,
> +                       bdc->gadget_driver->driver.name);
> +               ret = -EBUSY;
> +               goto err;
> +       }
> +       /*
> +        * Run the controller from here and when BDC is connected to
> +        * Host then driver will receive a USPC SR with VBUS present
> +        * and then driver will do a softconnect.
> +       */
> +       ret = bdc_run(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "%s bdc run fail\n", __func__);
> +               goto err;
> +       }
> +       bdc->gadget_driver = driver;
> +       bdc->gadget.dev.driver = &driver->driver;
> +err:
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static int bdc_udc_stop(struct usb_gadget *gadget)
> +{
> +       struct bdc *bdc = gadget_to_bdc(gadget);
> +       unsigned long flags;
> +
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       bdc_stop(bdc);
> +       bdc->gadget_driver = NULL;
> +       bdc->gadget.dev.driver = NULL;
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return 0;
> +}
> +
> +static int bdc_udc_pullup(struct usb_gadget *gadget, int is_on)
> +{
> +       struct bdc *bdc = gadget_to_bdc(gadget);
> +       unsigned long flags;
> +       u32 uspc;
> +
> +       dev_dbg(bdc->dev, "%s() is_on:%d\n", __func__, is_on);
> +       if (!gadget)
> +               return -EINVAL;
> +
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       if (!is_on) {
> +               bdc_softdisconn(bdc);
> +               bdc->pullup = false;
> +       } else {
> +               /*
> +                * For a self powered device, we need to wait till we receive
> +                * a VBUS change and Vbus present event, then if pullup flag
> +                * is set, then only we present the Termintation.
> +                */
> +               bdc->pullup = true;
> +               /*
> +                * Check if BDC is already connected to Host i.e Vbus=1,
> +                * if yes, then present TERM now, this is typical for bus
> +                * powered devices.
> +                */
> +               uspc = bdc_readl(bdc->regs, BDC_USPC);
> +               if (uspc & BDC_VBS)
> +                       bdc_softconn(bdc);
> +       }
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return 0;
> +}
> +
> +static int bdc_udc_set_selfpowered(struct usb_gadget *gadget,
> +               int is_self)
> +{
> +       struct bdc              *bdc = gadget_to_bdc(gadget);
> +       unsigned long           flags;
> +
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       if (!is_self)
> +               bdc->devstatus |= 1 << USB_DEVICE_SELF_POWERED;
> +       else
> +               bdc->devstatus &= ~(1 << USB_DEVICE_SELF_POWERED);
> +
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return 0;
> +}
> +
> +static int bdc_udc_wakeup(struct usb_gadget *gadget)
> +{
> +       struct bdc *bdc = gadget_to_bdc(gadget);
> +       unsigned long           flags;
> +       u8      link_state;
> +       u32     uspc;
> +       int ret = 0;
> +
> +       dev_dbg(bdc->dev,
> +               "%s() bdc->devstatus=%08x\n",
> +               __func__, bdc->devstatus);
> +
> +       if (!(bdc->devstatus & REMOTE_WAKE_ENABLE))
> +               return  -EOPNOTSUPP;
> +
> +       spin_lock_irqsave(&bdc->lock, flags);
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       link_state = BDC_PST(uspc);
> +       dev_dbg(bdc->dev, "link_state =%d portsc=%x", link_state, uspc);
> +       if (link_state != BDC_LINK_STATE_U3) {
> +               dev_warn(bdc->dev,
> +                       "can't wakeup from link state %d\n",
> +                       link_state);
> +               ret = -EINVAL;
> +               goto out;
> +       }
> +       if (bdc->gadget.speed == USB_SPEED_SUPER)
> +               bdc->devstatus |= REMOTE_WAKEUP_ISSUED;
> +
> +       uspc &= ~BDC_PST_MASK;
> +       uspc &= (~BDC_USPSC_RW);
> +       uspc |=  BDC_PST(BDC_LINK_STATE_U0);
> +       uspc |=  BDC_SWS;
> +       bdc_writel(bdc->regs, BDC_USPC, uspc);
> +       uspc = bdc_readl(bdc->regs, BDC_USPC);
> +       link_state = BDC_PST(uspc);
> +       dev_dbg(bdc->dev, "link_state =%d portsc=%x", link_state, uspc);
> +out:
> +       spin_unlock_irqrestore(&bdc->lock, flags);
> +
> +       return ret;
> +}
> +
> +static const struct usb_gadget_ops bdc_gadget_ops = {
> +       .wakeup = bdc_udc_wakeup,
> +       .set_selfpowered = bdc_udc_set_selfpowered,
> +       .pullup = bdc_udc_pullup,
> +       .udc_start = bdc_udc_start,
> +       .udc_stop = bdc_udc_stop,
> +};
> +
> +/* Init the gadget interface and register the udc */
> +int bdc_udc_init(struct bdc *bdc)
> +{
> +       u32 temp;
> +       int ret;
> +
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       bdc->gadget.ops = &bdc_gadget_ops;
> +       bdc->gadget.max_speed = USB_SPEED_SUPER;
> +       bdc->gadget.speed = USB_SPEED_UNKNOWN;
> +       bdc->gadget.dev.parent = bdc->dev;
> +
> +       bdc->gadget.sg_supported = false;
> +
> +
> +       bdc->gadget.name = BRCM_BDC_NAME;
> +       ret = devm_request_irq(bdc->dev, bdc->irq, bdc_udc_interrupt,
> +                               IRQF_SHARED , BRCM_BDC_NAME, bdc);
> +       if (ret) {
> +               dev_err(bdc->dev,
> +                       "failed to request irq #%d %d\n",
> +                       bdc->irq, ret);
> +               return ret;
> +       }
> +
> +       ret = bdc_init_ep(bdc);
> +       if (ret) {
> +               dev_err(bdc->dev, "bdc init ep fail: %d\n", ret);
> +               return ret;
> +       }
> +
> +       ret = usb_add_gadget_udc(bdc->dev, &bdc->gadget);
> +       if (ret) {
> +               dev_err(bdc->dev, "failed to register udc\n");
> +               goto err0;
> +       }
> +       usb_gadget_set_state(&bdc->gadget, USB_STATE_NOTATTACHED);
> +       bdc->bdc_ep_array[1]->desc = &bdc_gadget_ep0_desc;
> +       /*
> +        * Allocate bd list for ep0 only, ep0 will be enabled on connect
> +        * status report when the speed is known
> +        */
> +       ret = bdc_ep_enable(bdc->bdc_ep_array[1]);
> +       if (ret) {
> +               dev_err(bdc->dev, "fail to enable %s\n",
> +                                               bdc->bdc_ep_array[1]->name);
> +               goto err1;
> +       }
> +       INIT_DELAYED_WORK(&bdc->func_wake_notify, bdc_func_wake_timer);
> +       /* Enable Interrupts */
> +       temp = bdc_readl(bdc->regs, BDC_BDCSC);
> +       temp |= BDC_GIE;
> +       bdc_writel(bdc->regs, BDC_BDCSC, temp);
> +       return 0;
> +err1:
> +       usb_del_gadget_udc(&bdc->gadget);
> +err0:
> +       bdc_free_ep(bdc);
> +
> +       return ret;
> +}
> +
> +void bdc_udc_exit(struct bdc *bdc)
> +{
> +       dev_dbg(bdc->dev, "%s()\n", __func__);
> +       bdc_ep_disable(bdc->bdc_ep_array[1]);
> +       usb_del_gadget_udc(&bdc->gadget);
> +       bdc_free_ep(bdc);
> +}
> --
> 1.7.6.5
>
--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Media]     [Linux Input]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [Old Linux USB Devel Archive]

  Powered by Linux